syzbot


INFO: task hung in d_alloc_parallel

Status: auto-closed as invalid on 2020/02/18 04:29
Reported-by: syzbot+9970c21062bb480aa901@syzkaller.appspotmail.com
First crash: 1698d, last: 1698d
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 INFO: task hung in d_alloc_parallel 85 1739d 1888d 0/3 auto-closed as invalid on 2020/01/08 20:52
linux-5.15 INFO: task hung in d_alloc_parallel origin:upstream C 23 14d 57d 0/3 upstream: reported C repro on 2024/04/18 05:41
linux-4.14 INFO: task hung in d_alloc_parallel C error 4 1158d 1767d 0/1 upstream: reported C repro on 2019/08/14 00:43
linux-4.19 INFO: task hung in d_alloc_parallel vfs C error 5 488d 1505d 0/1 upstream: reported C repro on 2020/05/01 20:49
upstream INFO: task hung in d_alloc_parallel fuse 213 1932d 2263d 0/27 closed as dup on 2018/09/08 15:40
linux-6.1 INFO: task hung in d_alloc_parallel 39 6d07h 60d 0/3 upstream: reported on 2024/04/15 03:31
upstream INFO: task hung in d_alloc_parallel (2) fs C done error 708 1d05h 1697d 0/27 upstream: reported C repro on 2019/10/22 22:44

Sample crash report:
[32620]     0 32620    18145     8746      25       3        0             0 syz-executor.3
[32624]     0 32624    18178     8748      25       3        0             0 syz-executor.3
[  322]     0   322    34596     9016      28       5        0             0 syz-executor.3
INFO: task syz-executor.0:1830 blocked for more than 140 seconds.
      Not tainted 4.14.150+ #0
[  363]     0   363    18178     8746      25       3        0             0 syz-executor.5
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.0  D25008  1830   1824 0x00000000
[  370]     0   370    18211     8748      25       3        0             0 syz-executor.5
Call Trace:
[  598]     0   598    18178     8992      26       4        0             0 syz-executor.5
 schedule+0x92/0x1c0 kernel/sched/core.c:3498
 d_wait_lookup fs/dcache.c:2476 [inline]
 d_alloc_parallel+0xfc7/0x1610 fs/dcache.c:2558
[  775]     0   775    34596     9015      28       5        0             0 syz-executor.3
[  789]     0   789    18145     8743      25       3        0             0 syz-executor.5
 lookup_slow+0x18c/0x440 fs/namei.c:1777
[  792]     0   792    18178     8745      25       3        0             0 syz-executor.5
[  908]     0   908    18145     8743      25       3        0             0 syz-executor.5
 walk_component+0x6d0/0xbf0 fs/namei.c:1923
[  915]     0   915    18211     8748      25       3        0             0 syz-executor.5
[ 1290]     0  1290    18145     8970      26       4        0             0 syz-executor.3
 link_path_walk+0x84a/0x1110 fs/namei.c:2252
 path_openat+0x178/0x2be0 fs/namei.c:3680
[ 1334]     0  1334    18244     8999      28       4        0             0 syz-executor.5
[ 1349]     0  1349    18244     8999      28       4        0             0 syz-executor.5
[ 1434]     0  1434    18145     8744      24       3        0             0 syz-executor.3
 do_filp_open+0x1a1/0x280 fs/namei.c:3715
[ 1438]     0  1438    18178     8778      26       3        0             0 syz-executor.3
[ 1969]     0  1969    18145     8744      25       3        0             0 syz-executor.2
[ 2019]     0  2019    18211     8750      25       3        0             0 syz-executor.2
[ 2022]     0  2022    34629     9016      30       5        0             0 syz-executor.5
[ 2060]     0  2060    34629     9016      30       5        0             0 syz-executor.5
 do_sys_open+0x2ca/0x590 fs/open.c:1096
[ 2304]     0  2304    18244     9720      27       4        0             0 syz-executor.3
 do_syscall_64+0x19b/0x520 arch/x86/entry/common.c:292
[ 2434]     0  2434    18145     8746      26       3        0             0 syz-executor.3
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 2918]     0  2918    18178     8747      25       3        0             0 syz-executor.3
RIP: 0033:0x4579d0
RSP: 002b:00007ffd1f10d6e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000002
[ 2934]     0  2934    18211     8765      25       3        0             0 syz-executor.3
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004579d0
RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00000000004be4bc
[ 2981]     0  2981    18145     8970      26       4        0             0 syz-executor.3
RBP: 000000000000385f R08: 0000000000000001 R09: 00000000029f8940
[ 3012]     0  3012    18145     8967      26       4        0             0 syz-executor.2
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000006
[ 3024]     0  3024    18145     8967      26       4        0             0 syz-executor.2
R13: 00007ffd1f10d7c0 R14: 0000000000320f8c R15: 00007ffd1f10d7d0
[ 3064]     0  3064    18145     8984      26       4        0             0 syz-executor.5
[ 3070]     0  3070    18145     8984      26       4        0             0 syz-executor.5
INFO: task syz-executor.3:1841 blocked for more than 140 seconds.
      Not tainted 4.14.150+ #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.3  D24768  1841   1828 0x00000000
Call Trace:
[ 3076]     0  3076    18145     8984      26       4        0             0 syz-executor.5
 schedule+0x92/0x1c0 kernel/sched/core.c:3498
[ 3524]     0  3524    18145     8967      26       4        0             0 syz-executor.2
[ 3536]     0  3536    18145     8967      26       4        0             0 syz-executor.2
 d_wait_lookup fs/dcache.c:2476 [inline]
 d_alloc_parallel+0xfc7/0x1610 fs/dcache.c:2558
[ 3541]     0  3541    18145     8967      26       4        0             0 syz-executor.2
[ 3545]     0  3545    18145     8967      26       4        0             0 syz-executor.2
[ 3549]     0  3549    18145     8967      26       4        0             0 syz-executor.2
 lookup_slow+0x18c/0x440 fs/namei.c:1777
[ 3552]     0  3552    18145     8967      26       4        0             0 syz-executor.2
[ 3588]     0  3588    18145     8984      26       4        0             0 syz-executor.5
 walk_component+0x6d0/0xbf0 fs/namei.c:1923
[ 3591]     0  3591    18145     8734      24       3        0             0 syz-executor.2
 link_path_walk+0x84a/0x1110 fs/namei.c:2252
[ 3593]     0  3593    18145     8984      26       4        0             0 syz-executor.5
[ 3603]     0  3603    18145     8984      26       4        0             0 syz-executor.5
 path_openat+0x178/0x2be0 fs/namei.c:3680
[ 3608]     0  3608    18145     8984      26       4        0             0 syz-executor.5
[ 3615]     0  3615    18145     8984      26       4        0             0 syz-executor.5
 do_filp_open+0x1a1/0x280 fs/namei.c:3715
[ 3616]     0  3616    18145     8734      24       3        0             0 syz-executor.2
[ 3620]     0  3620    18145     8984      26       4        0             0 syz-executor.5
[ 3639]     0  3639    18145     8734      24       3        0             0 syz-executor.2
[ 3681]     0  3681    18145     8967      26       4        0             0 syz-executor.2
[ 3686]     0  3686    18145     8967      26       4        0             0 syz-executor.2
[ 3857]     0  3857    18145     8969      26       4        0             0 syz-executor.3
 do_sys_open+0x2ca/0x590 fs/open.c:1096
[ 3879]     0  3879    18145     8969      26       4        0             0 syz-executor.3
[ 3887]     0  3887    18145     8969      26       4        0             0 syz-executor.3
 do_syscall_64+0x19b/0x520 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x4579d0
RSP: 002b:00007ffe9a951510 EFLAGS: 00000202 ORIG_RAX: 0000000000000002
[ 3936]     0  3936    18145     8969      26       4        0             0 syz-executor.3
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004579d0
RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00000000004be4bc
[ 3942]     0  3942    18145     8969      26       4        0             0 syz-executor.3
[ 3945]     0  3945    18145     8969      26       4        0             0 syz-executor.3
RBP: 0000000000003c73 R08: 0000000000000001 R09: 00000000018b0940
[ 3960]     0  3960    18145     8969      26       4        0             0 syz-executor.3
[ 3968]     0  3968    18145     8969      26       4        0             0 syz-executor.3
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000007
R13: 00007ffe9a9515f0 R14: 0000000000320f85 R15: 00007ffe9a951600
INFO: task syz-executor.2:30462 blocked for more than 140 seconds.
[ 3975]     0  3975    18145     8969      26       4        0             0 syz-executor.3
      Not tainted 4.14.150+ #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 4010]     0  4010    18145     8736      24       3        0             0 syz-executor.3
syz-executor.2  D24192 30462  30461 0x00000000
[ 4023]     0  4023    18145     8736      24       3        0             0 syz-executor.3
Call Trace:
[ 4031]     0  4031    18145     8736      24       3        0             0 syz-executor.3
 schedule+0x92/0x1c0 kernel/sched/core.c:3498
 d_wait_lookup fs/dcache.c:2476 [inline]
 d_alloc_parallel+0xfc7/0x1610 fs/dcache.c:2558
[ 4037]     0  4037    18145     8969      26       4        0             0 syz-executor.3
[ 4040]     0  4040    18145     8969      26       4        0             0 syz-executor.3
 lookup_slow+0x18c/0x440 fs/namei.c:1777
[ 4044]     0  4044    18145     8969      26       4        0             0 syz-executor.3
 walk_component+0x6d0/0xbf0 fs/namei.c:1923
[ 5361]     0  5361    18145     8742      25       3        0             0 syz-executor.5
 link_path_walk+0x84a/0x1110 fs/namei.c:2252
[ 5371]     0  5371    18145     8742      25       3        0             0 syz-executor.5
 path_openat+0x178/0x2be0 fs/namei.c:3680
[ 5381]     0  5381    18145     8742      25       3        0             0 syz-executor.5
[ 5397]     0  5397    18145     8984      26       4        0             0 syz-executor.5
 do_filp_open+0x1a1/0x280 fs/namei.c:3715
[ 5402]     0  5402    18145     8984      26       4        0             0 syz-executor.5
[ 5406]     0  5406    18145     8984      26       4        0             0 syz-executor.5
 do_sys_open+0x2ca/0x590 fs/open.c:1096
[ 5501]     0  5501    18211     8973      28       4        0          1000 syz-executor.0
 do_syscall_64+0x19b/0x520 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x4579d0
[ 5837]     0  5837    18145     8967      27       4        0             0 syz-executor.0
RSP: 002b:00007ffcd3196b30 EFLAGS: 00000206 ORIG_RAX: 0000000000000002
[ 5854]     0  5854    18145     8967      27       4        0             0 syz-executor.0
[ 6088]     0  6088    18145     8967      27       4        0             0 syz-executor.0
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004579d0
RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00000000004be4bc
[ 6173]     0  6173    18145     8967      27       4        0             0 syz-executor.0
RBP: 0000000000002a93 R08: 0000000000000001 R09: 0000000001065940
[ 6189]     0  6189    18145     8967      27       4        0             0 syz-executor.0
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006
[ 6248]     0  6248    18145     8967      27       4        0             0 syz-executor.0
R13: 00007ffcd3196c10 R14: 0000000000320f81 R15: 00007ffcd3196c20
[ 6265]     0  6265    18145     8967      27       4        0             0 syz-executor.0
INFO: task syz-executor.4:27404 blocked for more than 140 seconds.
      Not tainted 4.14.150+ #0
[ 6311]     0  6311    18145     8967      27       4        0             0 syz-executor.0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.4  D28528 27404   6397 0x00000004
[ 6332]     0  6332    18145     8967      27       4        0             0 syz-executor.0
Call Trace:
[ 6337]     0  6337    18145     8967      27       4        0             0 syz-executor.0
[ 6456]     0  6456    18145     8967      27       4        0             0 syz-executor.0
[ 6493]     0  6493    18145     8967      27       4        0             0 syz-executor.0
 schedule+0x92/0x1c0 kernel/sched/core.c:3498
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3556
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x595/0x13e0 kernel/locking/mutex.c:893
[ 6518]     0  6518    18145     8967      27       4        0             0 syz-executor.0
[ 6537]     0  6537    18145     8967      26       4        0             0 syz-executor.2
 pipe_lock_nested fs/pipe.c:67 [inline]
 pipe_lock fs/pipe.c:75 [inline]
 pipe_wait+0x1a1/0x1c0 fs/pipe.c:123
[ 6544]     0  6544    18145     8967      26       4        0             0 syz-executor.2
 pipe_write+0x510/0xe20 fs/pipe.c:490
 call_write_iter include/linux/fs.h:1798 [inline]
 new_sync_write fs/read_write.c:471 [inline]
 __vfs_write+0x401/0x5a0 fs/read_write.c:484
[ 6548]     0  6548    18145     8967      26       4        0             0 syz-executor.2
[ 6553]     0  6553    18145     8967      26       4        0             0 syz-executor.2
 vfs_write+0x17f/0x4d0 fs/read_write.c:546
 SYSC_write fs/read_write.c:594 [inline]
 SyS_write+0x102/0x250 fs/read_write.c:586
[ 6559]     0  6559    18145     8967      26       4        0             0 syz-executor.2
[ 6574]     0  6574    18145     8984      26       4        0             0 syz-executor.5
[ 6582]     0  6582    18145     8967      26       4        0             0 syz-executor.2
 do_syscall_64+0x19b/0x520 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x459a59
RSP: 002b:00007f3653305c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 6586]     0  6586    18145     8967      27       4        0             0 syz-executor.0
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59
RDX: 0000000041395527 RSI: 0000000020000340 RDI: 0000000000000005
[ 6587]     0  6587    18145     8984      26       4        0             0 syz-executor.5
RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 6596]     0  6596    18145     8984      26       4        0             0 syz-executor.5
[ 6607]     0  6607    18145     8984      26       4        0             0 syz-executor.5
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f36533066d4
R13: 00000000004c623a R14: 00000000004e0e80 R15: 00000000ffffffff
INFO: task syz-executor.3:27408 blocked for more than 140 seconds.
      Not tainted 4.14.150+ #0
[ 6612]     0  6612    18145     8984      26       4        0             0 syz-executor.5
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 6617]     0  6617    18145     8984      26       4        0             0 syz-executor.5
syz-executor.3  D
[ 6648]     0  6648    18145     8967      27       4        0             0 syz-executor.0
29600 27408   1841 0x00000004
Call Trace:
[ 6744]     0  6744    18145     8967      27       4        0             0 syz-executor.0
 schedule+0x92/0x1c0 kernel/sched/core.c:3498
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3556
[ 6793]     0  6793    18145     8967      27       4        0             0 syz-executor.0
[ 6803]     0  6803    18145     8967      27       4        0             0 syz-executor.0
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x595/0x13e0 kernel/locking/mutex.c:893
[ 6810]     0  6810    18145     8967      27       4        0             0 syz-executor.0
[ 6828]     0  6828    18145     8967      27       4        0             0 syz-executor.0
 pipe_lock_nested fs/pipe.c:67 [inline]
 pipe_lock fs/pipe.c:75 [inline]
 pipe_wait+0x1a1/0x1c0 fs/pipe.c:123
 pipe_write+0x510/0xe20 fs/pipe.c:490
 call_write_iter include/linux/fs.h:1798 [inline]
 new_sync_write fs/read_write.c:471 [inline]
 __vfs_write+0x401/0x5a0 fs/read_write.c:484
 vfs_write+0x17f/0x4d0 fs/read_write.c:546
 SYSC_write fs/read_write.c:594 [inline]
 SyS_write+0x102/0x250 fs/read_write.c:586
[ 6842]     0  6842    18145     8969      26       4        0             0 syz-executor.3

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/21 04:28 android-4.14 234de92896af 8c88c9c1 .config console log report ci-android-414-kasan-gce-root
* Struck through repros no longer work on HEAD.