syzbot


INFO: task hung in tls_sw_cancel_work_tx

Status: auto-obsoleted due to no activity on 2024/02/22 04:34
Reported-by: syzbot+16b7b4a88091943a02b2@syzkaller.appspotmail.com
First crash: 396d, last: 373d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in tls_sw_cancel_work_tx net C done error 74 267d 1748d 0/28 closed as dup on 2020/12/29 19:08
linux-5.15 INFO: task hung in tls_sw_cancel_work_tx 1 393d 393d 0/3 auto-obsoleted due to no activity on 2024/02/02 07:08

Sample crash report:
INFO: task syz-executor.4:12315 blocked for more than 143 seconds.
      Not tainted 6.1.62-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4  state:D stack:0     pid:12315 ppid:4277   flags:0x00000005
Call trace:
 __switch_to+0x320/0x754 arch/arm64/kernel/process.c:553
 context_switch kernel/sched/core.c:5241 [inline]
 __schedule+0xee4/0x1c98 kernel/sched/core.c:6554
 schedule+0xc4/0x170 kernel/sched/core.c:6630
 schedule_timeout+0xb8/0x344 kernel/time/timer.c:1911
 do_wait_for_common+0x30c/0x468 kernel/sched/completion.c:85
 __wait_for_common kernel/sched/completion.c:106 [inline]
 wait_for_common kernel/sched/completion.c:117 [inline]
 wait_for_completion+0x48/0x60 kernel/sched/completion.c:138
 __flush_work+0x12c/0x1c0 kernel/workqueue.c:3076
 __cancel_work_timer+0x3ec/0x548 kernel/workqueue.c:3163
 cancel_delayed_work_sync+0x24/0x38 kernel/workqueue.c:3304
 tls_sw_cancel_work_tx+0x80/0xd0 net/tls/tls_sw.c:2326
 tls_sk_proto_close+0xf8/0xbc4 net/tls/tls_main.c:331
 inet_release+0x160/0x1d0 net/ipv4/af_inet.c:429
 inet6_release+0x5c/0x78 net/ipv6/af_inet6.c:490
 __sock_release net/socket.c:652 [inline]
 sock_close+0xb8/0x1fc net/socket.c:1387
 __fput+0x30c/0x7bc fs/file_table.c:320
 ____fput+0x20/0x30 fs/file_table.c:348
 task_work_run+0x240/0x2f0 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x2148/0x3474 arch/arm64/kernel/signal.c:1132
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585

Showing all locks held in the system:
1 lock held by rcu_tasks_kthre/12:
 #0: ffff8000159e4d70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 kernel/rcu/tasks.h:516
1 lock held by rcu_tasks_trace/13:
 #0: ffff8000159e5570 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 kernel/rcu/tasks.h:516
1 lock held by khungtaskd/28:
 #0: ffff8000159e4ba0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:305
2 locks held by getty/3986:
 #0: ffff0000d5af9098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340
 #1: ffff80001bc902f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 drivers/tty/n_tty.c:2188
2 locks held by kworker/u4:14/10429:
 #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 kernel/workqueue.c:2265
 #1: ffff80001f9c7c20 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 kernel/workqueue.c:2267
3 locks held by kworker/1:0/6040:
 #0: ffff0000c0020d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 kernel/workqueue.c:2265
 #1: ffff80001e527c20 ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 kernel/workqueue.c:2267
 #2: ffff0000d9b040d8 (&ctx->tx_lock){+.+.}-{3:3}, at: tx_work_handler+0xf4/0x220 net/tls/tls_sw.c:2443
1 lock held by syz-executor.4/12315:
 #0: ffff0000e26b6810 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:756 [inline]
 #0: ffff0000e26b6810 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: __sock_release net/socket.c:651 [inline]
 #0: ffff0000e26b6810 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x80/0x1fc net/socket.c:1387
4 locks held by syz-executor.3/14260:

=============================================


Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/11/14 04:33 linux-6.1.y fb2635ac69ab cb976f63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in tls_sw_cancel_work_tx
2023/11/10 21:26 linux-6.1.y fb2635ac69ab 45e9b83e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in tls_sw_cancel_work_tx
2023/10/21 23:20 linux-6.1.y 7d24402875c7 361b23dc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in tls_sw_cancel_work_tx
* Struck through repros no longer work on HEAD.