syzbot


INFO: task hung in hfs_find_init

Status: upstream: reported C repro on 2025/08/28 21:47
Bug presence: origin:lts-only
[Documentation on labels]
Reported-by: syzbot+ba8c01a64be1da9a475f@syzkaller.appspotmail.com
First crash: 4d20h, last: 3d01h
Bug presence (2)
Date Name Commit Repro Result
2025/08/30 linux-5.15.y (ToT) 01879f56bdde C [report] INFO: task hung in hfs_find_init
2025/08/30 upstream (ToT) 11e7861d680c C Didn't crash
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in hfs_find_init (2) hfs 1 C error 50 8d12h 591d 0/29 upstream: reported C repro on 2024/01/20 14:40
upstream INFO: task hung in hfs_find_init hfs 1 C error 1 721d 732d 0/29 auto-obsoleted due to no activity on 2023/11/21 14:04

Sample crash report:
INFO: task kworker/u4:4:1218 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u4:4    state:D
 stack:22112 pid: 1218 ppid:     2 flags:0x00004000
Workqueue: writeback wb_workfn
 (flush-7:0)

Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5049 [inline]
 __schedule+0x11bb/0x4390 kernel/sched/core.c:6395
 schedule+0x11b/0x1e0 kernel/sched/core.c:6478
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6537
 __mutex_lock_common+0xc71/0x2390 kernel/locking/mutex.c:669
 __mutex_lock kernel/locking/mutex.c:729 [inline]
 mutex_lock_nested+0x17/0x20 kernel/locking/mutex.c:743
 hfs_find_init+0x15b/0x1d0 fs/hfs/bfind.c:-1
 hfs_write_inode+0x349/0x970 fs/hfs/inode.c:458
 write_inode fs/fs-writeback.c:1495 [inline]
 __writeback_single_inode+0x6c3/0xda0 fs/fs-writeback.c:1705
 writeback_sb_inodes+0x9fe/0x1610 fs/fs-writeback.c:1930
 __writeback_inodes_wb+0x12a/0x3f0 fs/fs-writeback.c:2001
 wb_writeback+0x455/0xb90 fs/fs-writeback.c:2106
 wb_check_background_flush fs/fs-writeback.c:2172 [inline]
 wb_do_writeback fs/fs-writeback.c:2260 [inline]
 wb_workfn+0xb47/0xe60 fs/fs-writeback.c:2288
 process_one_work+0x863/0x1000 kernel/workqueue.c:2310
 worker_thread+0xaa8/0x12a0 kernel/workqueue.c:2457
 kthread+0x436/0x520 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>

Showing all locks held in the system:
4 locks held by kworker/u4:0/9:
 #0: 
ffff8881425e8938
 (
(wq_completion)writeback
){+.+.}-{0:0}
, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
 #1: 
ffffc90000ce7d00
 (
(work_completion)(&(&wb->dwork)->work)
){+.+.}-{0:0}
, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
 #2: 
ffff88806068a0e0
 (
&type->s_umount_key
#54
){.+.+}-{3:3}
, at: trylock_super+0x1c/0xf0 fs/super.c:418
 #3: 
ffff88807821c0b0
 (
&tree->tree_lock
){+.+.}-{3:3}
, at: hfs_find_init+0x15b/0x1d0 fs/hfs/bfind.c:-1
1 lock held by khungtaskd/27:
 #0: 
ffffffff8c11c460
 (
rcu_read_lock
){....}-{1:2}
, at: rcu_lock_acquire+0x0/0x30
4 locks held by kworker/u4:1/144:
 #0: 
ffff8881425e8938
 (
(wq_completion)writeback
){+.+.}-{0:0}
, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
 #1: 
ffffc9000167fd00
 (
(work_completion)(&(&wb->dwork)->work)
){+.+.}-{0:0}
, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
 #2: 
ffff88807787c0e0
 (
&type->s_umount_key
#54){.+.+}-{3:3}, at: trylock_super+0x1c/0xf0 fs/super.c:418
 #3: ffff88807b32c0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 fs/hfs/bfind.c:-1
4 locks held by kworker/u4:2/154:
 #0: ffff8881425e8938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
 #1: ffffc90001f97d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
 #2: ffff88805a5c60e0
 (
&type->s_umount_key
#54
){.+.+}-{3:3}
, at: trylock_super+0x1c/0xf0 fs/super.c:418
 #3: ffff88801b6fe0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 fs/hfs/bfind.c:-1
4 locks held by kworker/u4:4/1218:
 #0: 
ffff8881425e8938
 ((wq_completion)writeback
){+.+.}-{0:0}
, at: process_one_work+0x760/0x1000 kernel/workqueue.c:-1
 #1: ffffc90004de7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 kernel/workqueue.c:2285
 #2: ffff88807b7e40e0

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/08/30 15:24 linux-5.15.y 01879f56bdde 807a3b61 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan INFO: task hung in hfs_find_init
2025/08/29 02:09 linux-5.15.y 01879f56bdde d401b9d7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in hfs_find_init
2025/08/28 21:46 linux-5.15.y 01879f56bdde d401b9d7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan INFO: task hung in hfs_find_init
* Struck through repros no longer work on HEAD.