attempt to access beyond end of device
loop4: rw=536870912, want=32885, limit=112
INFO: task syz-executor5:21107 blocked for more than 140 seconds.
      Not tainted 4.9.117-g8b21e85 #19
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor5   D29168 21107   3893 0x00000004
 ffff8801b7039800 ffff8801cd351500 ffff8801cd351500 ffff8801b7971800
 ffff8801db221c18 ffff8801a374f650 ffffffff839ebd0d dffffc0000000000
 ffff88018f1f92f0 ffff8801a374f610 00ff8801b703a0c0 ffff8801db2224e8
Call Trace:
 [<ffffffff839ed30f>] schedule+0x7f/0x1b0 kernel/sched/core.c:3553
 [<ffffffff815c8102>] d_wait_lookup fs/dcache.c:2455 [inline]
 [<ffffffff815c8102>] d_alloc_parallel+0xeb2/0x17c0 fs/dcache.c:2537
 [<ffffffff815950bc>] lookup_slow+0x19c/0x470 fs/namei.c:1650
 [<ffffffff815a16e6>] walk_component+0x716/0x1bb0 fs/namei.c:1784
 [<ffffffff815a4046>] lookup_last fs/namei.c:2266 [inline]
 [<ffffffff815a4046>] path_lookupat.isra.41+0x186/0x410 fs/namei.c:2283
 [<ffffffff815a9af7>] filename_lookup.part.55+0x177/0x370 fs/namei.c:2317
 [<ffffffff815a9eb3>] filename_lookup fs/namei.c:2310 [inline]
 [<ffffffff815a9eb3>] user_path_at_empty+0x53/0x70 fs/namei.c:2578
 [<ffffffff81580e96>] user_path_at include/linux/namei.h:55 [inline]
 [<ffffffff81580e96>] vfs_fstatat+0xc6/0x170 fs/stat.c:106
 [<ffffffff81582046>] vfs_stat fs/stat.c:123 [inline]
 [<ffffffff81582046>] SYSC_newstat+0x86/0xf0 fs/stat.c:270
 [<ffffffff8158244d>] SyS_newstat+0x1d/0x30 fs/stat.c:266
 [<ffffffff81006316>] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282
 [<ffffffff839fcc13>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb

Showing all locks held in the system:
2 locks held by khungtaskd/519:
 #0:  (rcu_read_lock){......}, at: [<ffffffff813667fc>] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline]
 #0:  (rcu_read_lock){......}, at: [<ffffffff813667fc>] watchdog+0x11c/0xa20 kernel/hung_task.c:239
 #1:  (tasklist_lock){.+.+..}, at: [<ffffffff81426017>] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336
1 lock held by rsyslogd/3680:
 #0:  (&f->f_pos_lock){+.+.+.}, at: [<ffffffff815d859c>] __fdget_pos+0xac/0xd0 fs/file.c:781
2 locks held by getty/3776:
 #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff839fadb2>] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
 #1:  (&ldata->atomic_read_lock){+.+...}, at: [<ffffffff821207f2>] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142
1 lock held by syz-executor5/21099:
 #0:  (&sb->s_type->i_mutex_key#18){++++++}, at: [<ffffffff81595061>] inode_lock_shared include/linux/fs.h:776 [inline]
 #0:  (&sb->s_type->i_mutex_key#18){++++++}, at: [<ffffffff81595061>] lookup_slow+0x141/0x470 fs/namei.c:1645
1 lock held by syz-executor5/21107:
 #0:  (&sb->s_type->i_mutex_key#18){++++++}, at: [<ffffffff81595061>] inode_lock_shared include/linux/fs.h:776 [inline]
 #0:  (&sb->s_type->i_mutex_key#18){++++++}, at: [<ffffffff81595061>] lookup_slow+0x141/0x470 fs/namei.c:1645
1 lock held by syz-executor5/21192:
 #0:  (&sb->s_type->i_mutex_key#18){++++++}, at: [<ffffffff81595061>] inode_lock_shared include/linux/fs.h:776 [inline]
 #0:  (&sb->s_type->i_mutex_key#18){++++++}, at: [<ffffffff81595061>] lookup_slow+0x141/0x470 fs/namei.c:1645
1 lock held by syz-executor5/21193:
 #0:  (&sb->s_type->i_mutex_key#18){++++++}, at: [<ffffffff815e1c5c>] inode_lock include/linux/fs.h:766 [inline]
 #0:  (&sb->s_type->i_mutex_key#18){++++++}, at: [<ffffffff815e1c5c>] lock_mount+0x8c/0x2c0 fs/namespace.c:2077
1 lock held by syz-executor5/21194:
 #0:  (&sb->s_type->i_mutex_key#18){++++++}, at: [<ffffffff81595061>] inode_lock_shared include/linux/fs.h:776 [inline]
 #0:  (&sb->s_type->i_mutex_key#18){++++++}, at: [<ffffffff81595061>] lookup_slow+0x141/0x470 fs/namei.c:1645

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.117-g8b21e85 #19
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801d87efd08 ffffffff81eb4be9 0000000000000000 0000000000000001
 0000000000000001 0000000000000001 ffffffff810b9bd0 ffff8801d87efd40
 ffffffff81ebfee7 0000000000000001 0000000000000000 0000000000000003
Call Trace:
 [<ffffffff81eb4be9>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81eb4be9>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff81ebfee7>] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99
 [<ffffffff81ebfe7a>] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60
 [<ffffffff810b9cd4>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37
 [<ffffffff81366d94>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline]
 [<ffffffff81366d94>] check_hung_task kernel/hung_task.c:125 [inline]
 [<ffffffff81366d94>] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline]
 [<ffffffff81366d94>] watchdog+0x6b4/0xa20 kernel/hung_task.c:239
 [<ffffffff8119d0ed>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff839fcddc>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at pc 0xffffffff839fb816