Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Date:   Wed, 19 Oct 2022 10:53:38 +0800
From:   Pengfei Xu <pengfei.xu@intel.com>
To:     Miklos Szeredi <mszeredi@redhat.com>
CC:     <linux-kernel@vger.kernel.org>, <heng.su@intel.com>
Subject: Re: [Syzkaller] INFO: task hung in fuse_lookup with v6.0 kernel in
 guest
Message-ID: <Y09msl1sHoA2Zj7k@xpf.sh.intel.com>
References: <Y00b31dX1mIfgnBP@xpf.sh.intel.com>
 <CAOssrKfakpGguAV=102jpW4m+YfpRx=+cBBO1O43bt3iwJHiSA@mail.gmail.com>
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <CAOssrKfakpGguAV=102jpW4m+YfpRx=+cBBO1O43bt3iwJHiSA@mail.gmail.com>
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?k/EsK2Qsq0rQcKjuKVFhhGm+EANprww7vdTwGlepF2H+koTDoNIJ2oRRVwga?=
 =?us-ascii?Q?oqO6XldAFOatGbdJJvTo8rlyZxUB5cOb2G1wHhbAAlHayjWZYUjBWtZgrK/t?=
 =?us-ascii?Q?kNgP23QmT2yXBSLayXnMBf1YMuyYf/9HHk2TVRJvqL/tSkzPUAN/t0/XoLWb?=
 =?us-ascii?Q?fnJa4nh3H95Pga2scOoySyn2WQFaKxRrcgghecUBiv699csrPYnwWTTwtMZ6?=
 =?us-ascii?Q?X5rdxuoDkNZqNs+fj4dwgirIwWelWy0pWwv3uG+4IhcbzfKF4iOvGYwo/Q5Y?=
 =?us-ascii?Q?SGfldqi+6xcmcLXxc9lOnukIWQM/ahfUJCzf+KKaS6yq0u/18azMvFmSCWXE?=
 =?us-ascii?Q?fOVhz72V0z04U18waUPd0IdwgkTxaOV5HHkRsSunde0Yoe129Q7/f0z4lMbc?=
 =?us-ascii?Q?mg7Y4HHIRePeHjQynW09knof5cDE9qvVWHlJp5ZaMSMLFSerVAcOfjLdHCad?=
 =?us-ascii?Q?MZS2Ls63KYRvDV2TZPmfng73ZbwWw49p+47TZq0kUyg/eUkmMu/mKlult9WN?=
 =?us-ascii?Q?bR/hZLQGrWcAFWCBys79TrjlP51w9vjNLco7fZIxF2d/gxYiH6Z8is/9dVFm?=
 =?us-ascii?Q?wFY+iC2GEy2nDm2v3eBzvCWMDjjpfTHe3BBHvZhtHklTu3EgL3nCszr5qJv7?=
 =?us-ascii?Q?79CL0eOKhHocVDgQjjlqiZnmJBwYyTRbvq1c6O4X0j5GJEll7dLV5+7iijcJ?=
 =?us-ascii?Q?sIfOq3l/mXZGtrtAosbINGKrnnHEbxj7o2EnYdjk4Vdvv8k6YVcMFQmRAS6t?=
 =?us-ascii?Q?Bigqi/cx1ANmRYc9apVE9mgrbWuj1CpM74KoK0oaY+h/LDqzstLTmpAyHdM7?=
 =?us-ascii?Q?/3VXvbetRluqe6ssUauxuT3CFoGZemu1KaPTk4m70vOx0EiLXMc8hh3pBe37?=
 =?us-ascii?Q?09kGAoWH+X3a/69xBsCSHkPsgio2Y8NOZmvY5tCh647t+V1CIeiDidZywbVk?=
 =?us-ascii?Q?bwfbD8E0eROKcVndZZZEQ3n+sju0A1/yHRPdoFSP5P014iMOYGAk+IuvH1qU?=
 =?us-ascii?Q?1H63BV+7wrl1oySu0Pu252u2to3XRPmqpj7g3Dt8cF9hFUeSQN4zWBTrvck4?=
 =?us-ascii?Q?KdOsFZZsEF/tsJbfs6BtdTOMkVkMnmY/mwZ8wZsxkMVw5YPI/rZtMIhK1ieM?=
 =?us-ascii?Q?FtUcUs4ev6IULiBzsyq//LlURwNQRZB0EDcD/BxMKdPOrLH1d15Gqb28hged?=
 =?us-ascii?Q?NiPVjxjgwe36UOYM7rOVY92D45Ue7rO2dH7sx37qDRvucXniXAQhZCsmyhfA?=
 =?us-ascii?Q?O/qQAo8bdlwajYYerMk7FhXBeVJniuOP1SfLL/RymnTH15aNmazfUNiUrBtr?=
 =?us-ascii?Q?6DQsquNIB3BNJGHLZqUHDvSA4Y3urNRJSii5DtNUHQZq6tfoFvzxUjkjheCw?=
 =?us-ascii?Q?M6HNYCOrfsoxCUSA3M8LYp3x7+uuT7Qa1lcxk1zBzxRHn4Xa9VhpflvS19/E?=
 =?us-ascii?Q?pjENfsJIYyE1jLRYbJp/D+BUYBQHcUHcz19maFMBp7oAuvnk+F7KlUiCfEQ4?=
 =?us-ascii?Q?JCcOwrNbsU8NmsCDD5qOsIvcVWMD12x8o68VVpqiTWV/1eL8V8XGc2Vu1yT2?=
 =?us-ascii?Q?n0+XNB4exbhGFuayoeU2CfGigblUIMUCkVrubc+c?=
X-MS-Exchange-CrossTenant-Network-Message-Id: c8f1eee6-8a8f-41e2-889a-08dab17d1d7c
X-MS-Exchange-CrossTenant-AuthSource: PH0PR11MB4839.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Oct 2022 02:53:35.1950
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 46c98d88-e344-4ed4-8496-4ed7712e255d
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: TZSSFEs1CZcWa+7jqp8FOxCeZhpEKQClnVhWgP+LWjOcWQaXB7Q5xJ1mS3KAKqXqA0TOChy2UubBUDUdITNYpg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL3PR11MB6362
X-OriginatorOrg: intel.com
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH,
        DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_MED,
        SPF_HELO_NONE,SPF_NONE autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

Hi Miklos,

On 2022-10-18 at 11:23:17 +0200, Miklos Szeredi wrote:
> On Mon, Oct 17, 2022 at 11:17 AM Pengfei Xu <pengfei.xu@intel.com> wrote:
> >
> > Hi Miklos,
> >
> > Greeting!
> >
> > Platform: Tiger lake CPU platform.
> >
> > We found 1 "task hung in fuse_lookup" issue by syzkaller with v6.0 mainline
> > kernel in guest.
> >
> > Bisected and found the bad commit:
> > "
> > commit:  62dd1fc8cc6b22e3e568be46ebdb817e66f5d6a5
> > fuse: move fget() to fuse_get_tree()
> > "
> >
> > Reproduced code generated by syzkaller, binary, bisect log and all the dmesg
> > info are in attached package.
> 
> Thanks for the report.
> 
> I tried out the reproducer, and the deadlock can be triggered.
> Unfortunately killing the deadlocked processes is not enough, but it
> still should be possible to recover with "echo 1 >
> /sys/fs/fuse/connections/$FUSE_DEV/abort".    In my tests this works,
> so I'm not sure there's anything to fix here.
  Thanks for the solution: "echo 1 >  /sys/fs/fuse/connections/$FUSE_DEV/abort"

> 
> Is there a real life situation where this occurs, or is this just
> triggered with fuzzing?
  It only could be reproduced by repro.c from syzkaller, and we have not
  encountered this problem in real life yet.
  So it's a low priority issue and it's not even clear if it's worth solving?

> 
> I'm wondering why syzbot didn't try aborting using the "abort" file in
> sysfs, AFAICS it does know this trick.
  Yes, maybe syzbot should improve it? :)

  Thanks!
  BR.

> 
> Thanks,
> Miklos
>