syzbot


INFO: task hung in filename_create

Status: public: reported C repro on 2019/04/13 00:00
Reported-by: syzbot+ff44edecf201011c773a@syzkaller.appspotmail.com
First crash: 2180d, last: 2061d
Similar bugs (12)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 INFO: task hung in filename_create 6 1612d 1712d 0/1 auto-closed as invalid on 2020/03/17 23:03
upstream INFO: task hung in filename_create (2) fs 11 1596d 1700d 0/26 auto-closed as invalid on 2020/03/04 11:54
upstream INFO: task hung in filename_create (3) fs 16 1061d 1217d 0/26 auto-closed as invalid on 2021/08/20 18:08
linux-4.19 INFO: task hung in filename_create (3) 3 889d 952d 0/1 auto-closed as invalid on 2022/03/11 04:15
android-44 INFO: task hung in filename_create 1 2194d 2194d 0/2 auto-closed as invalid on 2019/02/22 14:19
linux-4.19 INFO: task hung in filename_create (2) 1 1153d 1153d 0/1 auto-closed as invalid on 2021/06/20 16:38
linux-4.14 INFO: task hung in filename_create 2 1585d 1589d 0/1 auto-closed as invalid on 2020/04/14 04:42
linux-4.19 INFO: task hung in filename_create (4) 2 522d 586d 0/1 auto-obsoleted due to no activity on 2023/03/13 04:19
linux-5.15 INFO: task hung in filename_create 3 14h31m 3d12h 0/3 upstream: reported on 2024/04/15 05:31
android-44 INFO: task hung in filename_create (2) 1 1815d 1815d 0/2 auto-closed as invalid on 2019/10/25 08:49
upstream INFO: task hung in filename_create (4) fs C error error 146 1d16h 848d 0/26 upstream: reported C repro on 2021/12/21 22:55
upstream INFO: task hung in filename_create fs 121 1905d 2191d 0/26 closed as dup on 2018/09/08 15:39

Sample crash report:
INFO: task syz-executor235:3915 blocked for more than 140 seconds.
      Not tainted 4.9.113-g47bbcd6 #10
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor235 D29088  3915   3911 0x00000004
 ffff8801d7c8b000 0000000000000000 ffff8801bc071f80 ffff8801d9a6b000
 ffff8801db321c18 ffff8801d6e0fac8 ffffffff839e909d ffffffff81235647
 0000000000000000 ffff8801d7c8b8c0 0000000600000007 ffff8801db3224e8
Call Trace:
 [<ffffffff839ea69f>] schedule+0x7f/0x1b0 kernel/sched/core.c:3553
 [<ffffffff839f5cd8>] __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:526 [inline]
 [<ffffffff839f5cd8>] rwsem_down_write_failed+0x598/0x990 kernel/locking/rwsem-xadd.c:555
 [<ffffffff81ee7587>] call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:105
 [<ffffffff8122c270>] __down_write arch/x86/include/asm/rwsem.h:125 [inline]
 [<ffffffff8122c270>] down_write_nested+0x60/0xa0 kernel/locking/rwsem.c:174
 [<ffffffff815aa01a>] inode_lock_nested include/linux/fs.h:801 [inline]
 [<ffffffff815aa01a>] filename_create+0x17a/0x490 fs/namei.c:3639
 [<ffffffff815ac49b>] user_path_create fs/namei.c:3697 [inline]
 [<ffffffff815ac49b>] SYSC_mkdirat fs/namei.c:3841 [inline]
 [<ffffffff815ac49b>] SyS_mkdirat+0xbb/0x260 fs/namei.c:3833
 [<ffffffff81006316>] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282
 [<ffffffff839f9f93>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb

Showing all locks held in the system:
2 locks held by khungtaskd/520:
 #0:  (rcu_read_lock){......}, at: [<ffffffff8136675c>] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline]
 #0:  (rcu_read_lock){......}, at: [<ffffffff8136675c>] watchdog+0x11c/0xa20 kernel/hung_task.c:239
 #1:  (tasklist_lock){.+.+..}, at: [<ffffffff81425de7>] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336
2 locks held by getty/3776:
 #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff839f8142>] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
 #1:  (&ldata->atomic_read_lock){+.+...}, at: [<ffffffff8211ee22>] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142
2 locks held by syz-executor235/3915:
 #0:  (sb_writers#8){.+.+.+}, at: [<ffffffff815e0a8f>] sb_start_write include/linux/fs.h:1573 [inline]
 #0:  (sb_writers#8){.+.+.+}, at: [<ffffffff815e0a8f>] mnt_want_write+0x3f/0xb0 fs/namespace.c:391
 #1:  (&type->i_mutex_dir_key#3/1){+.+.+.}, at: [<ffffffff815aa01a>] inode_lock_nested include/linux/fs.h:801 [inline]
 #1:  (&type->i_mutex_dir_key#3/1){+.+.+.}, at: [<ffffffff815aa01a>] filename_create+0x17a/0x490 fs/namei.c:3639

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 520 Comm: khungtaskd Not tainted 4.9.113-g47bbcd6 #10
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801d8437d08 ffffffff81eb32a9 0000000000000000 0000000000000000
 0000000000000000 0000000000000001 ffffffff810b9bd0 ffff8801d8437d40
 ffffffff81ebe5a7 0000000000000000 0000000000000000 0000000000000003
Call Trace:
 [<ffffffff81eb32a9>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81eb32a9>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff81ebe5a7>] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99
 [<ffffffff81ebe53a>] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60
 [<ffffffff810b9cd4>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37
 [<ffffffff81366cf4>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline]
 [<ffffffff81366cf4>] check_hung_task kernel/hung_task.c:125 [inline]
 [<ffffffff81366cf4>] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline]
 [<ffffffff81366cf4>] watchdog+0x6b4/0xa20 kernel/hung_task.c:239
 [<ffffffff8119d0ad>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff839fa15c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 3914 Comm: syz-executor235 Not tainted 4.9.113-g47bbcd6 #10
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801d8539800 task.stack: ffff8801d7128000
RIP: 0010:[<ffffffff8123562a>] c [<ffffffff8123562a>] mark_held_locks+0xaa/0x130 kernel/locking/lockdep.c:2652
RSP: 0018:ffff8801d712f7b0  EFLAGS: 00000093
RAX: 0000000000000000 RBX: 0000000000000001 RCX: 1ffff1003b0a741d
RDX: 0000000000000002 RSI: ffff8801d853a0f0 RDI: ffff8801d853a112
RBP: ffff8801d712f7f0 R08: ffff8801d853a0e8 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d853a0c8
R13: ffffed003b0a7418 R14: ffff8801d8539800 R15: dffffc0000000000
FS:  00007fe2f5e78700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa2cf355000 CR3: 00000001b94e6000 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 0000000000000000c ffff8801d853a0c0c 0000000600000007c ffff8801d8539800c
 ffffffff839f969ac ffff8801d712f948c ffff8801ba8b6318c 0000000000000001c
 ffff8801d712f810c ffffffff81235a3bc 0000000000000296c ffff8801ba8b6318c
Call Trace:
 [<ffffffff81235a3b>] __trace_hardirqs_on_caller kernel/locking/lockdep.c:2689 [inline]
 [<ffffffff81235a3b>] trace_hardirqs_on_caller+0x38b/0x590 kernel/locking/lockdep.c:2736
 [<ffffffff81235c4d>] trace_hardirqs_on+0xd/0x10 kernel/locking/lockdep.c:2743
 [<ffffffff839f969a>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:162 [inline]
 [<ffffffff839f969a>] _raw_spin_unlock_irqrestore+0x5a/0x70 kernel/locking/spinlock.c:191
 [<ffffffff81221729>] spin_unlock_irqrestore include/linux/spinlock.h:362 [inline]
 [<ffffffff81221729>] prepare_to_wait_event+0x1d9/0x450 kernel/sched/wait.c:238
 [<ffffffff81907bbe>] request_wait_answer+0x22e/0x6e0 fs/fuse/dev.c:459
 [<ffffffff819086c9>] __fuse_request_send+0x109/0x1b0 fs/fuse/dev.c:480
 [<ffffffff819087cd>] fuse_request_send+0x5d/0x70 fs/fuse/dev.c:493
 [<ffffffff81912a24>] fuse_simple_request+0x2f4/0x660 fs/fuse/dev.c:551
 [<ffffffff8191adc3>] fuse_lookup_name+0x253/0x5d0 fs/fuse/dir.c:369
 [<ffffffff8191b22d>] fuse_lookup+0xed/0x3a0 fs/fuse/dir.c:406
 [<ffffffff81593e4c>] lookup_real fs/namei.c:1522 [inline]
 [<ffffffff81593e4c>] __lookup_hash+0x11c/0x190 fs/namei.c:1542
 [<ffffffff815aa046>] filename_create+0x1a6/0x490 fs/namei.c:3640
 [<ffffffff815ac49b>] user_path_create fs/namei.c:3697 [inline]
 [<ffffffff815ac49b>] SYSC_mkdirat fs/namei.c:3841 [inline]
 [<ffffffff815ac49b>] SyS_mkdirat+0xbb/0x260 fs/namei.c:3833
 [<ffffffff81006316>] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282
 [<ffffffff839f9f93>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: cc1 ced c03 c4d c01 cfd c48 c63 cc3 c48 c8d c04 c80 c49 c8d c34 cc4 c48 c8d c7e c22 c48 c89 cf8 c48 c89 cfa c48 cc1 ce8 c03 c83 ce2 c07 c42 c0f cb6 c04 c38 c38 cd0 c7f c04 c<84> cc0 c75 c5e c0f cb6 c46 c22 c8b c55 cd4 ca8 c03 c0f c45 c55 cd0 ca8 c04 c74 c0c c

Crashes (44):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/07/21 11:13 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 8cc079c3 .config console log report syz C ci-android-49-kasan-gce-root
2018/08/27 01:28 https://android.googlesource.com/kernel/common android-4.9 09eb2ba5ed0c 758cd203 .config console log report ci-android-49-kasan-gce-root
2018/08/25 11:49 https://android.googlesource.com/kernel/common android-4.9 09eb2ba5ed0c 9be5aa1d .config console log report ci-android-49-kasan-gce-root
2018/08/24 03:33 https://android.googlesource.com/kernel/common android-4.9 7fa8c15e72a4 95b5c82b .config console log report ci-android-49-kasan-gce-root
2018/08/23 17:25 https://android.googlesource.com/kernel/common android-4.9 8dd3fc2ed765 95b5c82b .config console log report ci-android-49-kasan-gce-root
2018/08/19 17:02 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce-root
2018/08/17 13:56 https://android.googlesource.com/kernel/common android-4.9 f85543ba3c54 9ccc1d45 .config console log report ci-android-49-kasan-gce-root
2018/08/17 08:59 https://android.googlesource.com/kernel/common android-4.9 f85543ba3c54 9ccc1d45 .config console log report ci-android-49-kasan-gce-root
2018/08/17 00:05 https://android.googlesource.com/kernel/common android-4.9 f85543ba3c54 9ccc1d45 .config console log report ci-android-49-kasan-gce-root
2018/08/16 19:13 https://android.googlesource.com/kernel/common android-4.9 f85543ba3c54 9ccc1d45 .config console log report ci-android-49-kasan-gce-root
2018/08/16 09:15 https://android.googlesource.com/kernel/common android-4.9 f85543ba3c54 9ccc1d45 .config console log report ci-android-49-kasan-gce-root
2018/08/13 10:29 https://android.googlesource.com/kernel/common android-4.9 9dc978d43ec7 7a88b141 .config console log report ci-android-49-kasan-gce-root
2018/08/12 06:38 https://android.googlesource.com/kernel/common android-4.9 9dc978d43ec7 7a88b141 .config console log report ci-android-49-kasan-gce-root
2018/08/06 10:53 https://android.googlesource.com/kernel/common android-4.9 8b21e85d919c 1beb8136 .config console log report ci-android-49-kasan-gce-root
2018/08/05 10:04 https://android.googlesource.com/kernel/common android-4.9 8b21e85d919c 3476a2df .config console log report ci-android-49-kasan-gce-root
2018/08/03 01:21 https://android.googlesource.com/kernel/common android-4.9 0137ea2134c0 5b7e23bb .config console log report ci-android-49-kasan-gce-root
2018/08/02 10:48 https://android.googlesource.com/kernel/common android-4.9 0137ea2134c0 0a7cf4ec .config console log report ci-android-49-kasan-gce-root
2018/08/01 21:02 https://android.googlesource.com/kernel/common android-4.9 0137ea2134c0 0a7cf4ec .config console log report ci-android-49-kasan-gce-root
2018/08/01 16:58 https://android.googlesource.com/kernel/common android-4.9 52be322125e5 1477993e .config console log report ci-android-49-kasan-gce-root
2018/08/01 14:45 https://android.googlesource.com/kernel/common android-4.9 52be322125e5 1477993e .config console log report ci-android-49-kasan-gce-root
2018/07/31 14:05 https://android.googlesource.com/kernel/common android-4.9 90e7a9002952 1a381291 .config console log report ci-android-49-kasan-gce-root
2018/07/29 14:47 https://android.googlesource.com/kernel/common android-4.9 990559158c7b 0824d7a1 .config console log report ci-android-49-kasan-gce-root
2018/07/24 01:48 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 912c93d7 .config console log report ci-android-49-kasan-gce-root
2018/07/23 21:28 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 912c93d7 .config console log report ci-android-49-kasan-gce-root
2018/07/22 15:04 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 8cc079c3 .config console log report ci-android-49-kasan-gce-root
2018/07/21 23:42 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 8cc079c3 .config console log report ci-android-49-kasan-gce-root
2018/07/20 15:25 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 49f35839 .config console log report ci-android-49-kasan-gce-root
2018/07/19 01:48 https://android.googlesource.com/kernel/common android-4.9 47bbcd6bf8f9 49f35839 .config console log report ci-android-49-kasan-gce-root
2018/07/18 04:46 https://android.googlesource.com/kernel/common android-4.9 f540ce029f50 6d5bd5b5 .config console log report ci-android-49-kasan-gce-root
2018/07/17 18:25 https://android.googlesource.com/kernel/common android-4.9 f540ce029f50 6d5bd5b5 .config console log report ci-android-49-kasan-gce-root
2018/07/17 13:20 https://android.googlesource.com/kernel/common android-4.9 f540ce029f50 13761366 .config console log report ci-android-49-kasan-gce-root
2018/07/15 23:23 https://android.googlesource.com/kernel/common android-4.9 9e7903954483 92a49505 .config console log report ci-android-49-kasan-gce-root
2018/07/15 10:09 https://android.googlesource.com/kernel/common android-4.9 9e7903954483 92a49505 .config console log report ci-android-49-kasan-gce-root
2018/07/14 21:08 https://android.googlesource.com/kernel/common android-4.9 9e7903954483 92a49505 .config console log report ci-android-49-kasan-gce-root
2018/07/14 11:58 https://android.googlesource.com/kernel/common android-4.9 9e7903954483 92a49505 .config console log report ci-android-49-kasan-gce-root
2018/07/10 02:39 https://android.googlesource.com/kernel/common android-4.9 03c70feafdb2 f25e5770 .config console log report ci-android-49-kasan-gce-root
2018/07/09 14:44 https://android.googlesource.com/kernel/common android-4.9 03c70feafdb2 f25e5770 .config console log report ci-android-49-kasan-gce-root
2018/06/29 23:04 https://android.googlesource.com/kernel/common android-4.9 00a0bcbfcfb6 dba0b50e .config console log report ci-android-49-kasan-gce-root
2018/06/28 14:14 https://android.googlesource.com/kernel/common android-4.9 00a0bcbfcfb6 dba0b50e .config console log report ci-android-49-kasan-gce-root
2018/06/22 09:27 https://android.googlesource.com/kernel/common android-4.9 e1815b3eba5b 095ef806 .config console log report ci-android-49-kasan-gce-root
2018/06/01 07:42 https://android.googlesource.com/kernel/common android-4.9 a56900fabe12 2f93b54f .config console log report ci-android-49-kasan-gce-root
2018/05/28 00:35 https://android.googlesource.com/kernel/common android-4.9 0cecdf831513 f48c20b8 .config console log report ci-android-49-kasan-gce-root
2018/05/25 09:07 https://android.googlesource.com/kernel/common android-4.9 2e35bed46b50 f48c20b8 .config console log report ci-android-49-kasan-gce-root
2018/04/30 04:45 https://android.googlesource.com/kernel/common android-4.9 71fce1edd26d bb79c6ab .config console log report ci-android-49-kasan-gce-root
* Struck through repros no longer work on HEAD.