INFO: task hung in do

INFO: task hung in do_exit
Status: upstream: reported syz repro on 2019/04/13 07:08
Reported-by: syzbot+9880e421ec82313d6527@syzkaller.appspotmail.com
First crash: 1051d, last: 476d

Cause bisection: introduced by (bisect log) :
commit 430e48ecf31f4f897047f22e02abdfa75730cad8
Author: Amitoj Kaur Chawla <amitoj1606@gmail.com>
Date: Thu Aug 10 16:28:09 2017 +0000

leds: lm3533: constify attribute_group structure

Crash: INFO: task hung in khugepaged (log)
Repro: syz .config

Fix bisection: failed (bisect log)

duplicates (1):
Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
INFO: task hung in exit_mm	syz	done	error	5	318d	614d	0/21	closed as dup on 2021/01/21 05:51

similar bugs (4):
Kernel	Title	Repro	Fix bisect	Count	Last	Reported	Patched	Status
linux-4.14	INFO: task hung in do_exit	syz	inconclusive	7	210d	682d	0/1	upstream: reported syz repro on 2019/04/25 02:28
android-414	INFO: task hung in do_exit	syz		19	461d	694d	0/1	public: reported syz repro on 2019/04/13 00:01
linux-4.19	INFO: task hung in do_exit	C	error	8	183d	687d	0/1	upstream: reported C repro on 2019/04/19 20:32
android-49	INFO: task hung in do_exit	syz		18	508d	692d	0/3	public: reported syz repro on 2019/04/14 09:28

Sample crash report:

INFO: task syz-executor.0:11063 blocked for more than 143 seconds.
      Not tainted 5.3.0-rc4 #100
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.0  D28368 11063  11045 0x80004004
Call Trace:
 context_switch kernel/sched/core.c:3254 [inline]
 __schedule+0x755/0x1580 kernel/sched/core.c:3880
 schedule+0xa8/0x270 kernel/sched/core.c:3944
 rwsem_down_read_slowpath+0x4cc/0xfb0 kernel/locking/rwsem.c:1090
 __down_read kernel/locking/rwsem.c:1320 [inline]
 down_read+0x1f4/0x3f0 kernel/locking/rwsem.c:1463
 exit_mm kernel/exit.c:513 [inline]
 do_exit+0x47b/0x2e50 kernel/exit.c:866
 do_group_exit+0x135/0x360 kernel/exit.c:983
 get_signal+0x47c/0x2500 kernel/signal.c:2729
 do_signal+0x87/0x1700 arch/x86/kernel/signal.c:815
 exit_to_usermode_loop+0x286/0x380 arch/x86/entry/common.c:159
 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:274 [inline]
 do_syscall_64+0x5a9/0x6a0 arch/x86/entry/common.c:299
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45987a
Code: Bad RIP value.
RSP: 002b:00007fffd7c83bb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 000000000045987a
RDX: 0000000000000003 RSI: 0000000000021000 RDI: 0000000000000000
RBP: ffffffffffffffff R08: ffffffffffffffff R09: 0000000000000000
R10: 0000000000020022 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000021000 R14: 0000000000020022 R15: 0000000000000000
INFO: task syz-executor.0:11065 blocked for more than 143 seconds.
      Not tainted 5.3.0-rc4 #100
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.0  D28456 11065  11045 0x80004004
Call Trace:
 context_switch kernel/sched/core.c:3254 [inline]
 __schedule+0x755/0x1580 kernel/sched/core.c:3880
 schedule+0xa8/0x270 kernel/sched/core.c:3944
 rwsem_down_read_slowpath+0x4cc/0xfb0 kernel/locking/rwsem.c:1090
 __down_read kernel/locking/rwsem.c:1320 [inline]
 down_read+0x1f4/0x3f0 kernel/locking/rwsem.c:1463
 exit_mm kernel/exit.c:513 [inline]
 do_exit+0x47b/0x2e50 kernel/exit.c:866
 do_group_exit+0x135/0x360 kernel/exit.c:983
 get_signal+0x47c/0x2500 kernel/signal.c:2729
 do_signal+0x87/0x1700 arch/x86/kernel/signal.c:815
 exit_to_usermode_loop+0x286/0x380 arch/x86/entry/common.c:159
 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:274 [inline]
 do_syscall_64+0x5a9/0x6a0 arch/x86/entry/common.c:299
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x459829
Code: Bad RIP value.
RSP: 002b:00007f7ed80b1cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000075bf28 RCX: 0000000000459829
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bf28
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bf2c
R13: 00007fffd7c83c5f R14: 00007f7ed80b29c0 R15: 000000000075bf2c
INFO: task syz-executor.0:11067 blocked for more than 143 seconds.
      Not tainted 5.3.0-rc4 #100
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.0  D28968 11067  11045 0x80004004
Call Trace:
 context_switch kernel/sched/core.c:3254 [inline]
 __schedule+0x755/0x1580 kernel/sched/core.c:3880
 schedule+0xa8/0x270 kernel/sched/core.c:3944
 rwsem_down_read_slowpath+0x4cc/0xfb0 kernel/locking/rwsem.c:1090
 __down_read kernel/locking/rwsem.c:1320 [inline]
 down_read+0x1f4/0x3f0 kernel/locking/rwsem.c:1463
 acct_collect+0xf3/0x850 kernel/acct.c:542
 do_exit+0x1b56/0x2e50 kernel/exit.c:858
 do_group_exit+0x135/0x360 kernel/exit.c:983
 get_signal+0x47c/0x2500 kernel/signal.c:2729
 do_signal+0x87/0x1700 arch/x86/kernel/signal.c:815
 exit_to_usermode_loop+0x286/0x380 arch/x86/entry/common.c:159
 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:274 [inline]
 do_syscall_64+0x5a9/0x6a0 arch/x86/entry/common.c:299
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x459829
Code: Bad RIP value.
RSP: 002b:00007f7ed8090cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 000000000075bfd0 RCX: 0000000000459829
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000075bfd0
RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bfd4
R13: 00007fffd7c83c5f R14: 00007f7ed80919c0 R15: 000000000075bfd4
INFO: task syz-executor.0:11068 blocked for more than 144 seconds.
      Not tainted 5.3.0-rc4 #100
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.0  D29448 11068  11067 0x80000000
Call Trace:
 context_switch kernel/sched/core.c:3254 [inline]
 __schedule+0x755/0x1580 kernel/sched/core.c:3880
 schedule+0xa8/0x270 kernel/sched/core.c:3944
 rwsem_down_read_slowpath+0x4cc/0xfb0 kernel/locking/rwsem.c:1090
 __down_read kernel/locking/rwsem.c:1320 [inline]
 down_read+0x1f4/0x3f0 kernel/locking/rwsem.c:1463
 acct_collect+0xf3/0x850 kernel/acct.c:542
 do_exit+0x1b56/0x2e50 kernel/exit.c:858
 do_group_exit+0x135/0x360 kernel/exit.c:983
 __do_sys_exit_group kernel/exit.c:994 [inline]
 __se_sys_exit_group kernel/exit.c:992 [inline]
 __x64_sys_exit_group+0x44/0x50 kernel/exit.c:992
 do_syscall_64+0xfd/0x6a0 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x459829
Code: Bad RIP value.
RSP: 002b:00007f7ed8090688 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000459829
RDX: 0000000000459829 RSI: 00007f7ed80906c0 RDI: 000000000000000b
RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f7ed80916d4
R13: 00000000004bfce6 R14: 00000000004d1a38 R15: 00000000ffffffff
INFO: lockdep is turned off.
NMI backtrace for cpu 0
CPU: 0 PID: 1057 Comm: khungtaskd Not tainted 5.3.0-rc4 #100
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 nmi_cpu_backtrace.cold+0x70/0xb2 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x23b/0x28b lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:205 [inline]
 watchdog+0x9d0/0xef0 kernel/hung_task.c:289
 kthread+0x361/0x430 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 11066 Comm: syz-executor.0 Not tainted 5.3.0-rc4 #100
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:trace_lock_release include/trace/events/lock.h:58 [inline]
RIP: 0010:lock_release+0x60a/0x960 kernel/locking/lockdep.c:4430
Code: 8f fb ff ff 4c 89 ea 4c 89 e6 4c 89 ff e8 0e 6a ff ff e9 4c fe ff ff 65 ff 05 2a 42 a9 7e 48 8b 05 a3 1a 49 08 e8 56 38 06 00 <85> c0 74 0d 80 3d 17 c0 48 08 00 0f 84 8a 01 00 00 65 ff 0d 06 42
RSP: 0018:ffff888096d8f8f0 EFLAGS: 00000046
RAX: 0000000000000000 RBX: 1ffff11012db1f23 RCX: 1ffffffff134b48e
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff89a57278
RBP: ffff888096d8f9c0 R08: 1ffffffff134ae4f R09: fffffbfff134ae50
R10: fffffbfff134ae4f R11: ffffffff89a5727f R12: ffff8880a8d51550
R13: ffffffff818aca47 R14: ffff888096d8f998 R15: 0000000000000001
FS:  00007f7ed80b2700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000007b6734 CR3: 0000000098c31000 CR4: 00000000001406e0
Call Trace:
 __mutex_unlock_slowpath+0x8e/0x6b0 kernel/locking/mutex.c:1202
 mutex_unlock+0xd/0x10 kernel/locking/mutex.c:714
 perf_mmap+0x727/0x19b0 kernel/events/core.c:5713
 call_mmap include/linux/fs.h:1875 [inline]
 mmap_region+0xc35/0x1760 mm/mmap.c:1788
 do_mmap+0x82e/0x1090 mm/mmap.c:1561
 do_mmap_pgoff include/linux/mm.h:2374 [inline]
 vm_mmap_pgoff+0x1c5/0x230 mm/util.c:391
 ksys_mmap_pgoff+0x4aa/0x630 mm/mmap.c:1611
 __do_sys_mmap arch/x86/kernel/sys_x86_64.c:100 [inline]
 __se_sys_mmap arch/x86/kernel/sys_x86_64.c:91 [inline]
 __x64_sys_mmap+0xe9/0x1b0 arch/x86/kernel/sys_x86_64.c:91
 do_syscall_64+0xfd/0x6a0 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x459829
Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f7ed80b1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459829
RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000
RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000
R10: 0000000000000011 R11: 0000000000000246 R12: 00007f7ed80b26d4
R13: 00000000004c5d1b R14: 00000000004da750 R15: 00000000ffffffff

Crashes (93):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro
ci-upstream-kasan-gce-selinux-root	2019/08/13 11:32	upstream	d45331b0	8620c2c2	.config	log	report	syz
ci-upstream-kasan-gce-root	2019/08/13 11:25	upstream	d45331b0	8620c2c2	.config	log	report	syz
ci-upstream-kasan-gce-selinux-root	2019/08/12 16:59	upstream	d45331b0	acb51638	.config	log	report	syz
ci-upstream-kasan-gce-root	2019/07/28 04:36	upstream	5168afe6	c85e1c5b	.config	log	report	syz
ci-upstream-kasan-gce-selinux-root	2019/07/27 23:17	upstream	5168afe6	c85e1c5b	.config	log	report	syz
ci-upstream-kasan-gce-root	2019/06/27 06:17	upstream	249155c2	7509bf36	.config	log	report	syz
ci-upstream-kasan-gce-selinux-root	2019/06/27 05:57	upstream	249155c2	7509bf36	.config	log	report	syz
ci-upstream-kasan-gce-root	2019/06/17 20:35	upstream	9e0babf2	442206d7	.config	log	report	syz
ci-upstream-kasan-gce-smack-root	2019/06/09 02:56	upstream	8d72e5bd	0159583c	.config	log	report	syz
ci-upstream-kasan-gce-smack-root	2019/05/19 12:32	upstream	72cf0b07	5a4461b0	.config	log	report	syz
ci-upstream-kasan-gce-smack-root	2019/04/25 06:37	upstream	cd8dead0	8e3c52b1	.config	log	report	syz
ci-upstream-kasan-gce-selinux-root	2019/04/21 17:46	upstream	9e5de623	b0e8efcb	.config	log	report	syz
ci-upstream-kasan-gce-root	2019/04/21 17:44	upstream	9e5de623	b0e8efcb	.config	log	report	syz
ci-upstream-kasan-gce-smack-root	2019/04/13 07:07	upstream	8ee15f32	c402d8f1	.config	log	report	syz
ci-upstream-linux-next-kasan-gce-root	2019/08/13 11:37	linux-next	8e72ac27	8620c2c2	.config	log	report	syz
ci-upstream-linux-next-kasan-gce-root	2019/08/07 08:28	linux-next	958eb432	cdde7486	.config	log	report	syz
ci-upstream-linux-next-kasan-gce-root	2019/04/13 07:09	linux-next	bcb67f0f	c402d8f1	.config	log	report	syz
ci-upstream-kasan-gce-root	2019/09/30 22:04	upstream	97f9a3c4	c7a4fb99	.config	log	report
ci-upstream-kasan-gce-selinux-root	2019/08/21 17:06	upstream	15d90b24	4ea67ff8	.config	log	report
ci-upstream-kasan-gce-selinux-root	2019/08/03 00:14	upstream	97b00aff	6affd8e8	.config	log	report
ci-upstream-kasan-gce-selinux-root	2019/07/22 07:18	upstream	c6dd78fc	b3c615f5	.config	log	report
ci-upstream-kasan-gce	2019/06/28 13:42	upstream	c84afab0	7509bf36	.config	log	report
ci-upstream-kasan-gce	2019/06/26 14:35	upstream	249155c2	4d342240	.config	log	report
ci-upstream-kasan-gce	2019/06/23 08:44	upstream	abf02e29	34bf9440	.config	log	report
ci-upstream-kasan-gce	2019/06/23 01:23	upstream	abf02e29	34bf9440	.config	log	report
ci-upstream-kasan-gce	2019/06/22 23:52	upstream	abf02e29	34bf9440	.config	log	report
ci-upstream-kasan-gce-root	2019/06/22 20:12	upstream	abf02e29	34bf9440	.config	log	report
ci-upstream-kasan-gce-root	2019/06/22 17:53	upstream	abf02e29	34bf9440	.config	log	report
ci-upstream-kasan-gce	2019/06/12 18:06	upstream	35110e38	794a1ad7	.config	log	report
ci-upstream-kasan-gce	2019/06/09 12:08	upstream	d1fdb6d8	0159583c	.config	log	report
ci-upstream-kasan-gce-smack-root	2019/06/06 23:09	upstream	01047631	698773cb	.config	log	report
ci-upstream-kasan-gce-smack-root	2019/05/11 18:41	upstream	8148c17b	0637a7f0	.config	log	report
ci-upstream-kasan-gce	2019/05/07 21:23	upstream	8ff468c2	a7383bfa	.config	log	report
ci-upstream-kasan-gce-selinux-root	2019/05/04 05:34	upstream	a4ccb5f9	d28f4ce5	.config	log	report
ci-upstream-kasan-gce	2019/05/02 05:18	upstream	459e3a21	7516d9fa	.config	log	report
ci-upstream-kasan-gce-selinux-root	2019/05/01 08:32	upstream	f2bc9c90	618456b4	.config	log	report
ci-upstream-kasan-gce-root	2019/04/30 18:22	upstream	83a50840	618456b4	.config	log	report
ci-upstream-kasan-gce-smack-root	2019/04/28 18:27	upstream	9520b532	b617407b	.config	log	report
ci-upstream-kasan-gce	2019/04/27 05:44	upstream	d0473f97	b617407b	.config	log	report
ci-upstream-kasan-gce	2019/04/25 13:45	upstream	cd8dead0	8e3c52b1	.config	log	report
ci-upstream-kasan-gce-smack-root	2019/04/23 15:34	upstream	085b7755	53199d6e	.config	log	report
ci-upstream-kasan-gce	2019/04/22 06:07	upstream	085b7755	b0e8efcb	.config	log	report
ci-upstream-kasan-gce-smack-root	2019/04/21 05:31	upstream	9e5de623	b0e8efcb	.config	log	report
ci-upstream-kasan-gce-selinux-root	2019/04/15 23:19	upstream	5512320c	505ab413	.config	log	report
ci-upstream-kasan-gce-smack-root	2019/04/15 07:56	upstream	dc4060a5	505ab413	.config	log	report
ci-upstream-kasan-gce-root	2019/04/04 06:47	upstream	8ed86627	d6fc4177	.config	log	report
ci-upstream-kasan-gce-selinux-root	2019/04/02 14:46	upstream	5e7a8ca3	dfd3394d	.config	log	report
ci-upstream-kasan-gce-root	2019/03/26 07:53	upstream	a3ac7917	55684ce1	.config	log	report
ci-upstream-kasan-gce	2019/03/16 23:50	upstream	9c7dc824	bab43553	.config	log	report
ci-upstream-kasan-gce-smack-root	2019/03/15 10:04	upstream	f261c4e5	bab43553	.config	log	report
ci-upstream-kasan-gce-smack-root	2019/03/14 22:19	upstream	3b319ee2	d72db19b	.config	log	report
ci-upstream-kasan-gce	2019/03/13 18:49	upstream	ebc551f2	2881fc25	.config	log	report
ci-upstream-kasan-gce-smack-root	2019/03/08 07:36	upstream	1fc1cd83	4b69c3cb	.config	log	report
ci-upstream-kasan-gce-386	2019/11/16 10:35	upstream	eb70e26c	cdac920b	.config	log	report
ci-upstream-kasan-gce-386	2019/06/30 14:33	upstream	6fbc7275	7509bf36	.config	log	report
ci-upstream-kasan-gce-386	2019/05/23 16:17	upstream	61686afe	0dadcd9d	.config	log	report
ci-upstream-kasan-gce-386	2019/05/01 13:54	upstream	f2bc9c90	618456b4	.config	log	report
ci-upstream-net-kasan-gce	2018/04/20 23:48	net-next	0263ea5c	cc402841	.config	log	report
ci-upstream-linux-next-kasan-gce-root	2019/06/30 19:26	linux-next	48568d8c	699d6448	.config	log	report
ci-upstream-linux-next-kasan-gce-root	2019/06/18 13:28	linux-next	1c6b4050	e3f76baa	.config	log	report
ci-upstream-linux-next-kasan-gce-root	2019/04/27 15:32	linux-next	3ddfa8af	b617407b	.config	log	report
ci-upstream-linux-next-kasan-gce-root	2019/03/26 22:09	linux-next	ab8bba4e	55684ce1	.config	log	report
ci-upstream-linux-next-kasan-gce-root	2019/03/04 22:56	linux-next	5d57915a	7c693b52	.config	log	report