syzbot


INFO: task hung in deactivate_super

Status: closed as dup on 2018/10/27 13:17
Subsystems: exfat
[Documentation on labels]
Reported-by: syzbot+728338e098d4fc3072c3@syzkaller.appspotmail.com
First crash: 2014d, last: 1907d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
INFO: rcu detected stall in sys_creat exfat 98 1894d 1985d
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 INFO: task hung in deactivate_super 3 2085d 2103d 0/3 auto-closed as invalid on 2019/02/22 12:34
linux-6.1 INFO: task hung in deactivate_super 4 223d 272d 0/3 auto-obsoleted due to no activity on 2023/11/26 12:17
linux-4.14 INFO: task hung in deactivate_super 1 1795d 1795d 0/1 auto-closed as invalid on 2019/10/25 08:42
upstream INFO: task hung in deactivate_super (2) reiserfs C inconclusive 121 26d 365d 0/26 upstream: reported C repro on 2023/03/30 01:56
linux-5.15 INFO: task hung in deactivate_super 4 220d 309d 0/3 auto-obsoleted due to no activity on 2023/11/29 20:11
linux-6.1 INFO: task hung in deactivate_super (2) 1 44d 44d 0/3 upstream: reported on 2024/02/14 05:27
linux-4.19 INFO: task hung in deactivate_super 4 397d 498d 0/1 upstream: reported on 2022/11/16 10:48

Sample crash report:
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
INFO: task syz-executor0:8391 blocked for more than 140 seconds.
device loop0 blocksize: 4096
      Not tainted 5.0.0-rc1+ #14
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
__find_get_block_slow() failed. block=1, b_blocknr=8
syz-executor0   D20152  8391      1 0x00000004
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
Call Trace:
__find_get_block_slow() failed. block=1, b_blocknr=8
 context_switch kernel/sched/core.c:2831 [inline]
 __schedule+0x897/0x1e60 kernel/sched/core.c:3472
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
 schedule+0xfe/0x350 kernel/sched/core.c:3516
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
 __rwsem_down_write_failed_common+0xa4d/0x1620 kernel/locking/rwsem-xadd.c:577
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
 rwsem_down_write_failed+0xe/0x10 kernel/locking/rwsem-xadd.c:606
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
 call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:117
device loop0 blocksize: 4096
 __down_write arch/x86/include/asm/rwsem.h:142 [inline]
 down_write+0xa5/0x130 kernel/locking/rwsem.c:72
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
 deactivate_super fs/super.c:360 [inline]
 deactivate_super+0x2a9/0x320 fs/super.c:357
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
 cleanup_mnt+0xbf/0x160 fs/namespace.c:1096
__find_get_block_slow() failed. block=1, b_blocknr=8
 __cleanup_mnt+0x16/0x20 fs/namespace.c:1103
b_state=0x00000029, b_size=512
 task_work_run+0x1f4/0x2b0 kernel/task_work.c:113
device loop0 blocksize: 4096
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_usermode_loop+0x32a/0x3b0 arch/x86/entry/common.c:166
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_64+0x696/0x800 arch/x86/entry/common.c:293
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
b_state=0x00000029, b_size=512
RIP: 0033:0x45a917
device loop0 blocksize: 4096
Code: Bad RIP value.
__find_get_block_slow() failed. block=1, b_blocknr=8
RSP: 002b:00007fffe3dcd778 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
b_state=0x00000029, b_size=512
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045a917
RDX: 0000000000402ec0 RSI: 0000000000000002 RDI: 00007fffe3dcd820
RBP: 00000000000001c4 R08: 0000000000000000 R09: 000000000000000b
R10: 0000000000000005 R11: 0000000000000202 R12: 00007fffe3dce8b0
R13: 0000000002251940 R14: 0000000000000000 R15: 0000000000000000

Showing all locks held in the system:
device loop0 blocksize: 4096
7 locks held by kworker/u4:3/218:
__find_get_block_slow() failed. block=1, b_blocknr=8
1 lock held by khungtaskd/1040:
b_state=0x00000029, b_size=512
 #0: 000000001f6039eb (rcu_read_lock){....}, at: debug_show_all_locks+0xc6/0x41d kernel/locking/lockdep.c:4389
device loop0 blocksize: 4096
1 lock held by rsyslogd/8232:
__find_get_block_slow() failed. block=1, b_blocknr=8
 #0: 00000000f3449575 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1b3/0x1f0 fs/file.c:795
b_state=0x00000029, b_size=512
2 locks held by getty/8354:
 #0: 000000000eba821d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
device loop0 blocksize: 4096
 #1: 0000000037437008 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154
__find_get_block_slow() failed. block=1, b_blocknr=8
2 locks held by getty/8355:
 #0: 00000000557f4cb1 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
b_state=0x00000029, b_size=512
 #1: 00000000cad69069 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154
2 locks held by getty/8356:
 #0: 000000008e632df9 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 0000000005b70b9b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154
2 locks held by getty/8357:
device loop0 blocksize: 4096
 #0: 00000000122568ca (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
__find_get_block_slow() failed. block=1, b_blocknr=8
 #1: 00000000fd5c3274 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154
b_state=0x00000029, b_size=512
2 locks held by getty/8358:
device loop0 blocksize: 4096
 #0: 00000000f7089a2e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 00000000afda952f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154
2 locks held by getty/8359:
 #0: 000000009d7ab93a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
__find_get_block_slow() failed. block=1, b_blocknr=8
 #1: 00000000f2f8d5a4 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154
b_state=0x00000029, b_size=512
2 locks held by getty/8360:
 #0: 00000000ec09c446 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:341
 #1: 00000000e35af0e1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x30a/0x1eb0 drivers/tty/n_tty.c:2154
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
1 lock held by syz-executor0/8391:
b_state=0x00000029, b_size=512
 #0: 00000000c551edf8 (&type->s_umount_key#59){++++}, at: deactivate_super fs/super.c:360 [inline]
 #0: 00000000c551edf8 (&type->s_umount_key#59){++++}, at: deactivate_super+0x2a9/0x320 fs/super.c:357
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8

b_state=0x00000029, b_size=512
=============================================

device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
NMI backtrace for cpu 0
b_state=0x00000029, b_size=512
CPU: 0 PID: 1040 Comm: khungtaskd Not tainted 5.0.0-rc1+ #14
device loop0 blocksize: 4096
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__find_get_block_slow() failed. block=1, b_blocknr=8
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1db/0x2d0 lib/dump_stack.c:113
b_state=0x00000029, b_size=512
device loop0 blocksize: 4096
 nmi_cpu_backtrace.cold+0x63/0xa4 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1be/0x236 lib/nmi_backtrace.c:62
__find_get_block_slow() failed. block=1, b_blocknr=8
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
b_state=0x00000029, b_size=512
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline]
 watchdog+0xbbb/0x1170 kernel/hung_task.c:287
device loop0 blocksize: 4096
__find_get_block_slow() failed. block=1, b_blocknr=8
b_state=0x00000029, b_size=512
 kthread+0x357/0x430 kernel/kthread.c:246
device loop0 blocksize: 4096
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352
__find_get_block_slow() failed. block=1, b_blocknr=8
Sending NMI from CPU 0 to CPUs 1:
b_state=0x00000029, b_size=512
INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.693 msecs
NMI backtrace for cpu 1
CPU: 1 PID: 218 Comm: kworker/u4:3 Not tainted 5.0.0-rc1+ #14
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: writeback wb_workfn (flush-7:0)
RIP: 0010:write_comp_data+0x68/0x70 kernel/kcov.c:146
Code: 00 00 4e 8d 14 dd 28 00 00 00 4d 39 d0 72 1b 49 83 c1 01 4a 89 7c 10 e0 4a 89 74 10 e8 4a 89 54 10 f0 4a 89 4c d8 20 4c 89 08 <c3> 0f 1f 80 00 00 00 00 55 40 0f b6 d6 40 0f b6 f7 31 ff 48 89 e5
RSP: 0018:ffff8880ae707af8 EFLAGS: 00000006
RAX: 0000000000000103 RBX: 0000000000000000 RCX: ffffffff816f1bd8
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000007
RBP: ffff8880ae707b00 R08: ffff8880a8dc8480 R09: ffffed1015ce0f50
R10: ffffed1015ce0f4f R11: 0000000000000003 R12: 1ffffffff1301200
R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880ae723bc0
FS:  0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000001d1c4c0 CR3: 00000000918a9000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 collect_expired_timers kernel/time/timer.c:1597 [inline]
 __run_timers+0x238/0xd50 kernel/time/timer.c:1677
 run_timer_softirq+0x52/0xb0 kernel/time/timer.c:1694
 __do_softirq+0x30b/0xb11 kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0x180/0x1d0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0x1b7/0x760 arch/x86/kernel/apic/apic.c:1062
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:766 [inline]
RIP: 0010:console_trylock_spinning kernel/printk/printk.c:1697 [inline]
RIP: 0010:vprintk_emit+0x84c/0x960 kernel/printk/printk.c:1930
Code: 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 ef 00 00 00 48 83 3d 74 5b 2a 08 00 74 2d e8 ad d2 19 00 48 8b bd 10 ff ff ff 57 9d <0f> 1f 44 00 00 e9 a3 fe ff ff e8 95 d2 19 00 0f 0b e8 8e d2 19 00
RSP: 0018:ffff8880a8dd6828 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
RAX: ffff8880a8dc8480 RBX: 1ffff110151bad0b RCX: 1ffff110151b91b3
RDX: 0000000000000000 RSI: ffffffff81682483 RDI: 0000000000000293
RBP: ffff8880a8dd6920 R08: 0000000000000006 R09: ffff8880a8dc8d98
R10: ffff8880a8dc8480 R11: 0000000000000000 R12: 0000000000000200
R13: ffffed10151bad15 R14: 0000000000000000 R15: ffff8880a8dd68f8
 vprintk_default+0x28/0x30 kernel/printk/printk.c:1958
 vprintk_func+0x7e/0x189 kernel/printk/printk_safe.c:398
 printk+0xba/0xed kernel/printk/printk.c:1991
 __find_get_block_slow fs/buffer.c:235 [inline]
 __find_get_block fs/buffer.c:1294 [inline]
 __find_get_block.cold+0x81/0xfb fs/buffer.c:1288
 __getblk_slow fs/buffer.c:1039 [inline]
 __getblk_gfp+0x295/0xd20 fs/buffer.c:1320
 __bread_gfp+0x2f/0x300 fs/buffer.c:1354
 sb_bread include/linux/buffer_head.h:307 [inline]
 __fat_write_inode+0x33a/0xb70 fs/fat/inode.c:859
 fat_write_inode+0x96/0x190 fs/fat/inode.c:908
 write_inode fs/fs-writeback.c:1176 [inline]
 __writeback_single_inode+0xef1/0x1620 fs/fs-writeback.c:1375
 writeback_sb_inodes+0x762/0x1260 fs/fs-writeback.c:1580
 __writeback_inodes_wb+0x16d/0x3d0 fs/fs-writeback.c:1649
 wb_writeback+0xa2d/0xf70 fs/fs-writeback.c:1758
 wb_check_old_data_flush fs/fs-writeback.c:1860 [inline]
 wb_do_writeback fs/fs-writeback.c:1913 [inline]
 wb_workfn+0xf7f/0x16f0 fs/fs-writeback.c:1942
 process_one_work+0xd0c/0x1ce0 kernel/workqueue.c:2153
 worker_thread+0x143/0x14a0 kernel/workqueue.c:2296
 kthread+0x357/0x430 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352

Crashes (36):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/01/08 07:57 upstream 3bd6e94bec12 37dd2683 .config console log report ci-upstream-kasan-gce-selinux-root
2019/01/02 01:00 upstream 28e8c4bc8eb4 3d85f48c .config console log report ci-upstream-kasan-gce-selinux-root
2019/01/01 12:14 upstream e1ef035d272e 3d85f48c .config console log report ci-upstream-kasan-gce-smack-root
2018/12/20 17:56 upstream 1d51b4b1d3f2 aaf59e84 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/14 04:15 upstream 65e08c5e8631 fe7127be .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/13 23:32 upstream 65e08c5e8631 fe7127be .config console log report ci-upstream-kasan-gce-smack-root
2018/12/12 03:26 upstream f5d582777bcb 7795ae03 .config console log report ci-upstream-kasan-gce-smack-root
2018/12/09 23:45 upstream 0844895a2e51 96cc4c50 .config console log report ci-upstream-kasan-gce-root
2018/12/09 19:50 upstream 0844895a2e51 979179d6 .config console log report ci-upstream-kasan-gce-smack-root
2018/12/05 23:39 upstream d08970904582 764b42c4 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/04 23:08 upstream 0072a0c14d5b f162ad97 .config console log report ci-upstream-kasan-gce-root
2018/12/04 00:15 upstream 0072a0c14d5b 03f94a45 .config console log report ci-upstream-kasan-gce-selinux-root
2018/12/02 21:37 upstream 6a512726090a e0d8c853 .config console log report ci-upstream-kasan-gce-smack-root
2018/12/01 03:27 upstream b6839ef26e54 d8988561 .config console log report ci-upstream-kasan-gce-selinux-root
2018/11/29 23:09 upstream 60b548237fed 66071e27 .config console log report ci-upstream-kasan-gce-selinux-root
2018/11/24 15:21 upstream 7c98a4261827 ecc7c870 .config console log report ci-upstream-kasan-gce-root
2018/11/23 04:15 upstream edeca3a769ad 87815d9d .config console log report ci-upstream-kasan-gce-root
2018/11/20 12:15 upstream f2ce1065e767 9bc2a903 .config console log report ci-upstream-kasan-gce-root
2018/11/15 01:27 upstream d41217aac0a5 5f5f6d14 .config console log report ci-upstream-kasan-gce-root
2018/11/13 09:25 upstream ccda4af0f4b9 5f5f6d14 .config console log report ci-upstream-kasan-gce-selinux-root
2018/11/10 16:05 upstream aa4330e15c26 f9815aaf .config console log report ci-upstream-kasan-gce-smack-root
2018/11/07 18:35 upstream e09d51adfbb1 e85d2a61 .config console log report ci-upstream-kasan-gce-root
2018/11/05 11:25 upstream 651022382c7f 8bd6bd63 .config console log report ci-upstream-kasan-gce-root
2018/10/27 07:26 upstream 345671ea0f92 a8292de9 .config console log report ci-upstream-kasan-gce-smack-root
2018/10/17 02:17 upstream b955a910d7fd 1ba7fd7e .config console log report ci-upstream-kasan-gce-smack-root
2018/10/12 16:00 upstream 90ad18418c2d caf12900 .config console log report ci-upstream-kasan-gce-root
2018/10/11 19:29 upstream 0778a9f2dd92 ba6ddb43 .config console log report ci-upstream-kasan-gce-root
2018/09/23 07:48 upstream 328c6333ba3d 37079712 .config console log report ci-upstream-kasan-gce-smack-root
2019/01/08 08:00 linux-next 139287cc2cc0 37dd2683 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/25 14:45 linux-next 6a1d293238c1 8a41a0ad .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/03 11:22 linux-next 442b8cea2477 819002b0 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/12/01 03:08 linux-next 442b8cea2477 d8988561 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/11/21 17:23 linux-next 442b8cea2477 9db828b5 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/11/02 17:54 linux-next 25e9471b6a27 8bd6bd63 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/10/31 12:30 linux-next c39eb210d7a0 89781090 .config console log report ci-upstream-linux-next-kasan-gce-root
2018/10/29 12:42 linux-next b179f0826c6a 7df9db2e .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.