INFO: task hung in mount_bdev (3)
6 views
Skip to first unread message
syzbot
Dec 18, 2020, 11:11:10 PM12/18/20
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 3f2ecb86 Linux 4.14.212
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1352d8c5500000
kernel config: https://syzkaller.appspot.com/x/.config?x=80549830ca6ffbb2
dashboard link: https://syzkaller.appspot.com/bug?extid=4b0dd68b46b492efbd33
compiler: gcc (GCC) 10.1.0-syz 20200507
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=11ef5123500000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10592287500000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+4b0dd6...@syzkaller.appspotmail.com
UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
UDF-fs: Scanning with blocksize 512 failed
print_req_error: I/O error, dev loop3, sector 64
INFO: task syz-executor498:8007 blocked for more than 140 seconds.
Not tainted 4.14.212-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor498 D29920 8007 7998 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
mount_bdev+0x71/0x360 fs/super.c:1101
mount_fs+0x92/0x2a0 fs/super.c:1237
vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046
vfs_kern_mount fs/namespace.c:1036 [inline]
do_new_mount fs/namespace.c:2549 [inline]
do_mount+0xe53/0x2a00 fs/namespace.c:2879
SYSC_mount fs/namespace.c:3095 [inline]
SyS_mount+0xa8/0x120 fs/namespace.c:3072
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x44ab29
RSP: 002b:00007f894c4aedb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044ab29
RDX: 0000000020000040 RSI: 0000000020000280 RDI: 00000000200004c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffcf5eda3ff R14: 00007f894c4af9c0 R15: 0000000000000000
INFO: task syz-executor498:8003 blocked for more than 140 seconds.
Not tainted 4.14.212-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor498 D29848 8003 7996 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
__rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:588 [inline]
rwsem_down_write_failed+0x343/0x6d0 kernel/locking/rwsem-xadd.c:617
call_rwsem_down_write_failed+0x13/0x20 arch/x86/lib/rwsem.S:105
__down_write arch/x86/include/asm/rwsem.h:126 [inline]
down_write+0x4f/0x90 kernel/locking/rwsem.c:56
grab_super+0x55/0x140 fs/super.c:373
sget_userns+0x2b1/0xc10 fs/super.c:504
sget+0xd1/0x110 fs/super.c:572
mount_bdev+0xcd/0x360 fs/super.c:1107
mount_fs+0x92/0x2a0 fs/super.c:1237
vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046
vfs_kern_mount fs/namespace.c:1036 [inline]
do_new_mount fs/namespace.c:2549 [inline]
do_mount+0xe53/0x2a00 fs/namespace.c:2879
SYSC_mount fs/namespace.c:3095 [inline]
SyS_mount+0xa8/0x120 fs/namespace.c:3072
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x44ab29
RSP: 002b:00007f894c4aedb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044ab29
RDX: 0000000020000040 RSI: 0000000020000280 RDI: 00000000200004c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffcf5eda3ff R14: 00007f894c4af9c0 R15: 0000000000000000
INFO: task syz-executor498:8012 blocked for more than 140 seconds.
Not tainted 4.14.212-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor498 D29920 8012 7993 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
mount_bdev+0x71/0x360 fs/super.c:1101
mount_fs+0x92/0x2a0 fs/super.c:1237
vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046
vfs_kern_mount fs/namespace.c:1036 [inline]
do_new_mount fs/namespace.c:2549 [inline]
do_mount+0xe53/0x2a00 fs/namespace.c:2879
SYSC_mount fs/namespace.c:3095 [inline]
SyS_mount+0xa8/0x120 fs/namespace.c:3072
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x44ab29
RSP: 002b:00007f894c4aedb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044ab29
RDX: 0000000020000040 RSI: 0000000020000280 RDI: 00000000200004c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffcf5eda3ff R14: 00007f894c4af9c0 R15: 0000000000000000
INFO: task syz-executor498:8009 blocked for more than 140 seconds.
Not tainted 4.14.212-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor498 D29920 8009 7997 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
mount_bdev+0x71/0x360 fs/super.c:1101
mount_fs+0x92/0x2a0 fs/super.c:1237
vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046
vfs_kern_mount fs/namespace.c:1036 [inline]
do_new_mount fs/namespace.c:2549 [inline]
do_mount+0xe53/0x2a00 fs/namespace.c:2879
SYSC_mount fs/namespace.c:3095 [inline]
SyS_mount+0xa8/0x120 fs/namespace.c:3072
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x44ab29
RSP: 002b:00007f894c4aedb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044ab29
RDX: 0000000020000040 RSI: 0000000020000280 RDI: 00000000200004c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffcf5eda3ff R14: 00007f894c4af9c0 R15: 0000000000000000
INFO: task syz-executor498:8011 blocked for more than 140 seconds.
Not tainted 4.14.212-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor498 D29920 8011 7995 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
mount_bdev+0x71/0x360 fs/super.c:1101
mount_fs+0x92/0x2a0 fs/super.c:1237
vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046
vfs_kern_mount fs/namespace.c:1036 [inline]
do_new_mount fs/namespace.c:2549 [inline]
do_mount+0xe53/0x2a00 fs/namespace.c:2879
SYSC_mount fs/namespace.c:3095 [inline]
SyS_mount+0xa8/0x120 fs/namespace.c:3072
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x44ab29
RSP: 002b:00007f894c4aedb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044ab29
RDX: 0000000020000040 RSI: 0000000020000280 RDI: 00000000200004c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffcf5eda3ff R14: 00007f894c4af9c0 R15: 0000000000000000
Showing all locks held in the system:
1 lock held by khungtaskd/1532:
#0: (tasklist_lock){.+.+}, at: [<ffffffff81430cb4>] debug_show_all_locks+0x7c/0x21a kernel/locking/lockdep.c:4548
1 lock held by syz-executor498/8007:
#0: (&bdev->bd_fsfreeze_mutex){+.+.}, at: [<ffffffff818995e1>] mount_bdev+0x71/0x360 fs/super.c:1101
2 locks held by syz-executor498/8003:
#0: (&bdev->bd_fsfreeze_mutex){+.+.}, at: [<ffffffff818995e1>] mount_bdev+0x71/0x360 fs/super.c:1101
#1: (&type->s_umount_key#47){+.+.}, at: [<ffffffff81898675>] grab_super+0x55/0x140 fs/super.c:373
1 lock held by syz-executor498/8012:
#0: (&bdev->bd_fsfreeze_mutex){+.+.}, at: [<ffffffff818995e1>] mount_bdev+0x71/0x360 fs/super.c:1101
1 lock held by syz-executor498/8009:
#0: (&bdev->bd_fsfreeze_mutex){+.+.}, at: [<ffffffff818995e1>] mount_bdev+0x71/0x360 fs/super.c:1101
1 lock held by syz-executor498/8011:
#0: (&bdev->bd_fsfreeze_mutex){+.+.}, at: [<ffffffff818995e1>] mount_bdev+0x71/0x360 fs/super.c:1101
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 1532 Comm: khungtaskd Not tainted 4.14.212-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x283 lib/dump_stack.c:58
nmi_cpu_backtrace.cold+0x57/0x93 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x13a/0x17f lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline]
watchdog+0x5b9/0xb40 kernel/hung_task.c:274
kthread+0x30d/0x420 kernel/kthread.c:232
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 4625 Comm: systemd-journal Not tainted 4.14.212-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8880a1148180 task.stack: ffff8880a1150000
RIP: 0010:__sanitizer_cov_trace_pc+0x23/0x50 kernel/kcov.c:68
RSP: 0018:ffff8880a1157e20 EFLAGS: 00000246
RAX: ffff8880a1148180 RBX: ffff8880a1157f58 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880a1148188
RBP: 1ffff1101422afc9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000c000003e
R13: 0000000000000100 R14: 0000000000000027 R15: ffff8880a1157fd0
FS: 00007fc0b225a8c0(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc0af59c000 CR3: 00000000a1435000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
syscall_trace_enter+0x1fd/0xc20 arch/x86/entry/common.c:99
do_syscall_64+0x41b/0x640 arch/x86/entry/common.c:283
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fc0b14f3f17
RSP: 002b:00007ffebef988a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000027
RAX: ffffffffffffffda RBX: 000056431b8c81e0 RCX: 00007fc0b14f3f17
RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 000056431b8c81e0
RBP: 00007ffebef989a0 R08: 00007ffebefc4000 R09: 0000010df6a63a6f
R10: 00086980b2e76fd4 R11: 0000000000000202 R12: 0000000000001211
R13: 00007ffebef98a38 R14: ffffffffffffffff R15: 0005b6c9636c6197
Code: 00 00 e9 c6 ed ff ff 90 65 48 8b 04 25 80 df 01 00 48 85 c0 74 1a 65 8b 15 bb 9f aa 7e 81 e2 00 01 1f 00 75 0b 8b 90 58 13 00 00 <83> fa 01 74 01 c3 48 8b 34 24 48 8b 88 60 13 00 00 8b 80 5c 13
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this issue, for details see:
https://goo.gl/tpsmEJ#testing-patches
syzbot found the following issue on:
HEAD commit: 3f2ecb86 Linux 4.14.212
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1352d8c5500000
kernel config: https://syzkaller.appspot.com/x/.config?x=80549830ca6ffbb2
dashboard link: https://syzkaller.appspot.com/bug?extid=4b0dd68b46b492efbd33
compiler: gcc (GCC) 10.1.0-syz 20200507
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=11ef5123500000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=10592287500000
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+4b0dd6...@syzkaller.appspotmail.com
UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
UDF-fs: Scanning with blocksize 512 failed
print_req_error: I/O error, dev loop3, sector 64
INFO: task syz-executor498:8007 blocked for more than 140 seconds.
Not tainted 4.14.212-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor498 D29920 8007 7998 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
mount_bdev+0x71/0x360 fs/super.c:1101
mount_fs+0x92/0x2a0 fs/super.c:1237
vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046
vfs_kern_mount fs/namespace.c:1036 [inline]
do_new_mount fs/namespace.c:2549 [inline]
do_mount+0xe53/0x2a00 fs/namespace.c:2879
SYSC_mount fs/namespace.c:3095 [inline]
SyS_mount+0xa8/0x120 fs/namespace.c:3072
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x44ab29
RSP: 002b:00007f894c4aedb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044ab29
RDX: 0000000020000040 RSI: 0000000020000280 RDI: 00000000200004c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffcf5eda3ff R14: 00007f894c4af9c0 R15: 0000000000000000
INFO: task syz-executor498:8003 blocked for more than 140 seconds.
Not tainted 4.14.212-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor498 D29848 8003 7996 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
__rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:588 [inline]
rwsem_down_write_failed+0x343/0x6d0 kernel/locking/rwsem-xadd.c:617
call_rwsem_down_write_failed+0x13/0x20 arch/x86/lib/rwsem.S:105
__down_write arch/x86/include/asm/rwsem.h:126 [inline]
down_write+0x4f/0x90 kernel/locking/rwsem.c:56
grab_super+0x55/0x140 fs/super.c:373
sget_userns+0x2b1/0xc10 fs/super.c:504
sget+0xd1/0x110 fs/super.c:572
mount_bdev+0xcd/0x360 fs/super.c:1107
mount_fs+0x92/0x2a0 fs/super.c:1237
vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046
vfs_kern_mount fs/namespace.c:1036 [inline]
do_new_mount fs/namespace.c:2549 [inline]
do_mount+0xe53/0x2a00 fs/namespace.c:2879
SYSC_mount fs/namespace.c:3095 [inline]
SyS_mount+0xa8/0x120 fs/namespace.c:3072
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x44ab29
RSP: 002b:00007f894c4aedb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044ab29
RDX: 0000000020000040 RSI: 0000000020000280 RDI: 00000000200004c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffcf5eda3ff R14: 00007f894c4af9c0 R15: 0000000000000000
INFO: task syz-executor498:8012 blocked for more than 140 seconds.
Not tainted 4.14.212-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor498 D29920 8012 7993 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
mount_bdev+0x71/0x360 fs/super.c:1101
mount_fs+0x92/0x2a0 fs/super.c:1237
vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046
vfs_kern_mount fs/namespace.c:1036 [inline]
do_new_mount fs/namespace.c:2549 [inline]
do_mount+0xe53/0x2a00 fs/namespace.c:2879
SYSC_mount fs/namespace.c:3095 [inline]
SyS_mount+0xa8/0x120 fs/namespace.c:3072
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x44ab29
RSP: 002b:00007f894c4aedb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044ab29
RDX: 0000000020000040 RSI: 0000000020000280 RDI: 00000000200004c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffcf5eda3ff R14: 00007f894c4af9c0 R15: 0000000000000000
INFO: task syz-executor498:8009 blocked for more than 140 seconds.
Not tainted 4.14.212-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor498 D29920 8009 7997 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
mount_bdev+0x71/0x360 fs/super.c:1101
mount_fs+0x92/0x2a0 fs/super.c:1237
vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046
vfs_kern_mount fs/namespace.c:1036 [inline]
do_new_mount fs/namespace.c:2549 [inline]
do_mount+0xe53/0x2a00 fs/namespace.c:2879
SYSC_mount fs/namespace.c:3095 [inline]
SyS_mount+0xa8/0x120 fs/namespace.c:3072
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x44ab29
RSP: 002b:00007f894c4aedb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044ab29
RDX: 0000000020000040 RSI: 0000000020000280 RDI: 00000000200004c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffcf5eda3ff R14: 00007f894c4af9c0 R15: 0000000000000000
INFO: task syz-executor498:8011 blocked for more than 140 seconds.
Not tainted 4.14.212-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor498 D29920 8011 7995 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2808 [inline]
__schedule+0x88b/0x1de0 kernel/sched/core.c:3384
schedule+0x8d/0x1b0 kernel/sched/core.c:3428
schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
mount_bdev+0x71/0x360 fs/super.c:1101
mount_fs+0x92/0x2a0 fs/super.c:1237
vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046
vfs_kern_mount fs/namespace.c:1036 [inline]
do_new_mount fs/namespace.c:2549 [inline]
do_mount+0xe53/0x2a00 fs/namespace.c:2879
SYSC_mount fs/namespace.c:3095 [inline]
SyS_mount+0xa8/0x120 fs/namespace.c:3072
do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x44ab29
RSP: 002b:00007f894c4aedb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00000000006dbc28 RCX: 000000000044ab29
RDX: 0000000020000040 RSI: 0000000020000280 RDI: 00000000200004c0
RBP: 00000000006dbc20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c
R13: 00007ffcf5eda3ff R14: 00007f894c4af9c0 R15: 0000000000000000
Showing all locks held in the system:
1 lock held by khungtaskd/1532:
#0: (tasklist_lock){.+.+}, at: [<ffffffff81430cb4>] debug_show_all_locks+0x7c/0x21a kernel/locking/lockdep.c:4548
1 lock held by syz-executor498/8007:
#0: (&bdev->bd_fsfreeze_mutex){+.+.}, at: [<ffffffff818995e1>] mount_bdev+0x71/0x360 fs/super.c:1101
2 locks held by syz-executor498/8003:
#0: (&bdev->bd_fsfreeze_mutex){+.+.}, at: [<ffffffff818995e1>] mount_bdev+0x71/0x360 fs/super.c:1101
#1: (&type->s_umount_key#47){+.+.}, at: [<ffffffff81898675>] grab_super+0x55/0x140 fs/super.c:373
1 lock held by syz-executor498/8012:
#0: (&bdev->bd_fsfreeze_mutex){+.+.}, at: [<ffffffff818995e1>] mount_bdev+0x71/0x360 fs/super.c:1101
1 lock held by syz-executor498/8009:
#0: (&bdev->bd_fsfreeze_mutex){+.+.}, at: [<ffffffff818995e1>] mount_bdev+0x71/0x360 fs/super.c:1101
1 lock held by syz-executor498/8011:
#0: (&bdev->bd_fsfreeze_mutex){+.+.}, at: [<ffffffff818995e1>] mount_bdev+0x71/0x360 fs/super.c:1101
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 1532 Comm: khungtaskd Not tainted 4.14.212-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x1b2/0x283 lib/dump_stack.c:58
nmi_cpu_backtrace.cold+0x57/0x93 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x13a/0x17f lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline]
watchdog+0x5b9/0xb40 kernel/hung_task.c:274
kthread+0x30d/0x420 kernel/kthread.c:232
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 4625 Comm: systemd-journal Not tainted 4.14.212-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8880a1148180 task.stack: ffff8880a1150000
RIP: 0010:__sanitizer_cov_trace_pc+0x23/0x50 kernel/kcov.c:68
RSP: 0018:ffff8880a1157e20 EFLAGS: 00000246
RAX: ffff8880a1148180 RBX: ffff8880a1157f58 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880a1148188
RBP: 1ffff1101422afc9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000c000003e
R13: 0000000000000100 R14: 0000000000000027 R15: ffff8880a1157fd0
FS: 00007fc0b225a8c0(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc0af59c000 CR3: 00000000a1435000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
syscall_trace_enter+0x1fd/0xc20 arch/x86/entry/common.c:99
do_syscall_64+0x41b/0x640 arch/x86/entry/common.c:283
entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x7fc0b14f3f17
RSP: 002b:00007ffebef988a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000027
RAX: ffffffffffffffda RBX: 000056431b8c81e0 RCX: 00007fc0b14f3f17
RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 000056431b8c81e0
RBP: 00007ffebef989a0 R08: 00007ffebefc4000 R09: 0000010df6a63a6f
R10: 00086980b2e76fd4 R11: 0000000000000202 R12: 0000000000001211
R13: 00007ffebef98a38 R14: ffffffffffffffff R15: 0005b6c9636c6197
Code: 00 00 e9 c6 ed ff ff 90 65 48 8b 04 25 80 df 01 00 48 85 c0 74 1a 65 8b 15 bb 9f aa 7e 81 e2 00 01 1f 00 75 0b 8b 90 58 13 00 00 <83> fa 01 74 01 c3 48 8b 34 24 48 8b 88 60 13 00 00 8b 80 5c 13
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this issue, for details see:
https://goo.gl/tpsmEJ#testing-patches
Reply all
Reply to author
Forward
0 new messages