syzbot


INFO: task hung in kernfs_iop_permission

Status: auto-closed as invalid on 2019/12/12 06:07
Reported-by: syzbot+cd42f9369fadc51e4330@syzkaller.appspotmail.com
First crash: 1761d, last: 1714d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in kernfs_iop_permission (3) kernfs arm 6 435d 509d 0/26 auto-obsoleted due to no activity on 2023/05/13 13:27
linux-4.19 INFO: task hung in kernfs_iop_permission 1 1506d 1506d 0/1 auto-closed as invalid on 2020/07/06 20:13
upstream INFO: task hung in kernfs_iop_permission (2) kernfs 3 618d 710d 0/26 auto-obsoleted due to no activity on 2022/11/12 03:55
upstream INFO: task hung in kernfs_iop_permission kernfs 2 1728d 1731d 0/26 auto-closed as invalid on 2019/10/28 16:51

Sample crash report:
[26338]     0 26338    18145     8714      25       3        0             0 syz-executor.3
[26345]     0 26345    18178     8716      25       3        0             0 syz-executor.3
[26458]     0 26458    18145     8714      25       3        0             0 syz-executor.3
INFO: task udevd:31180 blocked for more than 140 seconds.
      Not tainted 4.14.138+ #32
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
udevd           D27968 31180    190 0x00000000
[26466]     0 26466    18178     8716      25       3        0             0 syz-executor.3
Call Trace:
[27809]     0 27809    18178     8747      26       4        0             0 syz-executor.3
[28001]     0 28001    18145     8745      26       4        0             0 syz-executor.3
[28991]     0 28991    18145     8745      26       4        0             0 syz-executor.3
 schedule+0x92/0x1c0 kernel/sched/core.c:3498
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3556
[29369]     0 29369    18178     8748      26       4        0             0 syz-executor.3
[29936]     0 29936    18178     8748      26       4        0             0 syz-executor.3
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x595/0x13e0 kernel/locking/mutex.c:893
[29938]     0 29938    18178     8748      26       4        0             0 syz-executor.3
[16912]     0 16912    18244     8751      26       4        0             0 syz-executor.3
[17096]     0 17096    18145     8715      25       3        0             0 syz-executor.3
 kernfs_iop_permission+0x4e/0x90 fs/kernfs/inode.c:301
 do_inode_permission fs/namei.c:386 [inline]
 __inode_permission2+0x22c/0x2c0 fs/namei.c:428
 inode_permission2+0x2d/0x100 fs/namei.c:485
[17104]     0 17104    18244     8723      25       3        0             0 syz-executor.3
[17295]     0 17295    18244     8755      26       4        0             0 syz-executor.3
 may_lookup fs/namei.c:1731 [inline]
 link_path_walk+0x8a6/0x1110 fs/namei.c:2111
 path_lookupat.isra.0+0xde/0x7e0 fs/namei.c:2356
[17299]     0 17299    18145     8717      25       3        0             0 syz-executor.3
[17304]     0 17304    18244     8755      26       4        0             0 syz-executor.3
[17590]     0 17590    18145     8745      26       4        0             0 syz-executor.3
 filename_lookup+0x1a1/0x3b0 fs/namei.c:2391
[17731]     0 17731    18145     8712      24       3        0             0 syz-executor.3
[17768]     0 17768    18178     8716      25       3        0             0 syz-executor.3
 SYSC_readlinkat fs/stat.c:394 [inline]
 SyS_readlinkat+0xbe/0x2b0 fs/stat.c:382
[17788]     0 17788    18145     8712      24       3        0             0 syz-executor.3
[18534]     0 18534    18211     8749      33       4        0             0 syz-executor.3
 do_syscall_64+0x19b/0x520 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
[18633]     0 18633    18211     8749      26       4        0             0 syz-executor.3
[20190]     0 20190    18145     8713      25       3        0             0 syz-executor.3
RIP: 0033:0x7efc94f76577
RSP: 002b:00007ffd1b58cd68 EFLAGS: 00000246 ORIG_RAX: 0000000000000059
RAX: ffffffffffffffda RBX: 000000000221f030 RCX: 00007efc94f76577
RDX: 0000000000000400 RSI: 00007ffd1b58cd70 RDI: 00007ffd1b58d250
[20234]     0 20234    18211     8719      26       3        0             0 syz-executor.3
RBP: 0000000002237af0 R08: 0000000002237af0 R09: 7665642f7379732f
[20995]     0 20995    18178     8719      25       3        0             0 syz-executor.3
R10: 7269762f73656369 R11: 0000000000000246 R12: 00007ffd1b58d250
[21030]     0 21030    18145     8714      25       3        0             0 syz-executor.3
R13: 0000000000000400 R14: 000000000221f030 R15: 000000000000000b
INFO: task udevd:19146 blocked for more than 140 seconds.
[21116]     0 21116    18211     8719      26       3        0             0 syz-executor.3
      Not tainted 4.14.138+ #32
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[21405]     0 21405    18244     8754      26       4        0             0 syz-executor.3
udevd           D26128 19146    190 0x00000000
Call Trace:
[21452]     0 21452    18277     8756      26       4        0             0 syz-executor.3
[22361]     0 22361    18145     8714      25       3        0             0 syz-executor.3
[22371]     0 22371    18211     8718      25       3        0             0 syz-executor.3
[23561]     0 23561    18145     8746      26       4        0             0 syz-executor.3
 schedule+0x92/0x1c0 kernel/sched/core.c:3498
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3556
[23755]     0 23755    18145     8714      25       3        0             0 syz-executor.3
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x595/0x13e0 kernel/locking/mutex.c:893
[23761]     0 23761    18178     8716      25       3        0             0 syz-executor.3
[23827]     0 23827    18691     8749      26       4        0             0 syz-executor.3
[24501]     0 24501    18244     8752      26       4        0             0 syz-executor.3
 kernfs_iop_permission+0x4e/0x90 fs/kernfs/inode.c:301
[30590]     0 30590    18178    13261      32       3        0             0 syz-executor.3
 do_inode_permission fs/namei.c:386 [inline]
 __inode_permission2+0x22c/0x2c0 fs/namei.c:428
 inode_permission2+0x2d/0x100 fs/namei.c:485
 may_lookup fs/namei.c:1731 [inline]
 link_path_walk+0x8a6/0x1110 fs/namei.c:2111
[30595]     0 30595    18209    13292      32       3        0             0 syz-executor.3
 path_lookupat.isra.0+0xde/0x7e0 fs/namei.c:2356
[31180]     0 31180     5417      218      14       3        0         -1000 udevd
[31221]     0 31221     5417      217      14       3        0         -1000 udevd
[ 1601]     0  1601    18113       15      23       3        0             0 syz-executor.0
 filename_lookup+0x1a1/0x3b0 fs/namei.c:2391
[ 1602]     0  1602    18112     8732      24       4        0             0 syz-executor.0
[ 5615]     0  5615    18145     8715      26       3        0             0 syz-executor.3
[ 5627]     0  5627    18178     8718      26       3        0             0 syz-executor.3
 user_path_at include/linux/namei.h:57 [inline]
 vfs_statx+0xe1/0x180 fs/stat.c:185
 vfs_stat include/linux/fs.h:3085 [inline]
 SYSC_newstat fs/stat.c:337 [inline]
 SyS_newstat+0x96/0x110 fs/stat.c:333
[ 5763]     0  5763    18145     8714      25       3        0             0 syz-executor.3
[ 5764]     0  5764    18211     8752      26       4        0             0 syz-executor.3
[ 5771]     0  5771    18178     8718      25       3        0             0 syz-executor.3
[ 5947]     0  5947    18211     8750      26       4        0             0 syz-executor.3
[ 6185]     0  6185    18402     8746      26       4        0             0 syz-executor.3
 do_syscall_64+0x19b/0x520 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 7178]     0  7178    18178     8749      26       4        0             0 syz-executor.3
RIP: 0033:0x7efc94f74c65
[ 7353]     0  7353    18178     8748      33       4        0             0 syz-executor.3
RSP: 002b:00007ffd1b589138 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
RAX: ffffffffffffffda RBX: 000000000226a7d8 RCX: 00007efc94f74c65
RDX: 00007ffd1b5891b0 RSI: 00007ffd1b5891b0 RDI: 00007ffd1b589640
RBP: 0000000002254980 R08: 00007ffd1b589a40 R09: 00007ffd1b589670
R10: 6f6c622f6c617574 R11: 0000000000000246 R12: 0000000002257a00
R13: 0000000000625500 R14: 000000000221f030 R15: 0000000002257a00
[ 8535]     0  8535    18211     8752      27       4        0             0 syz-executor.3
[ 8606]     0  8606    18211     8752      27       4        0             0 syz-executor.3
INFO: task blkid:19157 blocked for more than 140 seconds.
      Not tainted 4.14.138+ #32
[ 8684]     0  8684    18145     8749      26       4        0             0 syz-executor.3
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
blkid           D27888 19157  19142 0x00000000
[ 9986]     0  9986    18145     8712      25       3        0             0 syz-executor.0
Call Trace:
[ 9992]     0  9992    18178     8714      25       3        0             0 syz-executor.0
[10021]     0 10021    18211     8750      26       4        0             0 syz-executor.0
[10114]     0 10114    18113       15      23       3        0             0 syz-executor.2
[10122]     0 10122    18112     8732      24       4        0             0 syz-executor.2
 schedule+0x92/0x1c0 kernel/sched/core.c:3498
[10629]     0 10629    18145     8712      25       3        0             0 syz-executor.0
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3556
[11579]     0 11579    18211     8749      26       4        0             0 syz-executor.0
[11703]     0 11703    18145     8716      26       3        0             0 syz-executor.3
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x595/0x13e0 kernel/locking/mutex.c:893
[11709]     0 11709    18211     8720      26       3        0             0 syz-executor.3
 kernfs_iop_permission+0x4e/0x90 fs/kernfs/inode.c:301
[11968]     0 11968    18145     8714      25       3        0             0 syz-executor.3
 do_inode_permission fs/namei.c:386 [inline]
 __inode_permission2+0x22c/0x2c0 fs/namei.c:428
[11972]     0 11972    18211     8719      25       3        0             0 syz-executor.3
 inode_permission2+0x2d/0x100 fs/namei.c:485
 may_lookup fs/namei.c:1731 [inline]
 link_path_walk+0x8a6/0x1110 fs/namei.c:2111
 path_openat+0x178/0x2be0 fs/namei.c:3596
[12215]     0 12215    18178     8710      25       3        0          1000 syz-executor.2
[12235]     0 12235    18211     8718      30       3        0          1000 syz-executor.2
 do_filp_open+0x1a1/0x280 fs/namei.c:3631
[12698]     0 12698    18113       16      23       3        0             0 syz-executor.5
[12699]     0 12699    18112     8714      24       4        0             0 syz-executor.5
[13776]     0 13776    18145     8715      25       3        0             0 syz-executor.3
[13827]     0 13827    34629     8729      27       3        0             0 syz-executor.3
 do_sys_open+0x2ca/0x590 fs/open.c:1096
[13839]     0 13839    18145     8714      25       3        0             0 syz-executor.3
[13841]     0 13841    18178     8716      25       3        0             0 syz-executor.3
 do_syscall_64+0x19b/0x520 arch/x86/entry/common.c:292
[13879]     0 13879    18145     8703      24       3        0             0 syz-executor.0
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x7f4be1490120
RSP: 002b:00007fffa8268b18 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[13880]     0 13880    18145     8712      25       3        0             0 syz-executor.0
RAX: ffffffffffffffda RBX: 00007fffa8269b60 RCX: 00007f4be1490120
RDX: 00007fffa8268b36 RSI: 0000000000000000 RDI: 00007fffa8268b20
[14169]     0 14169    18145     8743      26       4        0          1000 syz-executor.5
[14614]     0 14614    18178     8742      26       4        0          1000 syz-executor.2
[14785]     0 14785    18211     8749      25       4        0             0 syz-executor.3
RBP: 0000000000110300 R08: 0000000000000000 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa826abd8
[14839]     0 14839    18211     8749      25       4        0             0 syz-executor.3
[15219]     0 15219    18244     8752      26       4        0             0 syz-executor.3
R13: 0000000000000000 R14: 00007f4be1971820 R15: 00007f4be17672a2

Showing all locks held in the system:
1 lock held by init/1:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by khungtaskd/23:
 #0:  (tasklist_lock){.+.+}, at: [<00000000662ab4c2>] debug_show_all_locks+0x7c/0x21a kernel/locking/lockdep.c:4541
1 lock held by udevd/190:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by rsyslogd/1629:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
2 locks held by getty/1756:
 #0:  (&tty->ldisc_sem){++++}, at: [<000000004f045571>] tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:284
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<000000002a3ad898>] n_tty_read+0x1f7/0x1700 drivers/tty/n_tty.c:2156
1 lock held by syz-fuzzer/1776:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by syz-fuzzer/1779:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by syz-fuzzer/1782:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by syz-executor.3/16737:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/31180:
 #0:  (kernfs_mutex){+.+.}, at: [<00000000f0a901be>] kernfs_iop_permission+0x4e/0x90 fs/kernfs/inode.c:301
1 lock held by syz-executor.5/12699:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18767:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18783:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18784:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18790:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18794:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18795:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18796:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18798:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18800:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18802:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18803:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18804:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18806:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18807:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18810:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18812:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18815:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18816:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18819:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18821:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18822:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18823:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18824:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18826:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18827:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18828:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18829:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18830:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18835:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18837:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18842:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18845:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18846:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18847:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18848:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18852:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18853:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18854:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18855:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18856:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18857:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18858:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18861:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18875:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18881:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18882:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18883:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18884:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18885:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18886:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18887:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18888:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18889:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18891:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18892:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18895:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18896:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18901:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18902:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18903:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18904:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18905:
[15270]     0 15270    18244     8752      26       4        0             0 syz-executor.3
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18906:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18907:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18908:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18909:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18910:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18911:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18912:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18913:
[15997]     0 15997    18178     8745      33       4        0             0 syz-executor.5
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18914:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18915:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18916:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18917:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
[16280]     0 16280    18178     8749      26       4        0             0 syz-executor.3
1 lock held by blkid/18918:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18919:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18922:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18923:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18924:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18925:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18926:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18928:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18929:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18930:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
[16295]     0 16295    18113       15      23       3        0             0 syz-executor.1
1 lock held by udevd/18931:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18932:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18934:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18937:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18938:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18939:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18940:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18941:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18942:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18946:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18949:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18950:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
[16296]     0 16296    18112     8731      24       4        0             0 syz-executor.1
1 lock held by udevd/18951:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18952:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18953:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18954:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18955:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18956:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18957:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18958:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18959:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18960:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18961:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18962:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18963:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18965:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18967:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
[16668]     0 16668    18310     8752      27       4        0             0 syz-executor.2
1 lock held by blkid/18968:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18969:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18970:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18971:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18972:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18975:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18978:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18988:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18989:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18990:
[16921]     0 16921    18145     8716      25       3        0             0 syz-executor.0
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/18991:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/18992:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18993:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by udevd/18994:
 #0:  (&ei->i_mmap_sem){++++}, at: [<00000000f246da5b>] ext4_filemap_fault+0x7c/0xb0 fs/ext4/inode.c:6196
1 lock held by blkid/18996:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
[16928]     0 16928    18211     8720      25       3        0             0 syz-executor.0
1 lock held by blkid/18997:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by blkid/19009:
 #0:  (&mm->mmap_sem){++++}, at: [<000000004cc8fc77>] __do_page_fault+0x282/0xbb0 arch/x86/mm/fault.c:1352
1 lock held by udevd/19146:
 #0:  (kernfs_mutex){+.+.}, at: [<00000000f0a901be>] kernfs_iop_permission+0x4e/0x90 fs/kernfs/inode.c:301
1 lock held by blkid/19157:
 #0:  (kernfs_mutex){+.+.}, at: [<00000000f0a901be>] kernfs_iop_permission+0x4e/0x90 fs/kernfs/inode.c:301

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 23 Comm: khungtaskd Not tainted 4.14.138+ #32
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0xca/0x134 lib/dump_stack.c:53
 nmi_cpu_backtrace.cold+0x47/0x86 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x119/0x147 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline]
 watchdog+0x629/0xbe0 kernel/hung_task.c:274
 kthread+0x31f/0x430 kernel/kthread.c:232
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:404
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 18990 Comm: blkid Not tainted 4.14.138+ #32
task: 000000001cf0835b task.stack: 0000000038087cb1
RIP: 0010:trace_event_get_offsets_lock_acquire include/trace/events/lock.h:13 [inline]
RIP: 0010:perf_trace_lock_acquire+0xcb/0x4e0 include/trace/events/lock.h:13
RSP: 0000:ffff8881a8bd72a0 EFLAGS: 00000046
RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: 1ffffffff1e447d6 RSI: ffffffff8f223e98 RDI: ffffffff8eec0c60
RBP: ffff8881a8bd7380 R08: 0000000000000000 R09: 0000000000000001
R10: ffffffff8cbf5790 R11: ffffffff8f22ce8b R12: ffffffff8eec0be0
R13: ffffffff8f223e98 R14: ffff8881a8bd7358 R15: 0000000000000000
FS:  00007f827e759740(0000) GS:ffff8881dba00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007efc94ff2aa1 CR3: 0000000192bfc006 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 trace_lock_acquire include/trace/events/lock.h:13 [inline]
 lock_acquire+0x279/0x360 kernel/locking/lockdep.c:3990
 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:128 [inline]
 _raw_spin_lock_irq+0x36/0x40 kernel/locking/spinlock.c:168
 spin_lock_irq include/linux/spinlock.h:342 [inline]
 shrink_inactive_list+0x417/0x1130 mm/vmscan.c:1829
 shrink_list mm/vmscan.c:2179 [inline]
 shrink_node_memcg+0x5ad/0x1470 mm/vmscan.c:2444
 shrink_node+0x2f3/0xc30 mm/vmscan.c:2636
 shrink_zones mm/vmscan.c:2818 [inline]
 do_try_to_free_pages+0x350/0xd80 mm/vmscan.c:2876
 try_to_free_pages+0x27c/0x710 mm/vmscan.c:3082
 __perform_reclaim mm/page_alloc.c:3602 [inline]
 __alloc_pages_direct_reclaim mm/page_alloc.c:3624 [inline]
 __alloc_pages_slowpath mm/page_alloc.c:4011 [inline]
 __alloc_pages_nodemask+0xaee/0x2370 mm/page_alloc.c:4220
 __alloc_pages include/linux/gfp.h:461 [inline]
 __alloc_pages_node include/linux/gfp.h:474 [inline]
 alloc_pages_node include/linux/gfp.h:488 [inline]
 alloc_zeroed_user_highpage_movable include/linux/highmem.h:184 [inline]
 do_anonymous_page mm/memory.c:3133 [inline]
 handle_pte_fault mm/memory.c:3987 [inline]
 __handle_mm_fault+0x1116/0x2700 mm/memory.c:4113
 handle_mm_fault+0x2f1/0x6da mm/memory.c:4150
 __do_page_fault+0x477/0xbb0 arch/x86/mm/fault.c:1423
 page_fault+0x42/0x50 arch/x86/entry/entry_64.S:1122
RIP: 07ff:0x1052320
RSP: 7bf95f10:0000000001051eb0 EFLAGS: 00000001
Code: 03 00 00 49 8d 45 18 4d 8b bc 24 80 00 00 00 48 89 c2 48 89 85 38 ff ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 48 03 00 00 49 8b 7d 18 48 85 ff 0f 84 d6 02 00 00 e8 bd 

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/08/14 06:07 android-4.14 0e28694fe668 ef801a3e .config console log report ci-android-414-kasan-gce-root
2019/06/27 09:49 android-4.14 93c338c2e7ba 7509bf36 .config console log report ci-android-414-kasan-gce-root
* Struck through repros no longer work on HEAD.