syzbot


INFO: task hung in call_ad

Status: auto-obsoleted due to no activity on 2025/10/14 21:15
Subsystems: netfilter
[Documentation on labels]
First crash: 199d, last: 199d

Sample crash report:
INFO: task syz.3.96:7042 blocked for more than 144 seconds.
      Not tainted 6.16.0-rc5-syzkaller-gec4801305969 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.96        state:D stack:0     pid:7042  tgid:7041  ppid:6534   task_flags:0x400140 flags:0x00000019
Call trace:
 __switch_to+0x414/0x834 arch/arm64/kernel/process.c:742 (T)
 context_switch kernel/sched/core.c:5401 [inline]
 __schedule+0x1414/0x2a28 kernel/sched/core.c:6790
 __schedule_loop kernel/sched/core.c:6868 [inline]
 schedule+0xb4/0x230 kernel/sched/core.c:6883
 schedule_preempt_disabled+0x18/0x2c kernel/sched/core.c:6940
 __mutex_lock_common+0xbd0/0x2190 kernel/locking/mutex.c:679
 __mutex_lock kernel/locking/mutex.c:747 [inline]
 mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:799
 nfnl_lock+0x50/0x78 net/netfilter/nfnetlink.c:99
 call_ad+0x228/0x948 net/netfilter/ipset/ip_set_core.c:1746
 ip_set_ad+0x5b0/0x76c net/netfilter/ipset/ip_set_core.c:1841
 ip_set_uadd+0x74/0x8c net/netfilter/ipset/ip_set_core.c:1864
 nfnetlink_rcv_msg+0x9d4/0xed8 net/netfilter/nfnetlink.c:303
 netlink_rcv_skb+0x220/0x3fc net/netlink/af_netlink.c:2534
 nfnetlink_rcv+0x1f0/0x1db4 net/netfilter/nfnetlink.c:668
 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline]
 netlink_unicast+0x60c/0x824 net/netlink/af_netlink.c:1339
 netlink_sendmsg+0x648/0x930 net/netlink/af_netlink.c:1883
 sock_sendmsg_nosec net/socket.c:712 [inline]
 __sock_sendmsg net/socket.c:727 [inline]
 ____sys_sendmsg+0x490/0x7b8 net/socket.c:2566
 ___sys_sendmsg+0x204/0x278 net/socket.c:2620
 __sys_sendmsg net/socket.c:2652 [inline]
 __do_sys_sendmsg net/socket.c:2657 [inline]
 __se_sys_sendmsg net/socket.c:2655 [inline]
 __arm64_sys_sendmsg+0x184/0x238 net/socket.c:2655
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x58/0x180 arch/arm64/kernel/entry-common.c:879
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:898
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596

Showing all locks held in the system:
1 lock held by khungtaskd/32:
 #0: ffff80008f8599c0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 include/linux/rcupdate.h:330
4 locks held by kworker/u8:3/42:
3 locks held by kworker/u8:4/60:
3 locks held by kworker/u8:6/271:
4 locks held by kworker/u8:7/320:
3 locks held by kworker/u8:8/538:
4 locks held by kworker/u8:9/638:
2 locks held by kworker/u8:11/4493:
1 lock held by klogd/6132:
2 locks held by udevd/6143:
1 lock held by dhcpcd/6197:
3 locks held by dhcpcd/6198:
2 locks held by getty/6290:
 #0: ffff0000d72200a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c drivers/tty/tty_ldsem.c:340
 #1: ffff80009ba2e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa4 drivers/tty/n_tty.c:2222
1 lock held by syz-executor/6514:
2 locks held by syz-executor/6526:
2 locks held by syz-executor/6527:
4 locks held by kworker/0:3/6532:
1 lock held by syz.3.96/7042:
 #0: ffff800097906b58 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock+0x50/0x78 net/netfilter/nfnetlink.c:99
1 lock held by syz.2.102/7075:
1 lock held by syz.1.101/7084:
 #0: ffff800097906b58 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnl_lock+0x50/0x78 net/netfilter/nfnetlink.c:99
2 locks held by kworker/u8:12/7126:
3 locks held by kworker/u8:13/7127:
4 locks held by syz-executor/7128:
1 lock held by udevd/7131:

=============================================


Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/16 21:10 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ec4801305969 c118d736 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 INFO: task hung in call_ad
* Struck through repros no longer work on HEAD.