syzbot


INFO: task hung in synchronize_rcu

Status: auto-closed as invalid on 2020/03/28 16:57
Reported-by: syzbot+56201aea72c90e338575@syzkaller.appspotmail.com
First crash: 1601d, last: 1601d
Similar bugs (10)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in synchronize_rcu (3) C done done 374 428d 1365d 22/26 fixed on 2023/02/24 13:50
linux-6.1 INFO: task hung in synchronize_rcu origin:lts-only C unreliable 5 20d 383d 0/3 upstream: reported C repro on 2023/04/01 04:49
linux-4.14 INFO: task hung in synchronize_rcu vfs C error 162 442d 1624d 0/1 upstream: reported C repro on 2019/11/07 04:32
linux-4.19 INFO: task hung in synchronize_rcu C error 70 431d 1622d 0/1 upstream: reported C repro on 2019/11/08 21:27
linux-5.15 INFO: task hung in synchronize_rcu 1 368d 368d 0/3 auto-obsoleted due to no activity on 2023/08/14 02:05
upstream INFO: task hung in synchronize_rcu syz done 1206 1601d 1628d 14/26 fixed on 2019/11/29 15:48
upstream INFO: task hung in synchronize_rcu (4) net fs C done error 37 10d 350d 0/26 upstream: reported C repro on 2023/05/04 02:01
linux-5.15 INFO: task hung in synchronize_rcu (2) 1 56d 56d 0/3 upstream: reported on 2024/02/21 13:53
android-414 INFO: task hung in synchronize_rcu 1 1619d 1619d 0/1 auto-closed as invalid on 2020/03/10 10:42
upstream INFO: task hung in synchronize_rcu (2) trace 8 1600d 1601d 0/26 closed as invalid on 2019/11/30 16:54

Sample crash report:
INFO: task kworker/u4:11:20658 blocked for more than 140 seconds.
      Not tainted 4.9.205-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/u4:11   D26824 20658      2 0x80000000
Workqueue: netns cleanup_net
 0000000000000083 ffff8801a04d4740 ffff8801866b8580 ffff8801db71ffc0
 ffff880189d20000 ffff8801db71ffd8 ffff880183e8f760 ffffffff8280a6ae
 ffff880183e8f6b0 ffffffff8120d305 0000000000000292 ffff8801db7208b0
Call Trace:
 [<000000005058936b>] schedule+0x92/0x1c0 kernel/sched/core.c:3546
 [<000000000bb85f4e>] exp_funnel_lock kernel/rcu/tree_exp.h:279 [inline]
 [<000000000bb85f4e>] _synchronize_rcu_expedited+0x68a/0x850 kernel/rcu/tree_exp.h:569
 [<00000000550b5df0>] synchronize_rcu_expedited kernel/rcu/tree_exp.h:687 [inline]
 [<00000000550b5df0>] synchronize_rcu_expedited+0x22/0x30 kernel/rcu/tree_exp.h:681
 [<000000005afa5e0c>] synchronize_net+0x2f/0x50 net/core/dev.c:7867
 [<000000003329db58>] nf_unregister_net_hook+0x1f8/0x380 net/netfilter/core.c:161
 [<00000000c27125ad>] nf_unregister_net_hooks+0x39/0x60 net/netfilter/core.c:193
 [<000000008d69bdff>] ip6t_unregister_table+0x51/0x70 net/ipv6/netfilter/ip6_tables.c:1842
 [<0000000012a39049>] ip6table_mangle_net_exit+0x52/0xa0 net/ipv6/netfilter/ip6table_mangle.c:112
 [<000000002464a50b>] ops_exit_list.isra.0+0xb0/0x160 net/core/net_namespace.c:136
 [<00000000a69b4895>] cleanup_net+0x3d6/0x8a0 net/core/net_namespace.c:474
 [<0000000077171719>] process_one_work+0x88b/0x1600 kernel/workqueue.c:2114
 [<00000000d0679d18>] worker_thread+0x5df/0x11d0 kernel/workqueue.c:2251
 [<0000000045571e08>] kthread+0x278/0x310 kernel/kthread.c:211
 [<000000009094c0be>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:375

Showing all locks held in the system:
2 locks held by khungtaskd/24:
 #0:  (rcu_read_lock){......}, at: [<000000005795c399>] check_hung_uninterruptible_tasks kernel/hung_task.c:169 [inline]
 #0:  (rcu_read_lock){......}, at: [<000000005795c399>] watchdog+0x14b/0xaf0 kernel/hung_task.c:263
 #1:  (tasklist_lock){.+.+..}, at: [<00000000f8204ab2>] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4339
1 lock held by rsyslogd/1896:
 #0:  (&f->f_pos_lock){+.+.+.}, at: [<00000000313c55e9>] __fdget_pos+0xa8/0xd0 fs/file.c:782
2 locks held by getty/2024:
 #0:  (&tty->ldisc_sem){++++++}, at: [<00000000a7b12d5e>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:376
 #1:  (&ldata->atomic_read_lock){+.+.+.}, at: [<00000000719d5a78>] n_tty_read+0x1fe/0x1820 drivers/tty/n_tty.c:2156
3 locks held by kworker/u4:11/20658:
 #0:  ("%s""netns"){.+.+.+}, at: [<000000009e9c13b0>] process_one_work+0x790/0x1600 kernel/workqueue.c:2107
 #1:  (net_cleanup_work){+.+.+.}, at: [<000000009091d0f8>] process_one_work+0x7ce/0x1600 kernel/workqueue.c:2111
 #2:  (net_mutex){+.+.+.}, at: [<0000000016cc41e0>] cleanup_net+0x131/0x8a0 net/core/net_namespace.c:440
1 lock held by syz-executor.3/2677:
 #0:  (net_mutex){+.+.+.}, at: [<00000000207be3b3>] copy_net_ns+0x15b/0x340 net/core/net_namespace.c:407

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.205-syzkaller #0
 ffff8801d98d7cc8 ffffffff81b55e6b 0000000000000001 0000000000000000
 0000000000000001 ffffffff8109a001 dffffc0000000000 ffff8801d98d7d00
 ffffffff81b6110c 0000000000000001 0000000000000000 0000000000000001
Call Trace:
 [<000000003be5ad9d>] __dump_stack lib/dump_stack.c:15 [inline]
 [<000000003be5ad9d>] dump_stack+0xcb/0x130 lib/dump_stack.c:56
 [<00000000a8df3a68>] nmi_cpu_backtrace.cold+0x47/0x87 lib/nmi_backtrace.c:99
 [<000000008e17dd44>] nmi_trigger_cpumask_backtrace+0x124/0x155 lib/nmi_backtrace.c:60
 [<00000000855e9ae9>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37
 [<00000000a7c31567>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline]
 [<00000000a7c31567>] check_hung_task kernel/hung_task.c:126 [inline]
 [<00000000a7c31567>] check_hung_uninterruptible_tasks kernel/hung_task.c:183 [inline]
 [<00000000a7c31567>] watchdog+0x670/0xaf0 kernel/hung_task.c:263
 [<0000000045571e08>] kthread+0x278/0x310 kernel/kthread.c:211
 [<000000009094c0be>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:375
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at pc 0xffffffff82819801

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/11/29 16:56 android-4.9 a36b5017c810 d29b9e84 .config console log report ci-android-49-kasan-gce-root
* Struck through repros no longer work on HEAD.