syzbot


INFO: task hung in fqdir_free_fn (2)

Status: premoderation: reported on 2026/02/07 13:12
Reported-by: syzbot+536980ef52d8f82cfa08@syzkaller.appspotmail.com
First crash: 59d, last: 31d
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-6-12 INFO: task hung in fqdir_free_fn 1 32 153d 290d 0/1 auto-obsoleted due to no activity on 2026/01/05 06:30
linux-5.15 INFO: task hung in fqdir_free_fn 1 1 621d 621d 0/3 auto-obsoleted due to no activity on 2024/11/01 18:36
upstream INFO: task hung in fqdir_free_fn net 1 4 516d 626d 0/29 auto-obsoleted due to no activity on 2025/02/05 05:14
linux-5.15 INFO: task hung in fqdir_free_fn (2) 1 1 87d 87d 0/3 upstream: reported on 2026/01/09 19:10

Sample crash report:
INFO: task kworker/0:1:10 blocked for more than 122 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:1     state:D stack:0     pid:10    tgid:10    ppid:2      flags:0x00004000
Workqueue: events fqdir_free_fn
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:6016 [inline]
 __schedule+0x134f/0x1ea0 kernel/sched/core.c:7864
 __schedule_loop kernel/sched/core.c:7945 [inline]
 schedule+0xc5/0x240 kernel/sched/core.c:7960
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8017
 __mutex_lock_common kernel/locking/mutex.c:707 [inline]
 __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803
 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134
 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285
 rcu_barrier+0x4d/0x540 kernel/rcu/tree.c:4589
 fqdir_free_fn+0x36/0x150 net/ipv4/inet_fragment.c:167
 process_one_work kernel/workqueue.c:3238 [inline]
 process_scheduled_works+0x7d4/0x1020 kernel/workqueue.c:3319
 worker_thread+0xc70/0x10b0 kernel/workqueue.c:3400
 kthread+0x2c9/0x370 kernel/kthread.c:389
 ret_from_fork+0x64/0xa0 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task syz.4.268:1195 blocked for more than 124 seconds.
      Not tainted syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.268       state:D stack:0     pid:1195  tgid:1194  ppid:554    flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:6016 [inline]
 __schedule+0x134f/0x1ea0 kernel/sched/core.c:7864
 __schedule_loop kernel/sched/core.c:7945 [inline]
 schedule+0xc5/0x240 kernel/sched/core.c:7960
 schedule_preempt_disabled+0x14/0x30 kernel/sched/core.c:8017
 __mutex_lock_common kernel/locking/mutex.c:707 [inline]
 __mutex_lock+0x960/0x1bb0 kernel/locking/mutex.c:803
 __mutex_lock_slowpath+0xe/0x20 kernel/locking/mutex.c:1134
 mutex_lock+0x113/0x1d0 kernel/locking/mutex.c:285
 rcu_barrier+0x4d/0x540 kernel/rcu/tree.c:4589
 setup_net+0x8e8/0x9b0 net/core/net_namespace.c:394
 copy_net_ns+0x512/0xa30 net/core/net_namespace.c:510
 create_new_namespaces+0x3b5/0x720 kernel/nsproxy.c:110
 unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228
 ksys_unshare+0x502/0x880 kernel/fork.c:3356
 __do_sys_unshare kernel/fork.c:3427 [inline]
 __se_sys_unshare kernel/fork.c:3425 [inline]
 __x64_sys_unshare+0x3c/0x50 kernel/fork.c:3425
 x64_sys_call+0x2998/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:273
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f7db319c799
RSP: 002b:00007f7db3f9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 00007f7db3415fa0 RCX: 00007f7db319c799
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
RBP: 00007f7db3232bd9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f7db3416038 R14: 00007f7db3415fa0 R15: 00007ffecf488c98
 </TASK>
INFO: task syz.1.273:1217 blocked for more than 131 seconds.

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/07 11:10 android16-6.12 792a289062b8 5cb44a80 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust INFO: task hung in fqdir_free_fn
2026/03/04 06:10 android16-6.12 c146faa1afa9 4180d919 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust INFO: task hung in fqdir_free_fn
2026/03/01 13:53 android16-6.12 7de305bfa436 43249bac .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust INFO: task hung in fqdir_free_fn
2026/02/28 16:08 android16-6.12 7de305bfa436 43249bac .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust INFO: task hung in fqdir_free_fn
2026/02/23 21:50 android16-6.12 c42c886c1098 6beca497 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust INFO: task hung in fqdir_free_fn
2026/02/23 19:10 android16-6.12 c42c886c1098 6beca497 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust INFO: task hung in fqdir_free_fn
2026/02/23 16:56 android16-6.12 c42c886c1098 6beca497 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust INFO: task hung in fqdir_free_fn
2026/02/21 19:03 android16-6.12 7712ca595283 6e7b5511 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust INFO: task hung in fqdir_free_fn
2026/02/12 22:06 android16-6.12 7b84a1af9194 504cb1bf .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust INFO: task hung in fqdir_free_fn
2026/02/07 13:12 android16-6.12 6aeca23b5dee f20fc9f9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-6-12-rust INFO: task hung in fqdir_free_fn
* Struck through repros no longer work on HEAD.