syzbot


INFO: task hung in filename_create (2)

Status: auto-closed as invalid on 2020/03/04 11:54
Reported-by: syzbot+@syzkaller.appspotmail.com
First crash: 1205d, last: 1100d
similar bugs (11):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 INFO: task hung in filename_create 6 1117d 1216d 0/1 auto-closed as invalid on 2020/03/17 23:03
android-49 INFO: task hung in filename_create C 44 1566d 1337d 0/3 public: reported C repro on 2019/04/13 00:00
upstream INFO: task hung in filename_create (3) 16 566d 722d 0/24 auto-closed as invalid on 2021/08/20 18:08
linux-4.19 INFO: task hung in filename_create (3) 3 394d 456d 0/1 auto-closed as invalid on 2022/03/11 04:15
android-44 INFO: task hung in filename_create 1 1699d 1699d 0/2 auto-closed as invalid on 2019/02/22 14:19
linux-4.19 INFO: task hung in filename_create (2) 1 657d 657d 0/1 auto-closed as invalid on 2021/06/20 16:38
linux-4.14 INFO: task hung in filename_create 2 1090d 1094d 0/1 auto-closed as invalid on 2020/04/14 04:42
linux-4.19 INFO: task hung in filename_create (4) 2 27d 90d 0/1 upstream: reported on 2022/09/10 11:07
android-44 INFO: task hung in filename_create (2) 1 1320d 1320d 0/2 auto-closed as invalid on 2019/10/25 08:49
upstream INFO: task hung in filename_create (4) C error error 24 7d00h 353d 0/24 upstream: reported C repro on 2021/12/21 22:55
upstream INFO: task hung in filename_create 121 1410d 1695d 0/24 closed as dup on 2018/09/08 15:39

Sample crash report:
INFO: task syz-executor.2:17207 blocked for more than 143 seconds.
      Not tainted 5.3.0-rc8+ #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.2  D28552 17207   9140 0x00004004
Call Trace:
 context_switch kernel/sched/core.c:3254 [inline]
 __schedule+0x877/0xc50 kernel/sched/core.c:3880
 schedule+0x131/0x1e0 kernel/sched/core.c:3947
 rwsem_down_write_slowpath+0x813/0xdd0 kernel/locking/rwsem.c:1214
 __down_write kernel/locking/rwsem.c:1365 [inline]
 down_write_nested+0x132/0x140 kernel/locking/rwsem.c:1597
 inode_lock_nested include/linux/fs.h:813 [inline]
 filename_create+0x12e/0x670 fs/namei.c:3634
 user_path_create fs/namei.c:3692 [inline]
 do_mkdirat+0x5a/0x320 fs/namei.c:3830
 __do_sys_mkdir fs/namei.c:3854 [inline]
 __se_sys_mkdir fs/namei.c:3852 [inline]
 __x64_sys_mkdir+0x60/0x70 fs/namei.c:3852
 do_syscall_64+0xfe/0x140 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4598e9
Code: 24 18 0f b6 05 2f d1 3b 01 3c 01 76 0a 48 8b 6c 24 18 48 83 c4 20 c3 75 07 e8 63 08 fd ff 0f 0b c6 05 11 d1 3b 01 01 48 b8 00 <00> 00 00 00 00 f0 7f 48 89 04 24 e8 a7 dd fa ff f2 0f 10 44 24 08
RSP: 002b:00007f8ab3386c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004598e9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ab33876d4
R13: 00000000004bf0ba R14: 00000000004da7a0 R15: 00000000ffffffff
INFO: task syz-executor.2:17216 blocked for more than 143 seconds.
      Not tainted 5.3.0-rc8+ #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.2  D28552 17216   9140 0x00004004
Call Trace:
 context_switch kernel/sched/core.c:3254 [inline]
 __schedule+0x877/0xc50 kernel/sched/core.c:3880
 schedule+0x131/0x1e0 kernel/sched/core.c:3947
 rwsem_down_read_slowpath+0x5c5/0xa00 kernel/locking/rwsem.c:1090
 __down_read+0x6e/0x330 kernel/locking/rwsem.c:1320
 down_read+0x45/0x50 kernel/locking/rwsem.c:1463
 inode_lock_shared include/linux/fs.h:788 [inline]
 lookup_slow fs/namei.c:1685 [inline]
 walk_component+0x2c7/0x7b0 fs/namei.c:1808
 lookup_last fs/namei.c:2271 [inline]
 path_lookupat+0x1ac/0xb30 fs/namei.c:2316
 filename_lookup+0x1d3/0x6a0 fs/namei.c:2346
 user_path_at_empty+0x40/0x50 fs/namei.c:2606
 user_path include/linux/namei.h:65 [inline]
 do_mount+0xd4/0x2490 fs/namespace.c:3049
 ksys_mount+0xcc/0x100 fs/namespace.c:3320
 __do_sys_mount fs/namespace.c:3334 [inline]
 __se_sys_mount fs/namespace.c:3331 [inline]
 __x64_sys_mount+0xbf/0xd0 fs/namespace.c:3331
 do_syscall_64+0xfe/0x140 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4598e9
Code: 24 18 0f b6 05 2f d1 3b 01 3c 01 76 0a 48 8b 6c 24 18 48 83 c4 20 c3 75 07 e8 63 08 fd ff 0f 0b c6 05 11 d1 3b 01 01 48 b8 00 <00> 00 00 00 00 f0 7f 48 89 04 24 e8 a7 dd fa ff f2 0f 10 44 24 08
RSP: 002b:00007f8ab3344c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004598e9
RDX: 00000000200001c0 RSI: 0000000020000140 RDI: 0000000000000000
RBP: 000000000075c070 R08: 0000000020000400 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ab33456d4
R13: 00000000004c5e68 R14: 00000000004da9b0 R15: 00000000ffffffff
INFO: task syz-executor.2:17255 blocked for more than 143 seconds.
      Not tainted 5.3.0-rc8+ #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.2  D30024 17255   9140 0x00004004
Call Trace:
 context_switch kernel/sched/core.c:3254 [inline]
 __schedule+0x877/0xc50 kernel/sched/core.c:3880
 schedule+0x131/0x1e0 kernel/sched/core.c:3947
 rwsem_down_read_slowpath+0x5c5/0xa00 kernel/locking/rwsem.c:1090
 __down_read+0x6e/0x330 kernel/locking/rwsem.c:1320
 down_read+0x45/0x50 kernel/locking/rwsem.c:1463
 inode_lock_shared include/linux/fs.h:788 [inline]
 lookup_slow fs/namei.c:1685 [inline]
 walk_component+0x2c7/0x7b0 fs/namei.c:1808
 lookup_last fs/namei.c:2271 [inline]
 path_lookupat+0x1ac/0xb30 fs/namei.c:2316
 filename_lookup+0x1d3/0x6a0 fs/namei.c:2346
 user_path_at_empty+0x40/0x50 fs/namei.c:2606
 user_path_at include/linux/namei.h:60 [inline]
 ksys_chdir+0x45/0x1b0 fs/open.c:459
 __do_sys_chdir fs/open.c:481 [inline]
 __se_sys_chdir fs/open.c:479 [inline]
 __x64_sys_chdir+0x38/0x40 fs/open.c:479
 do_syscall_64+0xfe/0x140 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4598e9
Code: 24 18 0f b6 05 2f d1 3b 01 3c 01 76 0a 48 8b 6c 24 18 48 83 c4 20 c3 75 07 e8 63 08 fd ff 0f 0b c6 05 11 d1 3b 01 01 48 b8 00 <00> 00 00 00 00 f0 7f 48 89 04 24 e8 a7 dd fa ff f2 0f 10 44 24 08
RSP: 002b:00007f8ab3302c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000050
RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000004598e9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040
RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ab33036d4
R13: 00000000004bf123 R14: 00000000004d1aa0 R15: 00000000ffffffff
INFO: task syz-executor.2:17256 blocked for more than 143 seconds.
      Not tainted 5.3.0-rc8+ #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.2  D30024 17256   9140 0x00004004
Call Trace:
 context_switch kernel/sched/core.c:3254 [inline]
 __schedule+0x877/0xc50 kernel/sched/core.c:3880
 schedule+0x131/0x1e0 kernel/sched/core.c:3947
 rwsem_down_write_slowpath+0x813/0xdd0 kernel/locking/rwsem.c:1214
 __down_write kernel/locking/rwsem.c:1365 [inline]
 down_write_nested+0x132/0x140 kernel/locking/rwsem.c:1597
 inode_lock_nested include/linux/fs.h:813 [inline]
 filename_create+0x12e/0x670 fs/namei.c:3634
 user_path_create fs/namei.c:3692 [inline]
 do_mknodat+0xbd/0x4f0 fs/namei.c:3753
 __do_sys_mknod fs/namei.c:3793 [inline]
 __se_sys_mknod fs/namei.c:3791 [inline]
 __x64_sys_mknod+0x80/0x90 fs/namei.c:3791
 do_syscall_64+0xfe/0x140 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4598e9
Code: 24 18 0f b6 05 2f d1 3b 01 3c 01 76 0a 48 8b 6c 24 18 48 83 c4 20 c3 75 07 e8 63 08 fd ff 0f 0b c6 05 11 d1 3b 01 01 48 b8 00 <00> 00 00 00 00 f0 7f 48 89 04 24 e8 a7 dd fa ff f2 0f 10 44 24 08
RSP: 002b:00007f8ab32e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001480
RBP: 000000000075c268 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8ab32e26d4
R13: 00000000004c5d85 R14: 00000000004da800 R15: 00000000ffffffff
INFO: lockdep is turned off.
NMI backtrace for cpu 0
CPU: 0 PID: 1047 Comm: khungtaskd Not tainted 5.3.0-rc8+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1d8/0x2f8 lib/dump_stack.c:113
 nmi_cpu_backtrace+0xaf/0x1a0 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x174/0x290 lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x10/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_all_cpu_backtrace+0x17/0x20 include/linux/nmi.h:146
 check_hung_uninterruptible_tasks kernel/hung_task.c:205 [inline]
 watchdog+0xbb9/0xbd0 kernel/hung_task.c:289
 kthread+0x332/0x350 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:60

Crashes (11):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-smack-root 2019/09/14 07:06 upstream a7f89616b737 32d59357 .config log report
ci-upstream-kasan-gce-smack-root 2019/08/31 08:19 upstream 6525771f58cb fd37b39e .config log report
ci-upstream-kasan-gce-root 2019/08/30 11:15 upstream 6525771f58cb fd37b39e .config log report
ci-upstream-kasan-gce-selinux-root 2019/08/30 02:59 upstream 6525771f58cb fd37b39e .config log report
ci-upstream-kasan-gce-selinux-root 2019/08/28 23:00 upstream 6525771f58cb fd37b39e .config log report
ci-upstream-kasan-gce-smack-root 2019/08/28 15:09 upstream 6525771f58cb fd37b39e .config log report
ci-upstream-kasan-gce-root 2019/08/27 16:09 upstream a55aa89aab90 d21c5d9d .config log report
ci-upstream-kasan-gce-root 2019/08/27 11:10 upstream a55aa89aab90 d21c5d9d .config log report
ci-upstream-kasan-gce-selinux-root 2019/08/22 17:58 upstream bb7ba8069de9 d003d6d0 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/12/05 11:52 linux-next 282ffdf30a3e b2088328 .config log report
ci-upstream-linux-next-kasan-gce-root 2019/11/09 05:16 linux-next 5591cf003452 dc438b91 .config log report
* Struck through repros no longer work on HEAD.