syzbot


INFO: task hung in dump_header (2)

Status: auto-closed as invalid on 2022/05/17 01:18
Reported-by: syzbot+8702669ee3b49467f32a@syzkaller.appspotmail.com
First crash: 855d, last: 830d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-414 INFO: task hung in dump_header 1 1958d 1839d 0/1 auto-closed as invalid on 2019/06/13 23:57
linux-4.19 INFO: task hung in dump_header 1 1594d 1594d 0/1 auto-closed as invalid on 2020/04/12 06:53
upstream INFO: task hung in dump_header mm 1 1916d 1916d 0/26 auto-closed as invalid on 2019/07/25 03:27

Sample crash report:
0 pages cma reserved
Out of memory (oom_kill_allocating_task): Kill process 26215 (syz-executor.3) score 0 or sacrifice child
Killed process 27957 (syz-executor.3) total-vm:57068kB, anon-rss:2488kB, file-rss:14080kB, shmem-rss:0kB
syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0
INFO: task kworker/0:1:14 blocked for more than 140 seconds.
      Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.3 cpuset=/ mems_allowed=0-1
kworker/0:1     D25736    14      2 0x80000000
CPU: 1 PID: 25097 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
Workqueue: events proc_cleanup_work
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 dump_header+0x15d/0xc3f mm/oom_kill.c:443
Call Trace:
 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 out_of_memory mm/oom_kill.c:1114 [inline]
 out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline]
 __alloc_pages_slowpath mm/page_alloc.c:4255 [inline]
 __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419
 __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:589 [inline]
 rwsem_down_write_failed+0x3aa/0x760 kernel/locking/rwsem-xadd.c:618
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
 __do_cache_alloc mm/slab.c:3361 [inline]
 slab_alloc mm/slab.c:3389 [inline]
 kmem_cache_alloc+0x1e4/0x370 mm/slab.c:3557
 anon_vma_chain_alloc mm/rmap.c:129 [inline]
 anon_vma_clone+0x32d/0x5e0 mm/rmap.c:273
 call_rwsem_down_write_failed+0x13/0x20 arch/x86/lib/rwsem.S:117
 anon_vma_fork+0x82/0x630 mm/rmap.c:332
 __down_write arch/x86/include/asm/rwsem.h:142 [inline]
 down_write+0x4f/0x90 kernel/locking/rwsem.c:72
 unregister_memcg_shrinker mm/vmscan.c:221 [inline]
 unregister_shrinker+0x24d/0x300 mm/vmscan.c:436
 dup_mmap kernel/fork.c:504 [inline]
 dup_mm kernel/fork.c:1285 [inline]
 copy_mm kernel/fork.c:1341 [inline]
 copy_process.part.0+0x360f/0x8260 kernel/fork.c:1913
 deactivate_locked_super+0x6c/0x160 fs/super.c:328
 deactivate_super+0x174/0x1a0 fs/super.c:360
 copy_process kernel/fork.c:1710 [inline]
 _do_fork+0x22f/0xf30 kernel/fork.c:2219
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 cleanup_mnt+0x1a8/0x290 fs/namespace.c:1098
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
 mntput_no_expire+0x7be/0xa30 fs/namespace.c:1177
RIP: 0033:0x7fc0450f0fe9
 mntput fs/namespace.c:1187 [inline]
 kern_unmount fs/namespace.c:3296 [inline]
 kern_unmount+0xb5/0xe0 fs/namespace.c:3290
Code: Bad RIP value.
 process_one_work+0x864/0x1570 kernel/workqueue.c:2153
RSP: 002b:00007fc043a45118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007fc045204030 RCX: 00007fc0450f0fe9
RDX: 00000000200001c0 RSI: 00000000200013c0 RDI: 0000000020000000
RBP: 00007fc04514b08d R08: 00000000200002c0 R09: 00000000200002c0
R10: 0000000020000280 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffc84bf7f0f R14: 00007fc043a45300 R15: 0000000000022000
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
Mem-Info:
active_anon:1147077 inactive_anon:4981 isolated_anon:0
 active_file:18 inactive_file:31 isolated_file:39
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:27233 slab_unreclaimable:214820
 mapped:12691 shmem:7678 pagetables:105440 bounce:0
 free:24962 free_pcp:216 free_cma:0
Node 0 active_anon:1693228kB inactive_anon:19900kB active_file:72kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:50764kB dirty:0kB writeback:0kB shmem:30688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Node 1 active_anon:2895080kB inactive_anon:24kB active_file:0kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):140kB mapped:0kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
INFO: task kworker/1:0:19 blocked for more than 140 seconds.
      Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/1:0     D25120    19      2 0x80000000
Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:4860kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
Workqueue: events proc_cleanup_work
lowmem_reserve[]: 0 2693 2695 2695 2695
Node 0 DMA32 free:35080kB min:35996kB low:44992kB high:53988kB active_anon:1688368kB inactive_anon:19900kB active_file:68kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:55872kB pagetables:118412kB bounce:0kB free_pcp:464kB local_pcp:204kB free_cma:0kB
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
lowmem_reserve[]: 0 0 1 1 1
Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:589 [inline]
 rwsem_down_write_failed+0x3aa/0x760 kernel/locking/rwsem-xadd.c:618
lowmem_reserve[]: 0 0 0 0 0
 call_rwsem_down_write_failed+0x13/0x20 arch/x86/lib/rwsem.S:117
Node 1 Normal free:53792kB min:53876kB low:67344kB high:80812kB active_anon:2895080kB inactive_anon:24kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:259392kB pagetables:303328kB bounce:0kB free_pcp:348kB local_pcp:248kB free_cma:0kB
 __down_write arch/x86/include/asm/rwsem.h:142 [inline]
 down_write+0x4f/0x90 kernel/locking/rwsem.c:72
 unregister_memcg_shrinker mm/vmscan.c:221 [inline]
 unregister_shrinker+0x24d/0x300 mm/vmscan.c:436
 deactivate_locked_super+0x6c/0x160 fs/super.c:328
 deactivate_super+0x174/0x1a0 fs/super.c:360
lowmem_reserve[]: 0 0 0 0 0
Node 0 DMA: 2*4kB (UM) 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 1*2048kB (E) 1*4096kB (M) = 10968kB
 cleanup_mnt+0x1a8/0x290 fs/namespace.c:1098
 mntput_no_expire+0x7be/0xa30 fs/namespace.c:1177
 mntput fs/namespace.c:1187 [inline]
 kern_unmount fs/namespace.c:3296 [inline]
 kern_unmount+0xb5/0xe0 fs/namespace.c:3290
 process_one_work+0x864/0x1570 kernel/workqueue.c:2153
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
Node 0 DMA32: 446*4kB (UME) 45*8kB (ME) 342*16kB (UME) 290*32kB (UME) 133*64kB (UME) 51*128kB (UME) 12*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35008kB
Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
INFO: task kworker/1:2:3646 blocked for more than 140 seconds.
Node 1 Normal: 44*4kB (UM) 22*8kB (ME) 11*16kB (ME) 17*32kB (UME) 9*64kB (UME) 6*128kB (M) 3*256kB (ME) 5*512kB (UME) 7*1024kB (UME) 2*2048kB (UM) 9*4096kB (M) = 53872kB
      Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/1:2     D25752  3646      2 0x80000000
Workqueue: events proc_cleanup_work
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:589 [inline]
 rwsem_down_write_failed+0x3aa/0x760 kernel/locking/rwsem-xadd.c:618
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
7728 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
 call_rwsem_down_write_failed+0x13/0x20 arch/x86/lib/rwsem.S:117
 __down_write arch/x86/include/asm/rwsem.h:142 [inline]
 down_write+0x4f/0x90 kernel/locking/rwsem.c:72
2097051 pages RAM
0 pages HighMem/MovableOnly
 unregister_memcg_shrinker mm/vmscan.c:221 [inline]
 unregister_shrinker+0x24d/0x300 mm/vmscan.c:436
369649 pages reserved
 deactivate_locked_super+0x6c/0x160 fs/super.c:328
 deactivate_super+0x174/0x1a0 fs/super.c:360
0 pages cma reserved
Out of memory (oom_kill_allocating_task): Kill process 25097 (syz-executor.3) score 0 or sacrifice child
 cleanup_mnt+0x1a8/0x290 fs/namespace.c:1098
Killed process 25268 (syz-executor.3) total-vm:57068kB, anon-rss:2488kB, file-rss:14080kB, shmem-rss:0kB
 mntput_no_expire+0x7be/0xa30 fs/namespace.c:1177
 mntput fs/namespace.c:1187 [inline]
 kern_unmount fs/namespace.c:3296 [inline]
 kern_unmount+0xb5/0xe0 fs/namespace.c:3290
 process_one_work+0x864/0x1570 kernel/workqueue.c:2153
syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0
syz-executor.3 cpuset=/ mems_allowed=0-1
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
CPU: 0 PID: 30007 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
 kthread+0x33f/0x460 kernel/kthread.c:259
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 dump_header+0x15d/0xc3f mm/oom_kill.c:443
 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956
 out_of_memory mm/oom_kill.c:1114 [inline]
 out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064
 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline]
 __alloc_pages_slowpath mm/page_alloc.c:4255 [inline]
 __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
 slab_alloc_node mm/slab.c:3332 [inline]
 kmem_cache_alloc_node+0xe3/0x3b0 mm/slab.c:3647
 alloc_task_struct_node kernel/fork.c:157 [inline]
 dup_task_struct kernel/fork.c:807 [inline]
 copy_process.part.0+0x1ceb/0x8260 kernel/fork.c:1753
 copy_process kernel/fork.c:1710 [inline]
 _do_fork+0x22f/0xf30 kernel/fork.c:2219
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fc0450f0fe9
Code: Bad RIP value.
RSP: 002b:00007fc043a45118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007fc045204030 RCX: 00007fc0450f0fe9
RDX: 00000000200001c0 RSI: 00000000200013c0 RDI: 0000000020000000
RBP: 00007fc04514b08d R08: 00000000200002c0 R09: 00000000200002c0
R10: 0000000020000280 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffc84bf7f0f R14: 00007fc043a45300 R15: 0000000000022000
Mem-Info:
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
oom_reaper: reaped process 25268 (syz-executor.3), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB
INFO: task kworker/0:2:4385 blocked for more than 140 seconds.
      Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/0:2     D26208  4385      2 0x80000000
Workqueue: events proc_cleanup_work
active_anon:1146564 inactive_anon:4981 isolated_anon:0
 active_file:9 inactive_file:22 isolated_file:39
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:27233 slab_unreclaimable:214995
 mapped:12691 shmem:7678 pagetables:105560 bounce:0
 free:25159 free_pcp:287 free_cma:0
Node 0 active_anon:1691176kB inactive_anon:19900kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:50764kB dirty:0kB writeback:0kB shmem:30688kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 892928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
Node 1 active_anon:2895080kB inactive_anon:24kB active_file:0kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):140kB mapped:0kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:4860kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 2693 2695 2695 2695
Node 0 DMA32 free:35944kB min:35996kB low:44992kB high:53988kB active_anon:1686316kB inactive_anon:19900kB active_file:68kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:55872kB pagetables:118892kB bounce:0kB free_pcp:588kB local_pcp:120kB free_cma:0kB
lowmem_reserve[]: 0 0 1 1 1
Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 1 Normal free:53716kB min:53876kB low:67344kB high:80812kB active_anon:2895080kB inactive_anon:24kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:259360kB pagetables:303328kB bounce:0kB free_pcp:560kB local_pcp:312kB free_cma:0kB
lowmem_reserve[]: 0 0 0 0 0
Node 0 DMA: 2*4kB (UM) 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 1*2048kB (E) 1*4096kB (M) = 10968kB
Node 0 DMA32: 446*4kB (UM) 44*8kB (M) 323*16kB (UM) 265*32kB (UME) 133*64kB (UME) 51*128kB (UME) 12*256kB (UM) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 35944kB
Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
Node 1 Normal: 43*4kB (M) 23*8kB (ME) 11*16kB (ME) 13*32kB (UME) 9*64kB (UME) 6*128kB (M) 3*256kB (ME) 5*512kB (UME) 7*1024kB (UME) 2*2048kB (UM) 9*4096kB (M) = 53748kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
7728 total pagecache pages
0 pages in swap cache
Swap cache stats: add 0, delete 0, find 0/0
Free swap  = 0kB
Total swap = 0kB
2097051 pages RAM
0 pages HighMem/MovableOnly
369649 pages reserved
0 pages cma reserved
Out of memory (oom_kill_allocating_task): Kill process 30007 (syz-executor.3) score 0 or sacrifice child
Killed process 30356 (syz-executor.3) total-vm:57068kB, anon-rss:2488kB, file-rss:14088kB, shmem-rss:0kB
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:589 [inline]
 rwsem_down_write_failed+0x3aa/0x760 kernel/locking/rwsem-xadd.c:618
 call_rwsem_down_write_failed+0x13/0x20 arch/x86/lib/rwsem.S:117
 __down_write arch/x86/include/asm/rwsem.h:142 [inline]
 down_write+0x4f/0x90 kernel/locking/rwsem.c:72
 unregister_memcg_shrinker mm/vmscan.c:221 [inline]
 unregister_shrinker+0x24d/0x300 mm/vmscan.c:436
 deactivate_locked_super+0x6c/0x160 fs/super.c:328
 deactivate_super+0x174/0x1a0 fs/super.c:360
 cleanup_mnt+0x1a8/0x290 fs/namespace.c:1098
 mntput_no_expire+0x7be/0xa30 fs/namespace.c:1177
 mntput fs/namespace.c:1187 [inline]
 kern_unmount fs/namespace.c:3296 [inline]
 kern_unmount+0xb5/0xe0 fs/namespace.c:3290
 process_one_work+0x864/0x1570 kernel/workqueue.c:2153
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
INFO: task kworker/1:3:9345 blocked for more than 140 seconds.
      Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/1:3     D26800  9345      2 0x80000000
Workqueue: events proc_cleanup_work
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:589 [inline]
 rwsem_down_write_failed+0x3aa/0x760 kernel/locking/rwsem-xadd.c:618
 call_rwsem_down_write_failed+0x13/0x20 arch/x86/lib/rwsem.S:117
 __down_write arch/x86/include/asm/rwsem.h:142 [inline]
 down_write+0x4f/0x90 kernel/locking/rwsem.c:72
 unregister_memcg_shrinker mm/vmscan.c:221 [inline]
 unregister_shrinker+0x24d/0x300 mm/vmscan.c:436
 deactivate_locked_super+0x6c/0x160 fs/super.c:328
 deactivate_super+0x174/0x1a0 fs/super.c:360
 cleanup_mnt+0x1a8/0x290 fs/namespace.c:1098
 mntput_no_expire+0x7be/0xa30 fs/namespace.c:1177
 mntput fs/namespace.c:1187 [inline]
 kern_unmount fs/namespace.c:3296 [inline]
 kern_unmount+0xb5/0xe0 fs/namespace.c:3290
 process_one_work+0x864/0x1570 kernel/workqueue.c:2153
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
INFO: task kworker/0:4:9348 blocked for more than 140 seconds.
      Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/0:4     D27096  9348      2 0x80000000
Workqueue: events proc_cleanup_work
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:589 [inline]
 rwsem_down_write_failed+0x3aa/0x760 kernel/locking/rwsem-xadd.c:618
 call_rwsem_down_write_failed+0x13/0x20 arch/x86/lib/rwsem.S:117
 __down_write arch/x86/include/asm/rwsem.h:142 [inline]
 down_write+0x4f/0x90 kernel/locking/rwsem.c:72
syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0
 unregister_memcg_shrinker mm/vmscan.c:221 [inline]
 unregister_shrinker+0x24d/0x300 mm/vmscan.c:436
 deactivate_locked_super+0x6c/0x160 fs/super.c:328
 deactivate_super+0x174/0x1a0 fs/super.c:360
syz-executor.3 cpuset=/ mems_allowed=0-1
 cleanup_mnt+0x1a8/0x290 fs/namespace.c:1098
 mntput_no_expire+0x7be/0xa30 fs/namespace.c:1177
CPU: 0 PID: 28012 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 mntput fs/namespace.c:1187 [inline]
 kern_unmount fs/namespace.c:3296 [inline]
 kern_unmount+0xb5/0xe0 fs/namespace.c:3290
Call Trace:
 process_one_work+0x864/0x1570 kernel/workqueue.c:2153
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 dump_header+0x15d/0xc3f mm/oom_kill.c:443
 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956
 out_of_memory mm/oom_kill.c:1114 [inline]
 out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064
 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline]
 __alloc_pages_slowpath mm/page_alloc.c:4255 [inline]
 __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419
 __alloc_pages include/linux/gfp.h:496 [inline]
 __alloc_pages_node include/linux/gfp.h:509 [inline]
 kmem_getpages mm/slab.c:1412 [inline]
 cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682
 fallback_alloc+0x213/0x2e0 mm/slab.c:3224
 __do_cache_alloc mm/slab.c:3361 [inline]
 slab_alloc mm/slab.c:3389 [inline]
 kmem_cache_alloc+0x1e4/0x370 mm/slab.c:3557
 anon_vma_chain_alloc mm/rmap.c:129 [inline]
 anon_vma_clone+0x32d/0x5e0 mm/rmap.c:273
 anon_vma_fork+0x82/0x630 mm/rmap.c:332
 dup_mmap kernel/fork.c:504 [inline]
 dup_mm kernel/fork.c:1285 [inline]
 copy_mm kernel/fork.c:1341 [inline]
 copy_process.part.0+0x360f/0x8260 kernel/fork.c:1913
 copy_process kernel/fork.c:1710 [inline]
 _do_fork+0x22f/0xf30 kernel/fork.c:2219
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fc0450f0fe9
Code: Bad RIP value.
RSP: 002b:00007fc043a45118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007fc045204030 RCX: 00007fc0450f0fe9
RDX: 00000000200001c0 RSI: 00000000200013c0 RDI: 0000000020000000
RBP: 00007fc04514b08d R08: 00000000200002c0 R09: 00000000200002c0
R10: 0000000020000280 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffc84bf7f0f R14: 00007fc043a45300 R15: 0000000000022000
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
INFO: task kworker/1:1:7472 blocked for more than 140 seconds.
      Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/1:1     D29528  7472      2 0x80000000
Workqueue: events proc_cleanup_work
Call Trace:
Mem-Info:
active_anon:1146039 inactive_anon:4981 isolated_anon:0
 active_file:3 inactive_file:50 isolated_file:39
 unevictable:0 dirty:0 writeback:0 unstable:0
 slab_reclaimable:27233 slab_unreclaimable:214570
 mapped:12691 shmem:7678 pagetables:106007 bounce:0
 free:25447 free_pcp:217 free_cma:0
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:589 [inline]
 rwsem_down_write_failed+0x3aa/0x760 kernel/locking/rwsem-xadd.c:618

Crashes (4):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/01/17 01:17 linux-4.19.y 3f8a27f9e27b 723cfaf0 .config console log report info ci2-linux-4-19 INFO: task hung in dump_header
2022/01/14 22:34 linux-4.19.y 3f8a27f9e27b 53e00b45 .config console log report info ci2-linux-4-19 INFO: task hung in dump_header
2021/12/27 01:11 linux-4.19.y 3f8a27f9e27b e4f103c4 .config console log report info ci2-linux-4-19 INFO: task hung in dump_header
2021/12/23 03:01 linux-4.19.y 3f8a27f9e27b 6caa12e4 .config console log report info ci2-linux-4-19 INFO: task hung in dump_header
* Struck through repros no longer work on HEAD.