bisecting fixing commit since 7fd2bf83d59a2d32e0d596c5d3e623b9a0e7e2d5 building syzkaller on 838e7e2cd9228583ca33c49a39aea4d863d3e36d testing commit 7fd2bf83d59a2d32e0d596c5d3e623b9a0e7e2d5 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 1ea94d1a92e7d49dc3d6a449c0bbea04cb19022e1787c51b44fd2f33eba59b87 all runs: crashed: INFO: task hung in fuse_simple_request testing current HEAD 3123109284176b1532874591f7c81f3837bbdc17 testing commit 3123109284176b1532874591f7c81f3837bbdc17 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 2ae559f4830d939b5ea47f9f68faaf2b93760c4ae89325863da8c41671969a86 all runs: crashed: INFO: task hung in fuse_simple_request revisions tested: 2, total time: 24m49.173283448s (build: 11m58.674819315s, test: 12m6.017306148s) the crash still happens on HEAD commit msg: Linux 5.18-rc1 crash: INFO: task hung in fuse_simple_request INFO: task syz-executor.4:5347 blocked for more than 143 seconds. Not tainted 5.18.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:27832 pid: 5347 ppid: 3939 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0x913/0x26a0 kernel/sched/core.c:6382 schedule+0xd2/0x1f0 kernel/sched/core.c:6454 request_wait_answer+0x395/0x6b0 fs/fuse/dev.c:407 __fuse_request_send fs/fuse/dev.c:426 [inline] fuse_simple_request+0x405/0xad0 fs/fuse/dev.c:511 fuse_access+0x1bc/0x320 fs/fuse/dir.c:1261 do_inode_permission fs/namei.c:457 [inline] inode_permission.part.0+0x2ca/0x470 fs/namei.c:524 path_permission include/linux/fs.h:2765 [inline] __do_sys_chdir fs/open.c:494 [inline] __se_sys_chdir fs/open.c:484 [inline] __x64_sys_chdir+0xf6/0x1f0 fs/open.c:484 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f9aac2878d9 RSP: 002b:00007f9aad36d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 RAX: ffffffffffffffda RBX: 00007f9aac38bf60 RCX: 00007f9aac2878d9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200020c0 RBP: 00007f9aac2e1cb4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f9aac8bfb2f R14: 00007f9aad36d300 R15: 0000000000022000 INFO: task syz-executor.2:5354 blocked for more than 145 seconds. Not tainted 5.18.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:27832 pid: 5354 ppid: 3937 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0x913/0x26a0 kernel/sched/core.c:6382 schedule+0xd2/0x1f0 kernel/sched/core.c:6454 request_wait_answer+0x395/0x6b0 fs/fuse/dev.c:407 __fuse_request_send fs/fuse/dev.c:426 [inline] fuse_simple_request+0x405/0xad0 fs/fuse/dev.c:511 fuse_access+0x1bc/0x320 fs/fuse/dir.c:1261 do_inode_permission fs/namei.c:457 [inline] inode_permission.part.0+0x2ca/0x470 fs/namei.c:524 path_permission include/linux/fs.h:2765 [inline] __do_sys_chdir fs/open.c:494 [inline] __se_sys_chdir fs/open.c:484 [inline] __x64_sys_chdir+0xf6/0x1f0 fs/open.c:484 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f01c02878d9 RSP: 002b:00007f01c13d0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 RAX: ffffffffffffffda RBX: 00007f01c038bf60 RCX: 00007f01c02878d9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200020c0 RBP: 00007f01c02e1cb4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f01c08bfb2f R14: 00007f01c13d0300 R15: 0000000000022000 INFO: task syz-executor.5:5412 blocked for more than 146 seconds. Not tainted 5.18.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.5 state:D stack:27688 pid: 5412 ppid: 3941 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0x913/0x26a0 kernel/sched/core.c:6382 schedule+0xd2/0x1f0 kernel/sched/core.c:6454 request_wait_answer+0x395/0x6b0 fs/fuse/dev.c:407 __fuse_request_send fs/fuse/dev.c:426 [inline] fuse_simple_request+0x405/0xad0 fs/fuse/dev.c:511 fuse_access+0x1bc/0x320 fs/fuse/dir.c:1261 do_inode_permission fs/namei.c:457 [inline] inode_permission.part.0+0x2ca/0x470 fs/namei.c:524 path_permission include/linux/fs.h:2765 [inline] __do_sys_chdir fs/open.c:494 [inline] __se_sys_chdir fs/open.c:484 [inline] __x64_sys_chdir+0xf6/0x1f0 fs/open.c:484 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f3e514878d9 RSP: 002b:00007f3e52534188 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 RAX: ffffffffffffffda RBX: 00007f3e5158bf60 RCX: 00007f3e514878d9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200020c0 RBP: 00007f3e514e1cb4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f3e51abfb2f R14: 00007f3e52534300 R15: 0000000000022000 INFO: task syz-executor.3:5455 blocked for more than 148 seconds. Not tainted 5.18.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.3 state:D stack:27328 pid: 5455 ppid: 4186 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0x913/0x26a0 kernel/sched/core.c:6382 schedule+0xd2/0x1f0 kernel/sched/core.c:6454 request_wait_answer+0x395/0x6b0 fs/fuse/dev.c:407 __fuse_request_send fs/fuse/dev.c:426 [inline] fuse_simple_request+0x405/0xad0 fs/fuse/dev.c:511 fuse_access+0x1bc/0x320 fs/fuse/dir.c:1261 do_inode_permission fs/namei.c:457 [inline] inode_permission.part.0+0x2ca/0x470 fs/namei.c:524 path_permission include/linux/fs.h:2765 [inline] __do_sys_chdir fs/open.c:494 [inline] __se_sys_chdir fs/open.c:484 [inline] __x64_sys_chdir+0xf6/0x1f0 fs/open.c:484 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fd6540878d9 RSP: 002b:00007fd6551af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 RAX: ffffffffffffffda RBX: 00007fd65418bf60 RCX: 00007fd6540878d9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200020c0 RBP: 00007fd6540e1cb4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fd6546bfb2f R14: 00007fd6551af300 R15: 0000000000022000 INFO: task syz-executor.2:5504 blocked for more than 150 seconds. Not tainted 5.18.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:27488 pid: 5504 ppid: 3937 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0x913/0x26a0 kernel/sched/core.c:6382 schedule+0xd2/0x1f0 kernel/sched/core.c:6454 request_wait_answer+0x395/0x6b0 fs/fuse/dev.c:407 __fuse_request_send fs/fuse/dev.c:426 [inline] fuse_simple_request+0x405/0xad0 fs/fuse/dev.c:511 fuse_access+0x1bc/0x320 fs/fuse/dir.c:1261 do_inode_permission fs/namei.c:457 [inline] inode_permission.part.0+0x2ca/0x470 fs/namei.c:524 path_permission include/linux/fs.h:2765 [inline] __do_sys_chdir fs/open.c:494 [inline] __se_sys_chdir fs/open.c:484 [inline] __x64_sys_chdir+0xf6/0x1f0 fs/open.c:484 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f01c02878d9 RSP: 002b:00007f01c13d0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 RAX: ffffffffffffffda RBX: 00007f01c038bf60 RCX: 00007f01c02878d9 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200020c0 RBP: 00007f01c02e1cb4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f01c08bfb2f R14: 00007f01c13d0300 R15: 0000000000022000 INFO: task syz-executor.0:5565 blocked for more than 152 seconds. Not tainted 5.18.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:27256 pid: 5565 ppid: 3942 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0x913/0x26a0 kernel/sched/core.c:6382 schedule+0xd2/0x1f0 kernel/sched/core.c:6454 request_wait_answer+0x395/0x6b0 fs/fuse/dev.c:407