INFO: task hung in do

[upstream] INFO: task hung in do_exit
Status: moderation: reported on 2018/04/23 01:02
Reported-by: syzbot+8a19c77ce070f0d4d3bb@syzkaller.appspotmail.com
First: 210d, last: 19h00m

Sample crash report:

device nr0 entered promiscuous mode
device nr0 entered promiscuous mode
device nr0 entered promiscuous mode
INFO: task syz-executor1:12561 blocked for more than 140 seconds.
      Not tainted 4.20.0-rc2+ #337
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor1   D 9352 12561   6081 0x80000006
Call Trace:
 context_switch kernel/sched/core.c:2831 [inline]
 __schedule+0x8cf/0x21d0 kernel/sched/core.c:3472
 schedule+0xfe/0x460 kernel/sched/core.c:3516
 __rwsem_down_read_failed_common kernel/locking/rwsem-xadd.c:280 [inline]
 rwsem_down_read_failed+0x371/0x710 kernel/locking/rwsem-xadd.c:297
 call_rwsem_down_read_failed+0x18/0x30 arch/x86/lib/rwsem.S:94
 __down_read arch/x86/include/asm/rwsem.h:83 [inline]
 down_read+0x9b/0x120 kernel/locking/rwsem.c:26
 exit_mm kernel/exit.c:511 [inline]
 do_exit+0x59c/0x26d0 kernel/exit.c:854
 do_group_exit+0x177/0x440 kernel/exit.c:970
 get_signal+0x8b0/0x1980 kernel/signal.c:2517
 do_signal+0x9c/0x21c0 arch/x86/kernel/signal.c:816
 exit_to_usermode_loop+0x2e5/0x380 arch/x86/entry/common.c:162
 prepare_exit_to_usermode+0x342/0x3b0 arch/x86/entry/common.c:197
 retint_user+0x8/0x18
RIP: 0033:0x43e867
Code: c0 f8 07 c0 f9 02 29 c1 8d 0c 89 01 c9 41 29 c8 41 83 c0 30 44 88 46 0c 44 0f b6 47 04 44 89 c0 41 c0 f8 07 f6 ea 66 c1 e8 08 <89> c1 c0 f9 02 44 29 c1 89 c8 89 cb f6 ea c0 fb 07 41 89 d8 66 c1
RSP: 002b:00007ffe21f00048 EFLAGS: 00010202
RAX: 0000000020000440 RBX: 000000000072c900 RCX: 00000000317a7973
RDX: 0000000000000004 RSI: 0000000000731fa0 RDI: 0000000020000440
RBP: fffffffffffffffe R08: 0000000000000000 R09: 0000000000000000
R10: 00007ffe21f00110 R11: 0000000000000246 R12: 000000000072bf0c
R13: 00000000000003e8 R14: 0000000000057f9c R15: 0000000000057f6f
INFO: task syz-executor1:12629 blocked for more than 140 seconds.
      Not tainted 4.20.0-rc2+ #337
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor1   D 5440 12629   6081 0x00000006
Call Trace:
 context_switch kernel/sched/core.c:2831 [inline]
 __schedule+0x8cf/0x21d0 kernel/sched/core.c:3472
 schedule+0xfe/0x460 kernel/sched/core.c:3516
 __rwsem_down_write_failed_common+0xc9a/0x15e0 kernel/locking/rwsem-xadd.c:577
 rwsem_down_write_failed+0xe/0x10 kernel/locking/rwsem-xadd.c:606
 call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:117
 __down_write arch/x86/include/asm/rwsem.h:142 [inline]
 down_write+0xa5/0x130 kernel/locking/rwsem.c:72
 do_mbind mm/mempolicy.c:1207 [inline]
 kernel_mbind+0x52d/0xe80 mm/mempolicy.c:1347
 __do_sys_mbind mm/mempolicy.c:1354 [inline]
 __se_sys_mbind mm/mempolicy.c:1350 [inline]
 __x64_sys_mbind+0xe1/0x1a0 mm/mempolicy.c:1350
 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457569
Code: Bad RIP value.
RSP: 002b:00007f409ba28c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457569
RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020000000
RBP: 000000000072c040 R08: 0000000000000045 R09: 0000000000000002
R10: 0000000020000000 R11: 0000000000000246 R12: 00007f409ba296d4
R13: 00000000004c2a0f R14: 00000000004d4038 R15: 00000000ffffffff

Showing all locks held in the system:
1 lock held by khungtaskd/1020:
 #0: 000000007a33bd33 (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 kernel/locking/lockdep.c:4379
1 lock held by rsyslogd/5943:
 #0: 000000004a4b3632 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 fs/file.c:766
2 locks held by getty/6033:
 #0: 00000000a4117782 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
 #1: 0000000038c84ef0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154
2 locks held by getty/6034:
 #0: 000000002f1b89cb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
 #1: 00000000750403ad (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154
2 locks held by getty/6035:
 #0: 000000000c24c834 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
 #1: 00000000b55f94f1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154
2 locks held by getty/6036:
 #0: 00000000486bc168 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
 #1: 0000000014f817ac (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154
2 locks held by getty/6037:
 #0: 00000000ef8db911 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
 #1: 00000000f878d49b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154
2 locks held by getty/6038:
 #0: 00000000379ab967 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
 #1: 0000000032ea1ed4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154
2 locks held by getty/6039:
 #0: 00000000ba4d7e45 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
 #1: 000000008ae25865 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 drivers/tty/n_tty.c:2154
1 lock held by syz-executor1/12561:
 #0: 00000000bd0c2642 (&mm->mmap_sem){++++}, at: exit_mm kernel/exit.c:511 [inline]
 #0: 00000000bd0c2642 (&mm->mmap_sem){++++}, at: do_exit+0x59c/0x26d0 kernel/exit.c:854
1 lock held by syz-executor1/12565:
1 lock held by syz-executor1/12629:
 #0: 00000000bd0c2642 (&mm->mmap_sem){++++}, at: do_mbind mm/mempolicy.c:1207 [inline]
 #0: 00000000bd0c2642 (&mm->mmap_sem){++++}, at: kernel_mbind+0x52d/0xe80 mm/mempolicy.c:1347

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 1020 Comm: khungtaskd Not tainted 4.20.0-rc2+ #337
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
 nmi_cpu_backtrace.cold.2+0x5c/0xa1 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1e8/0x22a lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:205 [inline]
 watchdog+0xb51/0x1060 kernel/hung_task.c:289
 kthread+0x35a/0x440 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Sending NMI from CPU 1 to CPUs 0:
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.644 msecs
NMI backtrace for cpu 0
CPU: 0 PID: 12565 Comm: syz-executor1 Not tainted 4.20.0-rc2+ #337
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__rb_erase_augmented include/linux/rbtree_augmented.h:187 [inline]
RIP: 0010:rb_erase+0xc0d/0x3710 lib/rbtree.c:459
Code: 41 80 3c 08 00 0f 85 0e 2a 00 00 48 c1 e8 03 4c 89 7b 08 48 b9 00 00 00 00 00 fc ff df c6 04 08 f8 4d 85 ff 0f 85 af 01 00 00 <41> 83 e5 01 0f 85 ea f9 ff ff e9 f3 fa ff ff 4c 89 c0 c6 06 00 48
RSP: 0018:ffff8881dae070d0 EFLAGS: 00000046
RAX: 1ffff1103b5c0eae RBX: ffff8881dae26620 RCX: dffffc0000000000
RDX: 1ffff1103b5c0e22 RSI: ffff8881dae25e00 RDI: dffffc0000000000
RBP: ffff8881dae07ad8 R08: 1ffff1103b5c4cc6 R09: ffff8881ced08228
R10: ffffed103b5c5b67 R11: ffff8881dae2db3b R12: ffff8881dae26620
R13: ffff8881dae26620 R14: ffff8881dae07ab0 R15: 0000000000000000
FS:  00007f409ba6b700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffff600400 CR3: 00000001bd5bb000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 timerqueue_del+0x86/0x150 lib/timerqueue.c:87
 __remove_hrtimer+0xa8/0x1b0 kernel/time/hrtimer.c:984
 __run_hrtimer kernel/time/hrtimer.c:1380 [inline]
 __hrtimer_run_queues+0x37c/0x10d0 kernel/time/hrtimer.c:1460
 hrtimer_interrupt+0x313/0x780 kernel/time/hrtimer.c:1518
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1034 [inline]
 smp_apic_timer_interrupt+0x1a1/0x760 arch/x86/kernel/apic/apic.c:1059
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:804
 </IRQ>
RIP: 0010:do_mpage_readpage+0x33/0x24d0 fs/mpage.c:157
Code: 48 8d 85 78 fd ff ff 41 56 48 c1 e8 03 41 55 41 54 53 48 bb 00 00 00 00 00 fc ff df 48 81 ec f8 02 00 00 48 89 85 00 fd ff ff <48> 01 d8 48 c7 85 78 fd ff ff b3 8a b5 41 48 c7 85 80 fd ff ff 70
RSP: 0018:ffff888179966698 EFLAGS: 00000292 ORIG_RAX: ffffffffffffff13
RAX: 1ffff1102f32cce6 RBX: dffffc0000000000 RCX: ffffc90007e06000
RDX: 000000000000db14 RSI: ffffffff81e3dafb RDI: ffff888179966a60
RBP: ffff8881799669b8 R08: ffff88817cb0c640 R09: fffff940001fb8c6
R10: fffff940001fb8c6 R11: ffffea0000fdc637 R12: ffffea0000fdc608
R13: ffff888179966c20 R14: ffffea0000fdc600 R15: ffff888179966a60
 mpage_readpages+0x56c/0x950 fs/mpage.c:404
 blkdev_readpages+0x2c/0x40 fs/block_dev.c:578
 read_pages+0x13a/0x680 mm/readahead.c:123
 __do_page_cache_readahead+0x499/0x810 mm/readahead.c:209
 ra_submit mm/internal.h:66 [inline]
 do_sync_mmap_readahead mm/filemap.c:2371 [inline]
 filemap_fault+0xf4e/0x25f0 mm/filemap.c:2447
 __do_fault+0x100/0x6b0 mm/memory.c:2996
 do_shared_fault mm/memory.c:3463 [inline]
 do_fault mm/memory.c:3538 [inline]
 handle_pte_fault mm/memory.c:3765 [inline]
 __handle_mm_fault+0x3ca6/0x5be0 mm/memory.c:3889
Lost 42 message(s)!

All crashes (10):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Maintainers
ci-upstream-kasan-gce-root	2018/11/16 13:59	upstream	da5322e6	f5e275d1	.config	log	report	akpm@linux-foundation.org, arnd@arndb.de, ebiederm@xmission.com, linux-kernel@vger.kernel.org, linux@dominikbrodowski.net, mcgrof@kernel.org, sudipm.mukherjee@gmail.com
ci-upstream-kasan-gce-root	2018/10/14 23:49	upstream	3a272031	caf12900	.config	log	report	akpm@linux-foundation.org, arnd@arndb.de, ebiederm@xmission.com, keescook@chromium.org, linux-kernel@vger.kernel.org, linux@dominikbrodowski.net, mark.rutland@arm.com, mcgrof@kernel.org, sudipm.mukherjee@gmail.com
ci-upstream-kasan-gce-selinux-root	2018/10/03 19:00	upstream	6bebe379	8b311eaf	.config	log	report	akpm@linux-foundation.org, ebiederm@xmission.com, keescook@chromium.org, linux-kernel@vger.kernel.org, linux@dominikbrodowski.net, mark.rutland@arm.com, mingo@kernel.org, sudipm.mukherjee@gmail.com
ci-upstream-kasan-gce-root	2018/07/21 01:15	upstream	28c20cc7	af255b09	.config	log	report	akpm@linux-foundation.org, ebiederm@xmission.com, keescook@chromium.org, linux-kernel@vger.kernel.org, linux@dominikbrodowski.net, mark.rutland@arm.com, mingo@kernel.org, paulmck@linux.vnet.ibm.com, sudipm.mukherjee@gmail.com, viro@zeniv.linux.org.uk
ci-upstream-net-kasan-gce	2018/04/20 23:48	net-next	0263ea5c	cc402841	.config	log	report	akpm@linux-foundation.org, keescook@chromium.org, linux-kernel@vger.kernel.org, mingo@kernel.org, paulmck@linux.vnet.ibm.com, viro@zeniv.linux.org.uk
ci-upstream-linux-next-kasan-gce-root	2018/11/08 08:53	linux-next	f7af6d2c	e85d2a61	.config	log	report	akpm@linux-foundation.org, arnd@arndb.de, ebiederm@xmission.com, linux-kernel@vger.kernel.org, linux@dominikbrodowski.net, mcgrof@kernel.org, sudipm.mukherjee@gmail.com
ci-upstream-linux-next-kasan-gce-root	2018/10/07 12:05	linux-next	12ffaa11	8b311eaf	.config	log	report	akpm@linux-foundation.org, ebiederm@xmission.com, keescook@chromium.org, linux-kernel@vger.kernel.org, linux@dominikbrodowski.net, mark.rutland@arm.com, mcgrof@kernel.org, paulmck@linux.vnet.ibm.com, sudipm.mukherjee@gmail.com
ci-upstream-linux-next-kasan-gce-root	2018/10/02 07:10	linux-next	4794a36b	e06f7713	.config	log	report	akpm@linux-foundation.org, arnd@arndb.de, ebiederm@xmission.com, keescook@chromium.org, linux-kernel@vger.kernel.org, linux@dominikbrodowski.net, mark.rutland@arm.com, mcgrof@kernel.org, sudipm.mukherjee@gmail.com
ci-upstream-linux-next-kasan-gce-root	2018/09/03 20:17	linux-next	dceb9092	a4718693	.config	log	report	akpm@linux-foundation.org, ebiederm@xmission.com, keescook@chromium.org, linux-kernel@vger.kernel.org, mcgrof@kernel.org, sudipm.mukherjee@gmail.com, viro@zeniv.linux.org.uk
ci-upstream-linux-next-kasan-gce-root	2018/07/30 08:29	linux-next	d1e0b8e0	1a381291	.config	log	report	akpm@linux-foundation.org, byungchul.park@lge.com, j@bitron.ch, keescook@chromium.org, linux-kernel@vger.kernel.org, mingo@kernel.org, paulmck@linux.vnet.ibm.com, sudipm.mukherjee@gmail.com, viro@zeniv.linux.org.uk