syzbot


INFO: task hung in cancel_delayed_work_sync

Status: closed as dup on 2019/09/19 05:15
Reported-by: syzbot+f39ab8494f6015e62360@syzkaller.appspotmail.com
First crash: 1148d, last: 1076d

Cause bisection: introduced by (bisect log) :
commit 3c4d7559159bfe1e3b94df3a657b2cda3a34e218
Author: Dave Watson <davejwatson@fb.com>
Date: Wed Jun 14 18:37:39 2017 +0000

  tls: kernel TLS support

Crash: KASAN: use-after-free Write in padata_parallel_worker (log)
Repro: C syz .config
Duplicate of (1):
Title Repro Cause bisect Fix bisect Count Last Reported
INFO: task hung in aead_recvmsg C done 11991 981d 1755d

Sample crash report:
INFO: task syz-executor834:9865 blocked for more than 143 seconds.
      Not tainted 5.3.0-rc8+ #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor834 D24512  9865   9864 0x00004000
Call Trace:
 context_switch kernel/sched/core.c:3254 [inline]
 __schedule+0x755/0x1580 kernel/sched/core.c:3880
 schedule+0xd9/0x260 kernel/sched/core.c:3947
 schedule_timeout+0x717/0xc50 kernel/time/timer.c:1783
 do_wait_for_common kernel/sched/completion.c:83 [inline]
 __wait_for_common kernel/sched/completion.c:104 [inline]
 wait_for_common kernel/sched/completion.c:115 [inline]
 wait_for_completion+0x29c/0x440 kernel/sched/completion.c:136
 __flush_work+0x508/0xa50 kernel/workqueue.c:3040
 __cancel_work_timer+0x3d9/0x540 kernel/workqueue.c:3127
 cancel_delayed_work_sync+0x1b/0x20 kernel/workqueue.c:3259
 tls_sw_cancel_work_tx+0x68/0x80 net/tls/tls_sw.c:2063
 tls_sk_proto_close+0x4ac/0x990 net/tls/tls_main.c:299
 inet_release+0xed/0x200 net/ipv4/af_inet.c:427
 inet6_release+0x53/0x80 net/ipv6/af_inet6.c:470
 __sock_release+0xce/0x280 net/socket.c:590
 sock_close+0x1e/0x30 net/socket.c:1268
 __fput+0x2ff/0x890 fs/file_table.c:280
 ____fput+0x16/0x20 fs/file_table.c:313
 task_work_run+0x145/0x1c0 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:188 [inline]
 exit_to_usermode_loop+0x316/0x380 arch/x86/entry/common.c:163
 prepare_exit_to_usermode arch/x86/entry/common.c:194 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:274 [inline]
 do_syscall_64+0x5a9/0x6a0 arch/x86/entry/common.c:299
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x401f40
Code: ff ff ff 25 62 63 20 00 68 08 00 00 00 e9 60 ff ff ff ff 25 5a 63 20 00 68 09 00 00 00 e9 50 ff ff ff ff 25 52 63 20 00 68 0a <00> 00 00 e9 40 ff ff ff ff 25 4a 63 20 00 68 0b 00 00 00 e9 30 ff
RSP: 002b:00007ffdfc56ff18 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000401f40
RDX: ffffffffffffffc1 RSI: 1201000000003618 RDI: 0000000000000004
RBP: 00007ffdfc56ff30 R08: 0000000000000000 R09: 1201000000003618
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000403170 R14: 0000000000000000 R15: 0000000000000000
INFO: lockdep is turned off.
NMI backtrace for cpu 1
CPU: 1 PID: 1057 Comm: khungtaskd Not tainted 5.3.0-rc8+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x172/0x1f0 lib/dump_stack.c:113
 nmi_cpu_backtrace.cold+0x70/0xb2 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x23b/0x28b lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:205 [inline]
 watchdog+0x9d0/0xef0 kernel/hung_task.c:289
 kthread+0x361/0x430 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:60

Crashes (166):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce 2019/09/15 12:01 upstream 1609d7604b84 32d59357 .config log report syz C
ci-upstream-net-this-kasan-gce 2019/09/12 07:54 net f4b752a6b270 f4e53c10 .config log report syz C
ci-upstream-net-kasan-gce 2019/09/15 21:05 net-next a3d3c74da49c 32d59357 .config log report syz C
ci-upstream-linux-next-kasan-gce-root 2019/09/17 22:23 linux-next f84e1c16f08d 13dcda9b .config log report syz C
ci-upstream-kasan-gce 2019/10/15 04:34 upstream 4f5cafb5cb84 05ad7292 .config log report
ci-upstream-kasan-gce-selinux-root 2019/09/16 00:32 upstream 1609d7604b84 32d59357 .config log report
ci-upstream-kasan-gce 2019/09/07 21:33 upstream 1e3778cb223e a60cb4cd .config log report
ci-upstream-kasan-gce-root 2019/09/05 21:32 upstream 3b47fd5ca9ea 040fda58 .config log report
ci-upstream-kasan-gce 2019/09/05 18:18 upstream 3b47fd5ca9ea 040fda58 .config log report
ci-upstream-kasan-gce 2019/09/01 20:55 upstream eea173097dfb bad3cce2 .config log report
ci-upstream-kasan-gce-selinux-root 2019/08/31 01:20 upstream 6525771f58cb fd37b39e .config log report
ci-upstream-kasan-gce 2019/08/30 23:31 upstream 6525771f58cb fd37b39e .config log report
ci-upstream-kasan-gce-root 2019/08/30 16:34 upstream 6525771f58cb fd37b39e .config log report
ci-upstream-kasan-gce-smack-root 2019/08/27 05:23 upstream a55aa89aab90 d21c5d9d .config log report
ci-upstream-net-this-kasan-gce 2019/10/20 08:23 net bd310aca442f 8c88c9c1 .config log report
ci-upstream-net-this-kasan-gce 2019/09/26 13:06 net 99dcb8432af0 24d405a3 .config log report
ci-upstream-net-this-kasan-gce 2019/09/19 20:21 net b41dae061bbd eb940044 .config log report
ci-upstream-net-this-kasan-gce 2019/09/09 23:22 net 28abe5796252 a60cb4cd .config log report
ci-upstream-net-this-kasan-gce 2019/09/09 07:18 net 28abe5796252 a60cb4cd .config log report
ci-upstream-net-this-kasan-gce 2019/09/08 17:11 net 28abe5796252 a60cb4cd .config log report
ci-upstream-net-this-kasan-gce 2019/09/08 04:28 net 28abe5796252 a60cb4cd .config log report
ci-upstream-net-this-kasan-gce 2019/09/08 00:28 net 0c04eb72d332 a60cb4cd .config log report
ci-upstream-net-this-kasan-gce 2019/09/06 03:57 net 7bdf4de12677 040fda58 .config log report
ci-upstream-net-this-kasan-gce 2019/09/05 23:05 net 7bdf4de12677 040fda58 .config log report
ci-upstream-net-this-kasan-gce 2019/09/02 19:36 net e1e54ec7fb55 14544a56 .config log report
ci-upstream-net-this-kasan-gce 2019/09/01 14:58 net 879c3808a4a1 bad3cce2 .config log report
ci-upstream-net-this-kasan-gce 2019/09/01 12:35 net 879c3808a4a1 bad3cce2 .config log report
ci-upstream-net-this-kasan-gce 2019/08/31 03:12 net 9e8312f5e160 fd37b39e .config log report
ci-upstream-net-kasan-gce 2019/10/06 19:23 net-next fbe3d0c77c83 f3f7d9c8 .config log report
ci-upstream-net-kasan-gce 2019/10/05 02:17 net-next 97bfe0e05ceb f3f7d9c8 .config log report
ci-upstream-net-kasan-gce 2019/10/03 01:14 net-next c01ebd6c4698 2e29b534 .config log report
ci-upstream-net-kasan-gce 2019/09/22 19:06 net-next b41dae061bbd d96e88f3 .config log report
ci-upstream-net-kasan-gce 2019/09/18 16:27 net-next 1bab8d4c488b c2dcd700 .config log report
ci-upstream-net-kasan-gce 2019/09/16 18:54 net-next aa2eaa8c272a cb936299 .config log report
ci-upstream-net-kasan-gce 2019/09/16 16:55 net-next aa2eaa8c272a cb936299 .config log report
ci-upstream-net-kasan-gce 2019/09/16 02:15 net-next a3d3c74da49c 32d59357 .config log report
ci-upstream-net-kasan-gce 2019/09/15 14:56 net-next a3d3c74da49c 32d59357 .config log report
ci-upstream-net-kasan-gce 2019/09/14 16:18 net-next 1ba569fc2250 32d59357 .config log report
ci-upstream-net-kasan-gce 2019/09/13 22:34 net-next 022c10d6c73b 32d59357 .config log report
ci-upstream-net-kasan-gce 2019/09/11 18:23 net-next 747f3cf4bf71 a60cb4cd .config log report
ci-upstream-net-kasan-gce 2019/09/11 05:25 net-next 074be7fd99a2 a60cb4cd .config log report
ci-upstream-net-kasan-gce 2019/09/11 00:05 net-next 074be7fd99a2 a60cb4cd .config log report
ci-upstream-net-kasan-gce 2019/09/09 06:01 net-next 6703a605b5ab a60cb4cd .config log report
ci-upstream-net-kasan-gce 2019/09/08 12:45 net-next 6703a605b5ab a60cb4cd .config log report
ci-upstream-net-kasan-gce 2019/09/07 02:54 net-next 1e46c09ec100 a60cb4cd .config log report
ci-upstream-net-kasan-gce 2019/09/05 20:28 net-next 0e5b36bc4c1f 040fda58 .config log report
ci-upstream-net-kasan-gce 2019/09/03 00:12 net-next a21cf11bc57f 14544a56 .config log report
ci-upstream-net-kasan-gce 2019/09/02 22:59 net-next a21cf11bc57f 14544a56 .config log report
ci-upstream-net-kasan-gce 2019/08/31 10:17 net-next d00ee466a07e fd37b39e .config log report
ci-upstream-net-kasan-gce 2019/08/31 09:05 net-next d00ee466a07e fd37b39e .config log report
ci-upstream-net-kasan-gce 2019/08/31 04:20 net-next d00ee466a07e fd37b39e .config log report
ci-upstream-net-kasan-gce 2019/08/30 19:56 net-next d00ee466a07e fd37b39e .config log report
ci-upstream-net-kasan-gce 2019/08/30 18:07 net-next d00ee466a07e fd37b39e .config log report
ci-upstream-net-kasan-gce 2019/08/30 09:49 net-next d00ee466a07e fd37b39e .config log report
ci-upstream-net-kasan-gce 2019/08/09 05:03 net-next b3a598eb0d6b ede31a9b .config log report
* Struck through repros no longer work on HEAD.