syzbot


INFO: task hung in console_device

Status: public: reported C repro on 2019/04/11 08:44
Reported-by: syzbot+40cf3cb694024c867daf@syzkaller.appspotmail.com
First crash: 2228d, last: 1720d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-44 INFO: task hung in console_device C 11 1785d 1923d 0/2 public: reported C repro on 2019/04/14 00:00
android-414 INFO: task hung in console_device 14 2067d 1924d 0/1 auto-closed as invalid on 2019/05/20 06:11
android-414 INFO: task hung in console_device (2) 1 1714d 1714d 0/1 auto-closed as invalid on 2020/03/08 16:40

Sample crash report:
   Free memory is 32116kB above reserved
lowmemorykiller: Killing 'syz-executor804' (13461) (tgid 13461), adj 1000,
   to free 9784kB on behalf of 'syz-executor804' (16898) because
   cache 876kB is below limit 65536kB for oom_score_adj 12
   Free memory is 58008kB above reserved
INFO: task init:7433 blocked for more than 140 seconds.
      Not tainted 4.9.141+ #1
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
init            D28888  7433      1 0x00000000
 ffff8801c55d2f80 ffff8801c5be9b80 ffff88009b379600 ffff8801c5580000
 ffff8801db621018 ffff8801c5727580 ffffffff828075c2 ffff8801c55d3830
 000000000000015c 0000000000000000 0000000000000000 ffff8801db6218f0
Call Trace:
 [<ffffffff82808aef>] schedule+0x7f/0x1b0 kernel/sched/core.c:3553
 [<ffffffff828142d5>] schedule_timeout+0x735/0xe20 kernel/time/timer.c:1771
 [<ffffffff828108c1>] __down_common kernel/locking/semaphore.c:221 [inline]
 [<ffffffff828108c1>] __down+0x191/0x2b0 kernel/locking/semaphore.c:238
 [<ffffffff811fcbfe>] down+0x5e/0x80 kernel/locking/semaphore.c:61
 [<ffffffff812223ac>] console_lock+0x2c/0x80 kernel/printk/printk.c:2217
 [<ffffffff8122793c>] console_device+0x1c/0xc0 kernel/printk/printk.c:2554
 [<ffffffff81d2be15>] tty_lookup_driver drivers/tty/tty_io.c:2008 [inline]
 [<ffffffff81d2be15>] tty_open_by_driver drivers/tty/tty_io.c:2053 [inline]
 [<ffffffff81d2be15>] tty_open+0x6f5/0xdf0 drivers/tty/tty_io.c:2130
 [<ffffffff81517bdd>] chrdev_open+0x22d/0x5c0 fs/char_dev.c:392
 [<ffffffff81501e3f>] do_dentry_open+0x3ef/0xc90 fs/open.c:766
 [<ffffffff8150576c>] vfs_open+0x11c/0x210 fs/open.c:879
 [<ffffffff8153c542>] do_last fs/namei.c:3410 [inline]
 [<ffffffff8153c542>] path_openat+0x542/0x2790 fs/namei.c:3534
 [<ffffffff81541617>] do_filp_open+0x197/0x270 fs/namei.c:3568
 [<ffffffff8150617d>] do_sys_open+0x30d/0x5c0 fs/open.c:1072
 [<ffffffff8150645d>] SYSC_open fs/open.c:1090 [inline]
 [<ffffffff8150645d>] SyS_open+0x2d/0x40 fs/open.c:1085
 [<ffffffff810056ef>] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285
 [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb

Showing all locks held in the system:
2 locks held by khungtaskd/24:
 #0:  (rcu_read_lock){......}, at: [<ffffffff8131c0cc>] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline]
 #0:  (rcu_read_lock){......}, at: [<ffffffff8131c0cc>] watchdog+0x11c/0xa20 kernel/hung_task.c:239
 #1:  (tasklist_lock){.+.+..}, at: [<ffffffff813fe63f>] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336
1 lock held by rsyslogd/1894:
 #0:  (&f->f_pos_lock){+.+.+.}, at: [<ffffffff8156cc7c>] __fdget_pos+0xac/0xd0 fs/file.c:781
2 locks held by getty/2022:
 #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff82815952>] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
 #1:  (&ldata->atomic_read_lock){+.+.+.}, at: [<ffffffff81d37362>] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142
1 lock held by init/7433:
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open_by_driver drivers/tty/tty_io.c:2052 [inline]
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2130
1 lock held by init/7434:
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open_by_driver drivers/tty/tty_io.c:2052 [inline]
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2130
1 lock held by init/7435:
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open_by_driver drivers/tty/tty_io.c:2052 [inline]
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2130
1 lock held by init/7436:
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open_by_driver drivers/tty/tty_io.c:2052 [inline]
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2130
1 lock held by init/7437:
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open_by_driver drivers/tty/tty_io.c:2052 [inline]
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2130
1 lock held by init/7438:
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open_by_driver drivers/tty/tty_io.c:2052 [inline]
 #0:  (tty_mutex){+.+.+.}, at: [<ffffffff81d2bb96>] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2130

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.141+ #1
 ffff8801d9907d08 ffffffff81b42e79 0000000000000000 0000000000000001
 0000000000000001 0000000000000001 ffffffff810983b0 ffff8801d9907d40
 ffffffff81b4df89 0000000000000001 0000000000000000 0000000000000002
Call Trace:
 [<ffffffff81b42e79>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81b42e79>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff81b4df89>] nmi_cpu_backtrace.cold.0+0x48/0x87 lib/nmi_backtrace.c:99
 [<ffffffff81b4df1c>] nmi_trigger_cpumask_backtrace+0x12c/0x151 lib/nmi_backtrace.c:60
 [<ffffffff810984b4>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37
 [<ffffffff8131c65d>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline]
 [<ffffffff8131c65d>] check_hung_task kernel/hung_task.c:125 [inline]
 [<ffffffff8131c65d>] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline]
 [<ffffffff8131c65d>] watchdog+0x6ad/0xa20 kernel/hung_task.c:239
 [<ffffffff81142c3d>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff82817a5c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 2096 Comm: syz-executor804 Not tainted 4.9.141+ #1
task: ffff8801cee94740 task.stack: ffff8801cb660000
RIP: 0010:[<ffffffff81207e58>] c [<ffffffff81207e58>] __lock_acquire+0xaa8/0x4a10 kernel/locking/lockdep.c:3325
RSP: 0018:ffff8801cb667a10  EFLAGS: 00000046
RAX: dffffc0000000000 RBX: ffff8801cee95040 RCX: 1ffff10039dd2a0c
RDX: 1ffff10039dd29fc RSI: ffff8801cee95040 RDI: ffffffff83ca1860
RBP: ffff8801cb667bb8 R08: ffff8801cee95060 R09: 0000000000000001
R10: ffff8801cee94740 R11: 0000000000000000 R12: 0000000000000226
R13: 0000000000000002 R14: 0000000000000226 R15: ffff8801cee95062
FS:  00000000017d8880(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000017e18b8 CR3: 00000001cdf6c000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffffffff815b85acc ffff8801caf53000c 0000000000000001c 0000000000000000c
 ffff8801d53e5400c ffff8801cb667ab0c ffffffff8178edc5c 0000000000000246c
 ffffffff816d289fc ffff8801cb667ab0c 0000000300000002c ffff8801cee94740c
Call Trace:
 [<ffffffff8120c8d0>] lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756
 [<ffffffff82816c26>] __raw_spin_lock include/linux/spinlock_api_smp.h:144 [inline]
 [<ffffffff82816c26>] _raw_spin_lock+0x36/0x50 kernel/locking/spinlock.c:151
 [<ffffffff81550974>] spin_lock include/linux/spinlock.h:302 [inline]
 [<ffffffff81550974>] d_instantiate_new+0x84/0x180 fs/dcache.c:1872
 [<ffffffff816ff450>] ext4_mkdir+0x7e0/0xc80 fs/ext4/namei.c:2621
 [<ffffffff8152f269>] vfs_mkdir2+0x3c9/0x640 fs/namei.c:3820
 [<ffffffff81541f9f>] SYSC_mkdirat fs/namei.c:3849 [inline]
 [<ffffffff81541f9f>] SyS_mkdirat+0x13f/0x240 fs/namei.c:3833
 [<ffffffff815420c2>] SYSC_mkdir fs/namei.c:3860 [inline]
 [<ffffffff815420c2>] SyS_mkdir+0x22/0x30 fs/namei.c:3858
 [<ffffffff810056ef>] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285
 [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: cff c1f c00 c00 c0f c87 c29 c1a c00 c00 c49 c8d c82 ca0 c08 c00 c00 c48 c89 cc2 c48 c89 c44 c24 c70 c48 cb8 c00 c00 c00 c00 c00 cfc cff cdf c48 cc1 cea c03 c80 c3c c02 c00 c<0f> c85 c7a c2b c00 c00 c45 c85 ced c4d c8b cba ca0 c08 c00 c00 c0f c85 c20 cfc cff c

Crashes (150):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/11/03 10:22 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 a41ca8fa .config console log report syz C ci-android-49-kasan-gce
2019/10/27 16:43 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 25bb509e .config console log report syz C ci-android-49-kasan-gce
2019/10/17 01:24 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 8c88c9c1 .config console log report syz C ci-android-49-kasan-gce
2019/10/15 14:40 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 b5268b89 .config console log report syz C ci-android-49-kasan-gce
2019/09/10 00:15 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 a60cb4cd .config console log report syz C ci-android-49-kasan-gce
2019/07/09 22:15 https://android.googlesource.com/kernel/common android-4.9 414b55194dcd f62e1e85 .config console log report syz C ci-android-49-kasan-gce-root
2019/07/08 00:47 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 f62e1e85 .config console log report syz C ci-android-49-kasan-gce
2019/06/26 04:12 https://android.googlesource.com/kernel/common android-4.9 a80a7ab5f7c3 0a8d1a96 .config console log report syz C ci-android-49-kasan-gce-root
2019/06/21 04:00 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 34bf9440 .config console log report syz C ci-android-49-kasan-gce
2019/06/03 18:48 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 63bf051f .config console log report syz C ci-android-49-kasan-gce
2019/06/01 14:07 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 53c81ea5 .config console log report syz C ci-android-49-kasan-gce
2019/02/12 10:43 https://android.googlesource.com/kernel/common android-4.9 1597fdfe52ba 65a0d619 .config console log report syz C ci-android-49-kasan-gce-root
2018/11/27 16:16 https://android.googlesource.com/kernel/common android-4.9 f44ed2c9232d 4b6d14f2 .config console log report syz C ci-android-49-kasan-gce
2018/07/21 03:50 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 af255b09 .config console log report syz C ci-android-49-kasan-gce-root
2019/07/11 08:14 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 ff7bf04c .config console log report syz C ci-android-49-kasan-gce-386
2019/04/30 02:37 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 b617407b .config console log report syz C ci-android-49-kasan-gce-386
2019/03/11 05:15 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 12365b99 .config console log report syz C ci-android-49-kasan-gce-386
2018/09/23 23:54 https://android.googlesource.com/kernel/common android-4.9 1c57ba4f543b 28d9ac76 .config console log report syz C ci-android-49-kasan-gce-386
2018/12/14 07:22 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 fe7127be .config console log report syz ci-android-49-kasan-gce
2019/07/26 20:08 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 3e5d1beb .config console log report syz ci-android-49-kasan-gce-386
2019/10/14 22:51 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 05ad7292 .config console log report ci-android-49-kasan-gce
2019/09/27 17:48 https://android.googlesource.com/kernel/common android-4.9 7fe05eede1c8 d8074e0b .config console log report ci-android-49-kasan-gce-root
2019/09/04 20:31 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 040fda58 .config console log report ci-android-49-kasan-gce
2019/07/16 13:52 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 db842eb6 .config console log report ci-android-49-kasan-gce
2019/07/15 00:21 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 2bbe2f05 .config console log report ci-android-49-kasan-gce
2019/07/06 14:52 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 f62e1e85 .config console log report ci-android-49-kasan-gce
2019/07/03 12:52 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 55565fa0 .config console log report ci-android-49-kasan-gce
2019/05/11 02:35 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 46caad94 .config console log report ci-android-49-kasan-gce
2019/05/04 03:57 https://android.googlesource.com/kernel/common android-4.9 2dbf78bcd85b d28f4ce5 .config console log report ci-android-49-kasan-gce-root
2019/05/04 01:40 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 d28f4ce5 .config console log report ci-android-49-kasan-gce
2019/05/03 22:55 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 d28f4ce5 .config console log report ci-android-49-kasan-gce
2019/05/03 08:35 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 1bfa09b9 .config console log report ci-android-49-kasan-gce
2019/05/03 02:50 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 e9039493 .config console log report ci-android-49-kasan-gce
2019/05/03 00:21 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 e9039493 .config console log report ci-android-49-kasan-gce
2019/05/02 14:45 https://android.googlesource.com/kernel/common android-4.9 3383326b935d 7516d9fa .config console log report ci-android-49-kasan-gce-root
2019/05/01 22:42 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 7516d9fa .config console log report ci-android-49-kasan-gce
2019/05/01 17:14 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 618456b4 .config console log report ci-android-49-kasan-gce
2019/05/01 12:11 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 618456b4 .config console log report ci-android-49-kasan-gce
2019/04/30 11:56 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 20f16bef .config console log report ci-android-49-kasan-gce
2019/04/29 10:30 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 b617407b .config console log report ci-android-49-kasan-gce
2019/04/22 23:17 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 53199d6e .config console log report ci-android-49-kasan-gce
2019/04/11 14:14 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 e955ac50 .config console log report ci-android-49-kasan-gce
2019/04/10 22:13 https://android.googlesource.com/kernel/common android-4.9 286f971000f1 e955ac50 .config console log report ci-android-49-kasan-gce-root
2019/03/25 08:39 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 2c86e0a5 .config console log report ci-android-49-kasan-gce
2019/03/24 10:29 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 acbc5b7d .config console log report ci-android-49-kasan-gce
2019/03/22 01:09 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 dce6e62f .config console log report ci-android-49-kasan-gce
2019/03/16 07:14 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 bab43553 .config console log report ci-android-49-kasan-gce
2019/03/12 16:34 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 a71bfb62 .config console log report ci-android-49-kasan-gce
2019/03/08 23:11 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 12365b99 .config console log report ci-android-49-kasan-gce
2019/01/25 02:31 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 bfab9cd8 .config console log report ci-android-49-kasan-gce
2019/01/14 09:52 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 95485883 .config console log report ci-android-49-kasan-gce
2018/12/24 19:14 https://android.googlesource.com/kernel/common android-4.9 a2f9236e8131 8a41a0ad .config console log report ci-android-49-kasan-gce-root
2018/12/11 06:04 https://android.googlesource.com/kernel/common android-4.9 3cb8c941dfc0 4093e33b .config console log report ci-android-49-kasan-gce-root
2018/12/06 13:08 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 3ab38479 .config console log report ci-android-49-kasan-gce
2018/11/30 00:01 https://android.googlesource.com/kernel/common android-4.9 4dcb0afde6f4 66071e27 .config console log report ci-android-49-kasan-gce-root
2018/11/26 11:36 https://android.googlesource.com/kernel/common android-4.9 f44ed2c9232d ac912200 .config console log report ci-android-49-kasan-gce-root
2018/11/25 21:28 https://android.googlesource.com/kernel/common android-4.9 f44ed2c9232d 3d3ec907 .config console log report ci-android-49-kasan-gce-root
2018/10/27 01:18 https://android.googlesource.com/kernel/common android-4.9 322089173588 a8292de9 .config console log report ci-android-49-kasan-gce
2018/10/16 23:25 https://android.googlesource.com/kernel/common android-4.9 a144472d407b 1ba7fd7e .config console log report ci-android-49-kasan-gce
2018/10/14 18:14 https://android.googlesource.com/kernel/common android-4.9 d589c0d40671 caf12900 .config console log report ci-android-49-kasan-gce
2018/10/13 03:36 https://android.googlesource.com/kernel/common android-4.9 38f2b4a8c277 caf12900 .config console log report ci-android-49-kasan-gce
2018/06/13 03:29 https://android.googlesource.com/kernel/common android-4.9 db2c520bb56b 6dcbc435 .config console log report ci-android-49-kasan-gce-root
2019/05/27 16:40 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 562efd79 .config console log report ci-android-49-kasan-gce-386
2019/03/28 07:38 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 f94f56fe .config console log report ci-android-49-kasan-gce-386
2019/03/02 10:38 https://android.googlesource.com/kernel/common android-4.9 8fe428403e30 1c0e457a .config console log report ci-android-49-kasan-gce-386
* Struck through repros no longer work on HEAD.