syzbot


INFO: task hung in f2fs_write_data_pages (2)

Status: auto-obsoleted due to no activity on 2026/04/19 05:28
Subsystems: f2fs
[Documentation on labels]
First crash: 95d, last: 95d
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
2cab0965-7998-4cb0-9e36-dda41d9c560c repro 💥 INFO: task hung in f2fs_write_data_pages (2) 2026/03/09 23:46 2026/03/09 23:46 2026/03/09 23:46 6972f30219093b03bcc1a54487e12a7097245c01 failed to run ["git" "fetch" "--force" "--tags" "433dfd5a8a5d80bbf0669b14e9ed908911a52dd6" "59e4d31a0470503dc922bad1970fc6a1c7dfd76b"]: exit status 128
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 INFO: task hung in f2fs_write_data_pages 1 1 1052d 1052d 0/3 auto-obsoleted due to no activity on 2023/09/15 13:33
upstream INFO: task hung in f2fs_write_data_pages f2fs 1 1 1052d 1052d 0/29 auto-obsoleted due to no activity on 2023/09/05 01:24

Sample crash report:
INFO: task syz.4.89:7218 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.89        state:D stack:0     pid:7218  tgid:7201  ppid:6574   task_flags:0x400040 flags:0x00000011
Call trace:
 __switch_to+0x418/0x87c arch/arm64/kernel/process.c:742 (T)
 context_switch kernel/sched/core.c:5256 [inline]
 __schedule+0x1250/0x2a7c kernel/sched/core.c:6863
 __schedule_loop kernel/sched/core.c:6945 [inline]
 schedule+0xb4/0x230 kernel/sched/core.c:6960
 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:7017
 __mutex_lock_common+0xd04/0x2678 kernel/locking/mutex.c:692
 __mutex_lock kernel/locking/mutex.c:776 [inline]
 mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:828
 __f2fs_write_data_pages fs/f2fs/data.c:3278 [inline]
 f2fs_write_data_pages+0x2298/0x2878 fs/f2fs/data.c:3314
 do_writepages+0x270/0x468 mm/page-writeback.c:2598
 filemap_writeback mm/filemap.c:387 [inline]
 filemap_fdatawrite_range mm/filemap.c:412 [inline]
 file_write_and_wait_range+0x1d0/0x2c4 mm/filemap.c:786
 f2fs_do_sync_file+0x4c0/0x14d8 fs/f2fs/file.c:300
 f2fs_sync_file+0x110/0x15c fs/f2fs/file.c:417
 vfs_fsync_range+0x160/0x19c fs/sync.c:188
 generic_write_sync include/linux/fs.h:2616 [inline]
 f2fs_file_write_iter+0x5ac/0x1ed4 fs/f2fs/file.c:5270
 new_sync_write fs/read_write.c:593 [inline]
 vfs_write+0x540/0xa3c fs/read_write.c:686
 ksys_write+0x120/0x210 fs/read_write.c:738
 __do_sys_write fs/read_write.c:749 [inline]
 __se_sys_write fs/read_write.c:746 [inline]
 __arm64_sys_write+0x7c/0x90 fs/read_write.c:746
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x5c/0x26c arch/arm64/kernel/entry-common.c:724
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596

Showing all locks held in the system:
4 locks held by kworker/u8:0/12:
 #0: ffff0000c1ff2948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x1558 kernel/workqueue.c:3231
 #1: ffff800097cf7be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d0/0x1558 kernel/workqueue.c:3231
 #2: ffff0000ca11a0e0 (&type->s_umount_key#72){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc fs/super.c:563
 #3: ffff0000d1211510 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write fs/f2fs/f2fs.h:2313 [inline]
 #3: ffff0000d1211510 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4c0/0x6d8 fs/f2fs/segment.c:464
1 lock held by khungtaskd/32:
 #0: ffff80008fa5b6e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 include/linux/rcupdate.h:330
2 locks held by pr/ttyAMA-1/43:
3 locks held by kworker/u8:11/2116:
3 locks held by kworker/u8:16/3873:
 #0: ffff0000d485f148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x63c/0x1558 kernel/workqueue.c:3231
 #1: ffff80009f197be0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6d0/0x1558 kernel/workqueue.c:3231
 #2: ffff800092ae4928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80
5 locks held by kworker/u8:17/4116:
 #0: ffff0000c1843148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x63c/0x1558 kernel/workqueue.c:3231
 #1: ffff80009e977be0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6d0/0x1558 kernel/workqueue.c:3231
 #2: ffff800092ad79d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf0/0x638 net/core/net_namespace.c:670
 #3: ffff800092ae4928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80
 #4: ffff80008fa610c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x58/0x528 kernel/rcu/tree.c:3816
1 lock held by klogd/6196:
1 lock held by dhcpcd/6263:
 #0: ffff800092ae4928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80
2 locks held by getty/6349:
 #0: ffff0000d4e1e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340
 #1: ffff800099f1e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfc8 drivers/tty/n_tty.c:2211
3 locks held by kworker/0:5/6676:
 #0: ffff0000c0029948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x63c/0x1558 kernel/workqueue.c:3231
 #1: ffff8000a4ea7be0 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6d0/0x1558 kernel/workqueue.c:3231
 #2: ffff800092ae4928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80
3 locks held by syz.4.89/7218:
 #0: ffff0000c1c4f7b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x1fc/0x2a0 fs/file.c:1255
 #1: ffff0000ca11a420 (sb_writers#19){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2681 [inline]
 #1: ffff0000ca11a420 (sb_writers#19){.+.+}-{0:0}, at: vfs_write+0x24c/0xa3c fs/read_write.c:682
 #2: ffff0000d1210128 (&sbi->writepages){+.+.}-{4:4}, at: __f2fs_write_data_pages fs/f2fs/data.c:3278 [inline]
 #2: ffff0000d1210128 (&sbi->writepages){+.+.}-{4:4}, at: f2fs_write_data_pages+0x2298/0x2878 fs/f2fs/data.c:3314
4 locks held by syz.4.89/7219:
 #0: ffff0000c1c4e7f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x1fc/0x2a0 fs/file.c:1255
 #1: ffff0000ca11a420 (sb_writers#19){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2681 [inline]
 #1: ffff0000ca11a420 (sb_writers#19){.+.+}-{0:0}, at: vfs_write+0x24c/0xa3c fs/read_write.c:682
 #2: ffff0000d1210128 (&sbi->writepages){+.+.}-{4:4}, at: __f2fs_write_data_pages fs/f2fs/data.c:3278 [inline]
 #2: ffff0000d1210128 (&sbi->writepages){+.+.}-{4:4}, at: f2fs_write_data_pages+0x2298/0x2878 fs/f2fs/data.c:3314
 #3: ffff0000d1211510 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write fs/f2fs/f2fs.h:2313 [inline]
 #3: ffff0000d1211510 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4c0/0x6d8 fs/f2fs/segment.c:464
3 locks held by kworker/u8:18/7304:
 #0: ffff0000c0031948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x63c/0x1558 kernel/workqueue.c:3231
 #1: ffff8000a42e7be0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6d0/0x1558 kernel/workqueue.c:3231
 #2: ffff800092ae4928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80
1 lock held by syz-executor/7975:
 #0: ffff800092ae4928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock net/core/rtnetlink.c:80 [inline]
 #0: ffff800092ae4928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_nets_lock net/core/rtnetlink.c:341 [inline]
 #0: ffff800092ae4928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x71c/0x15e8 net/core/rtnetlink.c:4071
7 locks held by syz-executor/8288:
 #0: ffff0000db4e0420 (sb_writers#6){.+.+}-{0:0}, at: file_start_write include/linux/fs.h:2681 [inline]
 #0: ffff0000db4e0420 (sb_writers#6){.+.+}-{0:0}, at: vfs_write+0x24c/0xa3c fs/read_write.c:682
 #1: ffff0000e1aad888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1b4/0x4d0 fs/kernfs/file.c:343
 #2: ffff0000cda0c008 (kn->active#50){.+.+}-{0:0}, at: kernfs_get_active_of fs/kernfs/file.c:80 [inline]
 #2: ffff0000cda0c008 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f4/0x4d0 fs/kernfs/file.c:344
 #3: ffff800091bf3c68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x128/0x594 drivers/net/netdevsim/bus.c:184
 #4: ffff00010c72c0e8 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:895 [inline]
 #4: ffff00010c72c0e8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8c/0x3ac drivers/base/dd.c:1006
 #5: ffff0000cf8ef250 (&devlink->lock_key#8){+.+.}-{4:4}, at: devl_lock+0x24/0x34 net/devlink/core.c:276
 #6: ffff800092ae4928 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c net/core/rtnetlink.c:80

=============================================


Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/01/19 05:22 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 59e4d31a0470 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 INFO: task hung in f2fs_write_data_pages
* Struck through repros no longer work on HEAD.