syzbot


INFO: task hung in truncate_inode_pages_final

Status: upstream: reported C repro on 2024/09/19 16:08
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+4ac9d9eefe9d7c7e2858@syzkaller.appspotmail.com
First crash: 298d, last: 4d13h
Fix bisection: failed (error log, bisect log)
  
Bug presence (1)
Date Name Commit Repro Result
2025/07/10 upstream (ToT) bc9ff192a6c9 C [report] INFO: task hung in truncate_inode_pages_final
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 INFO: task hung in truncate_inode_pages_final origin:upstream 1 C error 10 4d12h 629d 0/3 upstream: reported C repro on 2023/10/25 05:01
upstream INFO: task hung in truncate_inode_pages_final ntfs3 1 C 9 474d 693d 0/29 auto-obsoleted due to no activity on 2024/07/05 07:04
Last patch testing requests (3)
Created Duration User Patch Repo Result
2025/05/29 22:13 19m retest repro linux-5.15.y report log
2025/03/16 08:05 20m retest repro linux-5.15.y report log
2025/01/04 19:46 18m retest repro linux-5.15.y report log
Fix bisection attempts (3)
Created Duration User Patch Repo Result
2025/05/11 19:33 23m fix candidate upstream error job log
2024/12/16 00:59 8m fix candidate upstream error job log
2024/10/26 18:52 5m bisect fix linux-5.15.y error job log

Sample crash report:
INFO: task syz-executor:4176 blocked for more than 143 seconds.
      Not tainted 5.15.186-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:    0 pid: 4176 ppid:     1 flags:0x00000001
Call trace:
 __switch_to+0x2f4/0x558 arch/arm64/kernel/process.c:521
 context_switch kernel/sched/core.c:5030 [inline]
 __schedule+0xe00/0x1c0c kernel/sched/core.c:6376
 schedule+0x11c/0x1c8 kernel/sched/core.c:6459
 io_schedule+0x84/0x160 kernel/sched/core.c:8484
 wait_on_page_bit_common+0x61c/0xa74 mm/filemap.c:1356
 __lock_page+0x8c/0xa8 mm/filemap.c:1648
 lock_page include/linux/pagemap.h:625 [inline]
 truncate_inode_pages_range+0x714/0x9b8 mm/truncate.c:394
 truncate_inode_pages mm/truncate.c:425 [inline]
 truncate_inode_pages_final+0x90/0xcc mm/truncate.c:464
 evict+0x3d4/0x810 fs/inode.c:649
 dispose_list fs/inode.c:680 [inline]
 evict_inodes+0x64c/0x6e4 fs/inode.c:734
 generic_shutdown_super+0x9c/0x2f0 fs/super.c:454
 kill_block_super+0x70/0xdc fs/super.c:1427
 deactivate_locked_super+0xb8/0x13c fs/super.c:335
 deactivate_super+0xf8/0x118 fs/super.c:366
 cleanup_mnt+0x3a4/0x458 fs/namespace.c:1139
 __cleanup_mnt+0x20/0x30 fs/namespace.c:1146
 task_work_run+0x12c/0x1e0 kernel/task_work.c:188
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 do_notify_resume+0x24b4/0x3128 arch/arm64/kernel/signal.c:949
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline]
 el0_svc+0xf0/0x1e0 arch/arm64/kernel/entry-common.c:609
 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584

Showing all locks held in the system:
3 locks held by kworker/u4:0/9:
 #0: ffff0001a10e7958 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x44 kernel/sched/core.c:475
 #1: ffff80001b2f7c00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285
 #2: ffff0001a10d54d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x11c/0x224 kernel/time/timer.c:946
1 lock held by khungtaskd/27:
 #0: ffff800014351360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:311
3 locks held by kworker/0:2/1533:
 #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 kernel/workqueue.c:2283
 #1: ffff800023377c00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 kernel/workqueue.c:2285
 #2: ffff0000eaf5b240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1c8/0x2704 drivers/net/netdevsim/fib.c:1480
2 locks held by getty/3810:
 #0: ffff0000d3d75098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 drivers/tty/tty_ldsem.c:340
 #1: ffff80001b7b32e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2f0/0xf6c drivers/tty/n_tty.c:2158
1 lock held by syz-executor/4176:
 #0: ffff0000c0da80e0 (&type->s_umount_key#52){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365
1 lock held by syz-executor/4341:
 #0: ffff0000e99d40e0 (&type->s_umount_key#52){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365
1 lock held by syz-executor/4363:
 #0: ffff0000d74280e0 (&type->s_umount_key#52){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365
1 lock held by syz-executor/4391:
 #0: ffff0000cd2fa0e0 (&type->s_umount_key#52){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365
1 lock held by syz-executor/4411:
 #0: ffff0000d26ba0e0 (&type->s_umount_key#52){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365
1 lock held by syz-executor/4442:
 #0: ffff0000ede260e0 (&type->s_umount_key#52){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365
1 lock held by syz-executor/4479:
 #0: ffff0000f00760e0 (&type->s_umount_key#52){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365
1 lock held by syz-executor/4510:
 #0: ffff0000f04aa0e0 (&type->s_umount_key#52){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365
1 lock held by syz-executor/4541:
 #0: ffff0000d66d60e0 (&type->s_umount_key#52){+.+.}-{3:3}, at: deactivate_super+0xf0/0x118 fs/super.c:365

=============================================


Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/09 18:56 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 INFO: task hung in truncate_inode_pages_final
2024/09/19 16:07 linux-5.15.y 3a5928702e71 c673ca06 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan-arm64 INFO: task hung in truncate_inode_pages_final
2025/07/10 17:08 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 INFO: task hung in truncate_inode_pages_final
2025/07/10 15:05 linux-5.15.y 2f693b607545 956bd956 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 INFO: task hung in truncate_inode_pages_final
2025/07/10 15:05 linux-5.15.y 2f693b607545 956bd956 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 INFO: task hung in truncate_inode_pages_final
2025/07/09 08:20 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 INFO: task hung in truncate_inode_pages_final
2025/07/09 08:20 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 INFO: task hung in truncate_inode_pages_final
* Struck through repros no longer work on HEAD.