syzbot


INFO: task hung in devinet_ioctl (4)

Status: fixed on 2024/04/12 18:02
Subsystems: net
[Documentation on labels]
Fix commit: 00af2aa93b76 net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
First crash: 71d, last: 70d
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 INFO: task hung in devinet_ioctl 1 408d 408d 0/3 auto-obsoleted due to no activity on 2023/08/07 17:54
linux-6.1 INFO: task hung in devinet_ioctl (2) 1 237d 237d 0/3 auto-obsoleted due to no activity on 2024/01/05 10:55
upstream INFO: task hung in devinet_ioctl (2) net 27 836d 965d 0/26 closed as invalid on 2022/02/07 19:19
upstream INFO: task hung in devinet_ioctl net 1 2040d 2040d 0/26 auto-closed as invalid on 2019/04/18 15:55
linux-5.15 INFO: task hung in devinet_ioctl (2) 3 93d 106d 0/3 upstream: reported on 2024/02/05 21:12
upstream INFO: task hung in devinet_ioctl (3) net 825 71d 721d 0/26 closed as invalid on 2024/03/11 20:24
linux-5.15 INFO: task hung in devinet_ioctl 1 317d 317d 0/3 auto-obsoleted due to no activity on 2023/10/17 09:29

Sample crash report:
INFO: task dhcpcd:4721 blocked for more than 150 seconds.
      Not tainted 6.8.0-syzkaller-01185-g855684c7d938 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:dhcpcd          state:D stack:23752 pid:4721  tgid:4721  ppid:4720   flags:0x00000002
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5409 [inline]
 __schedule+0xf15/0x5c70 kernel/sched/core.c:6736
 __schedule_loop kernel/sched/core.c:6813 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6828
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6885
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x5b8/0x9c0 kernel/locking/mutex.c:752
 devinet_ioctl+0x1d3/0x1f20 net/ipv4/devinet.c:1091
 inet_ioctl+0x3aa/0x3f0 net/ipv4/af_inet.c:1000
 sock_do_ioctl+0x116/0x280 net/socket.c:1222
 sock_ioctl+0x22e/0x6c0 net/socket.c:1341
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:904 [inline]
 __se_sys_ioctl fs/ioctl.c:890 [inline]
 __x64_sys_ioctl+0x193/0x220 fs/ioctl.c:890
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xd2/0x260 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x6d/0x75
RIP: 0033:0x7fb1a9268d49
RSP: 002b:00007ffda0db0138 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fb1a919a6c0 RCX: 00007fb1a9268d49
RDX: 00007ffda0dc0328 RSI: 0000000000008914 RDI: 0000000000000018
RBP: 00007ffda0dd04e8 R08: 00007ffda0dc02e8 R09: 00007ffda0dc0298
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffda0dc0328 R14: 0000000000000028 R15: 0000000000008914
 </TASK>

Showing all locks held in the system:
1 lock held by khungtaskd/29:
 #0: ffffffff8d7afaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:298 [inline]
 #0: ffffffff8d7afaa0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:750 [inline]
 #0: ffffffff8d7afaa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 kernel/locking/lockdep.c:6614
2 locks held by kworker/u8:2/37:
 #0: ffff888014c81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x128f/0x1a50 kernel/workqueue.c:3229
 #1: ffffc90000ad7d80 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x8ff/0x1a50 kernel/workqueue.c:3230
5 locks held by kworker/u8:5/142:
 #0: ffff888015acb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128f/0x1a50 kernel/workqueue.c:3229
 #1: ffffc90002e0fd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8ff/0x1a50 kernel/workqueue.c:3230
 #2: ffffffff8f2d8d50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9f/0xb20 net/core/net_namespace.c:580
 #3: ffffffff8f2ee128 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0x8f/0xb30 net/core/dev.c:11612
 #4: ffffffff8d7bb1b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:323 [inline]
 #4: ffffffff8d7bb1b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x403/0x7a0 kernel/rcu/tree_exp.h:939
3 locks held by kworker/0:2/783:
 #0: ffff8880298ca148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x128f/0x1a50 kernel/workqueue.c:3229
 #1: ffffc9000310fd80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8ff/0x1a50 kernel/workqueue.c:3230
 #2: ffffffff8f2ee128 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 net/ipv6/addrconf.c:4686
2 locks held by kworker/u8:6/1092:
 #0: ffff888014c81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x128f/0x1a50 kernel/workqueue.c:3229
 #1: ffffc900046b7d80 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x8ff/0x1a50 kernel/workqueue.c:3230
1 lock held by udevd/4507:
1 lock held by dhcpcd/4721:
 #0: ffffffff8f2ee128 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x1d3/0x1f20 net/ipv4/devinet.c:1091

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/03/12 17:51 upstream 855684c7d938 c35c26ec .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in devinet_ioctl
2024/03/12 02:15 upstream 0f1a876682f0 6ee49f2e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in devinet_ioctl
2024/03/12 05:07 net 84e95149bd34 6ee49f2e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in devinet_ioctl
2024/03/12 04:14 net 84e95149bd34 6ee49f2e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in devinet_ioctl
2024/03/11 21:34 net-next c2b25092864a 6ee49f2e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in devinet_ioctl
* Struck through repros no longer work on HEAD.