syzbot

 sign-in | mailing list | source | docs
🐞 Open [977] ≡ Subsystems 🐞 Fixed [5208] 🐞 Invalid [12460] ⬇ Missing Backports [82] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

INFO: task hung in lock_rename (2)

Status: auto-closed as invalid on 2021/05/17 09:31
Subsystems: fs
[Documentation on labels]
First crash: 1191d, last: 1167d
▶ ▼ Similar bugs (10)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in lock_rename (3) fs 1 1017d 1017d 0/26 auto-closed as invalid on 2021/10/02 18:08
linux-5.15 INFO: task hung in lock_rename 2 351d 383d 0/3 auto-obsoleted due to no activity on 2023/08/23 09:02
upstream INFO: task hung in lock_rename exfat 53 1963d 2098d 0/26 auto-closed as invalid on 2019/05/30 13:09
linux-6.1 INFO: task hung in lock_rename 3 206d 320d 0/3 auto-obsoleted due to no activity on 2024/01/01 05:54
upstream INFO: task hung in lock_rename (4) fs 3 806d 899d 0/26 closed as invalid on 2022/02/08 09:40
linux-4.19 INFO: task hung in lock_rename 1 829d 829d 0/1 auto-closed as invalid on 2022/05/08 10:15
upstream INFO: task hung in lock_rename (5) fs 2 761d 790d 0/26 auto-closed as invalid on 2022/06/15 04:15
linux-4.14 INFO: task hung in lock_rename 1 674d 674d 0/1 auto-obsoleted due to no activity on 2022/10/10 13:20
android-49 INFO: task hung in lock_rename C 9 2059d 1829d 0/3 public: reported C repro on 2019/04/14 00:00
upstream INFO: task hung in lock_rename (6) ext4 18 353d 601d 0/26 auto-obsoleted due to no activity on 2023/07/28 16:10

Sample crash report:
INFO: task syz-executor.0:22812 blocked for more than 143 seconds.
      Not tainted 5.11.0-rc6-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0  state:D stack:29368 pid:22812 ppid:  8421 flags:0x00004004
Call Trace:
 context_switch kernel/sched/core.c:4327 [inline]
 __schedule+0x999/0xe70 kernel/sched/core.c:5078
 schedule+0x14b/0x200 kernel/sched/core.c:5157
 rwsem_down_write_slowpath+0xd69/0x1370 kernel/locking/rwsem.c:1106
 __down_write_common kernel/locking/rwsem.c:1261 [inline]
 __down_write kernel/locking/rwsem.c:1270 [inline]
 down_write_nested+0x117/0x120 kernel/locking/rwsem.c:1517
 lock_rename+0x182/0x1a0 include/linux/fs.h:808
 do_renameat2+0x32d/0x1090 fs/namei.c:4407
 __do_sys_rename fs/namei.c:4508 [inline]
 __se_sys_rename fs/namei.c:4506 [inline]
 __x64_sys_rename+0x82/0x90 fs/namei.c:4506
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x465b09
RSP: 002b:00007f83589b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000465b09
RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000020000040
RBP: 00000000004b069f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008
R13: 00007ffee365163f R14: 00007f83589b5300 R15: 0000000000022000
INFO: task syz-executor.0:22821 blocked for more than 143 seconds.
      Not tainted 5.11.0-rc6-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0  state:D stack:28448 pid:22821 ppid:  8421 flags:0x00004004
Call Trace:
 context_switch kernel/sched/core.c:4327 [inline]
 __schedule+0x999/0xe70 kernel/sched/core.c:5078
 schedule+0x14b/0x200 kernel/sched/core.c:5157
 rwsem_down_write_slowpath+0xd69/0x1370 kernel/locking/rwsem.c:1106
 __down_write_common kernel/locking/rwsem.c:1261 [inline]
 __down_write kernel/locking/rwsem.c:1270 [inline]
 down_write+0x112/0x120 kernel/locking/rwsem.c:1407
 inode_lock include/linux/fs.h:773 [inline]
 lock_mount+0x6a/0x2f0 fs/namespace.c:2198
 do_new_mount_fc fs/namespace.c:2824 [inline]
 do_new_mount fs/namespace.c:2883 [inline]
 path_mount+0x20d1/0x2a00 fs/namespace.c:3211
 do_mount fs/namespace.c:3224 [inline]
 __do_sys_mount fs/namespace.c:3432 [inline]
 __se_sys_mount+0x28c/0x320 fs/namespace.c:3409
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x465b09
RSP: 002b:00007f8358994188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 000000000056c0b0 RCX: 0000000000465b09
RDX: 0000000020002100 RSI: 00000000200042c0 RDI: 0000000000000000
RBP: 00000000004b069f R08: 0000000020002140 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0b0
R13: 00007ffee365163f R14: 00007f8358994300 R15: 0000000000022000

Showing all locks held in the system:
1 lock held by khungtaskd/1647:
 #0: ffffffff8c711740 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 arch/x86/pci/mmconfig_64.c:151
1 lock held by in:imklog/8083:
3 locks held by syz-executor.0/22803:
2 locks held by syz-executor.0/22812:
 #0: ffff888084926460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 fs/namespace.c:354
 #1: ffff8880769c8ed0 (&type->i_mutex_dir_key#8/1){+.+.}-{3:3}, at: lock_rename+0x182/0x1a0 include/linux/fs.h:808
1 lock held by syz-executor.0/22821:
 #0: ffff8880769c8ed0 (&type->i_mutex_dir_key#10){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:773 [inline]
 #0: ffff8880769c8ed0 (&type->i_mutex_dir_key#10){+.+.}-{3:3}, at: lock_mount+0x6a/0x2f0 fs/namespace.c:2198

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 1647 Comm: khungtaskd Not tainted 5.11.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x137/0x1be lib/dump_stack.c:120
 nmi_cpu_backtrace+0x16c/0x190 lib/nmi_backtrace.c:105
 nmi_trigger_cpumask_backtrace+0x191/0x2f0 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:209 [inline]
 watchdog+0xce9/0xd30 kernel/hung_task.c:294
 kthread+0x39a/0x3c0 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 4865 Comm: systemd-journal Not tainted 5.11.0-rc6-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__preempt_count_add kernel/rcu/tree.c:1109 [inline]
RIP: 0010:rcu_is_watching+0x2/0xb0 kernel/rcu/tree.c:1112
Code: 48 8b 04 25 28 00 00 00 48 3b 44 24 10 75 06 48 83 c4 18 5b c3 e8 0e 58 e4 07 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 57 <41> 56 53 65 83 05 4f c0 9d 7e 01 e8 0e 69 e4 07 89 c3 83 f8 08 73
RSP: 0018:ffffc90001497df8 EFLAGS: 00000246
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff888027038000
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8db396e8
RBP: 0000000000000002 R08: dffffc0000000000 R09: fffffbfff1b672de
R10: fffffbfff1b672de R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  00007f8ddb3888c0(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f8dd88492b8 CR3: 0000000027085000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 rcu_read_lock_held_common kernel/rcu/update.c:106 [inline]
 rcu_read_lock_sched_held+0x23/0xb0 kernel/rcu/update.c:121
 trace_lock_acquire+0x6b/0x180 include/trace/events/lock.h:13
 lock_acquire+0x39/0x5e0 kernel/locking/lockdep.c:5413
 rcu_lock_acquire+0x2a/0x30 include/linux/rcupdate.h:259
 rcu_read_lock include/linux/rcupdate.h:648 [inline]
 __task_pid_nr_ns+0x27/0x3e0 kernel/pid.c:497
 task_tgid_vnr include/linux/sched.h:1470 [inline]
 __do_sys_getpid+0x1a/0x20 kernel/sys.c:908
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x7f8dda620f17
Code: ff ff ff 48 8b 4d a0 0f b7 51 fe 48 8b 4d a8 66 89 54 08 fe e9 1a ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 b8 27 00 00 00 0f 05 <c3> 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00
RSP: 002b:00007ffee06ecc38 EFLAGS: 00000202 ORIG_RAX: 0000000000000027
RAX: ffffffffffffffda RBX: 00005590317601e0 RCX: 00007f8dda620f17
RDX: 0000000000000000 RSI: 000000001eebe6d2 RDI: 00005590317601e0
RBP: 0000000000001301 R08: 00007ffee075e080 R09: 0000000000000070
R10: 00007ffee075e118 R11: 0000000000000202 R12: ffffffffffffffff
R13: 00007ffee06ecce8 R14: 0000559030cc7958 R15: 0005ba791643a850

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/02/04 02:02 upstream 3afe9076a7c1 624dad51 .config console log report info ci-upstream-kasan-gce-smack-root INFO: task hung in lock_rename
2021/02/04 02:00 upstream 3afe9076a7c1 624dad51 .config console log report info ci-upstream-kasan-gce-selinux-root INFO: task hung in lock_rename
2021/02/04 01:55 upstream 3afe9076a7c1 624dad51 .config console log report info ci-upstream-kasan-gce-root INFO: task hung in lock_rename
2021/02/04 01:55 upstream 3afe9076a7c1 624dad51 .config console log report info ci-upstream-kasan-gce-386 INFO: task hung in lock_rename
2021/01/11 08:05 upstream 0653161f0fac 2c1f2513 .config console log report info ci-upstream-kasan-gce-root
2021/01/11 08:04 upstream 0653161f0fac 2c1f2513 .config console log report info ci-upstream-kasan-gce
2021/01/11 08:05 upstream 0653161f0fac 2c1f2513 .config console log report info ci-upstream-kasan-gce-386
* Struck through repros no longer work on HEAD.