syzbot


INFO: task hung in addrconf_verify_work (2)

Status: upstream: reported C repro on 2020/10/28 05:47
Reported-by: syzbot+6e8e3a1c58678143171e@syzkaller.appspotmail.com
First crash: 1328d, last: 485d
Fix bisection: failed (error log, bisect log)
  
Similar bugs (21)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-49 INFO: task hung in addrconf_verify_work 18 1719d 1891d 0/3 auto-closed as invalid on 2020/01/31 12:44
linux-6.1 INFO: task hung in addrconf_verify_work (2) 37 2d23h 140d 0/3 upstream: reported on 2024/01/29 22:05
linux-4.19 INFO: task hung in addrconf_verify_work (5) 3 705d 745d 0/1 auto-obsoleted due to no activity on 2022/11/10 09:18
linux-4.19 INFO: task hung in addrconf_verify_work (6) C error 4 487d 546d 0/1 upstream: reported C repro on 2022/12/19 15:22
linux-4.19 INFO: task hung in addrconf_verify_work (3) 1 1192d 1192d 0/1 auto-closed as invalid on 2021/07/11 07:19
linux-4.19 INFO: task hung in addrconf_verify_work (4) 6 887d 973d 0/1 auto-closed as invalid on 2022/05/13 00:19
upstream INFO: task hung in addrconf_verify_work (2) net C 22 1708d 1708d 13/27 fixed on 2019/11/04 14:50
linux-4.19 INFO: task hung in addrconf_verify_work (2) 2 1332d 1422d 0/1 auto-closed as invalid on 2021/02/21 08:05
linux-5.15 INFO: task hung in addrconf_verify_work origin:upstream C 41 3d21h 28d 0/3 upstream: reported C repro on 2024/05/20 18:55
android-414 INFO: task hung in addrconf_verify_work C 6 1708d 1894d 0/1 public: reported C repro on 2019/04/12 00:01
upstream INFO: task hung in addrconf_verify_work (8) net C error 1210 37m 182d 0/27 upstream: reported C repro on 2023/12/18 14:44
android-44 INFO: task hung in addrconf_verify_work 3 2225d 2254d 0/2 auto-closed as invalid on 2019/02/22 14:29
linux-4.19 INFO: task hung in addrconf_verify_work 1 1552d 1552d 0/1 auto-closed as invalid on 2020/07/16 23:17
upstream INFO: task hung in addrconf_verify_work (3) C done 75 1322d 1357d 15/27 fixed on 2020/11/16 12:12
upstream INFO: task hung in addrconf_verify_work (5) net C done done 68 900d 992d 0/27 closed as invalid on 2022/02/01 17:39
upstream INFO: task hung in addrconf_verify_work (7) netfilter C error 64 201d 348d 0/27 closed as invalid on 2023/12/01 14:19
linux-6.1 INFO: task hung in addrconf_verify_work 2 410d 461d 0/3 auto-obsoleted due to no activity on 2023/08/23 09:09
linux-4.14 INFO: task hung in addrconf_verify_work 4 1478d 1549d 0/1 auto-closed as invalid on 2020/09/29 04:19
upstream INFO: task hung in addrconf_verify_work net C 2 2275d 2275d 0/27 closed as invalid on 2018/03/27 11:14
upstream INFO: task hung in addrconf_verify_work (4) C done 132 1213d 1301d 20/27 fixed on 2021/04/09 19:46
upstream INFO: task hung in addrconf_verify_work (6) C done 86 483d 720d 22/27 fixed on 2023/02/24 13:51
Fix bisection attempts (22)
Created Duration User Patch Repo Result
2022/10/13 02:17 0m bisect fix linux-4.14.y error job log (0)
2022/09/04 08:23 30m bisect fix linux-4.14.y job log (0) log
2022/07/12 06:04 28m bisect fix linux-4.14.y job log (0) log
2022/05/17 03:35 25m bisect fix linux-4.14.y job log (0) log
2022/04/17 03:01 34m bisect fix linux-4.14.y job log (0) log
2022/03/16 21:54 26m bisect fix linux-4.14.y job log (0) log
2022/02/14 21:19 35m bisect fix linux-4.14.y job log (0) log
2022/01/15 20:44 34m bisect fix linux-4.14.y job log (0) log
2021/12/16 20:17 27m bisect fix linux-4.14.y job log (0) log
2021/11/16 19:47 29m bisect fix linux-4.14.y job log (0) log
2021/10/17 19:11 35m bisect fix linux-4.14.y job log (0) log
2021/09/17 18:39 31m bisect fix linux-4.14.y job log (0) log
2021/08/18 18:01 31m bisect fix linux-4.14.y job log (0) log
2021/07/19 17:32 28m bisect fix linux-4.14.y job log (0) log
2021/06/19 14:29 26m bisect fix linux-4.14.y job log (0) log
2021/05/20 13:56 33m bisect fix linux-4.14.y job log (0) log
2021/04/20 13:24 28m bisect fix linux-4.14.y job log (0) log
2021/02/21 13:23 29m bisect fix linux-4.14.y job log (0) log
2021/02/18 07:38 18m bisect fix linux-4.14.y error job log (0)
2021/02/07 08:59 0m bisect fix linux-4.14.y error job log (0)
2021/01/08 06:39 29m bisect fix linux-4.14.y job log (0) log
2020/12/09 06:08 31m bisect fix linux-4.14.y job log (0) log

Sample crash report:
IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
INFO: task kworker/0:1:24 blocked for more than 140 seconds.
      Not tainted 4.14.204-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/0:1     D28288    24      2 0x80000000
Workqueue: ipv6_addrconf addrconf_verify_work
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 addrconf_verify_work+0xa/0x20 net/ipv6/addrconf.c:4412
 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116
 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
INFO: task kworker/1:2:3437 blocked for more than 140 seconds.
      Not tainted 4.14.204-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/1:2     D27048  3437      2 0x80000000
Workqueue: events disconnect_work
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 disconnect_work+0x14/0x1d0 net/wireless/sme.c:664
 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116
 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
INFO: task kworker/1:1:7982 blocked for more than 140 seconds.
      Not tainted 4.14.204-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/1:1     D30024  7982      2 0x80000000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 addrconf_dad_work+0x89/0xef0 net/ipv6/addrconf.c:3917
 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116
 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
INFO: task kworker/1:3:8033 blocked for more than 140 seconds.
      Not tainted 4.14.204-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/1:3     D30208  8033      2 0x80000000
Workqueue: events linkwatch_event
Call Trace:
 context_switch kernel/sched/core.c:2808 [inline]
 __schedule+0x88b/0x1de0 kernel/sched/core.c:3384
 schedule+0x8d/0x1b0 kernel/sched/core.c:3428
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3486
 __mutex_lock_common kernel/locking/mutex.c:833 [inline]
 __mutex_lock+0x669/0x1310 kernel/locking/mutex.c:893
 linkwatch_event+0xa/0x50 net/core/link_watch.c:236
 process_one_work+0x793/0x14a0 kernel/workqueue.c:2116
 worker_thread+0x5cc/0xff0 kernel/workqueue.c:2250
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404

Showing all locks held in the system:
3 locks held by kworker/0:1/24:
 #0:  ("%s"("ipv6_addrconf")){+.+.}, at: [<ffffffff81373570>] process_one_work+0x6b0/0x14a0 kernel/workqueue.c:2087
 #1:  ((addr_chk_work).work){+.+.}, at: [<ffffffff813735a6>] process_one_work+0x6e6/0x14a0 kernel/workqueue.c:2091
 #2:  (rtnl_mutex){+.+.}, at: [<ffffffff865212da>] addrconf_verify_work+0xa/0x20 net/ipv6/addrconf.c:4412
1 lock held by khungtaskd/1531:
 #0:  (tasklist_lock){.+.+}, at: [<ffffffff81430bd4>] debug_show_all_locks+0x7c/0x21a kernel/locking/lockdep.c:4548
3 locks held by kworker/1:2/3437:
 #0:  ("events"){+.+.}, at: [<ffffffff81373570>] process_one_work+0x6b0/0x14a0 kernel/workqueue.c:2087
 #1:  (cfg80211_disconnect_work){+.+.}, at: [<ffffffff813735a6>] process_one_work+0x6e6/0x14a0 kernel/workqueue.c:2091
 #2:  (rtnl_mutex){+.+.}, at: [<ffffffff86c3ecc4>] disconnect_work+0x14/0x1d0 net/wireless/sme.c:664
3 locks held by kworker/1:1/7982:
 #0:  ("%s"("ipv6_addrconf")){+.+.}, at: [<ffffffff81373570>] process_one_work+0x6b0/0x14a0 kernel/workqueue.c:2087
 #1:  ((&(&ifa->dad_work)->work)){+.+.}, at: [<ffffffff813735a6>] process_one_work+0x6e6/0x14a0 kernel/workqueue.c:2091
 #2:  (rtnl_mutex){+.+.}, at: [<ffffffff86523799>] addrconf_dad_work+0x89/0xef0 net/ipv6/addrconf.c:3917
3 locks held by kworker/1:3/8033:
 #0:  ("events"){+.+.}, at: [<ffffffff81373570>] process_one_work+0x6b0/0x14a0 kernel/workqueue.c:2087
 #1:  ((linkwatch_work).work){+.+.}, at: [<ffffffff813735a6>] process_one_work+0x6e6/0x14a0 kernel/workqueue.c:2091
 #2:  (rtnl_mutex){+.+.}, at: [<ffffffff85e3a14a>] linkwatch_event+0xa/0x50 net/core/link_watch.c:236

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 1531 Comm: khungtaskd Not tainted 4.14.204-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x283 lib/dump_stack.c:58
 nmi_cpu_backtrace.cold+0x57/0x93 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x13a/0x17f lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline]
 watchdog+0x5b9/0xb40 kernel/hung_task.c:274
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 8 Comm: rcu_preempt Not tainted 4.14.204-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8880b5414200 task.stack: ffff8880b5418000
RIP: 0010:separate_irq_context kernel/locking/lockdep.c:3112 [inline]
RIP: 0010:__lock_acquire+0x6e5/0x3f20 kernel/locking/lockdep.c:3482
RSP: 0018:ffff8880b541fb80 EFLAGS: 00000046
RAX: 0000000000000033 RBX: 0000000000000000 RCX: 1ffff11016a82950
RDX: 0000000000000000 RSI: ffff8880b5414a88 RDI: ffffffff8b9d4cd0
RBP: ffff8880b5414aaa R08: 0000000000000001 R09: 00000000000c0033
R10: ffff8880b5414a88 R11: ffff8880b5414200 R12: ffff8880b5414aa0
R13: 0000000000000001 R14: 0000000000000033 R15: ffffffff8beb4d40
FS:  0000000000000000(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f09d6c30000 CR3: 00000000a4cc9000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998
 __raw_spin_lock_irq include/linux/spinlock_api_smp.h:128 [inline]
 _raw_spin_lock_irq+0x5b/0x80 kernel/locking/spinlock.c:168
 rcu_gp_cleanup kernel/rcu/tree.c:2141 [inline]
 rcu_gp_kthread+0x1050/0x1e60 kernel/rcu/tree.c:2304
 kthread+0x30d/0x420 kernel/kthread.c:232
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404
Code: 24 18 49 89 1a 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e 0f 25 00 00 41 8b 93 80 08 00 00 <85> d2 74 75 48 8b 74 24 10 48 8d 14 92 48 8d 6c d6 d8 48 ba 00 

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/11/09 06:08 linux-4.14.y 6b6446efedb2 cba33199 .config console log report syz C ci2-linux-4-14
2020/10/28 05:46 linux-4.14.y 5b7a52cd2eef 96e03c1c .config console log report syz C ci2-linux-4-14
2023/02/18 23:09 linux-4.14.y a8ad60f2af58 bcdf85f8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-4-14 INFO: task hung in addrconf_verify_work
2022/08/05 08:22 linux-4.14.y b641242202ed a65a7ce9 .config console log report info ci2-linux-4-14 INFO: task hung in addrconf_verify_work
2022/06/12 06:04 linux-4.14.y b8f3be299d51 0d5abf15 .config console log report info ci2-linux-4-14 INFO: task hung in addrconf_verify_work
2022/05/19 20:14 linux-4.14.y dffb5c6ff09c cb1ac2e7 .config console log report info ci2-linux-4-14 INFO: task hung in addrconf_verify_work
2021/03/21 13:14 linux-4.14.y cb83ddcd5332 17810eae .config console log report info ci2-linux-4-14 INFO: task hung in addrconf_verify_work
* Struck through repros no longer work on HEAD.