syzbot


INFO: task hung in __access_remote_vm

Status: closed as invalid on 2019/05/08 13:05
Subsystems: fs
[Documentation on labels]
First crash: 1836d, last: 1836d

Sample crash report:
INFO: task ps:4169 blocked for more than 143 seconds.
      Not tainted 5.1.0-rc7+ #95
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
ps              D26896  4169   4166 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2877 [inline]
 __schedule+0x813/0x1cc0 kernel/sched/core.c:3518
 schedule+0x92/0x180 kernel/sched/core.c:3562
 __rwsem_down_read_failed_common kernel/locking/rwsem-xadd.c:285 [inline]
 rwsem_down_read_failed+0x213/0x420 kernel/locking/rwsem-xadd.c:302
 call_rwsem_down_read_failed+0x18/0x30 arch/x86/lib/rwsem.S:94
 __down_read arch/x86/include/asm/rwsem.h:83 [inline]
 down_read+0x49/0x90 kernel/locking/rwsem.c:26
 __access_remote_vm+0xc8/0x400 mm/memory.c:4263
 access_remote_vm+0x36/0x50 mm/memory.c:4332
 get_mm_cmdline fs/proc/base.c:274 [inline]
 get_task_cmdline fs/proc/base.c:332 [inline]
 proc_pid_cmdline_read+0x3ef/0x7b0 fs/proc/base.c:348
 __vfs_read+0x8d/0x110 fs/read_write.c:416
 vfs_read+0x194/0x3e0 fs/read_write.c:452
 ksys_read+0x14f/0x2d0 fs/read_write.c:579
 __do_sys_read fs/read_write.c:589 [inline]
 __se_sys_read fs/read_write.c:587 [inline]
 __x64_sys_read+0x73/0xb0 fs/read_write.c:587
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fe56ef3b310
Code: Bad RIP value.
RSP: 002b:00007ffc5cb56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007fe56f5f0010 RCX: 00007fe56ef3b310
RDX: 0000000000020000 RSI: 00007fe56f5f0010 RDI: 0000000000000006
RBP: 0000000000020000 R08: 0000000000000000 R09: 00007fe56f20355f
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000006 R14: 00007fe56f5f0010 R15: 0000000000000000
INFO: task ps:4173 blocked for more than 144 seconds.
      Not tainted 5.1.0-rc7+ #95
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
ps              D28216  4173   4172 0x00000000
Call Trace:
 context_switch kernel/sched/core.c:2877 [inline]
 __schedule+0x813/0x1cc0 kernel/sched/core.c:3518
 schedule+0x92/0x180 kernel/sched/core.c:3562
 __rwsem_down_read_failed_common kernel/locking/rwsem-xadd.c:285 [inline]
 rwsem_down_read_failed+0x213/0x420 kernel/locking/rwsem-xadd.c:302
 call_rwsem_down_read_failed+0x18/0x30 arch/x86/lib/rwsem.S:94
 __down_read arch/x86/include/asm/rwsem.h:83 [inline]
 down_read+0x49/0x90 kernel/locking/rwsem.c:26
 __access_remote_vm+0xc8/0x400 mm/memory.c:4263
 access_remote_vm+0x36/0x50 mm/memory.c:4332
 get_mm_cmdline fs/proc/base.c:274 [inline]
 get_task_cmdline fs/proc/base.c:332 [inline]
 proc_pid_cmdline_read+0x3ef/0x7b0 fs/proc/base.c:348
 __vfs_read+0x8d/0x110 fs/read_write.c:416
 vfs_read+0x194/0x3e0 fs/read_write.c:452
 ksys_read+0x14f/0x2d0 fs/read_write.c:579
 __do_sys_read fs/read_write.c:589 [inline]
 __se_sys_read fs/read_write.c:587 [inline]
 __x64_sys_read+0x73/0xb0 fs/read_write.c:587
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fb21f208310
Code: Bad RIP value.
RSP: 002b:00007ffffa0b55f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007fb21f8bd010 RCX: 00007fb21f208310
RDX: 0000000000020000 RSI: 00007fb21f8bd010 RDI: 0000000000000006
RBP: 0000000000020000 R08: 0000000000000000 R09: 00007fb21f4d055f
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000006 R14: 00007fb21f8bd010 R15: 0000000000000000

Showing all locks held in the system:
1 lock held by khungtaskd/1041:
 #0: 00000000b52a8226 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:5057
1 lock held by rsyslogd/7664:
 #0: 00000000e0fd7861 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 fs/file.c:801
2 locks held by getty/7754:
 #0: 0000000071158ef4 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 0000000048779a09 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156
2 locks held by getty/7755:
 #0: 00000000c79f5299 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 00000000691d4447 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156
2 locks held by getty/7756:
 #0: 00000000ae833bdd (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 00000000e4d236d7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156
2 locks held by getty/7757:
 #0: 0000000026e6844e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 00000000ea9f37f1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156
2 locks held by getty/7758:
 #0: 000000002047d71d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 000000001641d773 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156
2 locks held by getty/7759:
 #0: 000000002148329a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 0000000004bb6169 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156
2 locks held by getty/7760:
 #0: 00000000c1b4c89f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 00000000e8cb7d4d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156
1 lock held by syz-fuzzer/7781:
 #0: 00000000a7b960c1 (&mm->mmap_sem){++++}, at: vm_mmap_pgoff+0x173/0x230 mm/util.c:360
2 locks held by syz-fuzzer/7788:
1 lock held by ps/4169:
 #0: 00000000a7b960c1 (&mm->mmap_sem){++++}, at: __access_remote_vm+0xc8/0x400 mm/memory.c:4263
1 lock held by ps/4173:
 #0: 00000000a7b960c1 (&mm->mmap_sem){++++}, at: __access_remote_vm+0xc8/0x400 mm/memory.c:4263

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 1041 Comm: khungtaskd Not tainted 5.1.0-rc7+ #95
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 nmi_cpu_backtrace.cold+0x63/0xa4 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1be/0x236 lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:204 [inline]
 watchdog+0x9b7/0xec0 kernel/hung_task.c:288
 kthread+0x357/0x430 kernel/kthread.c:253
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Sending NMI from CPU 1 to CPUs 0:

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/05/01 08:46 upstream f2bc9c908dfe 618456b4 .config console log report ci-upstream-kasan-gce-smack-root
* Struck through repros no longer work on HEAD.