INFO: task hung in fat_count_free_clusters
7 views
Skip to first unread message
syzbot
Jul 21, 2018, 2:29:04 PM7/21/18
to syzkaller-upst...@googlegroups.com
Hello,
syzbot found the following crash on:
HEAD commit: 89cf55353308 Add linux-next specific files for 20180720
git tree: linux-next
console output: https://syzkaller.appspot.com/x/log.txt?x=1003eee0400000
kernel config: https://syzkaller.appspot.com/x/.config?x=a9641a83a066bb43
dashboard link: https://syzkaller.appspot.com/bug?extid=f748edfbb0569415706e
compiler: gcc (GCC) 8.0.1 20180413 (experimental)
CC: [hiro...@mail.parknet.co.jp linux-...@vger.kernel.org]
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+f748ed...@syzkaller.appspotmail.com
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
INFO: task syz-executor1:17829 blocked for more than 140 seconds.
Not tainted 4.18.0-rc5-next-20180720+ #12
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor1 D25768 17829 4485 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2821 [inline]
__schedule+0x87c/0x1ea0 kernel/sched/core.c:3469
schedule+0xfb/0x450 kernel/sched/core.c:3513
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
schedule_preempt_disabled+0x10/0x20 kernel/sched/core.c:3571
device loop1 blocksize: 4096
__mutex_lock_common kernel/locking/mutex.c:1003 [inline]
__mutex_lock+0xbf5/0x1680 kernel/locking/mutex.c:1073
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1088
device loop1 blocksize: 4096
lock_fat fs/fat/fatent.c:279 [inline]
fat_count_free_clusters+0x122/0xd40 fs/fat/fatent.c:658
__find_get_block_slow() failed. block=1, b_blocknr=8
fat_statfs+0x3b6/0x4c0 fs/fat/inode.c:827
statfs_by_dentry+0x136/0x210 fs/statfs.c:65
b_state=0x00000029, b_size=512
vfs_statfs+0x47/0x1e0 fs/statfs.c:75
device loop1 blocksize: 4096
user_statfs+0xbd/0x150 fs/statfs.c:90
__find_get_block_slow() failed. block=1, b_blocknr=8
__do_sys_statfs+0x7f/0xf0 fs/statfs.c:180
__se_sys_statfs fs/statfs.c:177 [inline]
__x64_sys_statfs+0x54/0x80 fs/statfs.c:177
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
entry_SYSCALL_64_after_hwframe+0x49/0xbe
__find_get_block_slow() failed. block=1, b_blocknr=8
RIP: 0033:0x455ab9
Code: Bad RIP value.
RSP: 002b:00007fb061c9ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000089
RAX: ffffffffffffffda RBX: 00007fb061c9f6d4 RCX: 0000000000455ab9
RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000020000140
b_state=0x00000029, b_size=512
RBP: 000000000072bff0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004bbc39 R14: 00000000004d39c0 R15: 0000000000000002
INFO: task syz-executor1:17830 blocked for more than 140 seconds.
device loop1 blocksize: 4096
Not tainted 4.18.0-rc5-next-20180720+ #12
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor1 D24160 17830 4485 0x00000004
__find_get_block_slow() failed. block=1, b_blocknr=8
Call Trace:
context_switch kernel/sched/core.c:2821 [inline]
__schedule+0x87c/0x1ea0 kernel/sched/core.c:3469
schedule+0xfb/0x450 kernel/sched/core.c:3513
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
__rwsem_down_write_failed_common+0x95d/0x1630
kernel/locking/rwsem-xadd.c:566
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
rwsem_down_write_failed+0xe/0x10 kernel/locking/rwsem-xadd.c:595
call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:117
__down_write arch/x86/include/asm/rwsem.h:142 [inline]
down_write+0xaa/0x130 kernel/locking/rwsem.c:72
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
inode_lock include/linux/fs.h:752 [inline]
do_truncate+0x19f/0x2b0 fs/open.c:61
__find_get_block_slow() failed. block=1, b_blocknr=8
handle_truncate fs/namei.c:3008 [inline]
do_last fs/namei.c:3424 [inline]
path_openat+0x33e2/0x5300 fs/namei.c:3534
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
do_filp_open+0x255/0x380 fs/namei.c:3564
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
do_sys_open+0x584/0x720 fs/open.c:1063
__find_get_block_slow() failed. block=1, b_blocknr=8
ksys_open include/linux/syscalls.h:1287 [inline]
__do_sys_creat fs/open.c:1121 [inline]
__se_sys_creat fs/open.c:1119 [inline]
__x64_sys_creat+0x61/0x80 fs/open.c:1119
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455ab9
__find_get_block_slow() failed. block=1, b_blocknr=8
Code: Bad RIP value.
RSP: 002b:00007fb061c7dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007fb061c7e6d4 RCX: 0000000000455ab9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0
RBP: 000000000072c098 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004bb9a6 R14: 00000000004c8f68 R15: 0000000000000003
INFO: task syz-executor1:17832 blocked for more than 140 seconds.
Not tainted 4.18.0-rc5-next-20180720+ #12
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
b_state=0x00000029, b_size=512
syz-executor1 D25408 17832 4485 0x00000004
device loop1 blocksize: 4096
Call Trace:
context_switch kernel/sched/core.c:2821 [inline]
__schedule+0x87c/0x1ea0 kernel/sched/core.c:3469
__find_get_block_slow() failed. block=1, b_blocknr=8
schedule+0xfb/0x450 kernel/sched/core.c:3513
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
schedule_preempt_disabled+0x10/0x20 kernel/sched/core.c:3571
__mutex_lock_common kernel/locking/mutex.c:1003 [inline]
__mutex_lock+0xbf5/0x1680 kernel/locking/mutex.c:1073
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1088
device loop1 blocksize: 4096
lock_fat fs/fat/fatent.c:279 [inline]
fat_count_free_clusters+0x122/0xd40 fs/fat/fatent.c:658
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
fat_statfs+0x3b6/0x4c0 fs/fat/inode.c:827
device loop1 blocksize: 4096
statfs_by_dentry+0x136/0x210 fs/statfs.c:65
vfs_statfs+0x47/0x1e0 fs/statfs.c:75
__find_get_block_slow() failed. block=1, b_blocknr=8
user_statfs+0xbd/0x150 fs/statfs.c:90
__do_sys_statfs+0x7f/0xf0 fs/statfs.c:180
__se_sys_statfs fs/statfs.c:177 [inline]
__x64_sys_statfs+0x54/0x80 fs/statfs.c:177
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455ab9
__find_get_block_slow() failed. block=1, b_blocknr=8
Code: Bad RIP value.
RSP: 002b:00007fb061c5cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000089
RAX: ffffffffffffffda RBX: 00007fb061c5d6d4 RCX: 0000000000455ab9
RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000020000140
RBP: 000000000072c140 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004bbc39 R14: 00000000004d39c0 R15: 0000000000000004
INFO: task syz-executor1:17834 blocked for more than 140 seconds.
Not tainted 4.18.0-rc5-next-20180720+ #12
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor1 D25408 17834 4485 0x00000004
b_state=0x00000029, b_size=512
Call Trace:
context_switch kernel/sched/core.c:2821 [inline]
__schedule+0x87c/0x1ea0 kernel/sched/core.c:3469
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
schedule+0xfb/0x450 kernel/sched/core.c:3513
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
__rwsem_down_write_failed_common+0x95d/0x1630
kernel/locking/rwsem-xadd.c:566
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
rwsem_down_write_failed+0xe/0x10 kernel/locking/rwsem-xadd.c:595
call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:117
__down_write arch/x86/include/asm/rwsem.h:142 [inline]
down_write+0xaa/0x130 kernel/locking/rwsem.c:72
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
inode_lock include/linux/fs.h:752 [inline]
fat_fallocate+0x12d/0x320 fs/fat/file.c:282
__find_get_block_slow() failed. block=1, b_blocknr=8
vfs_fallocate+0x4b4/0x940 fs/open.c:308
ksys_fallocate+0x56/0x90 fs/open.c:331
__do_sys_fallocate fs/open.c:339 [inline]
__se_sys_fallocate fs/open.c:337 [inline]
__x64_sys_fallocate+0x97/0xf0 fs/open.c:337
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455ab9
__find_get_block_slow() failed. block=1, b_blocknr=8
Code: Bad RIP value.
RSP: 002b:00007fb061c3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
RAX: ffffffffffffffda RBX: 00007fb061c3c6d4 RCX: 0000000000455ab9
RDX: 0000000000800000 RSI: 0000000000000000 RDI: 0000000000000013
b_state=0x00000029, b_size=512
RBP: 000000000072c1e8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000008 R11: 0000000000000246 R12: 00000000ffffffff
device loop1 blocksize: 4096
R13: 00000000004bba7f R14: 00000000004c9148 R15: 0000000000000005
INFO: lockdep is turned off.
__find_get_block_slow() failed. block=1, b_blocknr=8
NMI backtrace for cpu 1
CPU: 1 PID: 900 Comm: khungtaskd Not tainted 4.18.0-rc5-next-20180720+ #12
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113
b_state=0x00000029, b_size=512
nmi_cpu_backtrace.cold.3+0x48/0x88 lib/nmi_backtrace.c:101
device loop1 blocksize: 4096
nmi_trigger_cpumask_backtrace+0x151/0x192 lib/nmi_backtrace.c:62
arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
trigger_all_cpu_backtrace include/linux/nmi.h:144 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:204 [inline]
watchdog+0xb39/0x10b0 kernel/hung_task.c:265
__find_get_block_slow() failed. block=1, b_blocknr=8
kthread+0x345/0x410 kernel/kthread.c:246
b_state=0x00000029, b_size=512
ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:415
device loop1 blocksize: 4096
Sending NMI from CPU 1 to CPUs 0:
__find_get_block_slow() failed. block=1, b_blocknr=8
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.718
msecs
NMI backtrace for cpu 0
CPU: 0 PID: 17827 Comm: syz-executor1 Not tainted 4.18.0-rc5-next-20180720+
#12
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
RIP: 0010:__read_once_size include/linux/compiler.h:188 [inline]
RIP: 0010:trace_irq_handler_entry include/trace/events/irq.h:53 [inline]
RIP: 0010:__handle_irq_event_percpu+0x734/0xaf0 kernel/irq/handle.c:148
Code: ff 48 c7 c7 88 69 9a 89 c6 00 00 48 89 f8 48 c1 e8 03 80 3c 18 00 0f
85 37 03 00 00 48 8b 85 98 fe ff ff 4c 8b 2d a4 cd 36 08 <80> 38 00 0f 85
0f 03 00 00 48 8b 85 98 fe ff ff 4c 89 6d 98 c6 00
RSP: 0018:ffff8801dae07890 EFLAGS: 00000046
RAX: ffffed003b5c0f35 RBX: dffffc0000000000 RCX: ffffffff8163962f
RDX: 0000000000010100 RSI: ffffffff81639bad RDI: ffffffff899a6988
RBP: ffff8801dae07a10 R08: ffff8801b196e1c0 R09: ffffed003a3be01d
R10: ffffed003a3be01d R11: ffff8801d1df00eb R12: ffff8801d41b4180
R13: 0000000000000000 R14: ffff8801d1df0040 R15: ffff8801dae07a48
FS: 00007fb061cc0700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f925dadbe30 CR3: 0000000190946000 CR4: 00000000001406f0
DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
<IRQ>
handle_irq_event_percpu+0xa0/0x1d0 kernel/irq/handle.c:189
handle_irq_event+0xa7/0x135 kernel/irq/handle.c:206
handle_edge_irq+0x20f/0x870 kernel/irq/chip.c:791
generic_handle_irq_desc include/linux/irqdesc.h:154 [inline]
handle_irq+0x18c/0x2e7 arch/x86/kernel/irq_64.c:77
do_IRQ+0x78/0x190 arch/x86/kernel/irq.c:245
common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:645
RIP: 0010:arch_local_irq_enable arch/x86/include/asm/paravirt.h:793 [inline]
RIP: 0010:__do_softirq+0x2a0/0xb17 kernel/softirq.c:276
Code: c7 c0 b8 b2 f1 88 48 c1 e8 03 42 80 3c 38 00 0f 85 50 07 00 00 48 83
3d 25 b0 31 01 00 0f 84 ab 06 00 00 fb 66 0f 1f 44 00 00 <48> c7 85 68 fe
ff ff 00 91 e0 88 b8 ff ff ff ff 0f bc 85 74 fe ff
RSP: 0018:ffff8801dae07c98 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffda
RAX: 1ffffffff11e3657 RBX: ffff8801b196e1c0 RCX: ffffffff816b1fb4
RDX: 0000000000000004 RSI: 0000000080000002 RDI: ffffffff892a9580
RBP: ffff8801dae07e70 R08: ffff8801b196e1c0 R09: 0000000000000000
R10: ffffed0043fff001 R11: 0000000000000000 R12: 1ffff1003b5c0fe0
R13: ffff8801dae07fc0 R14: 0000000000000000 R15: dffffc0000000000
invoke_softirq kernel/softirq.c:372 [inline]
irq_exit+0x1d4/0x210 kernel/softirq.c:412
exiting_irq arch/x86/include/asm/apic.h:527 [inline]
smp_apic_timer_interrupt+0x186/0x730 arch/x86/kernel/apic/apic.c:1052
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:867
</IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:783
[inline]
RIP: 0010:console_trylock_spinning kernel/printk/printk.c:1683 [inline]
RIP: 0010:vprintk_emit+0x7f9/0x910 kernel/printk/printk.c:1923
Code: 00 00 00 00 fc ff df 41 80 3c 04 00 0f 85 d3 00 00 00 48 83 3d 4f 64
8e 07 00 74 2d e8 60 58 19 00 48 8b bd 90 fe ff ff 57 9d <0f> 1f 44 00 00
e9 68 fe ff ff e8 48 58 19 00 0f 0b e8 41 58 19 00
RSP: 0018:ffff8801987c68f8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000040000 RBX: 1ffff100330f8d25 RCX: ffffc90006841000
RDX: 0000000000040000 RSI: ffffffff81634e60 RDI: 0000000000000246
RBP: ffff8801987c6a70 R08: ffff8801b196e1c0 R09: 0000000000000001
R10: fffffbfff11f1224 R11: ffffffff88f89123 R12: 1ffffffff11e3655
R13: 0000000000000200 R14: ffff8801987c6a48 R15: 0000000000000000
vprintk_default+0x28/0x30 kernel/printk/printk.c:1965
vprintk_func+0x7a/0x117 kernel/printk/printk_safe.c:398
printk+0xa7/0xcf kernel/printk/printk.c:1998
__find_get_block_slow fs/buffer.c:232 [inline]
__find_get_block.cold.61+0x3a/0xff fs/buffer.c:1295
__getblk_slow fs/buffer.c:1040 [inline]
__getblk_gfp+0x2be/0xb10 fs/buffer.c:1321
__bread_gfp+0x2d/0x310 fs/buffer.c:1355
sb_bread include/linux/buffer_head.h:307 [inline]
fat_ent_bread+0x173/0x290 fs/fat/fatent.c:107
fat_ent_read_block fs/fat/fatent.c:442 [inline]
fat_alloc_clusters+0x8ce/0x16e0 fs/fat/fatent.c:490
fat_add_cluster+0x7a/0x150 fs/fat/inode.c:101
__fat_get_block fs/fat/inode.c:148 [inline]
fat_get_block+0x373/0xaf0 fs/fat/inode.c:183
__block_write_begin_int+0x50d/0x1b70 fs/buffer.c:1967
__block_write_begin fs/buffer.c:2017 [inline]
block_write_begin+0xda/0x370 fs/buffer.c:2076
cont_write_begin+0x567/0x860 fs/buffer.c:2429
fat_write_begin+0x8d/0x120 fs/fat/inode.c:229
pagecache_write_begin+0x88/0xc0 mm/filemap.c:2894
cont_expand_zero fs/buffer.c:2356 [inline]
cont_write_begin+0x22b/0x860 fs/buffer.c:2419
fat_write_begin+0x8d/0x120 fs/fat/inode.c:229
pagecache_write_begin+0x88/0xc0 mm/filemap.c:2894
generic_cont_expand_simple+0x134/0x1f0 fs/buffer.c:2320
fat_cont_expand+0x71/0x2b0 fs/fat/file.c:226
fat_fallocate+0x18c/0x320 fs/fat/file.c:304
vfs_fallocate+0x4b4/0x940 fs/open.c:308
ksys_fallocate+0x56/0x90 fs/open.c:331
__do_sys_fallocate fs/open.c:339 [inline]
__se_sys_fallocate fs/open.c:337 [inline]
__x64_sys_fallocate+0x97/0xf0 fs/open.c:337
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455ab9
Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7
48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff
ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fb061cbfc68 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
RAX: ffffffffffffffda RBX: 00007fb061cc06d4 RCX: 0000000000455ab9
RDX: 0000000000800000 RSI: 0000000000000000 RDI: 0000000000000013
RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000008 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004bba7f R14: 00000000
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#bug-status-tracking for how to communicate with
syzbot.
syzbot found the following crash on:
HEAD commit: 89cf55353308 Add linux-next specific files for 20180720
git tree: linux-next
console output: https://syzkaller.appspot.com/x/log.txt?x=1003eee0400000
kernel config: https://syzkaller.appspot.com/x/.config?x=a9641a83a066bb43
dashboard link: https://syzkaller.appspot.com/bug?extid=f748edfbb0569415706e
compiler: gcc (GCC) 8.0.1 20180413 (experimental)
CC: [hiro...@mail.parknet.co.jp linux-...@vger.kernel.org]
Unfortunately, I don't have any reproducer for this crash yet.
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+f748ed...@syzkaller.appspotmail.com
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
INFO: task syz-executor1:17829 blocked for more than 140 seconds.
Not tainted 4.18.0-rc5-next-20180720+ #12
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor1 D25768 17829 4485 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2821 [inline]
__schedule+0x87c/0x1ea0 kernel/sched/core.c:3469
schedule+0xfb/0x450 kernel/sched/core.c:3513
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
schedule_preempt_disabled+0x10/0x20 kernel/sched/core.c:3571
device loop1 blocksize: 4096
__mutex_lock_common kernel/locking/mutex.c:1003 [inline]
__mutex_lock+0xbf5/0x1680 kernel/locking/mutex.c:1073
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1088
device loop1 blocksize: 4096
lock_fat fs/fat/fatent.c:279 [inline]
fat_count_free_clusters+0x122/0xd40 fs/fat/fatent.c:658
__find_get_block_slow() failed. block=1, b_blocknr=8
fat_statfs+0x3b6/0x4c0 fs/fat/inode.c:827
statfs_by_dentry+0x136/0x210 fs/statfs.c:65
b_state=0x00000029, b_size=512
vfs_statfs+0x47/0x1e0 fs/statfs.c:75
device loop1 blocksize: 4096
user_statfs+0xbd/0x150 fs/statfs.c:90
__find_get_block_slow() failed. block=1, b_blocknr=8
__do_sys_statfs+0x7f/0xf0 fs/statfs.c:180
__se_sys_statfs fs/statfs.c:177 [inline]
__x64_sys_statfs+0x54/0x80 fs/statfs.c:177
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
entry_SYSCALL_64_after_hwframe+0x49/0xbe
__find_get_block_slow() failed. block=1, b_blocknr=8
RIP: 0033:0x455ab9
Code: Bad RIP value.
RSP: 002b:00007fb061c9ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000089
RAX: ffffffffffffffda RBX: 00007fb061c9f6d4 RCX: 0000000000455ab9
RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000020000140
b_state=0x00000029, b_size=512
RBP: 000000000072bff0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004bbc39 R14: 00000000004d39c0 R15: 0000000000000002
INFO: task syz-executor1:17830 blocked for more than 140 seconds.
device loop1 blocksize: 4096
Not tainted 4.18.0-rc5-next-20180720+ #12
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor1 D24160 17830 4485 0x00000004
__find_get_block_slow() failed. block=1, b_blocknr=8
Call Trace:
context_switch kernel/sched/core.c:2821 [inline]
__schedule+0x87c/0x1ea0 kernel/sched/core.c:3469
schedule+0xfb/0x450 kernel/sched/core.c:3513
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
__rwsem_down_write_failed_common+0x95d/0x1630
kernel/locking/rwsem-xadd.c:566
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
rwsem_down_write_failed+0xe/0x10 kernel/locking/rwsem-xadd.c:595
call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:117
__down_write arch/x86/include/asm/rwsem.h:142 [inline]
down_write+0xaa/0x130 kernel/locking/rwsem.c:72
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
inode_lock include/linux/fs.h:752 [inline]
do_truncate+0x19f/0x2b0 fs/open.c:61
__find_get_block_slow() failed. block=1, b_blocknr=8
handle_truncate fs/namei.c:3008 [inline]
do_last fs/namei.c:3424 [inline]
path_openat+0x33e2/0x5300 fs/namei.c:3534
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
do_filp_open+0x255/0x380 fs/namei.c:3564
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
do_sys_open+0x584/0x720 fs/open.c:1063
__find_get_block_slow() failed. block=1, b_blocknr=8
ksys_open include/linux/syscalls.h:1287 [inline]
__do_sys_creat fs/open.c:1121 [inline]
__se_sys_creat fs/open.c:1119 [inline]
__x64_sys_creat+0x61/0x80 fs/open.c:1119
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455ab9
__find_get_block_slow() failed. block=1, b_blocknr=8
Code: Bad RIP value.
RSP: 002b:00007fb061c7dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
RAX: ffffffffffffffda RBX: 00007fb061c7e6d4 RCX: 0000000000455ab9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0
RBP: 000000000072c098 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004bb9a6 R14: 00000000004c8f68 R15: 0000000000000003
INFO: task syz-executor1:17832 blocked for more than 140 seconds.
Not tainted 4.18.0-rc5-next-20180720+ #12
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
b_state=0x00000029, b_size=512
syz-executor1 D25408 17832 4485 0x00000004
device loop1 blocksize: 4096
Call Trace:
context_switch kernel/sched/core.c:2821 [inline]
__schedule+0x87c/0x1ea0 kernel/sched/core.c:3469
__find_get_block_slow() failed. block=1, b_blocknr=8
schedule+0xfb/0x450 kernel/sched/core.c:3513
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
schedule_preempt_disabled+0x10/0x20 kernel/sched/core.c:3571
__mutex_lock_common kernel/locking/mutex.c:1003 [inline]
__mutex_lock+0xbf5/0x1680 kernel/locking/mutex.c:1073
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1088
device loop1 blocksize: 4096
lock_fat fs/fat/fatent.c:279 [inline]
fat_count_free_clusters+0x122/0xd40 fs/fat/fatent.c:658
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
fat_statfs+0x3b6/0x4c0 fs/fat/inode.c:827
device loop1 blocksize: 4096
statfs_by_dentry+0x136/0x210 fs/statfs.c:65
vfs_statfs+0x47/0x1e0 fs/statfs.c:75
__find_get_block_slow() failed. block=1, b_blocknr=8
user_statfs+0xbd/0x150 fs/statfs.c:90
__do_sys_statfs+0x7f/0xf0 fs/statfs.c:180
__se_sys_statfs fs/statfs.c:177 [inline]
__x64_sys_statfs+0x54/0x80 fs/statfs.c:177
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455ab9
__find_get_block_slow() failed. block=1, b_blocknr=8
Code: Bad RIP value.
RSP: 002b:00007fb061c5cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000089
RAX: ffffffffffffffda RBX: 00007fb061c5d6d4 RCX: 0000000000455ab9
RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000020000140
RBP: 000000000072c140 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004bbc39 R14: 00000000004d39c0 R15: 0000000000000004
INFO: task syz-executor1:17834 blocked for more than 140 seconds.
Not tainted 4.18.0-rc5-next-20180720+ #12
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor1 D25408 17834 4485 0x00000004
b_state=0x00000029, b_size=512
Call Trace:
context_switch kernel/sched/core.c:2821 [inline]
__schedule+0x87c/0x1ea0 kernel/sched/core.c:3469
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
schedule+0xfb/0x450 kernel/sched/core.c:3513
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
__rwsem_down_write_failed_common+0x95d/0x1630
kernel/locking/rwsem-xadd.c:566
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
rwsem_down_write_failed+0xe/0x10 kernel/locking/rwsem-xadd.c:595
call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:117
__down_write arch/x86/include/asm/rwsem.h:142 [inline]
down_write+0xaa/0x130 kernel/locking/rwsem.c:72
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
inode_lock include/linux/fs.h:752 [inline]
fat_fallocate+0x12d/0x320 fs/fat/file.c:282
__find_get_block_slow() failed. block=1, b_blocknr=8
vfs_fallocate+0x4b4/0x940 fs/open.c:308
ksys_fallocate+0x56/0x90 fs/open.c:331
__do_sys_fallocate fs/open.c:339 [inline]
__se_sys_fallocate fs/open.c:337 [inline]
__x64_sys_fallocate+0x97/0xf0 fs/open.c:337
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
b_state=0x00000029, b_size=512
device loop1 blocksize: 4096
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455ab9
__find_get_block_slow() failed. block=1, b_blocknr=8
Code: Bad RIP value.
RSP: 002b:00007fb061c3bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
RAX: ffffffffffffffda RBX: 00007fb061c3c6d4 RCX: 0000000000455ab9
RDX: 0000000000800000 RSI: 0000000000000000 RDI: 0000000000000013
b_state=0x00000029, b_size=512
RBP: 000000000072c1e8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000008 R11: 0000000000000246 R12: 00000000ffffffff
device loop1 blocksize: 4096
R13: 00000000004bba7f R14: 00000000004c9148 R15: 0000000000000005
INFO: lockdep is turned off.
__find_get_block_slow() failed. block=1, b_blocknr=8
NMI backtrace for cpu 1
CPU: 1 PID: 900 Comm: khungtaskd Not tainted 4.18.0-rc5-next-20180720+ #12
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113
b_state=0x00000029, b_size=512
nmi_cpu_backtrace.cold.3+0x48/0x88 lib/nmi_backtrace.c:101
device loop1 blocksize: 4096
nmi_trigger_cpumask_backtrace+0x151/0x192 lib/nmi_backtrace.c:62
arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
trigger_all_cpu_backtrace include/linux/nmi.h:144 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:204 [inline]
watchdog+0xb39/0x10b0 kernel/hung_task.c:265
__find_get_block_slow() failed. block=1, b_blocknr=8
kthread+0x345/0x410 kernel/kthread.c:246
b_state=0x00000029, b_size=512
ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:415
device loop1 blocksize: 4096
Sending NMI from CPU 1 to CPUs 0:
__find_get_block_slow() failed. block=1, b_blocknr=8
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.718
msecs
NMI backtrace for cpu 0
CPU: 0 PID: 17827 Comm: syz-executor1 Not tainted 4.18.0-rc5-next-20180720+
#12
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
RIP: 0010:__read_once_size include/linux/compiler.h:188 [inline]
RIP: 0010:trace_irq_handler_entry include/trace/events/irq.h:53 [inline]
RIP: 0010:__handle_irq_event_percpu+0x734/0xaf0 kernel/irq/handle.c:148
Code: ff 48 c7 c7 88 69 9a 89 c6 00 00 48 89 f8 48 c1 e8 03 80 3c 18 00 0f
85 37 03 00 00 48 8b 85 98 fe ff ff 4c 8b 2d a4 cd 36 08 <80> 38 00 0f 85
0f 03 00 00 48 8b 85 98 fe ff ff 4c 89 6d 98 c6 00
RSP: 0018:ffff8801dae07890 EFLAGS: 00000046
RAX: ffffed003b5c0f35 RBX: dffffc0000000000 RCX: ffffffff8163962f
RDX: 0000000000010100 RSI: ffffffff81639bad RDI: ffffffff899a6988
RBP: ffff8801dae07a10 R08: ffff8801b196e1c0 R09: ffffed003a3be01d
R10: ffffed003a3be01d R11: ffff8801d1df00eb R12: ffff8801d41b4180
R13: 0000000000000000 R14: ffff8801d1df0040 R15: ffff8801dae07a48
FS: 00007fb061cc0700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f925dadbe30 CR3: 0000000190946000 CR4: 00000000001406f0
DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
<IRQ>
handle_irq_event_percpu+0xa0/0x1d0 kernel/irq/handle.c:189
handle_irq_event+0xa7/0x135 kernel/irq/handle.c:206
handle_edge_irq+0x20f/0x870 kernel/irq/chip.c:791
generic_handle_irq_desc include/linux/irqdesc.h:154 [inline]
handle_irq+0x18c/0x2e7 arch/x86/kernel/irq_64.c:77
do_IRQ+0x78/0x190 arch/x86/kernel/irq.c:245
common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:645
RIP: 0010:arch_local_irq_enable arch/x86/include/asm/paravirt.h:793 [inline]
RIP: 0010:__do_softirq+0x2a0/0xb17 kernel/softirq.c:276
Code: c7 c0 b8 b2 f1 88 48 c1 e8 03 42 80 3c 38 00 0f 85 50 07 00 00 48 83
3d 25 b0 31 01 00 0f 84 ab 06 00 00 fb 66 0f 1f 44 00 00 <48> c7 85 68 fe
ff ff 00 91 e0 88 b8 ff ff ff ff 0f bc 85 74 fe ff
RSP: 0018:ffff8801dae07c98 EFLAGS: 00000286 ORIG_RAX: ffffffffffffffda
RAX: 1ffffffff11e3657 RBX: ffff8801b196e1c0 RCX: ffffffff816b1fb4
RDX: 0000000000000004 RSI: 0000000080000002 RDI: ffffffff892a9580
RBP: ffff8801dae07e70 R08: ffff8801b196e1c0 R09: 0000000000000000
R10: ffffed0043fff001 R11: 0000000000000000 R12: 1ffff1003b5c0fe0
R13: ffff8801dae07fc0 R14: 0000000000000000 R15: dffffc0000000000
invoke_softirq kernel/softirq.c:372 [inline]
irq_exit+0x1d4/0x210 kernel/softirq.c:412
exiting_irq arch/x86/include/asm/apic.h:527 [inline]
smp_apic_timer_interrupt+0x186/0x730 arch/x86/kernel/apic/apic.c:1052
apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:867
</IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:783
[inline]
RIP: 0010:console_trylock_spinning kernel/printk/printk.c:1683 [inline]
RIP: 0010:vprintk_emit+0x7f9/0x910 kernel/printk/printk.c:1923
Code: 00 00 00 00 fc ff df 41 80 3c 04 00 0f 85 d3 00 00 00 48 83 3d 4f 64
8e 07 00 74 2d e8 60 58 19 00 48 8b bd 90 fe ff ff 57 9d <0f> 1f 44 00 00
e9 68 fe ff ff e8 48 58 19 00 0f 0b e8 41 58 19 00
RSP: 0018:ffff8801987c68f8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
RAX: 0000000000040000 RBX: 1ffff100330f8d25 RCX: ffffc90006841000
RDX: 0000000000040000 RSI: ffffffff81634e60 RDI: 0000000000000246
RBP: ffff8801987c6a70 R08: ffff8801b196e1c0 R09: 0000000000000001
R10: fffffbfff11f1224 R11: ffffffff88f89123 R12: 1ffffffff11e3655
R13: 0000000000000200 R14: ffff8801987c6a48 R15: 0000000000000000
vprintk_default+0x28/0x30 kernel/printk/printk.c:1965
vprintk_func+0x7a/0x117 kernel/printk/printk_safe.c:398
printk+0xa7/0xcf kernel/printk/printk.c:1998
__find_get_block_slow fs/buffer.c:232 [inline]
__find_get_block.cold.61+0x3a/0xff fs/buffer.c:1295
__getblk_slow fs/buffer.c:1040 [inline]
__getblk_gfp+0x2be/0xb10 fs/buffer.c:1321
__bread_gfp+0x2d/0x310 fs/buffer.c:1355
sb_bread include/linux/buffer_head.h:307 [inline]
fat_ent_bread+0x173/0x290 fs/fat/fatent.c:107
fat_ent_read_block fs/fat/fatent.c:442 [inline]
fat_alloc_clusters+0x8ce/0x16e0 fs/fat/fatent.c:490
fat_add_cluster+0x7a/0x150 fs/fat/inode.c:101
__fat_get_block fs/fat/inode.c:148 [inline]
fat_get_block+0x373/0xaf0 fs/fat/inode.c:183
__block_write_begin_int+0x50d/0x1b70 fs/buffer.c:1967
__block_write_begin fs/buffer.c:2017 [inline]
block_write_begin+0xda/0x370 fs/buffer.c:2076
cont_write_begin+0x567/0x860 fs/buffer.c:2429
fat_write_begin+0x8d/0x120 fs/fat/inode.c:229
pagecache_write_begin+0x88/0xc0 mm/filemap.c:2894
cont_expand_zero fs/buffer.c:2356 [inline]
cont_write_begin+0x22b/0x860 fs/buffer.c:2419
fat_write_begin+0x8d/0x120 fs/fat/inode.c:229
pagecache_write_begin+0x88/0xc0 mm/filemap.c:2894
generic_cont_expand_simple+0x134/0x1f0 fs/buffer.c:2320
fat_cont_expand+0x71/0x2b0 fs/fat/file.c:226
fat_fallocate+0x18c/0x320 fs/fat/file.c:304
vfs_fallocate+0x4b4/0x940 fs/open.c:308
ksys_fallocate+0x56/0x90 fs/open.c:331
__do_sys_fallocate fs/open.c:339 [inline]
__se_sys_fallocate fs/open.c:337 [inline]
__x64_sys_fallocate+0x97/0xf0 fs/open.c:337
do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x455ab9
Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7
48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff
ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fb061cbfc68 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
RAX: ffffffffffffffda RBX: 00007fb061cc06d4 RCX: 0000000000455ab9
RDX: 0000000000800000 RSI: 0000000000000000 RDI: 0000000000000013
RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000008 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000004bba7f R14: 00000000
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#bug-status-tracking for how to communicate with
syzbot.
Reply all
Reply to author
Forward
0 new messages