INFO: task hung in mount_bdev
7 views
Skip to first unread message
syzbot
Aug 22, 2019, 2:31:07 AM8/22/19
to syzkaller...@googlegroups.com
Hello,
syzbot found the following crash on:
HEAD commit: a5aa8058 Linux 4.19.67
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=105d7586600000
kernel config: https://syzkaller.appspot.com/x/.config?x=8e5f93d2c874cdab
dashboard link: https://syzkaller.appspot.com/bug?extid=c29333e4feb516181304
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=141b4596600000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=144ae012600000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+c29333...@syzkaller.appspotmail.com
print_req_error: I/O error, dev loop3, sector 64
audit: type=1400 audit(1566451021.822:37): avc: denied { map } for
pid=7605 comm="sh" path="/bin/dash" dev="sda1" ino=1473
scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
INFO: task syz-executor010:7538 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D29448 7538 7532 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f90742c4ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffed473a76f R14: 00007f90742c59c0 R15: 0000000000000000
INFO: task syz-executor010:7578 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D29448 7578 7532 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f9074282ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc48 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc4c
R13: 00007ffed473a76f R14: 00007f90742839c0 R15: 0000000000000001
INFO: task syz-executor010:7576 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D28840 7576 7534 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f9074282ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc48 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc4c
R13: 00007ffed473a76f R14: 00007f90742839c0 R15: 0000000000000001
INFO: task syz-executor010:7540 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D28888 7540 7530 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
__rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:589 [inline]
rwsem_down_write_failed+0x774/0xc30 kernel/locking/rwsem-xadd.c:618
call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:117
__down_write arch/x86/include/asm/rwsem.h:142 [inline]
down_write+0x53/0x90 kernel/locking/rwsem.c:72
grab_super+0xaf/0x2c0 fs/super.c:383
sget_userns+0x357/0xd30 fs/super.c:511
sget+0x10c/0x150 fs/super.c:570
mount_bdev+0xff/0x3c0 fs/super.c:1131
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f90742c4ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffed473a76f R14: 00007f90742c59c0 R15: 0000000000000000
INFO: task syz-executor010:7577 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D29448 7577 7530 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f9074282ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc48 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc4c
R13: 00007ffed473a76f R14: 00007f90742839c0 R15: 0000000000000001
INFO: task syz-executor010:7545 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D29448 7545 7533 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f90742c4ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffed473a76f R14: 00007f90742c59c0 R15: 0000000000000000
INFO: task syz-executor010:7584 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D28840 7584 7533 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f9074261ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc58 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc50 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc5c
R13: 00007ffed473a76f R14: 00007f90742629c0 R15: 0000000000000001
INFO: task syz-executor010:7546 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D29448 7546 7531 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f90742c4ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffed473a76f R14: 00007f90742c59c0 R15: 0000000000000000
INFO: task syz-executor010:7580 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D29448 7580 7531 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f9074261ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc58 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc50 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc5c
R13: 00007ffed473a76f R14: 00007f90742629c0 R15: 0000000000000001
INFO: task syz-executor010:7544 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D29448 7544 7529 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f90742c4ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffed473a76f R14: 00007f90742c59c0 R15: 0000000000000000
Showing all locks held in the system:
1 lock held by khungtaskd/1014:
#0: 000000003dd93485 (rcu_read_lock){....}, at:
debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:4435
1 lock held by rs:main Q:Reg/7377:
1 lock held by rsyslogd/7380:
#0: 0000000015a8ad59 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110
fs/file.c:767
2 locks held by getty/7501:
#0: 00000000cfaf1488 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
#1: 00000000cb1b5a50 (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7502:
#0: 0000000051cdb0a4 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
#1: 00000000ef4c6d7a (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7503:
#0: 000000005f03ee98 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
#1: 00000000d9cdf5ce (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7504:
#0: 000000002d73f265 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
#1: 0000000077e95563 (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7505:
#0: 00000000aefaf590 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
#1: 00000000983b4b30 (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7506:
#0: 00000000007f6203 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
#1: 000000002cb8a26c (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7507:
#0: 0000000075432656 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
#1: 000000002928532b (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
1 lock held by syz-executor010/7538:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
1 lock held by syz-executor010/7578:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
1 lock held by syz-executor010/7539:
1 lock held by syz-executor010/7576:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
2 locks held by syz-executor010/7540:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
#1: 00000000a809da12 (&type->s_umount_key#52){+.+.}, at:
grab_super+0xaf/0x2c0 fs/super.c:383
1 lock held by syz-executor010/7577:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
1 lock held by syz-executor010/7545:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
1 lock held by syz-executor010/7584:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
1 lock held by syz-executor010/7546:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
1 lock held by syz-executor010/7580:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
1 lock held by syz-executor010/7544:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
1 lock held by syz-executor010/7582:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 1014 Comm: khungtaskd Not tainted 4.19.67 #41
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x172/0x1f0 lib/dump_stack.c:113
nmi_cpu_backtrace.cold+0x63/0xa4 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 lib/nmi_backtrace.c:62
arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline]
watchdog+0x9df/0xee0 kernel/hung_task.c:287
kthread+0x354/0x420 kernel/kthread.c:246
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 7539 Comm: syz-executor010 Not tainted 4.19.67 #41
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
RIP: 0010:mark_lock+0xbb/0x1370 kernel/locking/lockdep.c:3102
Code: 89 48 8d 7b 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80
3c 02 00 0f 85 61 0e 00 00 4c 85 6b 30 0f 84 c1 00 00 00 <41> bd 01 00 00
00 48 83 c4 20 44 89 e8 5b 41 5c 41 5d 41 5e 41 5f
RSP: 0018:ffff888080db7550 EFLAGS: 00000002
RAX: dffffc0000000000 RBX: ffffffff89f0a9d0 RCX: 1ffff110139e51a4
RDX: 1ffffffff13e1540 RSI: ffff88809cf28d00 RDI: ffffffff89f0aa00
RBP: ffff888080db7598 R08: ffff88809cf28480 R09: ffff88809cf28d20
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809cf28d00
R13: 0000000000000004 R14: 0000000000000002 R15: ffff88809cf28480
FS: 00007f90742c5700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000a3a218 CR3: 0000000080ccb000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
mark_held_locks+0xb1/0x100 kernel/locking/lockdep.c:2805
__trace_hardirqs_on_caller kernel/locking/lockdep.c:2826 [inline]
lockdep_hardirqs_on+0x19b/0x5d0 kernel/locking/lockdep.c:2879
trace_hardirqs_on+0x67/0x220 kernel/trace/trace_preemptirq.c:30
lookup_bh_lru fs/buffer.c:1279 [inline]
__find_get_block+0x250/0xcf0 fs/buffer.c:1291
__getblk_slow fs/buffer.c:1040 [inline]
__getblk_gfp+0x1b1/0x970 fs/buffer.c:1321
__bread_gfp+0x2f/0x300 fs/buffer.c:1355
sb_bread include/linux/buffer_head.h:307 [inline]
udf_tread+0xf1/0x140 fs/udf/misc.c:44
udf_read_tagged+0x50/0x530 fs/udf/misc.c:210
udf_check_anchor_block+0x1ef/0x680 fs/udf/super.c:1755
udf_scan_anchors+0x1cf/0x680 fs/udf/super.c:1795
udf_find_anchor fs/udf/super.c:1852 [inline]
udf_load_vrs+0x67f/0xc80 fs/udf/super.c:1917
udf_fill_super+0x7cb/0x16f5 fs/udf/super.c:2112
mount_bdev+0x304/0x3c0 fs/super.c:1158
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 4d cb fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7
48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff
ff 0f 83 1b cb fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f90742c4ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffed473a76f R14: 00007f90742c59c0 R15: 0000000000000000
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this bug, for details see:
https://goo.gl/tpsmEJ#testing-patches
syzbot found the following crash on:
HEAD commit: a5aa8058 Linux 4.19.67
git tree: linux-4.19.y
console output: https://syzkaller.appspot.com/x/log.txt?x=105d7586600000
kernel config: https://syzkaller.appspot.com/x/.config?x=8e5f93d2c874cdab
dashboard link: https://syzkaller.appspot.com/bug?extid=c29333e4feb516181304
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=141b4596600000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=144ae012600000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+c29333...@syzkaller.appspotmail.com
print_req_error: I/O error, dev loop3, sector 64
audit: type=1400 audit(1566451021.822:37): avc: denied { map } for
pid=7605 comm="sh" path="/bin/dash" dev="sda1" ino=1473
scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
INFO: task syz-executor010:7538 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D29448 7538 7532 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f90742c4ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffed473a76f R14: 00007f90742c59c0 R15: 0000000000000000
INFO: task syz-executor010:7578 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D29448 7578 7532 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f9074282ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc48 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc4c
R13: 00007ffed473a76f R14: 00007f90742839c0 R15: 0000000000000001
INFO: task syz-executor010:7576 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D28840 7576 7534 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f9074282ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc48 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc4c
R13: 00007ffed473a76f R14: 00007f90742839c0 R15: 0000000000000001
INFO: task syz-executor010:7540 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D28888 7540 7530 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
__rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:589 [inline]
rwsem_down_write_failed+0x774/0xc30 kernel/locking/rwsem-xadd.c:618
call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:117
__down_write arch/x86/include/asm/rwsem.h:142 [inline]
down_write+0x53/0x90 kernel/locking/rwsem.c:72
grab_super+0xaf/0x2c0 fs/super.c:383
sget_userns+0x357/0xd30 fs/super.c:511
sget+0x10c/0x150 fs/super.c:570
mount_bdev+0xff/0x3c0 fs/super.c:1131
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f90742c4ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffed473a76f R14: 00007f90742c59c0 R15: 0000000000000000
INFO: task syz-executor010:7577 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D29448 7577 7530 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f9074282ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc48 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc4c
R13: 00007ffed473a76f R14: 00007f90742839c0 R15: 0000000000000001
INFO: task syz-executor010:7545 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D29448 7545 7533 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f90742c4ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffed473a76f R14: 00007f90742c59c0 R15: 0000000000000000
INFO: task syz-executor010:7584 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D28840 7584 7533 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f9074261ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc58 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc50 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc5c
R13: 00007ffed473a76f R14: 00007f90742629c0 R15: 0000000000000001
INFO: task syz-executor010:7546 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D29448 7546 7531 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f90742c4ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffed473a76f R14: 00007f90742c59c0 R15: 0000000000000000
INFO: task syz-executor010:7580 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D29448 7580 7531 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f9074261ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc58 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc50 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc5c
R13: 00007ffed473a76f R14: 00007f90742629c0 R15: 0000000000000001
INFO: task syz-executor010:7544 blocked for more than 140 seconds.
Not tainted 4.19.67 #41
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor010 D29448 7544 7529 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2826 [inline]
__schedule+0x866/0x1dc0 kernel/sched/core.c:3474
schedule+0x92/0x1c0 kernel/sched/core.c:3518
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3576
__mutex_lock_common kernel/locking/mutex.c:1002 [inline]
__mutex_lock+0x726/0x1300 kernel/locking/mutex.c:1072
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
mount_bdev+0x93/0x3c0 fs/super.c:1125
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 6e 51 75 65 75 65 44 69 73 63 61 72 64 4d 61 72 6b 22 2c 20 65 72 72
6f 72 20 25 64 2e 20 49 67 6e 6f 72 65 64 2c 20 72 75 6e <6e> 69 6e 67 20
77 69 74 68 20 64 65 66 61 75 6c 74 20 73 65 74 74
RSP: 002b:00007f90742c4ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffed473a76f R14: 00007f90742c59c0 R15: 0000000000000000
Showing all locks held in the system:
1 lock held by khungtaskd/1014:
#0: 000000003dd93485 (rcu_read_lock){....}, at:
debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:4435
1 lock held by rs:main Q:Reg/7377:
1 lock held by rsyslogd/7380:
#0: 0000000015a8ad59 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110
fs/file.c:767
2 locks held by getty/7501:
#0: 00000000cfaf1488 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
#1: 00000000cb1b5a50 (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7502:
#0: 0000000051cdb0a4 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
#1: 00000000ef4c6d7a (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7503:
#0: 000000005f03ee98 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
#1: 00000000d9cdf5ce (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7504:
#0: 000000002d73f265 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
#1: 0000000077e95563 (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7505:
#0: 00000000aefaf590 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
#1: 00000000983b4b30 (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7506:
#0: 00000000007f6203 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
#1: 000000002cb8a26c (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
2 locks held by getty/7507:
#0: 0000000075432656 (&tty->ldisc_sem){++++}, at:
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:362
#1: 000000002928532b (&ldata->atomic_read_lock){+.+.}, at:
n_tty_read+0x232/0x1b30 drivers/tty/n_tty.c:2154
1 lock held by syz-executor010/7538:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
1 lock held by syz-executor010/7578:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
1 lock held by syz-executor010/7539:
1 lock held by syz-executor010/7576:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
2 locks held by syz-executor010/7540:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
#1: 00000000a809da12 (&type->s_umount_key#52){+.+.}, at:
grab_super+0xaf/0x2c0 fs/super.c:383
1 lock held by syz-executor010/7577:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
1 lock held by syz-executor010/7545:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
1 lock held by syz-executor010/7584:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
1 lock held by syz-executor010/7546:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
1 lock held by syz-executor010/7580:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
1 lock held by syz-executor010/7544:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
1 lock held by syz-executor010/7582:
#0: 0000000081253a11 (&bdev->bd_fsfreeze_mutex){+.+.}, at:
mount_bdev+0x93/0x3c0 fs/super.c:1125
=============================================
NMI backtrace for cpu 0
CPU: 0 PID: 1014 Comm: khungtaskd Not tainted 4.19.67 #41
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x172/0x1f0 lib/dump_stack.c:113
nmi_cpu_backtrace.cold+0x63/0xa4 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 lib/nmi_backtrace.c:62
arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline]
watchdog+0x9df/0xee0 kernel/hung_task.c:287
kthread+0x354/0x420 kernel/kthread.c:246
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 7539 Comm: syz-executor010 Not tainted 4.19.67 #41
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
RIP: 0010:mark_lock+0xbb/0x1370 kernel/locking/lockdep.c:3102
Code: 89 48 8d 7b 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80
3c 02 00 0f 85 61 0e 00 00 4c 85 6b 30 0f 84 c1 00 00 00 <41> bd 01 00 00
00 48 83 c4 20 44 89 e8 5b 41 5c 41 5d 41 5e 41 5f
RSP: 0018:ffff888080db7550 EFLAGS: 00000002
RAX: dffffc0000000000 RBX: ffffffff89f0a9d0 RCX: 1ffff110139e51a4
RDX: 1ffffffff13e1540 RSI: ffff88809cf28d00 RDI: ffffffff89f0aa00
RBP: ffff888080db7598 R08: ffff88809cf28480 R09: ffff88809cf28d20
R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809cf28d00
R13: 0000000000000004 R14: 0000000000000002 R15: ffff88809cf28480
FS: 00007f90742c5700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000a3a218 CR3: 0000000080ccb000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
mark_held_locks+0xb1/0x100 kernel/locking/lockdep.c:2805
__trace_hardirqs_on_caller kernel/locking/lockdep.c:2826 [inline]
lockdep_hardirqs_on+0x19b/0x5d0 kernel/locking/lockdep.c:2879
trace_hardirqs_on+0x67/0x220 kernel/trace/trace_preemptirq.c:30
lookup_bh_lru fs/buffer.c:1279 [inline]
__find_get_block+0x250/0xcf0 fs/buffer.c:1291
__getblk_slow fs/buffer.c:1040 [inline]
__getblk_gfp+0x1b1/0x970 fs/buffer.c:1321
__bread_gfp+0x2f/0x300 fs/buffer.c:1355
sb_bread include/linux/buffer_head.h:307 [inline]
udf_tread+0xf1/0x140 fs/udf/misc.c:44
udf_read_tagged+0x50/0x530 fs/udf/misc.c:210
udf_check_anchor_block+0x1ef/0x680 fs/udf/super.c:1755
udf_scan_anchors+0x1cf/0x680 fs/udf/super.c:1795
udf_find_anchor fs/udf/super.c:1852 [inline]
udf_load_vrs+0x67f/0xc80 fs/udf/super.c:1917
udf_fill_super+0x7cb/0x16f5 fs/udf/super.c:2112
mount_bdev+0x304/0x3c0 fs/super.c:1158
udf_mount+0x35/0x40 fs/udf/super.c:131
mount_fs+0xa8/0x31f fs/super.c:1261
vfs_kern_mount.part.0+0x6f/0x410 fs/namespace.c:961
vfs_kern_mount fs/namespace.c:951 [inline]
do_new_mount fs/namespace.c:2469 [inline]
do_mount+0x53e/0x2bc0 fs/namespace.c:2799
ksys_mount+0xdb/0x150 fs/namespace.c:3015
__do_sys_mount fs/namespace.c:3029 [inline]
__se_sys_mount fs/namespace.c:3026 [inline]
__x64_sys_mount+0xbe/0x150 fs/namespace.c:3026
do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x44aa29
Code: 4d cb fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7
48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff
ff 0f 83 1b cb fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f90742c4ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044aa29
RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 00000000200001c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffed473a76f R14: 00007f90742c59c0 R15: 0000000000000000
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this bug, for details see:
https://goo.gl/tpsmEJ#testing-patches
Reply all
Reply to author
Forward
0 new messages