syzbot


INFO: task hung in do_read_cache_page

Status: auto-closed as invalid on 2019/02/22 10:09
Subsystems: block
[Documentation on labels]
Reported-by: syzbot+657178f6ccf94903eff7@syzkaller.appspotmail.com
First crash: 2211d, last: 2107d
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 INFO: task hung in do_read_cache_page (2) C error 26 444d 1161d 0/1 upstream: reported C repro on 2021/02/09 08:22
linux-4.14 INFO: task hung in do_read_cache_page 2 639d 676d 0/1 auto-obsoleted due to no activity on 2022/11/13 17:53
linux-5.15 INFO: task hung in do_read_cache_page origin:upstream C error 9 288d 365d 0/3 upstream: reported C repro on 2023/04/16 18:09
upstream INFO: task hung in do_read_cache_page (3) fs mm C done inconclusive 88 643d 1540d 0/26 upstream: reported C repro on 2020/01/27 06:32
android-49 INFO: task hung in do_read_cache_page 1 2151d 2151d 0/3 auto-closed as invalid on 2019/02/22 13:59
upstream INFO: task hung in do_read_cache_page (2) block 1 1677d 1677d 0/26 auto-closed as invalid on 2019/11/11 08:43
linux-4.19 INFO: task hung in do_read_cache_page C done 2 1219d 1279d 1/1 fixed on 2021/01/13 11:08

Sample crash report:
Dev loop0: unable to read RDB block 8
 loop0: unable to read partition table
loop0: partition table beyond EOD, truncated
loop_reread_partitions: partition scan of loop0 (mñs=zŠ$/Ø™àc?_ΨûZUØ»¤Ù	Ç¡$ج9­Ñ=É:€ò/ùý5¨Dóèµ­äå“Q7¯oâQ4C]) failed (rc=-5)
INFO: task syz-executor1:11766 blocked for more than 120 seconds.
      Not tainted 4.16.0-rc7+ #5
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor1   D20336 11766   7120 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2862 [inline]
 __schedule+0x8fb/0x1ec0 kernel/sched/core.c:3440
 schedule+0xf5/0x430 kernel/sched/core.c:3499
 io_schedule+0x1c/0x70 kernel/sched/core.c:5115
 wait_on_page_bit_common+0x4b3/0x770 mm/filemap.c:1099
 wait_on_page_bit mm/filemap.c:1132 [inline]
 wait_on_page_locked include/linux/pagemap.h:530 [inline]
 wait_on_page_read mm/filemap.c:2771 [inline]
 do_read_cache_page+0x7a9/0x11b0 mm/filemap.c:2810
 read_cache_page+0x61/0x80 mm/filemap.c:2892
 read_mapping_page include/linux/pagemap.h:402 [inline]
 read_dev_sector+0x118/0x410 block/partition-generic.c:657
 read_part_sector block/partitions/check.h:38 [inline]
 adfspart_check_ICS+0x17f/0xef0 block/partitions/acorn.c:366
 check_partition+0x33f/0x6e0 block/partitions/check.c:167
 rescan_partitions+0x14d/0x900 block/partition-generic.c:521
 __blkdev_reread_part+0x15f/0x1e0 block/ioctl.c:173
 blkdev_reread_part+0x26/0x40 block/ioctl.c:193
 loop_reread_partitions+0x12f/0x1a0 drivers/block/loop.c:619
 loop_change_fd drivers/block/loop.c:678 [inline]
 lo_ioctl+0x15cb/0x1b70 drivers/block/loop.c:1361
 __blkdev_driver_ioctl block/ioctl.c:303 [inline]
 blkdev_ioctl+0x1759/0x1e00 block/ioctl.c:601
 block_ioctl+0xde/0x120 fs/block_dev.c:1875
 vfs_ioctl fs/ioctl.c:46 [inline]
 do_vfs_ioctl+0x1b1/0x1520 fs/ioctl.c:686
 SYSC_ioctl fs/ioctl.c:701 [inline]
 SyS_ioctl+0x8f/0xc0 fs/ioctl.c:692
 do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x4548b9
RSP: 002b:00007f818e430c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f818e4316d4 RCX: 00000000004548b9
RDX: 0000000000000017 RSI: 0000000000004c06 RDI: 0000000000000017
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 000000000000027b R14: 00000000006f5c28 R15: 0000000000000000

Showing all locks held in the system:
2 locks held by khungtaskd/869:
 #0:  (rcu_read_lock){....}, at: [<0000000087677b8c>] check_hung_uninterruptible_tasks kernel/hung_task.c:175 [inline]
 #0:  (rcu_read_lock){....}, at: [<0000000087677b8c>] watchdog+0x1c5/0xd60 kernel/hung_task.c:249
 #1:  (tasklist_lock){.+.+}, at: [<000000000fe07a0e>] debug_show_all_locks+0xd3/0x3d0 kernel/locking/lockdep.c:4470
2 locks held by getty/4395:
 #0:  (&tty->ldisc_sem){++++}, at: [<00000000cbce8b2b>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<00000000a13a38a9>] n_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131
2 locks held by getty/4396:
 #0:  (&tty->ldisc_sem){++++}, at: [<00000000cbce8b2b>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<00000000a13a38a9>] n_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131
2 locks held by getty/4397:
 #0:  (&tty->ldisc_sem){++++}, at: [<00000000cbce8b2b>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<00000000a13a38a9>] n_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131
2 locks held by getty/4398:
 #0:  (&tty->ldisc_sem){++++}, at: [<00000000cbce8b2b>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<00000000a13a38a9>] n_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131
2 locks held by getty/4399:
 #0:  (&tty->ldisc_sem){++++}, at: [<00000000cbce8b2b>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<00000000a13a38a9>] n_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131
2 locks held by getty/4400:
 #0:  (&tty->ldisc_sem){++++}, at: [<00000000cbce8b2b>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<00000000a13a38a9>] n_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131
2 locks held by getty/4401:
 #0:  (&tty->ldisc_sem){++++}, at: [<00000000cbce8b2b>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<00000000a13a38a9>] n_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131
2 locks held by syz-executor1/11766:
 #0:  (&lo->lo_ctl_mutex/1){+.+.}, at: [<00000000072e59ee>] lo_ioctl+0x8b/0x1b70 drivers/block/loop.c:1355
 #1:  (&bdev->bd_mutex){+.+.}, at: [<0000000021df97c1>] blkdev_reread_part+0x1e/0x40 block/ioctl.c:192
1 lock held by syz-executor1/11776:
 #0:  (&lo->lo_ctl_mutex/1){+.+.}, at: [<00000000072e59ee>] lo_ioctl+0x8b/0x1b70 drivers/block/loop.c:1355
1 lock held by syz-executor1/11780:
 #0:  (&lo->lo_ctl_mutex/1){+.+.}, at: [<00000000072e59ee>] lo_ioctl+0x8b/0x1b70 drivers/block/loop.c:1355
1 lock held by syz-executor1/11781:
 #0:  (&lo->lo_ctl_mutex/1){+.+.}, at: [<00000000072e59ee>] lo_ioctl+0x8b/0x1b70 drivers/block/loop.c:1355

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 869 Comm: khungtaskd Not tainted 4.16.0-rc7+ #5
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x194/0x24d lib/dump_stack.c:53
 nmi_cpu_backtrace+0x1d2/0x210 lib/nmi_backtrace.c:103
 nmi_trigger_cpumask_backtrace+0x123/0x180 lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_all_cpu_backtrace include/linux/nmi.h:138 [inline]
 check_hung_task kernel/hung_task.c:132 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:190 [inline]
 watchdog+0x90c/0xd60 kernel/hung_task.c:249
 kthread+0x33c/0x400 kernel/kthread.c:238
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:406
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x6/0x10 arch/x86/include/asm/irqflags.h:54

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/03/30 03:27 upstream 0b412605ef5f d47f0ed6 .config console log report ci-upstream-kasan-gce-root
2018/03/29 19:22 upstream 0b412605ef5f d47f0ed6 .config console log report ci-upstream-kasan-gce-root
2018/03/29 08:48 upstream a2601d78b77a bf5e585c .config console log report ci-upstream-kasan-gce-root
2018/03/28 15:10 upstream 3eb2ce825ea1 bf5e585c .config console log report ci-upstream-kasan-gce-root
2018/03/27 12:42 upstream 3eb2ce825ea1 bf5e585c .config console log report ci-upstream-kasan-gce-root
2018/07/09 06:10 linux-next 526674536360 f25e5770 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/07/09 04:36 linux-next 526674536360 f25e5770 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/07/09 02:06 linux-next 526674536360 f25e5770 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/07/07 19:40 linux-next 526674536360 ab89aea9 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/07/07 12:33 linux-next 526674536360 6c0c0099 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.