syzbot

 sign-in | mailing list | source | docs
🐞 Open [987] ≡ Subsystems 🐞 Fixed [5236] 🐞 Invalid [12505] ⬇ Missing Backports [83] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

INFO: task hung in blkdev_put (3)

Status: auto-closed as invalid on 2020/06/25 13:28
Subsystems: fs
[Documentation on labels]
First crash: 1459d, last: 1459d
▶ ▼ Similar bugs (14)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 INFO: task hung in blkdev_put (2) 3 1622d 1642d 0/3 auto-closed as invalid on 2020/03/14 12:22
linux-4.19 INFO: task hung in blkdev_put C error 31 606d 1371d 0/1 upstream: reported C repro on 2020/07/23 21:33
upstream INFO: task hung in blkdev_put udf 320 1901d 2327d 0/26 closed as dup on 2018/11/11 08:29
linux-4.14 INFO: task hung in blkdev_put 2 1685d 1834d 0/1 auto-closed as invalid on 2020/01/12 01:56
linux-5.15 INFO: task hung in blkdev_put origin:upstream C error 4 31d 307d 0/3 upstream: reported C repro on 2023/06/23 01:15
linux-4.14 INFO: task hung in blkdev_put (3) C error 16 555d 1333d 0/1 upstream: reported C repro on 2020/08/30 21:52
upstream INFO: task hung in blkdev_put (4) block C done 486 43d 1299d 0/26 upstream: reported C repro on 2020/10/03 13:09
android-49 INFO: task hung in blkdev_put 220 1821d 1838d 0/3 auto-closed as invalid on 2019/10/25 08:47
linux-4.14 INFO: task hung in blkdev_put (2) 2 1488d 1526d 0/1 auto-closed as invalid on 2020/07/26 14:38
android-414 INFO: task hung in blkdev_put 119 1607d 1839d 0/1 auto-closed as invalid on 2020/03/30 04:06
android-44 INFO: task hung in blkdev_put 26 1907d 1838d 0/2 auto-closed as invalid on 2019/08/03 02:42
android-44 INFO: task hung in blkdev_put (2) 3 1618d 1695d 0/2 auto-closed as invalid on 2020/03/18 19:27
linux-6.1 INFO: task hung in blkdev_put origin:upstream C 89 2d16h 366d 0/3 upstream: reported C repro on 2023/04/25 09:01
upstream INFO: task hung in blkdev_put (2) fs 2 1614d 1660d 0/26 auto-closed as invalid on 2020/02/22 04:07

Sample crash report:
INFO: task syz-executor.1:9622 can't die for more than 143 seconds.
syz-executor.1  D28360  9622   7341 0x00004006
Call Trace:
 schedule+0xd0/0x2a0 kernel/sched/core.c:4163
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:4222
 __mutex_lock_common kernel/locking/mutex.c:1033 [inline]
 __mutex_lock+0x7ab/0x13c0 kernel/locking/mutex.c:1103
 blkdev_put+0x30/0x520 fs/block_dev.c:1929
 blkdev_close+0x8c/0xb0 fs/block_dev.c:1978
 __fput+0x33e/0x880 fs/file_table.c:280
 task_work_run+0xf4/0x1b0 kernel/task_work.c:123
 get_signal+0x2058/0x24e0 kernel/signal.c:2529
 do_signal+0x81/0x2240 arch/x86/kernel/signal.c:784
 exit_to_usermode_loop+0x26c/0x360 arch/x86/entry/common.c:161
 prepare_exit_to_usermode arch/x86/entry/common.c:196 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:279 [inline]
 do_syscall_64+0x6b1/0x7d0 arch/x86/entry/common.c:305
 entry_SYSCALL_64_after_hwframe+0x49/0xb3
RIP: 0033:0x45c829
Code: Bad RIP value.
RSP: 002b:00007fc1c2dc2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: fffffffffffffe00 RBX: 00000000004e8b80 RCX: 000000000045c829
RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003
RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000403 R14: 00000000004c69fa R15: 00007fc1c2dc36d4
INFO: task syz-executor.1:9622 blocked for more than 143 seconds.
      Not tainted 5.7.0-rc1-next-20200415-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.1  D28360  9622   7341 0x00004006
Call Trace:
 schedule+0xd0/0x2a0 kernel/sched/core.c:4163
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:4222
 __mutex_lock_common kernel/locking/mutex.c:1033 [inline]
 __mutex_lock+0x7ab/0x13c0 kernel/locking/mutex.c:1103
 blkdev_put+0x30/0x520 fs/block_dev.c:1929
 blkdev_close+0x8c/0xb0 fs/block_dev.c:1978
 __fput+0x33e/0x880 fs/file_table.c:280
 task_work_run+0xf4/0x1b0 kernel/task_work.c:123
 get_signal+0x2058/0x24e0 kernel/signal.c:2529
 do_signal+0x81/0x2240 arch/x86/kernel/signal.c:784
 exit_to_usermode_loop+0x26c/0x360 arch/x86/entry/common.c:161
 prepare_exit_to_usermode arch/x86/entry/common.c:196 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:279 [inline]
 do_syscall_64+0x6b1/0x7d0 arch/x86/entry/common.c:305
 entry_SYSCALL_64_after_hwframe+0x49/0xb3
RIP: 0033:0x45c829
Code: Bad RIP value.
RSP: 002b:00007fc1c2dc2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: fffffffffffffe00 RBX: 00000000004e8b80 RCX: 000000000045c829
RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003
RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 0000000000000403 R14: 00000000004c69fa R15: 00007fc1c2dc36d4
INFO: task systemd-udevd:9639 blocked for more than 143 seconds.
      Not tainted 5.7.0-rc1-next-20200415-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
systemd-udevd   D26160  9639   4263 0x00004100
Call Trace:
 schedule+0xd0/0x2a0 kernel/sched/core.c:4163
 io_schedule+0x17/0x60 kernel/sched/core.c:5806
 wait_on_page_bit_common+0x351/0xdb0 mm/filemap.c:1153
 wait_on_page_bit mm/filemap.c:1202 [inline]
 wait_on_page_locked include/linux/pagemap.h:528 [inline]
 wait_on_page_read mm/filemap.c:2738 [inline]
 do_read_cache_page+0xf95/0x1810 mm/filemap.c:2781
 read_mapping_page include/linux/pagemap.h:397 [inline]
 read_part_sector+0xf6/0x600 block/partitions/core.c:643
 adfspart_check_ICS+0x9d/0xc80 block/partitions/acorn.c:360
 check_partition block/partitions/core.c:140 [inline]
 blk_add_partitions+0x474/0xe50 block/partitions/core.c:571
 bdev_disk_changed+0x1fb/0x380 fs/block_dev.c:1544
 __blkdev_get+0x130c/0x1530 fs/block_dev.c:1682
 blkdev_get+0x41/0x2b0 fs/block_dev.c:1749
 blkdev_open+0x21d/0x2b0 fs/block_dev.c:1888
 do_dentry_open+0x4b6/0x12a0 fs/open.c:797
 do_open fs/namei.c:3229 [inline]
 path_openat+0x1e70/0x27f0 fs/namei.c:3346
 do_filp_open+0x192/0x260 fs/namei.c:3373
 do_sys_openat2+0x585/0x7d0 fs/open.c:1148
 do_sys_open+0xc3/0x140 fs/open.c:1164
 do_syscall_64+0xf6/0x7d0 arch/x86/entry/common.c:295
 entry_SYSCALL_64_after_hwframe+0x49/0xb3
RIP: 0033:0x7f0d7b55f840
Code: Bad RIP value.
RSP: 002b:00007ffc62ff4d58 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 000055c660d2e8d0 RCX: 00007f0d7b55f840
RDX: 000055c660048fe3 RSI: 00000000000a0800 RDI: 000055c660d281f0
RBP: 00007ffc62ff4ed0 R08: 000055c660048670 R09: 0000000000000010
R10: 000055c660048d0c R11: 0000000000000246 R12: 00007ffc62ff4e20
R13: 000055c660d27dc0 R14: 0000000000000003 R15: 000000000000000e

Showing all locks held in the system:
3 locks held by kworker/0:0/5:
 #0: ffff8880ae6379d8 (&rq->lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1262 [inline]
 #0: ffff8880ae6379d8 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x233/0x1ff0 kernel/sched/core.c:4034
 #1: ffff8880ae622ec8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x304/0x410 kernel/sched/psi.c:817
 #2: ffffffff899beea0 (rcu_callback){....}-{0:0}, at: debug_rcu_head_unqueue_bulk kernel/rcu/tree.c:2822 [inline]
 #2: ffffffff899beea0 (rcu_callback){....}-{0:0}, at: kfree_rcu_work+0x160/0x480 kernel/rcu/tree.c:2853
3 locks held by kworker/u4:4/268:
 #0: ffff8880ae6379d8 (&rq->lock){-.-.}-{2:2}, at: newidle_balance+0x9be/0xdb0 kernel/sched/fair.c:10512
 #1: ffffffff899befc0 (rcu_read_lock){....}-{1:2}, at: __update_idle_core+0x42/0x3e0 kernel/sched/fair.c:5969
 #2: ffff8880a8029298 (key#16){+...}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:358 [inline]
 #2: ffff8880a8029298 (key#16){+...}-{2:2}, at: batadv_nc_purge_paths+0xdf/0x380 net/batman-adv/network-coding.c:441
1 lock held by khungtaskd/1169:
 #0: ffffffff899befc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:5754
1 lock held by in:imklog/6866:
 #0: ffff8880a6cc9370 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:826
1 lock held by syz-executor.1/9622:
 #0: ffff88808a618980 (&bdev->bd_mutex){+.+.}-{3:3}, at: blkdev_put+0x30/0x520 fs/block_dev.c:1929
1 lock held by systemd-udevd/9639:
 #0: ffff88808a618980 (&bdev->bd_mutex){+.+.}-{3:3}, at: __blkdev_get+0x179/0x1530 fs/block_dev.c:1601

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 1169 Comm: khungtaskd Not tainted 5.7.0-rc1-next-20200415-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x188/0x20d lib/dump_stack.c:118
 nmi_cpu_backtrace.cold+0x70/0xb1 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x231/0x27e lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:147 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:249 [inline]
 watchdog+0xde3/0x14e0 kernel/hung_task.c:333
 kthread+0x388/0x470 kernel/kthread.c:268
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:60

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/04/26 13:27 linux-next ac935d227366 99b258dd .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.