syzbot


INFO: task hung in sys_io_uring_register (3)

Status: auto-obsoleted due to no activity on 2024/12/06 01:30
Subsystems: io-uring
[Documentation on labels]
First crash: 159d, last: 159d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in sys_io_uring_register fs 1 1148d 1144d 0/28 auto-closed as invalid on 2022/03/23 08:02
upstream INFO: task hung in sys_io_uring_register (2) io-uring syz error error 2 718d 714d 0/28 auto-obsoleted due to no activity on 2023/06/25 22:43
linux-5.15 INFO: task hung in sys_io_uring_register 1 319d 319d 0/3 auto-obsoleted due to no activity on 2024/07/09 12:11

Sample crash report:
INFO: task syz.4.95:6948 blocked for more than 144 seconds.
      Not tainted 6.11.0-rc5-syzkaller-gdf54f4a16f82 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.95        state:D stack:0     pid:6948  tgid:6947  ppid:6400   flags:0x00000001
Call trace:
 __switch_to+0x418/0x658 arch/arm64/kernel/process.c:579
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x13d4/0x2418 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xbc/0x238 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6678
 __mutex_lock_common+0xbd8/0x21a0 kernel/locking/mutex.c:684
 __mutex_lock kernel/locking/mutex.c:752 [inline]
 mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:804
 __do_sys_io_uring_register io_uring/register.c:560 [inline]
 __se_sys_io_uring_register io_uring/register.c:522 [inline]
 __arm64_sys_io_uring_register+0x1d8/0x12d8 io_uring/register.c:522
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712
 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598
INFO: task syz.4.95:6959 blocked for more than 144 seconds.
      Not tainted 6.11.0-rc5-syzkaller-gdf54f4a16f82 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.95        state:D stack:0     pid:6959  tgid:6947  ppid:6400   flags:0x00000008
Call trace:
 __switch_to+0x418/0x658 arch/arm64/kernel/process.c:579
 context_switch kernel/sched/core.c:5188 [inline]
 __schedule+0x13d4/0x2418 kernel/sched/core.c:6529
 __schedule_loop kernel/sched/core.c:6606 [inline]
 schedule+0xbc/0x238 kernel/sched/core.c:6621
 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6678
 __mutex_lock_common+0xbd8/0x21a0 kernel/locking/mutex.c:684
 __mutex_lock kernel/locking/mutex.c:752 [inline]
 mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:804
 io_uring_del_tctx_node+0xdc/0x254 io_uring/tctx.c:169
 io_uring_clean_tctx+0xf0/0x1a4 io_uring/tctx.c:185
 io_uring_cancel_generic+0x5bc/0x6a0 io_uring/io_uring.c:3085
 __io_uring_cancel+0x24/0x34 io_uring/io_uring.c:3099
 io_uring_files_cancel include/linux/io_uring.h:20 [inline]
 do_exit+0x218/0x1ad0 kernel/exit.c:838
 do_group_exit+0x194/0x22c kernel/exit.c:1031
 get_signal+0x1414/0x1530 kernel/signal.c:2917
 do_signal+0x254/0x4014 arch/arm64/kernel/signal.c:1308
 do_notify_resume+0x74/0x1f4 arch/arm64/kernel/entry-common.c:148
 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:169 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:178 [inline]
 el0_svc+0xac/0x168 arch/arm64/kernel/entry-common.c:713
 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598

Showing all locks held in the system:
3 locks held by kworker/0:1/9:
1 lock held by khungtaskd/31:
 #0: ffff80008f6edba0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 include/linux/rcupdate.h:325
4 locks held by kworker/u8:2/43:
1 lock held by udevd/6008:
2 locks held by getty/6156:
 #0: ffff0000d24930a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340
 #1: ffff8000983ab2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41c/0x1228 drivers/tty/n_tty.c:2211
2 locks held by kworker/1:4/6396:
 #0: ffff0000c0028948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x624/0x15b8 kernel/workqueue.c:3205
 #1: ffff8000a09e7c20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x6a0/0x15b8 kernel/workqueue.c:3205
3 locks held by kworker/u8:8/6484:
1 lock held by syz.4.95/6948:
 #0: ffff0000ce1fa0a8 (&ctx->uring_lock){+.+.}-{3:3}, at: __do_sys_io_uring_register io_uring/register.c:560 [inline]
 #0: ffff0000ce1fa0a8 (&ctx->uring_lock){+.+.}-{3:3}, at: __se_sys_io_uring_register io_uring/register.c:522 [inline]
 #0: ffff0000ce1fa0a8 (&ctx->uring_lock){+.+.}-{3:3}, at: __arm64_sys_io_uring_register+0x1d8/0x12d8 io_uring/register.c:522
1 lock held by syz.4.95/6950:
1 lock held by syz.4.95/6959:
 #0: ffff0000ce1fa0a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_uring_del_tctx_node+0xdc/0x254 io_uring/tctx.c:169
2 locks held by syz.2.695/9627:
1 lock held by syz.4.694/9621:
 #0: ffff0000d7e6f188 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock_killable include/linux/mmap_lock.h:122 [inline]
 #0: ffff0000d7e6f188 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x154/0x38c mm/util.c:586
1 lock held by syz.4.694/9625:
1 lock held by syz.4.694/9631:
 #0: ffff0000d7e6f188 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock include/linux/mmap_lock.h:144 [inline]
 #0: ffff0000d7e6f188 (&mm->mmap_lock){++++}-{3:3}, at: collapse_huge_page mm/khugepaged.c:1118 [inline]
 #0: ffff0000d7e6f188 (&mm->mmap_lock){++++}-{3:3}, at: hpage_collapse_scan_pmd+0x10b0/0x4138 mm/khugepaged.c:1419
2 locks held by syz.4.694/9644:
1 lock held by syz.3.698/9635:

=============================================


Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/07 01:22 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci df54f4a16f82 ce70880a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 INFO: task hung in sys_io_uring_register
* Struck through repros no longer work on HEAD.