syzbot


INFO: task hung in perf_tp_event_init

Status: auto-closed as invalid on 2019/09/21 07:38
Subsystems: trace
[Documentation on labels]
Reported-by: syzbot+c8494e02352841cd0395@syzkaller.appspotmail.com
First crash: 2027d, last: 1852d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-414 INFO: task hung in perf_tp_event_init 1 1964d 1832d 0/1 auto-closed as invalid on 2019/06/01 05:56

Sample crash report:
INFO: task syz-executor.4:18890 blocked for more than 143 seconds.
      Not tainted 5.1.0-rc2 #36
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.4  D30136 18890   8274 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2877 [inline]
 __schedule+0x817/0x1cc0 kernel/sched/core.c:3518
 schedule+0x92/0x180 kernel/sched/core.c:3562
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3620
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x726/0x1310 kernel/locking/mutex.c:1072
 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
 perf_trace_init+0x58/0x250 kernel/trace/trace_event_perf.c:218
 perf_tp_event_init+0xa6/0x120 kernel/events/core.c:8593
 perf_try_init_event+0x137/0x3f0 kernel/events/core.c:10013
 perf_init_event kernel/events/core.c:10060 [inline]
 perf_event_alloc.part.0+0xfa0/0x3200 kernel/events/core.c:10330
 perf_event_alloc kernel/events/core.c:10700 [inline]
 __do_sys_perf_event_open+0x830/0x24e0 kernel/events/core.c:10801
 __se_sys_perf_event_open kernel/events/core.c:10690 [inline]
 __x64_sys_perf_event_open+0xbe/0x150 kernel/events/core.c:10690
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x458209
Code: Bad RIP value.
RSP: 002b:00007fb2419efc78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458209
RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000140
RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fb2419f06d4
R13: 00000000004c47ec R14: 00000000004d7f90 R15: 00000000ffffffff
INFO: task syz-executor.1:18888 blocked for more than 143 seconds.
      Not tainted 5.1.0-rc2 #36
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.1  D30032 18888   8266 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2877 [inline]
 __schedule+0x817/0x1cc0 kernel/sched/core.c:3518
 schedule+0x92/0x180 kernel/sched/core.c:3562
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3620
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x726/0x1310 kernel/locking/mutex.c:1072
 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
 perf_trace_init+0x58/0x250 kernel/trace/trace_event_perf.c:218
 perf_tp_event_init+0xa6/0x120 kernel/events/core.c:8593
 perf_try_init_event+0x137/0x3f0 kernel/events/core.c:10013
 perf_init_event kernel/events/core.c:10060 [inline]
 perf_event_alloc.part.0+0xfa0/0x3200 kernel/events/core.c:10330
 perf_event_alloc kernel/events/core.c:10700 [inline]
 __do_sys_perf_event_open+0x830/0x24e0 kernel/events/core.c:10801
 __se_sys_perf_event_open kernel/events/core.c:10690 [inline]
 __x64_sys_perf_event_open+0xbe/0x150 kernel/events/core.c:10690
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x458209
Code: Bad RIP value.
RSP: 002b:00007f8998b96c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458209
RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000140
RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f8998b976d4
R13: 00000000004c47ec R14: 00000000004d7f90 R15: 00000000ffffffff
INFO: task syz-executor.3:18928 blocked for more than 143 seconds.
      Not tainted 5.1.0-rc2 #36
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.3  D27840 18928  18921 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2877 [inline]
 __schedule+0x817/0x1cc0 kernel/sched/core.c:3518
 schedule+0x92/0x180 kernel/sched/core.c:3562
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3620
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x726/0x1310 kernel/locking/mutex.c:1072
 mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:1087
 perf_trace_init+0x58/0x250 kernel/trace/trace_event_perf.c:218
 perf_tp_event_init+0xa6/0x120 kernel/events/core.c:8593
 perf_try_init_event+0x137/0x3f0 kernel/events/core.c:10013
 perf_init_event kernel/events/core.c:10060 [inline]
 perf_event_alloc.part.0+0xfa0/0x3200 kernel/events/core.c:10330
 perf_event_alloc kernel/events/core.c:10700 [inline]
 __do_sys_perf_event_open+0x830/0x24e0 kernel/events/core.c:10801
 __se_sys_perf_event_open kernel/events/core.c:10690 [inline]
 __x64_sys_perf_event_open+0xbe/0x150 kernel/events/core.c:10690
 do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x458209
Code: Bad RIP value.
RSP: 002b:00007fcbcd2a3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458209
RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000140
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fcbcd2a46d4
R13: 00000000004c47ec R14: 00000000004d7f90 R15: 00000000ffffffff

Showing all locks held in the system:
1 lock held by khungtaskd/1042:
 #0: 00000000275a8b80 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e kernel/locking/lockdep.c:5061
2 locks held by rsyslogd/8104:
2 locks held by getty/8225:
 #0: 00000000f07abe38 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 00000000d52849e4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156
2 locks held by getty/8226:
 #0: 00000000e630c974 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 00000000b2f975ec (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156
2 locks held by getty/8227:
 #0: 000000005766b4b7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 000000002e2569ad (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156
2 locks held by getty/8228:
 #0: 0000000048930415 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 000000008f18db46 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156
2 locks held by getty/8229:
 #0: 00000000f6a14925 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 00000000c58f643d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156
2 locks held by getty/8230:
 #0: 00000000d1dac1f4 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 00000000aaaf6a7b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156
2 locks held by getty/8231:
 #0: 000000002e9d145a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 00000000d2b855b8 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 drivers/tty/n_tty.c:2156
1 lock held by syz-executor.3/18849:
3 locks held by syz-executor.4/18890:
 #0: 00000000f67f037a (&sig->cred_guard_mutex){+.+.}, at: __do_sys_perf_event_open+0x6d2/0x24e0 kernel/events/core.c:10781
 #1: 00000000cf93ecb5 (&pmus_srcu){....}, at: perf_event_alloc.part.0+0xd57/0x3200 kernel/events/core.c:10326
 #2: 000000004b44f912 (event_mutex){+.+.}, at: perf_trace_init+0x58/0x250 kernel/trace/trace_event_perf.c:218
3 locks held by syz-executor.1/18888:
 #0: 00000000a109d84c (&sig->cred_guard_mutex){+.+.}, at: __do_sys_perf_event_open+0x6d2/0x24e0 kernel/events/core.c:10781
 #1: 00000000cf93ecb5 (&pmus_srcu){....}, at: perf_event_alloc.part.0+0xd57/0x3200 kernel/events/core.c:10326
 #2: 000000004b44f912 (event_mutex){+.+.}, at: perf_trace_init+0x58/0x250 kernel/trace/trace_event_perf.c:218
3 locks held by syz-executor.3/18928:
 #0: 000000001fd7e065 (&sig->cred_guard_mutex){+.+.}, at: __do_sys_perf_event_open+0x6d2/0x24e0 kernel/events/core.c:10781
 #1: 00000000cf93ecb5 (&pmus_srcu){....}, at: perf_event_alloc.part.0+0xd57/0x3200 kernel/events/core.c:10326
 #2: 000000004b44f912 (event_mutex){+.+.}, at: perf_trace_init+0x58/0x250 kernel/trace/trace_event_perf.c:218

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 1042 Comm: khungtaskd Not tainted 5.1.0-rc2 #36
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 nmi_cpu_backtrace.cold+0x63/0xa4 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1be/0x236 lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:204 [inline]
 watchdog+0x9b7/0xec0 kernel/hung_task.c:288
 kthread+0x357/0x430 kernel/kthread.c:253
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
Sending NMI from CPU 1 to CPUs 0:

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/03/25 07:37 upstream 8c2ffd917477 2c86e0a5 .config console log report ci-upstream-kasan-gce-selinux-root
2019/03/21 10:29 upstream 54c490164523 427ea487 .config console log report ci-upstream-kasan-gce-smack-root
2019/02/25 19:29 upstream 5908e6b738e3 a70141bf .config console log report ci-upstream-kasan-gce-root
2018/09/30 12:09 upstream 291d0e5d81e1 41e4b329 .config console log report ci-upstream-kasan-gce-root
2018/10/05 14:27 linux-next 12ffaa1197f5 8b311eaf .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.