syzbot


INFO: task hung in do_ip_getsockopt

Status: auto-obsoleted due to no activity on 2024/12/11 10:27
Subsystems: net
[Documentation on labels]
First crash: 143d, last: 130d

Sample crash report:
INFO: task syz.1.2:3791 blocked for more than 430 seconds.
      Not tainted 6.11.0-rc7-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.1.2         state:D stack:0     pid:3791  tgid:3786  ppid:3106   flags:0x00400001
Call trace: 
[<8197ed48>] (__schedule) from [<8197f8e0>] (__schedule_loop kernel/sched/core.c:6606 [inline])
[<8197ed48>] (__schedule) from [<8197f8e0>] (schedule+0x2c/0xfc kernel/sched/core.c:6621)
 r10:dfe69e64 r9:dfe69d90 r8:00000000 r7:845e9740 r6:845e9834 r5:845e9740
 r4:84f7ec00
[<8197f8b4>] (schedule) from [<81457c8c>] (__lock_sock+0x68/0xac net/core/sock.c:2980)
 r5:845e9740 r4:845e982c
[<81457c24>] (__lock_sock) from [<81457db4>] (lock_sock_nested net/core/sock.c:3548 [inline])
[<81457c24>] (__lock_sock) from [<81457db4>] (lock_sock include/net/sock.h:1607 [inline])
[<81457c24>] (__lock_sock) from [<81457db4>] (sockopt_lock_sock net/core/sock.c:1061 [inline])
[<81457c24>] (__lock_sock) from [<81457db4>] (sockopt_lock_sock+0x54/0x58 net/core/sock.c:1052)
 r6:00000000 r5:845e982c r4:845e9740
[<81457d60>] (sockopt_lock_sock) from [<8162bfd4>] (do_ip_getsockopt+0x204/0xbb0 net/ipv4/ip_sockglue.c:1703)
 r5:00000000 r4:00000010
[<8162bdd4>] (do_ip_getsockopt) from [<8162c9e4>] (ip_getsockopt+0x64/0x134 net/ipv4/ip_sockglue.c:1765)
 r10:00000127 r9:20000180 r8:00000000 r7:20000180 r6:00000000 r5:845e9740
 r4:00000010
[<8162c980>] (ip_getsockopt) from [<8163ce10>] (tcp_getsockopt+0x34/0x6c net/ipv4/tcp.c:4409)
 r9:20000180 r8:00000000 r7:833e8f00 r6:00000010 r5:00000000 r4:8162c980
[<8163cddc>] (tcp_getsockopt) from [<81453dd4>] (sock_common_getsockopt+0x28/0x30 net/core/sock.c:3708)
 r4:8163cddc
[<81453dac>] (sock_common_getsockopt) from [<81450bbc>] (do_sock_getsockopt+0x10c/0x298 net/socket.c:2386)
 r4:81453dac
[<81450ab0>] (do_sock_getsockopt) from [<81452b4c>] (__sys_getsockopt net/socket.c:2415 [inline])
[<81450ab0>] (do_sock_getsockopt) from [<81452b4c>] (__do_sys_getsockopt net/socket.c:2425 [inline])
[<81450ab0>] (do_sock_getsockopt) from [<81452b4c>] (sys_getsockopt+0x90/0xd4 net/socket.c:2422)
 r9:84f7ec00 r8:833e8f00 r7:00000000 r6:00000010 r5:00000000 r4:00000000
[<81452abc>] (sys_getsockopt) from [<8020028c>] (__sys_trace_return+0x0/0x10)
Exception stack(0xdfe69fa8 to 0xdfe69ff0)
9fa0:                   20000180 00000000 00000003 00000000 00000010 00000000
9fc0: 20000180 00000000 00286388 00000127 00000000 00006364 003d0f00 76bc80bc
9fe0: 76bc7ec0 76bc7eb0 000189d0 00132da0
 r8:8020029c r7:00000127 r6:00286388 r5:00000000 r4:20000180
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller #0
Hardware name: ARM-Versatile Express
Call trace: 
[<8195d178>] (dump_backtrace) from [<8195d274>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257)
 r7:00000000 r6:00000113 r5:60000193 r4:8200ca20
[<8195d25c>] (show_stack) from [<8197afb0>] (__dump_stack lib/dump_stack.c:93 [inline])
[<8195d25c>] (show_stack) from [<8197afb0>] (dump_stack_lvl+0x70/0x7c lib/dump_stack.c:119)
[<8197af40>] (dump_stack_lvl) from [<8197afd4>] (dump_stack+0x18/0x1c lib/dump_stack.c:128)
 r5:00000001 r4:00000001
[<8197afbc>] (dump_stack) from [<8194a468>] (nmi_cpu_backtrace+0x160/0x17c lib/nmi_backtrace.c:113)
[<8194a308>] (nmi_cpu_backtrace) from [<8194a5b4>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8 lib/nmi_backtrace.c:62)
 r7:00000001 r6:8260c5d0 r5:8261a88c r4:ffffffff
[<8194a484>] (nmi_trigger_cpumask_backtrace) from [<802103c8>] (arch_trigger_cpumask_backtrace+0x18/0x1c arch/arm/kernel/smp.c:851)
 r9:000055c1 r8:828b3130 r7:8260c734 r6:00007f56 r5:8261ae48 r4:84109d1c
[<802103b0>] (arch_trigger_cpumask_backtrace) from [<80350e30>] (trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline])
[<802103b0>] (arch_trigger_cpumask_backtrace) from [<80350e30>] (check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline])
[<802103b0>] (arch_trigger_cpumask_backtrace) from [<80350e30>] (watchdog+0x498/0x5b8 kernel/hung_task.c:379)
[<80350998>] (watchdog) from [<8026fb04>] (kthread+0x104/0x134 kernel/kthread.c:389)
 r10:00000000 r9:df819e58 r8:82ccfc40 r7:00000000 r6:80350998 r5:82e49800
 r4:82fa4540
[<8026fa00>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20 arch/arm/kernel/entry-common.S:137)
Exception stack(0xdf8e1fb0 to 0xdf8e1ff8)
1fa0:                                     00000000 00000000 00000000 00000000
1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
1fe0: 00000000 00000000 00000000 00000000 00000013 00000000
 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026fa00 r4:82fa4540
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 3100 Comm: syz-executor Not tainted 6.11.0-rc7-syzkaller #0
Hardware name: ARM-Versatile Express
PC is at uaccess_save_and_enable arch/arm/include/asm/uaccess.h:59 [inline]
PC is at raw_copy_to_user arch/arm/include/asm/uaccess.h:557 [inline]
PC is at __copy_to_user include/linux/uaccess.h:139 [inline]
PC is at setup_sigframe+0x140/0x1c4 arch/arm/kernel/signal.c:284
LR is at 0x83e1ec00
pc : [<8020b820>]    lr : [<83e1ec00>]    psr: 60000013
sp : df97dea8  ip : 00000000  fp : df97df34
r10: 0000014f  r9 : 7ef9d7fc  r8 : 00000013
r7 : b5403587  r6 : 00000000  r5 : 83e1f420  r4 : 7ef9d3c8
r3 : b5003500  r2 : 00000000  r1 : 00000001  r0 : 00000000
Flags: nZCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
Control: 30c5387d  Table: 843c6d40  DAC: fffffffd
Call trace: 
[<8020b6e0>] (setup_sigframe) from [<8020bc6c>] (setup_frame arch/arm/kernel/signal.c:460 [inline])
[<8020b6e0>] (setup_sigframe) from [<8020bc6c>] (handle_signal arch/arm/kernel/signal.c:518 [inline])
[<8020b6e0>] (setup_sigframe) from [<8020bc6c>] (do_signal arch/arm/kernel/signal.c:589 [inline])
[<8020b6e0>] (setup_sigframe) from [<8020bc6c>] (do_work_pending+0x2f4/0x4f8 arch/arm/kernel/signal.c:618)
 r10:00000077 r9:b5403587 r8:00000000 r7:83e1f420 r6:7ef9d3c8 r5:df97dfb0
 r4:83e1ec00
[<8020b978>] (do_work_pending) from [<80200088>] (slow_work_pending+0xc/0x24)
Exception stack(0xdf97dfb0 to 0xdf97dff8)
dfa0:                                     fffffffc 7ef9d7fc 00000000 00000000
dfc0: 7ef9d6c4 7ef9d6cc 00000000 0000014f 7ef9d7fc 00000013 00000000 00e00000
dfe0: 00000008 7ef9d6c0 001329f4 0013448c 20000010 00000011
 r10:00000077 r9:83e1ec00 r8:00000000 r7:00000077 r6:00000000 r5:7ef9d6cc
 r4:7ef9d6c4

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/12 10:22 upstream 7c6a3a65ace7 d94c83d8 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in do_ip_getsockopt
2024/09/12 10:13 upstream 7c6a3a65ace7 d94c83d8 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in do_ip_getsockopt
2024/09/11 08:41 upstream 8d8d276ba2fb 8ab55d0e .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in do_ip_getsockopt
2024/08/30 10:04 upstream 3b9dfd9e5936 ee2602b8 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in do_ip_getsockopt
2024/08/30 09:56 upstream 3b9dfd9e5936 ee2602b8 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm32 INFO: task hung in do_ip_getsockopt
* Struck through repros no longer work on HEAD.