syzbot

 sign-in | mailing list | source | docs
🐞 Open [1005] ≡ Subsystems 🐞 Fixed [5249] 🐞 Invalid [12556] ⬇ Missing Backports [84] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

INFO: task hung in fuse_flush (3)

Status: auto-obsoleted due to no activity on 2023/12/26 21:09
Subsystems: fuse
[Documentation on labels]
First crash: 217d, last: 217d
▶ ▼ Similar bugs (6)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 INFO: task hung in fuse_flush 1 1140d 1140d 0/1 auto-closed as invalid on 2021/07/16 16:14
upstream INFO: task hung in fuse_flush (2) fuse 2 464d 473d 0/26 auto-obsoleted due to no activity on 2023/04/24 00:25
upstream INFO: task hung in fuse_flush fuse 2 909d 997d 0/26 auto-closed as invalid on 2022/02/03 03:15
linux-4.19 INFO: task hung in fuse_flush (2) 1 949d 949d 0/1 auto-closed as invalid on 2022/01/24 04:40
linux-4.14 INFO: task hung in fuse_flush C inconclusive 19 505d 826d 0/1 upstream: reported C repro on 2022/01/26 21:17
linux-4.19 INFO: task hung in fuse_flush (3) 109 464d 826d 0/1 upstream: reported on 2022/01/27 11:57

Sample crash report:
INFO: task syz-executor.0:10589 blocked for more than 144 seconds.
      Not tainted 6.6.0-rc3-syzkaller-00044-g633b47cb009d #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0  state:D stack:24840 pid:10589 ppid:5066   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x196c/0x4af0 kernel/sched/core.c:6695
 schedule+0xc3/0x180 kernel/sched/core.c:6771
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6830
 rwsem_down_write_slowpath+0xee6/0x13a0 kernel/locking/rwsem.c:1178
 __down_write_common+0x1aa/0x200 kernel/locking/rwsem.c:1306
 inode_lock include/linux/fs.h:802 [inline]
 fuse_flush+0x27b/0x950 fs/fuse/file.c:500
 filp_flush fs/open.c:1532 [inline]
 __do_sys_close fs/open.c:1566 [inline]
 __se_sys_close+0xe6/0x220 fs/open.c:1557
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fd8e267b9da
RSP: 002b:00007ffc8e9402a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd8e267b9da
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 00007fd8e279d980 R08: 0000001b30220000 R09: 0000000000000561
R10: 0000000081c54170 R11: 0000000000000293 R12: 000000000008f298
R13: ffffffffffffffff R14: 00007fd8e2200000 R15: 000000000008ef57
 </TASK>
INFO: task syz-executor.0:10592 blocked for more than 146 seconds.
      Not tainted 6.6.0-rc3-syzkaller-00044-g633b47cb009d #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0  state:D stack:24696 pid:10592 ppid:5066   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x196c/0x4af0 kernel/sched/core.c:6695
 schedule+0xc3/0x180 kernel/sched/core.c:6771
 schedule_timeout+0xb0/0x300 kernel/time/timer.c:2143
 do_wait_for_common kernel/sched/completion.c:95 [inline]
 __wait_for_common kernel/sched/completion.c:116 [inline]
 wait_for_common kernel/sched/completion.c:127 [inline]
 wait_for_completion+0x354/0x620 kernel/sched/completion.c:148
 fuse_direct_IO+0xb11/0x1430 fs/fuse/file.c:2959
 fuse_direct_write_iter fs/fuse/file.c:1604 [inline]
 fuse_file_write_iter+0x950/0xf50 fs/fuse/file.c:1652
 call_write_iter include/linux/fs.h:1956 [inline]
 aio_write+0x590/0x7e0 fs/aio.c:1582
 io_submit_one+0x8a7/0x18a0 fs/aio.c:2001
 __do_sys_io_submit fs/aio.c:2060 [inline]
 __se_sys_io_submit+0x17f/0x2f0 fs/aio.c:2030
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fd8e267cae9
RSP: 002b:00007fd8e34a10c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 00007fd8e279bf80 RCX: 00007fd8e267cae9
RDX: 0000000020000780 RSI: 0000000000000002 RDI: 00007fd8e3457000
RBP: 00007fd8e26c847a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007fd8e279bf80 R15: 00007ffc8e9401d8
 </TASK>
INFO: task syz-executor.0:10595 blocked for more than 148 seconds.
      Not tainted 6.6.0-rc3-syzkaller-00044-g633b47cb009d #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0  state:D stack:25224 pid:10595 ppid:5066   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x196c/0x4af0 kernel/sched/core.c:6695
 schedule+0xc3/0x180 kernel/sched/core.c:6771
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6830
 rwsem_down_write_slowpath+0xee6/0x13a0 kernel/locking/rwsem.c:1178
 __down_write_common+0x1aa/0x200 kernel/locking/rwsem.c:1306
 inode_lock include/linux/fs.h:802 [inline]
 fuse_flush+0x27b/0x950 fs/fuse/file.c:500
 filp_flush fs/open.c:1532 [inline]
 filp_close+0xb5/0x160 fs/open.c:1545
 close_files fs/file.c:432 [inline]
 put_files_struct+0x1b6/0x350 fs/file.c:447
 copy_process+0x306a/0x41a0 kernel/fork.c:2770
 kernel_clone+0x222/0x840 kernel/fork.c:2909
 __do_sys_clone3 kernel/fork.c:3210 [inline]
 __se_sys_clone3+0x2cb/0x340 kernel/fork.c:3194
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fd8e267cae9
RSP: 002b:00007fd8e347ff98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fd8e267cae9
RDX: 00007fd8e347ffb0 RSI: 0000000000000058 RDI: 00007fd8e347ffb0
RBP: 00007fd8e26c847a R08: 0000000000000000 R09: 0000000000000058
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007fd8e279c050 R15: 00007ffc8e9401d8
 </TASK>
INFO: task syz-executor.3:10608 blocked for more than 148 seconds.
      Not tainted 6.6.0-rc3-syzkaller-00044-g633b47cb009d #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3  state:D stack:24840 pid:10608 ppid:5076   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x196c/0x4af0 kernel/sched/core.c:6695
 schedule+0xc3/0x180 kernel/sched/core.c:6771
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6830
 rwsem_down_write_slowpath+0xee6/0x13a0 kernel/locking/rwsem.c:1178
 __down_write_common+0x1aa/0x200 kernel/locking/rwsem.c:1306
 inode_lock include/linux/fs.h:802 [inline]
 fuse_flush+0x27b/0x950 fs/fuse/file.c:500
 filp_flush fs/open.c:1532 [inline]
 __do_sys_close fs/open.c:1566 [inline]
 __se_sys_close+0xe6/0x220 fs/open.c:1557
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fde5da7b9da
RSP: 002b:00007ffdc2372860 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fde5da7b9da
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 00007fde5db9d980 R08: 0000001b30620000 R09: 00000000000005b0
R10: 0000000081df0302 R11: 0000000000000293 R12: 000000000008f5d8
R13: ffffffffffffffff R14: 00007fde5d600000 R15: 000000000008f297
 </TASK>
INFO: task syz-executor.3:10610 blocked for more than 149 seconds.
      Not tainted 6.6.0-rc3-syzkaller-00044-g633b47cb009d #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3  state:D stack:24872 pid:10610 ppid:5076   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x196c/0x4af0 kernel/sched/core.c:6695
 schedule+0xc3/0x180 kernel/sched/core.c:6771
 schedule_timeout+0xb0/0x300 kernel/time/timer.c:2143
 do_wait_for_common kernel/sched/completion.c:95 [inline]
 __wait_for_common kernel/sched/completion.c:116 [inline]
 wait_for_common kernel/sched/completion.c:127 [inline]
 wait_for_completion+0x354/0x620 kernel/sched/completion.c:148
 fuse_direct_IO+0xb11/0x1430 fs/fuse/file.c:2959
 fuse_direct_write_iter fs/fuse/file.c:1604 [inline]
 fuse_file_write_iter+0x950/0xf50 fs/fuse/file.c:1652
 call_write_iter include/linux/fs.h:1956 [inline]
 aio_write+0x590/0x7e0 fs/aio.c:1582
 io_submit_one+0x8a7/0x18a0 fs/aio.c:2001
 __do_sys_io_submit fs/aio.c:2060 [inline]
 __se_sys_io_submit+0x17f/0x2f0 fs/aio.c:2030
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fde5da7cae9
RSP: 002b:00007fde5e80d0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
RAX: ffffffffffffffda RBX: 00007fde5db9bf80 RCX: 00007fde5da7cae9
RDX: 0000000020000780 RSI: 0000000000000002 RDI: 00007fde5e7c3000
RBP: 00007fde5dac847a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007fde5db9bf80 R15: 00007ffdc2372798
 </TASK>
INFO: task syz-executor.3:10614 blocked for more than 151 seconds.
      Not tainted 6.6.0-rc3-syzkaller-00044-g633b47cb009d #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3  state:D stack:25704 pid:10614 ppid:5076   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5382 [inline]
 __schedule+0x196c/0x4af0 kernel/sched/core.c:6695
 schedule+0xc3/0x180 kernel/sched/core.c:6771
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6830
 rwsem_down_write_slowpath+0xee6/0x13a0 kernel/locking/rwsem.c:1178
 __down_write_common+0x1aa/0x200 kernel/locking/rwsem.c:1306
 inode_lock include/linux/fs.h:802 [inline]
 fuse_flush+0x27b/0x950 fs/fuse/file.c:500
 filp_flush fs/open.c:1532 [inline]
 filp_close+0xb5/0x160 fs/open.c:1545
 close_files fs/file.c:432 [inline]
 put_files_struct+0x1b6/0x350 fs/file.c:447
 copy_process+0x306a/0x41a0 kernel/fork.c:2770
 kernel_clone+0x222/0x840 kernel/fork.c:2909
 __do_sys_clone3 kernel/fork.c:3210 [inline]
 __se_sys_clone3+0x2cb/0x340 kernel/fork.c:3194
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fde5da7cae9
RSP: 002b:00007fde5e7ebf98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fde5da7cae9
RDX: 00007fde5e7ebfb0 RSI: 0000000000000058 RDI: 00007fde5e7ebfb0
RBP: 00007fde5dac847a R08: 0000000000000000 R09: 0000000000000058
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007fde5db9c050 R15: 00007ffdc2372798
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/29:
 #0: ffffffff8d32c420 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:303 [inline]
 #0: ffffffff8d32c420 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:749 [inline]
 #0: ffffffff8d32c420 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6613
2 locks held by kworker/u4:8/1090:
 #0: ffff888012871938 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:2605 [inline]
 #0: ffff888012871938 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1400 kernel/workqueue.c:2703
 #1: ffff8880b9928808 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 kernel/sched/psi.c:999
1 lock held by acpid/4470:
 #0: ffffffff8d331db8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:325 [inline]
 #0: ffffffff8d331db8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x46c/0x890 kernel/rcu/tree_exp.h:992
2 locks held by getty/4794:

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/09/27 21:08 upstream 633b47cb009d 2895a507 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in fuse_flush
* Struck through repros no longer work on HEAD.