syzbot


INFO: task hung in fuse_chan_send

Status: upstream: reported syz repro on 2026/06/17 19:28
Subsystems: fuse
Labels: prio:normal
[Documentation on labels]
Reported-by: syzbot+a531d1b1fb0fa2a75a73@syzkaller.appspotmail.com
First crash: 76d, last: 1h06m
Cause bisection: failed (error log, bisect log)
  
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision Error
783150a7-f479-4d08-93a9-680d20ed7eac assessment-security DenialOfService: ✅ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ INFO: task hung in fuse_chan_send 2026/05/18 00:13 2026/05/18 00:13 2026/05/18 00:51 de5aae85e5f28e2fa1c7deefcc24fe286abe5140

			
		
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [fuse?] INFO: task hung in fuse_chan_send 0 (1) 2026/06/17 19:28

Sample crash report:
INFO: task syz.0.617:6832 blocked for more than 143 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.0.617       state:D stack:24904 pid:6832  tgid:6832  ppid:6745   task_flags:0x400040 flags:0x00080003
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5510 [inline]
 __schedule+0x17d9/0x56c0 kernel/sched/core.c:7234
 __schedule_loop kernel/sched/core.c:7311 [inline]
 schedule+0x164/0x2b0 kernel/sched/core.c:7326
 request_wait_answer fs/fuse/dev.c:743 [inline]
 __fuse_request_send fs/fuse/dev.c:757 [inline]
 fuse_chan_send+0x1065/0x1ac0 fs/fuse/dev.c:833
 fuse_simple_request fs/fuse/fuse_i.h:1012 [inline]
 fuse_flush+0x66e/0x8b0 fs/fuse/file.c:504
 filp_flush+0xbd/0x190 fs/open.c:1471
 filp_close+0x1d/0x40 fs/open.c:1484
 __range_close fs/file.c:793 [inline]
 __do_sys_close_range fs/file.c:854 [inline]
 __se_sys_close_range+0x3d3/0x900 fs/file.c:818
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1854b9ce59
RSP: 002b:00007ffc639d32c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
RAX: ffffffffffffffda RBX: 00007ffc639d33b0 RCX: 00007f1854b9ce59
RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
RBP: 0000000000024913 R08: 0000000000000001 R09: 0000000000000000
R10: 0000001b31720000 R11: 0000000000000246 R12: 00007ffc639d33f0
R13: 00007f1854e15fac R14: 0000000000024999 R15: 00007f1854e15fa0
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/25:
 #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline]
 #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline]
 #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775
2 locks held by getty/5092:
 #0: ffff88803f75a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
 #1: ffffc900014fd2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211

=============================================

NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 25 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:122
 nmi_trigger_cpumask_backtrace+0x17a/0x380 lib/nmi_backtrace.c:65
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 __sys_info lib/sys_info.c:157 [inline]
 sys_info+0x135/0x170 lib/sys_info.c:165
 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline]
 watchdog+0xfd7/0x1030 kernel/hung_task.c:561
 kthread+0x388/0x470 kernel/kthread.c:436
 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Crashes (25):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/06/27 04:17 upstream 51cb1aa1250c fb92f11c .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root INFO: task hung in fuse_chan_send
2026/06/14 13:06 linux-next c425609d6ac4 1d2f3589 .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: task hung in fuse_chan_send
2026/06/30 13:55 upstream dc59e4fea9d8 00e8b0fd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in fuse_chan_send
2026/06/30 10:10 upstream dc59e4fea9d8 fff8d0a0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in fuse_chan_send
2026/06/30 10:04 upstream dc59e4fea9d8 fff8d0a0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in fuse_chan_send
2026/06/30 09:09 upstream dc59e4fea9d8 fff8d0a0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in fuse_chan_send
2026/06/30 01:14 upstream dc59e4fea9d8 fff8d0a0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in fuse_chan_send
2026/06/30 00:02 upstream dc59e4fea9d8 6a0c72dc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in fuse_chan_send
2026/06/29 20:34 upstream dc59e4fea9d8 6a0c72dc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in fuse_chan_send
2026/06/29 15:08 upstream dc59e4fea9d8 6a0c72dc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in fuse_chan_send
2026/06/29 13:58 upstream dc59e4fea9d8 6a0c72dc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in fuse_chan_send
2026/06/25 02:10 upstream ab9de95c9cf9 cfa969bf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in fuse_chan_send
2026/05/19 14:19 linux-next 6a50ba100ace 223544dc .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: task hung in fuse_chan_send
2026/05/19 00:59 linux-next 80dd246accce 9f74d399 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce INFO: task hung in fuse_chan_send
2026/05/08 15:03 linux-next e98d21c170b0 5633175a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-rust-kasan-gce INFO: task hung in fuse_chan_send
2026/04/27 13:09 linux-next 7080e32d3f09 0f700595 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: task hung in fuse_chan_send
2026/04/15 13:48 linux-next e6efabc0afca c441f497 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: task hung in fuse_chan_send
2026/06/30 08:23 https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux master dc59e4fea9d8 fff8d0a0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in fuse_chan_send
2026/06/30 05:31 https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux master dc59e4fea9d8 fff8d0a0 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in fuse_chan_send
2026/06/29 21:43 https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux master dc59e4fea9d8 6a0c72dc .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in fuse_chan_send
2026/06/29 21:32 https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux master dc59e4fea9d8 6a0c72dc .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in fuse_chan_send
2026/06/29 20:17 https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux master dc59e4fea9d8 6a0c72dc .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in fuse_chan_send
2026/06/29 20:01 https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux master dc59e4fea9d8 6a0c72dc .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in fuse_chan_send
2026/06/28 04:38 https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux master 780d569e6c4b fb92f11c .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in fuse_chan_send
2026/06/24 21:15 https://kernel.googlesource.com/pub/scm/linux/kernel/git/torvalds/linux master 840ef6c78e6a c1da772e .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in fuse_chan_send
* Struck through repros no longer work on HEAD.