syzbot


INFO: task hung in chown_common

Status: auto-closed as invalid on 2019/02/22 14:39
First crash: 2104d, last: 2057d
Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 INFO: task hung in chown_common (2) 1 464d 464d 0/1 upstream: reported on 2023/01/05 10:16
upstream INFO: task hung in chown_common (3) fuse 11 1149d 1199d 0/26 auto-closed as invalid on 2021/05/20 23:06
upstream INFO: task hung in chown_common fs 35 1996d 2104d 0/26 closed as invalid on 2018/12/31 08:00
android-414 INFO: task hung in chown_common 1 1809d 1809d 0/1 auto-closed as invalid on 2019/10/25 08:39
upstream INFO: task hung in chown_common (5) fuse 1 505d 505d 0/26 auto-obsoleted due to no activity on 2023/04/09 00:18
upstream INFO: task hung in chown_common (2) fs 1 1448d 1448d 0/26 auto-closed as invalid on 2020/07/25 16:03
upstream INFO: task hung in chown_common (4) v9fs C error inconclusive 7 641d 768d 0/26 closed as invalid on 2022/10/12 18:37
linux-4.19 INFO: task hung in chown_common 2 869d 906d 0/1 auto-closed as invalid on 2022/03/26 21:13

Sample crash report:
binder: 23719:23728 ioctl 40046207 0 returned -16
binder_alloc: 23719: binder_alloc_buf, no vma
binder: 23719:23736 transaction failed 29189/-3, size 24-8 line 3136
binder: undelivered TRANSACTION_ERROR: 29189
binder: undelivered TRANSACTION_ERROR: 29201
INFO: task syz-executor0:23724 blocked for more than 140 seconds.
      Not tainted 4.9.124-g09eb2ba #31
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor0   D29640 23724   3862 0x00000004
 ffff88019cbe0000 ffff8801b955ea00 ffff8801b9790fc0 ffff8801baf5e000
 ffff8801db221c18 ffff8801a54afa78 ffffffff839f0afd ffffffff81237da7
 0000000000000000 ffff88019cbe08c0 0000000600000007 ffff8801db2224e8
Call Trace:
 [<ffffffff839f20ff>] schedule+0x7f/0x1b0 kernel/sched/core.c:3553
 [<ffffffff839fd738>] __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:526 [inline]
 [<ffffffff839fd738>] rwsem_down_write_failed+0x598/0x990 kernel/locking/rwsem-xadd.c:555
 [<ffffffff81eed907>] call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:105
 [<ffffffff839fb50c>] __down_write arch/x86/include/asm/rwsem.h:125 [inline]
 [<ffffffff839fb50c>] down_write+0x5c/0xa0 kernel/locking/rwsem.c:54
 [<ffffffff8156db4b>] inode_lock include/linux/fs.h:766 [inline]
 [<ffffffff8156db4b>] chown_common+0x2bb/0x550 fs/open.c:626
 [<ffffffff8157179b>] SYSC_fchownat fs/open.c:659 [inline]
 [<ffffffff8157179b>] SyS_fchownat fs/open.c:639 [inline]
 [<ffffffff8157179b>] SYSC_chown fs/open.c:673 [inline]
 [<ffffffff8157179b>] SyS_chown+0xdb/0x160 fs/open.c:671
 [<ffffffff81006316>] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282
 [<ffffffff83a019d3>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb

Showing all locks held in the system:
2 locks held by khungtaskd/519:
 #0:  (rcu_read_lock){......}, at: [<ffffffff813689dc>] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline]
 #0:  (rcu_read_lock){......}, at: [<ffffffff813689dc>] watchdog+0x11c/0xa20 kernel/hung_task.c:239
 #1:  (tasklist_lock){.+.+..}, at: [<ffffffff81428248>] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336
2 locks held by getty/3772:
 #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff839ffba2>] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
 #1:  (&ldata->atomic_read_lock){+.+...}, at: [<ffffffff82125402>] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142
1 lock held by syz-executor0/23718:
 #0:  (&sb->s_type->i_mutex_key#23){++++++}, at: [<ffffffff81599441>] inode_lock_shared include/linux/fs.h:776 [inline]
 #0:  (&sb->s_type->i_mutex_key#23){++++++}, at: [<ffffffff81599441>] lookup_slow+0x141/0x470 fs/namei.c:1645
2 locks held by syz-executor0/23724:
 #0:  (sb_writers#17){.+.+.+}, at: [<ffffffff815e50cf>] sb_start_write include/linux/fs.h:1573 [inline]
 #0:  (sb_writers#17){.+.+.+}, at: [<ffffffff815e50cf>] mnt_want_write+0x3f/0xb0 fs/namespace.c:391
 #1:  (&sb->s_type->i_mutex_key#23){++++++}, at: [<ffffffff8156db4b>] inode_lock include/linux/fs.h:766 [inline]
 #1:  (&sb->s_type->i_mutex_key#23){++++++}, at: [<ffffffff8156db4b>] chown_common+0x2bb/0x550 fs/open.c:626

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.124-g09eb2ba #31
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801d97b7d08 ffffffff81eb95e9 0000000000000000 0000000000000000
 0000000000000000 0000000000000001 ffffffff810b9fa0 ffff8801d97b7d40
 ffffffff81ec4927 0000000000000000 0000000000000000 0000000000000003
Call Trace:
 [<ffffffff81eb95e9>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81eb95e9>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff81ec4927>] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99
 [<ffffffff81ec48ba>] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60
 [<ffffffff810ba0a4>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37
 [<ffffffff81368f74>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline]
 [<ffffffff81368f74>] check_hung_task kernel/hung_task.c:125 [inline]
 [<ffffffff81368f74>] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline]
 [<ffffffff81368f74>] watchdog+0x6b4/0xa20 kernel/hung_task.c:239
 [<ffffffff8119f3cd>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff83a01b9c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1 skipped: idling at pc 0xffffffff83a00606

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/08/26 02:02 https://android.googlesource.com/kernel/common android-4.9 09eb2ba5ed0c 76e7c3df .config console log report ci-android-49-kasan-gce-root
2018/08/21 01:15 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 95b5c82b .config console log report ci-android-49-kasan-gce-root
2018/08/20 06:52 https://android.googlesource.com/kernel/common android-4.9 54068d61e7d8 2dc4378f .config console log report ci-android-49-kasan-gce-root
2018/08/17 02:36 https://android.googlesource.com/kernel/common android-4.9 f85543ba3c54 9ccc1d45 .config console log report ci-android-49-kasan-gce-root
2018/08/14 11:35 https://android.googlesource.com/kernel/common android-4.9 9dc978d43ec7 7a88b141 .config console log report ci-android-49-kasan-gce-root
2018/08/13 14:32 https://android.googlesource.com/kernel/common android-4.9 9dc978d43ec7 7a88b141 .config console log report ci-android-49-kasan-gce-root
2018/08/07 04:52 https://android.googlesource.com/kernel/common android-4.9 47b77b8d01c4 1beb8136 .config console log report ci-android-49-kasan-gce-root
2018/07/31 04:27 https://android.googlesource.com/kernel/common android-4.9 8956c50bdcd3 1a381291 .config console log report ci-android-49-kasan-gce-root
2018/07/30 15:14 https://android.googlesource.com/kernel/common android-4.9 990559158c7b 1a381291 .config console log report ci-android-49-kasan-gce-root
2018/07/10 07:56 https://android.googlesource.com/kernel/common android-4.9 03c70feafdb2 f25e5770 .config console log report ci-android-49-kasan-gce-root
* Struck through repros no longer work on HEAD.