syzbot

 sign-in | mailing list | source | docs
🐞 Open [980] ≡ Subsystems 🐞 Fixed [5208] 🐞 Invalid [12468] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

INFO: task hung in do_read_cache_page (2)

Status: auto-closed as invalid on 2019/11/11 08:43
Subsystems: block
[Documentation on labels]
First crash: 1679d, last: 1679d
▶ ▼ Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 INFO: task hung in do_read_cache_page (2) C error 26 446d 1163d 0/1 upstream: reported C repro on 2021/02/09 08:22
upstream INFO: task hung in do_read_cache_page block 10 2109d 2212d 0/26 auto-closed as invalid on 2019/02/22 10:09
linux-4.14 INFO: task hung in do_read_cache_page 2 641d 678d 0/1 auto-obsoleted due to no activity on 2022/11/13 17:53
linux-5.15 INFO: task hung in do_read_cache_page origin:upstream C error 9 290d 367d 0/3 upstream: reported C repro on 2023/04/16 18:09
upstream INFO: task hung in do_read_cache_page (3) fs mm C done inconclusive 88 645d 1542d 0/26 upstream: reported C repro on 2020/01/27 06:32
android-49 INFO: task hung in do_read_cache_page 1 2153d 2153d 0/3 auto-closed as invalid on 2019/02/22 13:59
linux-4.19 INFO: task hung in do_read_cache_page C done 2 1221d 1281d 1/1 fixed on 2021/01/13 11:08

Sample crash report:
INFO: task syz-executor.4:15950 can't die for more than 143 seconds.
syz-executor.4  D26616 15950   8757 0x00004004
Call Trace:
 context_switch kernel/sched/core.c:3265 [inline]
 __schedule+0x76e/0x17a0 kernel/sched/core.c:3937
 schedule+0xd9/0x260 kernel/sched/core.c:4004
 io_schedule+0x1c/0x70 kernel/sched/core.c:5678
 wait_on_page_bit_common+0x3b6/0xe00 mm/filemap.c:1174
 wait_on_page_bit mm/filemap.c:1223 [inline]
 wait_on_page_locked include/linux/pagemap.h:527 [inline]
 wait_on_page_read mm/filemap.c:2767 [inline]
 do_read_cache_page+0x848/0xdb0 mm/filemap.c:2810
 read_cache_page+0x5e/0x70 mm/filemap.c:2894
 read_mapping_page include/linux/pagemap.h:396 [inline]
 read_dev_sector+0x71/0x310 block/partition-generic.c:667
 read_part_sector block/partitions/check.h:38 [inline]
 adfspart_check_ICS+0x12d/0xc90 block/partitions/acorn.c:361
 check_partition+0x3bc/0x6ce block/partitions/check.c:167
 rescan_partitions+0x230/0xa30 block/partition-generic.c:531
 __blkdev_get+0x1213/0x1660 fs/block_dev.c:1637
 blkdev_get+0x47/0x2c0 fs/block_dev.c:1707
 blkdev_open+0x205/0x290 fs/block_dev.c:1846
 do_dentry_open+0x4df/0x1250 fs/open.c:797
 vfs_open+0xa0/0xd0 fs/open.c:914
 do_last fs/namei.c:3416 [inline]
 path_openat+0x10e9/0x46d0 fs/namei.c:3533
 do_filp_open+0x1a1/0x280 fs/namei.c:3563
 do_sys_open+0x3fe/0x5d0 fs/open.c:1097
 __do_sys_open fs/open.c:1115 [inline]
 __se_sys_open fs/open.c:1110 [inline]
 __x64_sys_open+0x7e/0xc0 fs/open.c:1110
 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4137d1
Code: 48 c7 03 50 37 41 00 31 c0 48 83 c4 08 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 c7 03 40 37 41 00 eb e5 0f 1f 80 00 00 00 00 bf <69> 30 44 00 b9 08 00 00 00 48 89 ee f3 a6 74 1f bf 71 30 44 00 b9
RSP: 002b:00007f940b02d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004137d1
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f940b02d850
RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 00007f940b02e6d4
R13: 00000000004c8d5b R14: 00000000004dfd50 R15: 00000000ffffffff
INFO: task syz-executor.4:15950 blocked for more than 143 seconds.
      Not tainted 5.3.0-rc6-next-20190830 #75
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.4  D26616 15950   8757 0x00004004
Call Trace:
 context_switch kernel/sched/core.c:3265 [inline]
 __schedule+0x76e/0x17a0 kernel/sched/core.c:3937
 schedule+0xd9/0x260 kernel/sched/core.c:4004
 io_schedule+0x1c/0x70 kernel/sched/core.c:5678
 wait_on_page_bit_common+0x3b6/0xe00 mm/filemap.c:1174
 wait_on_page_bit mm/filemap.c:1223 [inline]
 wait_on_page_locked include/linux/pagemap.h:527 [inline]
 wait_on_page_read mm/filemap.c:2767 [inline]
 do_read_cache_page+0x848/0xdb0 mm/filemap.c:2810
 read_cache_page+0x5e/0x70 mm/filemap.c:2894
 read_mapping_page include/linux/pagemap.h:396 [inline]
 read_dev_sector+0x71/0x310 block/partition-generic.c:667
 read_part_sector block/partitions/check.h:38 [inline]
 adfspart_check_ICS+0x12d/0xc90 block/partitions/acorn.c:361
 check_partition+0x3bc/0x6ce block/partitions/check.c:167
 rescan_partitions+0x230/0xa30 block/partition-generic.c:531
 __blkdev_get+0x1213/0x1660 fs/block_dev.c:1637
 blkdev_get+0x47/0x2c0 fs/block_dev.c:1707
 blkdev_open+0x205/0x290 fs/block_dev.c:1846
 do_dentry_open+0x4df/0x1250 fs/open.c:797
 vfs_open+0xa0/0xd0 fs/open.c:914
 do_last fs/namei.c:3416 [inline]
 path_openat+0x10e9/0x46d0 fs/namei.c:3533
 do_filp_open+0x1a1/0x280 fs/namei.c:3563
 do_sys_open+0x3fe/0x5d0 fs/open.c:1097
 __do_sys_open fs/open.c:1115 [inline]
 __se_sys_open fs/open.c:1110 [inline]
 __x64_sys_open+0x7e/0xc0 fs/open.c:1110
 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4137d1
Code: 48 c7 03 50 37 41 00 31 c0 48 83 c4 08 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 c7 03 40 37 41 00 eb e5 0f 1f 80 00 00 00 00 bf <69> 30 44 00 b9 08 00 00 00 48 89 ee f3 a6 74 1f bf 71 30 44 00 b9
RSP: 002b:00007f940b02d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004137d1
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f940b02d850
RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 00007f940b02e6d4
R13: 00000000004c8d5b R14: 00000000004dfd50 R15: 00000000ffffffff
INFO: task syz-executor.4:15952 can't die for more than 144 seconds.
syz-executor.4  D27536 15952   8757 0x00004004
Call Trace:
 context_switch kernel/sched/core.c:3265 [inline]
 __schedule+0x76e/0x17a0 kernel/sched/core.c:3937
 schedule+0xd9/0x260 kernel/sched/core.c:4004
 schedule_timeout+0x717/0xc50 kernel/time/timer.c:1869
 do_wait_for_common kernel/sched/completion.c:83 [inline]
 __wait_for_common kernel/sched/completion.c:104 [inline]
 wait_for_common kernel/sched/completion.c:115 [inline]
 wait_for_completion+0x29c/0x440 kernel/sched/completion.c:136
 flush_workqueue+0x40f/0x14c0 kernel/workqueue.c:2826
 nbd_start_device_ioctl drivers/block/nbd.c:1254 [inline]
 __nbd_ioctl drivers/block/nbd.c:1329 [inline]
 nbd_ioctl+0xb32/0xc50 drivers/block/nbd.c:1369
 __blkdev_driver_ioctl block/ioctl.c:304 [inline]
 blkdev_ioctl+0xedb/0x1c20 block/ioctl.c:606
 block_ioctl+0xee/0x130 fs/block_dev.c:1954
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:509 [inline]
 do_vfs_ioctl+0xdb6/0x13e0 fs/ioctl.c:696
 ksys_ioctl+0xab/0xd0 fs/ioctl.c:713
 __do_sys_ioctl fs/ioctl.c:720 [inline]
 __se_sys_ioctl fs/ioctl.c:718 [inline]
 __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718
 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4598e9
Code: Bad RIP value.
RSP: 002b:00007f940b00cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004598e9
RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004
RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f940b00d6d4
R13: 00000000004c319f R14: 00000000004d6948 R15: 00000000ffffffff
INFO: task syz-executor.4:15952 blocked for more than 144 seconds.
      Not tainted 5.3.0-rc6-next-20190830 #75
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.4  D27536 15952   8757 0x00004004
Call Trace:
 context_switch kernel/sched/core.c:3265 [inline]
 __schedule+0x76e/0x17a0 kernel/sched/core.c:3937
 schedule+0xd9/0x260 kernel/sched/core.c:4004
 schedule_timeout+0x717/0xc50 kernel/time/timer.c:1869
 do_wait_for_common kernel/sched/completion.c:83 [inline]
 __wait_for_common kernel/sched/completion.c:104 [inline]
 wait_for_common kernel/sched/completion.c:115 [inline]
 wait_for_completion+0x29c/0x440 kernel/sched/completion.c:136
 flush_workqueue+0x40f/0x14c0 kernel/workqueue.c:2826
 nbd_start_device_ioctl drivers/block/nbd.c:1254 [inline]
 __nbd_ioctl drivers/block/nbd.c:1329 [inline]
 nbd_ioctl+0xb32/0xc50 drivers/block/nbd.c:1369
 __blkdev_driver_ioctl block/ioctl.c:304 [inline]
 blkdev_ioctl+0xedb/0x1c20 block/ioctl.c:606
 block_ioctl+0xee/0x130 fs/block_dev.c:1954
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:509 [inline]
 do_vfs_ioctl+0xdb6/0x13e0 fs/ioctl.c:696
 ksys_ioctl+0xab/0xd0 fs/ioctl.c:713
 __do_sys_ioctl fs/ioctl.c:720 [inline]
 __se_sys_ioctl fs/ioctl.c:718 [inline]
 __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:718
 do_syscall_64+0xfa/0x760 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4598e9
Code: Bad RIP value.
RSP: 002b:00007f940b00cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004598e9
RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004
RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f940b00d6d4
R13: 00000000004c319f R14: 00000000004d6948 R15: 00000000ffffffff

Showing all locks held in the system:
1 lock held by khungtaskd/1064:
 #0: ffffffff88fa7f00 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:5337
1 lock held by rsyslogd/8618:
 #0: ffff88808da8b0e0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 fs/file.c:801
2 locks held by getty/8708:
 #0: ffff88809ffaa090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340
 #1: ffffc90005f0d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156
2 locks held by getty/8709:
 #0: ffff888097b17090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340
 #1: ffffc90005f2d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156
2 locks held by getty/8710:
 #0: ffff88808d9c7090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340
 #1: ffffc90005f312e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156
2 locks held by getty/8711:
 #0: ffff8880a1ee1090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340
 #1: ffffc90005f292e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156
2 locks held by getty/8712:
 #0: ffff8880a63c7090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340
 #1: ffffc90005f212e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156
2 locks held by getty/8713:
 #0: ffff8880929fe090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340
 #1: ffffc90005f252e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156
2 locks held by getty/8714:
 #0: ffff8880a991e090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:340
 #1: ffffc90005f012e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 drivers/tty/n_tty.c:2156
2 locks held by kworker/u5:1/9134:
 #0: ffff888096559d28 ((wq_completion)knbd4-recv){+.+.}, at: __write_once_size include/linux/compiler.h:203 [inline]
 #0: ffff888096559d28 ((wq_completion)knbd4-recv){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888096559d28 ((wq_completion)knbd4-recv){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:855 [inline]
 #0: ffff888096559d28 ((wq_completion)knbd4-recv){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:40 [inline]
 #0: ffff888096559d28 ((wq_completion)knbd4-recv){+.+.}, at: set_work_data kernel/workqueue.c:620 [inline]
 #0: ffff888096559d28 ((wq_completion)knbd4-recv){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:647 [inline]
 #0: ffff888096559d28 ((wq_completion)knbd4-recv){+.+.}, at: process_one_work+0x88b/0x1740 kernel/workqueue.c:2240
 #1: ffff888055fc7dc0 ((work_completion)(&args->work)){+.+.}, at: process_one_work+0x8c1/0x1740 kernel/workqueue.c:2244
1 lock held by syz-executor.4/15950:
 #0: ffff888094607738 (&bdev->bd_mutex){+.+.}, at: __blkdev_get+0x19b/0x1660 fs/block_dev.c:1553

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 1064 Comm: khungtaskd Not tainted 5.3.0-rc6-next-20190830 #75
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 nmi_cpu_backtrace.cold+0x70/0xb2 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x23b/0x28b lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:269 [inline]
 watchdog+0xc99/0x1360 kernel/hung_task.c:353
 kthread+0x361/0x430 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.3.0-rc6-next-20190830 #75
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:write_comp_data+0x1e/0x70 kernel/kcov.c:123
Code: 48 89 34 d1 48 89 11 5d c3 0f 1f 00 65 4c 8b 04 25 40 fe 01 00 65 8b 05 98 a7 8f 7e a9 00 01 1f 00 75 51 41 8b 80 00 13 00 00 <83> f8 03 75 45 49 8b 80 08 13 00 00 45 8b 80 04 13 00 00 4c 8b 08
RSP: 0018:ffff8880ae809ef8 EFLAGS: 00000046
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8165f933
RDX: 0000000000000000 RSI: 000000000000003f RDI: 0000000000000005
RBP: ffff8880ae809f00 R08: ffffffff88e7a180 R09: 0000000000000001
R10: ffffed1015d06aec R11: ffff8880ae835763 R12: ffffffff88e7a180
R13: ffffffff88bb2140 R14: ffff8880ae800000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffff600400 CR3: 000000008def9000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 cpu_max_bits_warn include/linux/cpumask.h:137 [inline]
 cpumask_check include/linux/cpumask.h:144 [inline]
 cpumask_test_cpu include/linux/cpumask.h:360 [inline]
 tick_check_oneshot_broadcast_this_cpu+0x23/0x150 kernel/time/tick-broadcast.c:586
 tick_irq_enter+0x22/0x3f0 kernel/time/tick-sched.c:1273
 irq_enter+0xbd/0xe0 kernel/softirq.c:354
 scheduler_ipi+0x28e/0x640 kernel/sched/core.c:2218
 smp_reschedule_interrupt+0x78/0x4c0 arch/x86/kernel/smp.c:244
 reschedule_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:854
 </IRQ>
RIP: 0010:native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:61
Code: 38 c1 69 fa eb 8a 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 64 b8 64 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 54 b8 64 00 fb f4 <c3> 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 5e a7 1c fa e8 69
RSP: 0018:ffffffff88e07c50 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff02
RAX: 1ffffffff11e5db7 RBX: 0000000000000000 RCX: 0000000000000000
RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffffffff88e7aa1c
RBP: ffffffff88e07c80 R08: ffffffff88e7a180 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001
R13: 0000000000000000 R14: 0000000000000060 R15: 0000000000000001
 default_enter_idle+0x71/0xf0 drivers/cpuidle/cpuidle-haltpoll.c:27
 cpuidle_enter_state+0xef/0xfb0 drivers/cpuidle/cpuidle.c:229
 cpuidle_enter+0x4f/0xa0 drivers/cpuidle/cpuidle.c:344
 call_cpuidle kernel/sched/idle.c:117 [inline]
 cpuidle_idle_call kernel/sched/idle.c:201 [inline]
 do_idle+0x45f/0x6e0 kernel/sched/idle.c:263
 cpu_startup_entry+0x1b/0x20 kernel/sched/idle.c:354
 rest_init+0x245/0x37b init/main.c:451
 arch_call_rest_init+0xe/0x1b
 start_kernel+0x904/0x943 init/main.c:784
 x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:472
 x86_64_start_kernel+0x77/0x7b arch/x86/kernel/head64.c:453
 secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:241

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/09/12 08:34 linux-next 6d028043b55e f4e53c10 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.