INFO: task hung in d_alloc_parallel
7 views
Skip to first unread message
syzbot
Aug 13, 2019, 8:43:08 PM8/13/19
to syzkaller...@googlegroups.com
Hello,
syzbot found the following crash on:
HEAD commit: 3ffe1e79 Linux 4.14.138
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=16985896600000
kernel config: https://syzkaller.appspot.com/x/.config?x=978e269523a888e8
dashboard link: https://syzkaller.appspot.com/bug?extid=7e73f7fd42e647eb1e57
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=12329fce600000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14bb12e2600000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+7e73f7...@syzkaller.appspotmail.com
audit: type=1400 audit(1565739376.887:36): avc: denied { map } for
pid=7088 comm="syz-executor096" path="/root/syz-executor096640189"
dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
INFO: task init:1 blocked for more than 140 seconds.
Not tainted 4.14.138 #34
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
init D25328 1 0 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2807 [inline]
__schedule+0x7b8/0x1cd0 kernel/sched/core.c:3383
schedule+0x92/0x1c0 kernel/sched/core.c:3427
d_wait_lookup fs/dcache.c:2479 [inline]
d_alloc_parallel+0xf77/0x1800 fs/dcache.c:2561
lookup_slow+0x188/0x440 fs/namei.c:1678
walk_component+0x698/0x1d00 fs/namei.c:1824
link_path_walk+0x81f/0x10a0 fs/namei.c:2153
path_lookupat.isra.0+0xcb/0x7b0 fs/namei.c:2341
filename_lookup+0x18e/0x380 fs/namei.c:2376
user_path_at_empty+0x43/0x50 fs/namei.c:2630
user_path_at include/linux/namei.h:57 [inline]
vfs_statx+0xcd/0x160 fs/stat.c:185
vfs_stat include/linux/fs.h:3060 [inline]
SYSC_newstat+0x95/0x100 fs/stat.c:337
SyS_newstat+0x1e/0x30 fs/stat.c:333
do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x7f90e4321c65
RSP: 002b:00007fffe7c9fd78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
RAX: ffffffffffffffda RBX: 00007fffe7c9ffb0 RCX: 00007f90e4321c65
RDX: 00007fffe7c9ffb0 RSI: 00007fffe7c9ffb0 RDI: 0000000000407545
RBP: 0000000000000000 R08: 0000000001c95b60 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00007fffe7ca04b0 R14: 0000000000000000 R15: 0000000000000000
INFO: task syz-executor096:7088 blocked for more than 140 seconds.
Not tainted 4.14.138 #34
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor096 D28144 7088 7086 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2807 [inline]
__schedule+0x7b8/0x1cd0 kernel/sched/core.c:3383
schedule+0x92/0x1c0 kernel/sched/core.c:3427
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3485
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x73c/0x1470 kernel/locking/mutex.c:893
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908
fuse_lock_inode+0xbc/0xf0 fs/fuse/inode.c:365
fuse_lookup+0x7a/0x380 fs/fuse/dir.c:360
lookup_slow+0x226/0x440 fs/namei.c:1695
walk_component+0x698/0x1d00 fs/namei.c:1824
link_path_walk+0x81f/0x10a0 fs/namei.c:2153
path_openat+0x189/0x3f70 fs/namei.c:3565
do_filp_open+0x18e/0x250 fs/namei.c:3600
do_sys_open+0x2c5/0x430 fs/open.c:1084
SYSC_open fs/open.c:1102 [inline]
SyS_open+0x2d/0x40 fs/open.c:1097
do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x444ca0
RSP: 002b:00007ffc4671bd00 EFLAGS: 00000206 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000444ca0
RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00000000004ae91e
RBP: 0000000000001bb4 R08: 0000000000001bb0 R09: 0000000000a44880
R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc4671bf30
R13: 00000000004075d0 R14: 0000000000000000 R15: 0000000000000000
INFO: task syz-executor096:7092 blocked for more than 140 seconds.
Not tainted 4.14.138 #34
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor096 D28480 7092 7088 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2807 [inline]
__schedule+0x7b8/0x1cd0 kernel/sched/core.c:3383
schedule+0x92/0x1c0 kernel/sched/core.c:3427
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3485
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x73c/0x1470 kernel/locking/mutex.c:893
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908
fuse_lock_inode+0xbc/0xf0 fs/fuse/inode.c:365
fuse_lookup+0x7a/0x380 fs/fuse/dir.c:360
lookup_slow+0x226/0x440 fs/namei.c:1695
walk_component+0x698/0x1d00 fs/namei.c:1824
link_path_walk+0x81f/0x10a0 fs/namei.c:2153
path_openat+0x189/0x3f70 fs/namei.c:3565
do_filp_open+0x18e/0x250 fs/namei.c:3600
do_sys_open+0x2c5/0x430 fs/open.c:1084
SYSC_open fs/open.c:1102 [inline]
SyS_open+0x2d/0x40 fs/open.c:1097
do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x405810
RSP: 002b:00007ffc4671ba08 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007ffc4671ba34 RCX: 0000000000405810
RDX: 00007ffc4671ba3a RSI: 0000000000080001 RDI: 00000000004ae93c
RBP: 00007ffc4671ba30 R08: 0000000000000000 R09: 0000000000000004
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000407540
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Showing all locks held in the system:
1 lock held by init/1:
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
inode_lock_shared include/linux/fs.h:728 [inline]
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
lookup_slow+0x138/0x440 fs/namei.c:1673
1 lock held by khungtaskd/1008:
#0: (tasklist_lock){.+.+}, at: [<ffffffff81486078>]
debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4541
2 locks held by udevd/3527:
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
inode_lock_shared include/linux/fs.h:728 [inline]
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
lookup_slow+0x138/0x440 fs/namei.c:1673
#1: (&fi->mutex){+.+.}, at: [<ffffffff8219e10c>]
fuse_lock_inode+0xbc/0xf0 fs/fuse/inode.c:365
1 lock held by rsyslogd/6943:
#0: (&f->f_pos_lock){+.+.}, at: [<ffffffff81942cbb>]
__fdget_pos+0xab/0xd0 fs/file.c:769
2 locks held by cron/6995:
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
inode_lock_shared include/linux/fs.h:728 [inline]
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
lookup_slow+0x138/0x440 fs/namei.c:1673
#1: (&fi->mutex){+.+.}, at: [<ffffffff8219e10c>]
fuse_lock_inode+0xbc/0xf0 fs/fuse/inode.c:365
2 locks held by getty/7065:
#0: (&tty->ldisc_sem){++++}, at: [<ffffffff861bd5f3>]
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
#1: (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310e626>]
n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7066:
#0: (&tty->ldisc_sem){++++}, at: [<ffffffff861bd5f3>]
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
#1: (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310e626>]
n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7067:
#0: (&tty->ldisc_sem){++++}, at: [<ffffffff861bd5f3>]
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
#1: (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310e626>]
n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7068:
#0: (&tty->ldisc_sem){++++}, at: [<ffffffff861bd5f3>]
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
#1: (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310e626>]
n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7069:
#0: (&tty->ldisc_sem){++++}, at: [<ffffffff861bd5f3>]
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
#1: (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310e626>]
n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7070:
#0: (&tty->ldisc_sem){++++}, at: [<ffffffff861bd5f3>]
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
#1: (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310e626>]
n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7071:
#0: (&tty->ldisc_sem){++++}, at: [<ffffffff861bd5f3>]
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
#1: (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310e626>]
n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by syz-executor096/7088:
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
inode_lock_shared include/linux/fs.h:728 [inline]
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
lookup_slow+0x138/0x440 fs/namei.c:1673
#1: (&fi->mutex){+.+.}, at: [<ffffffff8219e10c>]
fuse_lock_inode+0xbc/0xf0 fs/fuse/inode.c:365
2 locks held by syz-executor096/7092:
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
inode_lock_shared include/linux/fs.h:728 [inline]
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
lookup_slow+0x138/0x440 fs/namei.c:1673
#1: (&fi->mutex){+.+.}, at: [<ffffffff8219e10c>]
fuse_lock_inode+0xbc/0xf0 fs/fuse/inode.c:365
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 1008 Comm: khungtaskd Not tainted 4.14.138 #34
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x138/0x19c lib/dump_stack.c:53
nmi_cpu_backtrace.cold+0x57/0x94 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x141/0x189 lib/nmi_backtrace.c:62
arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline]
watchdog+0x5e7/0xb90 kernel/hung_task.c:274
kthread+0x319/0x430 kernel/kthread.c:232
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.14.138 #34
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
task: ffffffff87676240 task.stack: ffffffff87600000
RIP: 0010:ksoftirqd_running+0x1e/0x60 kernel/softirq.c:91
RSP: 0018:ffff8880aee07f60 EFLAGS: 00000092
RAX: 0000000000000000 RBX: 0000000000000080 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff866967c0 RDI: ffffffff869d2bc0
RBP: ffff8880aee07f70 R08: 000000c95b5e0730 R09: ffff88821fff8008
R10: ffff88821fff8010 R11: 0000000000000001 R12: ffff8880a9ce21c0
R13: ffff8880aee00000 R14: ffffffff87676240 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000004ae937 CR3: 00000000a84f3000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<IRQ>
invoke_softirq kernel/softirq.c:358 [inline]
irq_exit+0x117/0x1b0 kernel/softirq.c:409
scheduler_ipi+0x18b/0x4e0 kernel/sched/core.c:1811
smp_reschedule_interrupt+0x83/0x4f0 arch/x86/kernel/smp.c:278
reschedule_interrupt+0x96/0xa0 arch/x86/entry/entry_64.S:816
</IRQ>
RIP: 0010:native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:61
RSP: 0018:ffffffff87607de8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff02
RAX: 1ffffffff0ee2a5c RBX: ffffffff87676240 RCX: 0000000000000000
RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff87676abc
RBP: ffffffff87607e10 R08: 1ffffffff104a501 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff877152d0
R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87676240
arch_cpu_idle+0xa/0x10 arch/x86/kernel/process.c:557
default_idle_call+0x36/0x90 kernel/sched/idle.c:98
cpuidle_idle_call kernel/sched/idle.c:156 [inline]
do_idle+0x262/0x3d0 kernel/sched/idle.c:246
cpu_startup_entry+0x1b/0x20 kernel/sched/idle.c:351
rest_init+0x1d9/0x1e2 init/main.c:435
start_kernel+0x6df/0x6fd init/main.c:709
x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:381
x86_64_start_kernel+0x77/0x7b arch/x86/kernel/head64.c:362
secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:240
Code: 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 54 53 48 89 fb
48 c7 c7 c0 67 69 86 e8 1a eb 9f 01 65 4c 8b 25 b2 7c c9 7e <31> c0 83 e3
41 75 2c 4d 85 e4 74 27 49 8d 7c 24 10 48 b8 00 00
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this bug, for details see:
https://goo.gl/tpsmEJ#testing-patches
syzbot found the following crash on:
HEAD commit: 3ffe1e79 Linux 4.14.138
git tree: linux-4.14.y
console output: https://syzkaller.appspot.com/x/log.txt?x=16985896600000
kernel config: https://syzkaller.appspot.com/x/.config?x=978e269523a888e8
dashboard link: https://syzkaller.appspot.com/bug?extid=7e73f7fd42e647eb1e57
compiler: gcc (GCC) 9.0.0 20181231 (experimental)
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=12329fce600000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=14bb12e2600000
IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+7e73f7...@syzkaller.appspotmail.com
audit: type=1400 audit(1565739376.887:36): avc: denied { map } for
pid=7088 comm="syz-executor096" path="/root/syz-executor096640189"
dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023
tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
INFO: task init:1 blocked for more than 140 seconds.
Not tainted 4.14.138 #34
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
init D25328 1 0 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2807 [inline]
__schedule+0x7b8/0x1cd0 kernel/sched/core.c:3383
schedule+0x92/0x1c0 kernel/sched/core.c:3427
d_wait_lookup fs/dcache.c:2479 [inline]
d_alloc_parallel+0xf77/0x1800 fs/dcache.c:2561
lookup_slow+0x188/0x440 fs/namei.c:1678
walk_component+0x698/0x1d00 fs/namei.c:1824
link_path_walk+0x81f/0x10a0 fs/namei.c:2153
path_lookupat.isra.0+0xcb/0x7b0 fs/namei.c:2341
filename_lookup+0x18e/0x380 fs/namei.c:2376
user_path_at_empty+0x43/0x50 fs/namei.c:2630
user_path_at include/linux/namei.h:57 [inline]
vfs_statx+0xcd/0x160 fs/stat.c:185
vfs_stat include/linux/fs.h:3060 [inline]
SYSC_newstat+0x95/0x100 fs/stat.c:337
SyS_newstat+0x1e/0x30 fs/stat.c:333
do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x7f90e4321c65
RSP: 002b:00007fffe7c9fd78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
RAX: ffffffffffffffda RBX: 00007fffe7c9ffb0 RCX: 00007f90e4321c65
RDX: 00007fffe7c9ffb0 RSI: 00007fffe7c9ffb0 RDI: 0000000000407545
RBP: 0000000000000000 R08: 0000000001c95b60 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00007fffe7ca04b0 R14: 0000000000000000 R15: 0000000000000000
INFO: task syz-executor096:7088 blocked for more than 140 seconds.
Not tainted 4.14.138 #34
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor096 D28144 7088 7086 0x00000000
Call Trace:
context_switch kernel/sched/core.c:2807 [inline]
__schedule+0x7b8/0x1cd0 kernel/sched/core.c:3383
schedule+0x92/0x1c0 kernel/sched/core.c:3427
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3485
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x73c/0x1470 kernel/locking/mutex.c:893
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908
fuse_lock_inode+0xbc/0xf0 fs/fuse/inode.c:365
fuse_lookup+0x7a/0x380 fs/fuse/dir.c:360
lookup_slow+0x226/0x440 fs/namei.c:1695
walk_component+0x698/0x1d00 fs/namei.c:1824
link_path_walk+0x81f/0x10a0 fs/namei.c:2153
path_openat+0x189/0x3f70 fs/namei.c:3565
do_filp_open+0x18e/0x250 fs/namei.c:3600
do_sys_open+0x2c5/0x430 fs/open.c:1084
SYSC_open fs/open.c:1102 [inline]
SyS_open+0x2d/0x40 fs/open.c:1097
do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x444ca0
RSP: 002b:00007ffc4671bd00 EFLAGS: 00000206 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000444ca0
RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00000000004ae91e
RBP: 0000000000001bb4 R08: 0000000000001bb0 R09: 0000000000a44880
R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc4671bf30
R13: 00000000004075d0 R14: 0000000000000000 R15: 0000000000000000
INFO: task syz-executor096:7092 blocked for more than 140 seconds.
Not tainted 4.14.138 #34
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor096 D28480 7092 7088 0x00000004
Call Trace:
context_switch kernel/sched/core.c:2807 [inline]
__schedule+0x7b8/0x1cd0 kernel/sched/core.c:3383
schedule+0x92/0x1c0 kernel/sched/core.c:3427
schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3485
__mutex_lock_common kernel/locking/mutex.c:833 [inline]
__mutex_lock+0x73c/0x1470 kernel/locking/mutex.c:893
mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908
fuse_lock_inode+0xbc/0xf0 fs/fuse/inode.c:365
fuse_lookup+0x7a/0x380 fs/fuse/dir.c:360
lookup_slow+0x226/0x440 fs/namei.c:1695
walk_component+0x698/0x1d00 fs/namei.c:1824
link_path_walk+0x81f/0x10a0 fs/namei.c:2153
path_openat+0x189/0x3f70 fs/namei.c:3565
do_filp_open+0x18e/0x250 fs/namei.c:3600
do_sys_open+0x2c5/0x430 fs/open.c:1084
SYSC_open fs/open.c:1102 [inline]
SyS_open+0x2d/0x40 fs/open.c:1097
do_syscall_64+0x1e8/0x640 arch/x86/entry/common.c:292
entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x405810
RSP: 002b:00007ffc4671ba08 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007ffc4671ba34 RCX: 0000000000405810
RDX: 00007ffc4671ba3a RSI: 0000000000080001 RDI: 00000000004ae93c
RBP: 00007ffc4671ba30 R08: 0000000000000000 R09: 0000000000000004
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000407540
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Showing all locks held in the system:
1 lock held by init/1:
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
inode_lock_shared include/linux/fs.h:728 [inline]
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
lookup_slow+0x138/0x440 fs/namei.c:1673
1 lock held by khungtaskd/1008:
#0: (tasklist_lock){.+.+}, at: [<ffffffff81486078>]
debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4541
2 locks held by udevd/3527:
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
inode_lock_shared include/linux/fs.h:728 [inline]
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
lookup_slow+0x138/0x440 fs/namei.c:1673
#1: (&fi->mutex){+.+.}, at: [<ffffffff8219e10c>]
fuse_lock_inode+0xbc/0xf0 fs/fuse/inode.c:365
1 lock held by rsyslogd/6943:
#0: (&f->f_pos_lock){+.+.}, at: [<ffffffff81942cbb>]
__fdget_pos+0xab/0xd0 fs/file.c:769
2 locks held by cron/6995:
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
inode_lock_shared include/linux/fs.h:728 [inline]
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
lookup_slow+0x138/0x440 fs/namei.c:1673
#1: (&fi->mutex){+.+.}, at: [<ffffffff8219e10c>]
fuse_lock_inode+0xbc/0xf0 fs/fuse/inode.c:365
2 locks held by getty/7065:
#0: (&tty->ldisc_sem){++++}, at: [<ffffffff861bd5f3>]
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
#1: (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310e626>]
n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7066:
#0: (&tty->ldisc_sem){++++}, at: [<ffffffff861bd5f3>]
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
#1: (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310e626>]
n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7067:
#0: (&tty->ldisc_sem){++++}, at: [<ffffffff861bd5f3>]
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
#1: (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310e626>]
n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7068:
#0: (&tty->ldisc_sem){++++}, at: [<ffffffff861bd5f3>]
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
#1: (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310e626>]
n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7069:
#0: (&tty->ldisc_sem){++++}, at: [<ffffffff861bd5f3>]
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
#1: (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310e626>]
n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7070:
#0: (&tty->ldisc_sem){++++}, at: [<ffffffff861bd5f3>]
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
#1: (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310e626>]
n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7071:
#0: (&tty->ldisc_sem){++++}, at: [<ffffffff861bd5f3>]
ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
#1: (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff8310e626>]
n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by syz-executor096/7088:
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
inode_lock_shared include/linux/fs.h:728 [inline]
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
lookup_slow+0x138/0x440 fs/namei.c:1673
#1: (&fi->mutex){+.+.}, at: [<ffffffff8219e10c>]
fuse_lock_inode+0xbc/0xf0 fs/fuse/inode.c:365
2 locks held by syz-executor096/7092:
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
inode_lock_shared include/linux/fs.h:728 [inline]
#0: (&type->i_mutex_dir_key#6){++++}, at: [<ffffffff818fbb78>]
lookup_slow+0x138/0x440 fs/namei.c:1673
#1: (&fi->mutex){+.+.}, at: [<ffffffff8219e10c>]
fuse_lock_inode+0xbc/0xf0 fs/fuse/inode.c:365
=============================================
NMI backtrace for cpu 1
CPU: 1 PID: 1008 Comm: khungtaskd Not tainted 4.14.138 #34
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:17 [inline]
dump_stack+0x138/0x19c lib/dump_stack.c:53
nmi_cpu_backtrace.cold+0x57/0x94 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x141/0x189 lib/nmi_backtrace.c:62
arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline]
watchdog+0x5e7/0xb90 kernel/hung_task.c:274
kthread+0x319/0x430 kernel/kthread.c:232
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.14.138 #34
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS
Google 01/01/2011
task: ffffffff87676240 task.stack: ffffffff87600000
RIP: 0010:ksoftirqd_running+0x1e/0x60 kernel/softirq.c:91
RSP: 0018:ffff8880aee07f60 EFLAGS: 00000092
RAX: 0000000000000000 RBX: 0000000000000080 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff866967c0 RDI: ffffffff869d2bc0
RBP: ffff8880aee07f70 R08: 000000c95b5e0730 R09: ffff88821fff8008
R10: ffff88821fff8010 R11: 0000000000000001 R12: ffff8880a9ce21c0
R13: ffff8880aee00000 R14: ffffffff87676240 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000004ae937 CR3: 00000000a84f3000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<IRQ>
invoke_softirq kernel/softirq.c:358 [inline]
irq_exit+0x117/0x1b0 kernel/softirq.c:409
scheduler_ipi+0x18b/0x4e0 kernel/sched/core.c:1811
smp_reschedule_interrupt+0x83/0x4f0 arch/x86/kernel/smp.c:278
reschedule_interrupt+0x96/0xa0 arch/x86/entry/entry_64.S:816
</IRQ>
RIP: 0010:native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:61
RSP: 0018:ffffffff87607de8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff02
RAX: 1ffffffff0ee2a5c RBX: ffffffff87676240 RCX: 0000000000000000
RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff87676abc
RBP: ffffffff87607e10 R08: 1ffffffff104a501 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff877152d0
R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87676240
arch_cpu_idle+0xa/0x10 arch/x86/kernel/process.c:557
default_idle_call+0x36/0x90 kernel/sched/idle.c:98
cpuidle_idle_call kernel/sched/idle.c:156 [inline]
do_idle+0x262/0x3d0 kernel/sched/idle.c:246
cpu_startup_entry+0x1b/0x20 kernel/sched/idle.c:351
rest_init+0x1d9/0x1e2 init/main.c:435
start_kernel+0x6df/0x6fd init/main.c:709
x86_64_start_reservations+0x29/0x2b arch/x86/kernel/head64.c:381
x86_64_start_kernel+0x77/0x7b arch/x86/kernel/head64.c:362
secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:240
Code: 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 54 53 48 89 fb
48 c7 c7 c0 67 69 86 e8 1a eb 9f 01 65 4c 8b 25 b2 7c c9 7e <31> c0 83 e3
41 75 2c 4d 85 e4 74 27 49 8d 7c 24 10 48 b8 00 00
---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot can test patches for this bug, for details see:
https://goo.gl/tpsmEJ#testing-patches
Reply all
Reply to author
Forward
0 new messages