syzbot


INFO: task hung in rtnetlink_rcv_msg

Status: upstream: reported C repro on 2019/02/22 17:00
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+8218a8a0ff60c19b8eae@syzkaller.appspotmail.com
First crash: 1689d, last: 3d09h
Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: INFO: task hung in addrconf_dad_work (log)
Repro: C syz .config
  
Fix bisection the fix commit could be any of (bisect log):
  2618500dd370 arm: dts: mediatek: Update mt7629 dts to reflect the latest dt-binding
  c9b96eb6da2a Merge branch 'Update-MT7629-to-support-PHYLINK-API'
  4e3eff5beafa net: ethernet: mediatek: Fix MT7629 missing GMII mode support
  cab209e571a9 tcp: fix a possible lockdep splat in tcp_done()
  8d045995ed5b Merge branch 'mpls-push-pop-fix'
  b790b5549bdf net: dsa: sja1105: Use the correct style for SPDX License Identifier
  39f13ea2f61b net: avoid potential infinite loop in tc_ctl_action()
  fa4e0f8855fc net/sched: fix corrupted L2 header with MPLS 'push' and 'pop' actions
  28aa7c86c2b4 sched: etf: Fix ordering of packets with same txtime
  dedc5a08da07 net: avoid errors when trying to pop MLPS header on non-MPLS packets
  63dfb7938b13 sctp: change sctp_prot .no_autobind with true
  a03681dd5d1b net: cavium: Use the correct style for SPDX License Identifier
  61c1d33daf7b net: i82596: fix dma_alloc_attr for sni_82596
  b31141d390f1 net: dsa: microchip: Use the correct style for SPDX License Identifier
  539825a53604 davinci_cpdma: make cpdma_chan_split_pool static
  ddc790e92b3a net: ethernet: broadcom: have drivers select DIMLIB as needed
  bad28d889cae net: stmmac: make tc_flow_parsers static
  f913eac8e555 net: Update address for vrf and l3mdev in MAINTAINERS
  92696286f3bb net: bcmgenet: Set phydev->dev_flags only for internal PHYs
  efb86fede98c net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3
  77b6d09f4ae6 net: usb: sr9800: fix uninitialized local variable
  b0818f80c8c1 blackhole_netdev: fix syzkaller reported issue
  bd74708cd979 Revert "blackhole_netdev: fix syzkaller reported issue"
  
Discussions (8)
Title Replies (including bot) Last reply
[syzbot] Monthly net report (Jul 2023) 0 (1) 2023/08/01 12:53
[syzbot] Monthly net report (Jun 2023) 0 (1) 2023/06/29 12:38
[syzbot] Monthly net report (May 2023) 0 (1) 2023/05/30 10:56
[syzbot] Monthly net report (Apr 2023) 0 (1) 2023/04/27 10:45
[syzbot] Monthly net report 0 (1) 2023/03/27 11:04
Reminder: 99 open syzbot bugs in net subsystem 14 (14) 2019/07/31 15:13
Reminder: 94 open syzbot bugs in net subsystem 1 (1) 2019/06/25 05:48
INFO: task hung in rtnetlink_rcv_msg 7 (8) 2019/02/25 19:26
Similar bugs (60)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 INFO: task hung in rtnetlink_rcv_msg 1 79d 79d 0/3 upstream: reported on 2023/07/14 21:15
linux-4.19 INFO: task hung in rtnetlink_rcv_msg (2) 14 621d 801d 0/1 auto-closed as invalid on 2022/05/18 11:30
linux-4.19 INFO: task hung in rtnetlink_rcv_msg (3) 8 234d 468d 0/1 upstream: reported on 2022/06/20 23:55
linux-4.19 INFO: task hung in rtnetlink_rcv_msg 11 1053d 1375d 0/1 auto-closed as invalid on 2021/03/12 19:03
linux-4.14 INFO: task hung in rtnetlink_rcv_msg 1 214d 214d 0/1 upstream: reported on 2023/03/01 21:15
linux-6.1 INFO: task hung in rtnetlink_rcv_msg 1 4d06h 4d06h 0/3 upstream: reported on 2023/09/28 03:31
upstream INFO: task hung in cangw_pernet_exit (3) can syz unreliable 290 643d 749d 0/25 closed as invalid on 2022/02/08 10:22
upstream INFO: task can't die in rtnetlink_rcv_msg net 5 1089d 1098d 17/25 fixed on 2020/11/16 12:12
upstream INFO: task can't die in synchronize_rcu_expedited net 1 1141d 1137d 0/25 auto-closed as invalid on 2020/10/15 13:33
upstream INFO: task can't die in synchronize_rcu_expedited (2) fs 2 985d 987d 0/25 auto-closed as invalid on 2021/03/21 09:06
upstream INFO: task hung in nl80211_pre_doit net wireless 5 968d 1046d 0/25 auto-closed as invalid on 2021/05/17 09:21
linux-4.19 INFO: task hung in nl80211_pre_doit 1 627d 627d 0/1 auto-closed as invalid on 2022/05/13 08:55
upstream INFO: task hung in nl80211_pre_doit (2) net wireless 18 713d 753d 0/25 auto-closed as invalid on 2022/01/17 00:54
linux-4.19 INFO: task hung in nl80211_pre_doit (2) 1 275d 275d 0/1 upstream: reported on 2022/12/31 06:52
upstream INFO: task hung in ip_rt_ioctl net 3 968d 1091d 0/25 auto-closed as invalid on 2021/05/17 08:41
upstream INFO: task hung in __netlink_dump_start (2) net 5 631d 713d 0/25 closed as invalid on 2022/02/07 19:19
linux-4.19 INFO: task hung in __netlink_dump_start (2) 1 583d 583d 0/1 auto-closed as invalid on 2022/06/25 14:03
upstream INFO: task hung in sock_ioctl (2) net 1 739d 739d 0/25 auto-closed as invalid on 2021/12/21 20:14
linux-4.14 INFO: task hung in sock_ioctl (2) 1 968d 968d 0/1 auto-closed as invalid on 2021/06/05 18:05
upstream INFO: task hung in ip_setsockopt (2) net 1 712d 712d 0/25 auto-closed as invalid on 2022/01/17 23:55
upstream INFO: task can't die in pipe_write (2) fs 1 711d 707d 0/25 auto-closed as invalid on 2021/12/19 10:46
linux-4.14 INFO: task hung in pipe_write C 1 226d 343d 0/1 upstream: reported C repro on 2022/10/24 05:45
linux-4.19 INFO: task hung in pipe_write C error 13 313d 1212d 0/1 upstream: reported C repro on 2020/06/07 01:40
upstream INFO: task hung in pipe_write (4) fs syz error 7 612d 1159d 0/25 auto-obsoleted due to no activity on 2022/10/22 17:00
upstream INFO: task can't die in pipe_write fs 1 785d 759d 0/25 auto-closed as invalid on 2021/10/06 11:40
linux-4.19 INFO: task hung in ipv6_route_ioctl 1 672d 672d 0/1 auto-closed as invalid on 2022/03/28 22:32
upstream INFO: task hung in ipv6_route_ioctl (2) net 1 968d 968d 0/25 auto-closed as invalid on 2021/05/07 00:43
linux-4.19 INFO: task hung in ipv6_route_ioctl (2) 1 247d 247d 0/1 upstream: reported on 2023/01/28 02:21
upstream INFO: task hung in dev_ioctl (4) net 1 867d 867d 0/25 auto-closed as invalid on 2021/08/15 15:56
linux-4.14 INFO: task hung in dev_ioctl 1 530d 530d 0/1 auto-closed as invalid on 2022/08/17 13:11
upstream INFO: task hung in dev_ioctl (5) net 20 711d 756d 0/25 auto-closed as invalid on 2022/01/19 01:57
upstream INFO: task hung in tun_chr_close (4) net syz unreliable error 14 688d 748d 0/25 auto-closed as invalid on 2022/09/18 21:51
linux-4.19 INFO: task hung in tun_chr_close (3) 1 423d 423d 0/1 auto-obsoleted due to no activity on 2022/12/03 04:48
linux-4.19 INFO: task hung in tun_chr_close (4) 3 229d 257d 0/1 upstream: reported on 2023/01/18 07:05
linux-4.19 INFO: task hung in tun_chr_close (2) 6 636d 729d 0/1 auto-closed as invalid on 2022/05/04 09:03
upstream INFO: task hung in tun_chr_close (3) net 1 859d 859d 0/25 auto-closed as invalid on 2021/08/23 13:06
upstream INFO: task hung in tun_chr_close (2) net 7 968d 1189d 0/25 auto-closed as invalid on 2021/05/17 11:47
upstream INFO: task hung in ipv6_route_ioctl net 2 1089d 1090d 0/25 auto-closed as invalid on 2021/01/06 04:59
linux-4.19 INFO: task hung in __netlink_dump_start 1 1212d 1212d 0/1 auto-closed as invalid on 2020/10/04 12:25
upstream INFO: task hung in __netlink_dump_start net 2 1081d 1095d 0/25 auto-closed as invalid on 2021/01/13 23:36
upstream INFO: task hung in ip_setsockopt net 1 1094d 1094d 0/25 auto-closed as invalid on 2021/01/01 01:08
linux-4.19 INFO: task hung in tun_chr_close 1 1146d 1146d 0/1 auto-closed as invalid on 2020/12/09 18:55
upstream INFO: task hung in tun_chr_close net 5 1472d 2054d 0/25 closed as dup on 2018/02/16 08:24
android-49 INFO: task hung in tun_chr_close 1 1968d 1968d 0/3 auto-closed as invalid on 2019/02/22 14:33
android-44 INFO: task hung in tun_chr_close 1 1978d 1977d 0/2 auto-closed as invalid on 2019/02/22 15:23
linux-4.14 INFO: task hung in sock_ioctl 1 1267d 1267d 0/1 auto-closed as invalid on 2020/08/10 12:43
upstream INFO: task hung in sock_ioctl bridge 9 1721d 2079d 0/25 auto-closed as invalid on 2019/07/13 13:17
upstream INFO: task hung in pipe_write (3) fs 1 1345d 1345d 0/25 auto-closed as invalid on 2020/04/25 05:37
android-44 INFO: task hung in pipe_write 1 1760d 1632d 0/2 auto-closed as invalid on 2019/06/05 06:19
upstream INFO: task hung in pipe_write (2) ext4 C done 6 1474d 1473d 0/25 closed as invalid on 2019/09/28 02:25
upstream INFO: task hung in pipe_write fs 8 1704d 1818d 0/25 auto-closed as invalid on 2019/07/30 21:09
android-44 INFO: task hung in pipe_write (2) 1 1400d 1400d 0/2 auto-closed as invalid on 2020/03/31 01:26
android-49 INFO: task hung in pipe_write C 3 1426d 1632d 0/3 public: reported C repro on 2019/04/14 08:51
android-414 INFO: task hung in pipe_write 1 1448d 1448d 0/1 auto-closed as invalid on 2020/02/11 22:17
android-49 INFO: task hung in dev_ioctl 1 1912d 1912d 0/3 auto-closed as invalid on 2019/02/22 12:59
upstream INFO: task hung in dev_ioctl (2) net 1 1626d 1626d 0/25 closed as invalid on 2019/05/08 13:05
android-414 INFO: task hung in dev_ioctl 2 1829d 1849d 0/1 auto-closed as invalid on 2019/03/27 22:33
android-414 INFO: task hung in dev_ioctl (2) 1 1402d 1402d 0/1 auto-closed as invalid on 2020/03/28 22:15
upstream INFO: task hung in dev_ioctl net 2 1827d 1855d 0/25 auto-closed as invalid on 2019/03/30 00:48
upstream INFO: task hung in dev_ioctl (3) net 7 1004d 1132d 0/25 auto-closed as invalid on 2021/04/01 04:28
Last patch testing requests (1)
Created Duration User Patch Repo Result
2023/03/28 07:19 21m hdanton@sina.com https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master OK log
Fix bisection attempts (2)
Created Duration User Patch Repo Result
2019/12/30 13:21 10h55m bisect fix upstream job log (23)
2019/08/13 00:50 25m bisect fix upstream job log (0) log

Sample crash report:
INFO: task syz-executor234:6579 blocked for more than 143 seconds.
      Not tainted 5.15.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor234 state:D stack:23416 pid: 6579 ppid:  6574 flags:0x00000000
Call Trace:
 context_switch kernel/sched/core.c:4940 [inline]
 __schedule+0x940/0x26f0 kernel/sched/core.c:6287
 schedule+0xd3/0x270 kernel/sched/core.c:6366
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6425
 __mutex_lock_common kernel/locking/mutex.c:669 [inline]
 __mutex_lock+0xa34/0x12f0 kernel/locking/mutex.c:729
 rtnl_lock net/core/rtnetlink.c:72 [inline]
 rtnetlink_rcv_msg+0x3be/0xb80 net/core/rtnetlink.c:5569
 netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2504
 netlink_unicast_kernel net/netlink/af_netlink.c:1314 [inline]
 netlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1340
 netlink_sendmsg+0x86d/0xdb0 net/netlink/af_netlink.c:1929
 sock_sendmsg_nosec net/socket.c:704 [inline]
 sock_sendmsg+0xcf/0x120 net/socket.c:724
 __sys_sendto+0x21c/0x320 net/socket.c:2036
 __do_sys_sendto net/socket.c:2048 [inline]
 __se_sys_sendto net/socket.c:2044 [inline]
 __x64_sys_sendto+0xdd/0x1b0 net/socket.c:2044
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f1f2d85a4e6
RSP: 002b:00007f1f2da47738 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f1f2da49080 RCX: 00007f1f2d85a4e6
RDX: 000000000000002c RSI: 00007f1f2da490d0 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007f1f2da47754 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f1f2da490d0 R14: 0000000000000003 R15: 0000000000000000

Showing all locks held in the system:
1 lock held by khungtaskd/26:
 #0: ffffffff8b97fea0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6446
1 lock held by khugepaged/32:
 #0: ffffffff8ba62f08 (lock#5){+.+.}-{3:3}, at: __lru_add_drain_all+0x65/0x760 mm/swap.c:769
3 locks held by kworker/1:1/39:
1 lock held by in:imklog/6256:
 #0: ffff888073019770 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 fs/file.c:990
3 locks held by syz-executor234/6578:
 #0: ffffffff8d0e3b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
 #0: ffffffff8d0e3b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 net/core/rtnetlink.c:5569
 #1: ffff8880751a12d0 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x1fc/0x4a0 drivers/net/wireguard/device.c:48
 #2: ffffffff8b989228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:322 [inline]
 #2: ffffffff8b989228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d5/0x620 kernel/rcu/tree_exp.h:837
1 lock held by syz-executor234/6579:
 #0: ffffffff8d0e3b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
 #0: ffffffff8d0e3b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 net/core/rtnetlink.c:5569
1 lock held by syz-executor234/6581:
 #0: 
ffffffff8d0e3b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline]
ffffffff8d0e3b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 net/core/rtnetlink.c:5569
3 locks held by syz-executor234/6582:
3 locks held by kworker/0:0/6736:
 #0: ffff8881476af538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881476af538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff8881476af538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1198 [inline]
 #0: ffff8881476af538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:634 [inline]
 #0: ffff8881476af538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:661 [inline]
 #0: ffff8881476af538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 kernel/workqueue.c:2268
 #1: ffffc9000315fdb0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 kernel/workqueue.c:2272
 #2: ffffffff8d0e3b68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xa3/0x1340 net/ipv6/addrconf.c:4047
3 locks held by kworker/1:2/8461:
 #0: ffff8881476af538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8881476af538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff8881476af538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1198 [inline]
 #0: ffff8881476af538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:634 [inline]
 #0: ffff8881476af538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:661 [inline]
 #0: ffff8881476af538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 kernel/workqueue.c:2268
 #1: ffffc9000ccffdb0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 kernel/workqueue.c:2272
 #2: ffffffff8d0e3b68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xa3/0x1340 net/ipv6/addrconf.c:4047
3 locks held by kworker/1:5/8485:
 #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1198 [inline]
 #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:634 [inline]
 #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:661 [inline]
 #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 kernel/workqueue.c:2268
 #1: ffffc9000cd5fdb0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 kernel/workqueue.c:2272
 #2: ffffffff8d0e3b68 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xb/0x60 net/core/link_watch.c:251
3 locks held by kworker/0:5/8497:
1 lock held by syz-executor234/17013:
 #0: ffffffff8b989228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:322 [inline]
 #0: ffffffff8b989228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d5/0x620 kernel/rcu/tree_exp.h:837
1 lock held by systemd-journal/17202:
5 locks held by kworker/u4:8/27076:
 #0: ffff8880b9c31a58 (&rq->__lock){-.-.}-{2:2}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff8880b9c31a58 (&rq->__lock){-.-.}-{2:2}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff8880b9c31a58 (&rq->__lock){-.-.}-{2:2}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1198 [inline]
 #0: ffff8880b9c31a58 (&rq->__lock){-.-.}-{2:2}, at: set_work_data kernel/workqueue.c:634 [inline]
 #0: ffff8880b9c31a58 (&rq->__lock){-.-.}-{2:2}, at: set_work_pool_and_clear_pending kernel/workqueue.c:661 [inline]
 #0: ffff8880b9c31a58 (&rq->__lock){-.-.}-{2:2}, at: process_one_work+0x8a3/0x16b0 kernel/workqueue.c:2268
 #1: ffffc90009c77db0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 kernel/workqueue.c:2272
 #2: ffff8880b9d20258 (&base->lock){..-.}-{2:2}, at: __mod_timer+0x60c/0xe30 kernel/time/timer.c:1043
 #3: ffffffff8b9c96f8 (cgroup_rstat_lock){....}-{2:2}, at: cgroup_rstat_flush_irqsafe+0x17/0x40 kernel/cgroup/rstat.c:217
 #4: ffff8880b9d22ef8 (per_cpu_ptr(&cgroup_rstat_cpu_lock, cpu)){..-.}-{2:2}, at: cgroup_rstat_flush_locked+0x146/0xdc0 kernel/cgroup/rstat.c:160

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 26 Comm: khungtaskd Not tainted 5.15.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
 nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:105
 nmi_trigger_cpumask_backtrace+0x1ae/0x220 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline]
 watchdog+0xc1d/0xf50 kernel/hung_task.c:295
 kthread+0x3e5/0x4d0 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 31664 Comm: syz-executor234 Not tainted 5.15.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1169 [inline]
RIP: 0010:rcu_lockdep_current_cpu_online+0x51/0x150 kernel/rcu/tree.c:1160
Code: 7e e8 73 26 d3 07 48 c7 c3 c0 28 03 00 83 f8 07 89 c5 0f 87 f5 00 00 00 48 8d 3c ed 80 78 33 8b 48 b8 00 00 00 00 00 fc ff df <48> 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ad 00 00 00 48 03 1c ed 80
RSP: 0018:ffffc900100f7b58 EFLAGS: 00000297
RAX: dffffc0000000000 RBX: 00000000000328c0 RCX: ffffffff8161c404
RDX: 0000000000000001 RSI: 0000000000000002 RDI: ffffffff8b337880
RBP: 0000000000000000 R08: 0000000000000000 R09: ffff8880b9c32a0b
R10: ffffed1017386541 R11: 0000000000000000 R12: 0000000000000001
R13: 0000000000000000 R14: ffff8881528dcc50 R15: ffff8881528dc9e8
FS:  0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f1f2da4f030 CR3: 000000007e53a000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 rcu_read_lock_held_common kernel/rcu/update.c:112 [inline]
 rcu_read_lock_held_common kernel/rcu/update.c:102 [inline]
 rcu_read_lock_sched_held+0x25/0x70 kernel/rcu/update.c:123
 trace_lock_release include/trace/events/lock.h:58 [inline]
 lock_release+0x522/0x720 kernel/locking/lockdep.c:5636
 __mutex_unlock_slowpath+0x99/0x5e0 kernel/locking/mutex.c:851
 perf_event_exit_task+0x24a/0x740 kernel/events/core.c:12720
 do_exit+0xbbe/0x2a30 kernel/exit.c:834
 do_group_exit+0x125/0x310 kernel/exit.c:922
 __do_sys_exit_group kernel/exit.c:933 [inline]
 __se_sys_exit_group kernel/exit.c:931 [inline]
 __x64_sys_exit_group+0x3a/0x50 kernel/exit.c:931
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f1f2d89ffa9
Code: Unable to access opcode bytes at RIP 0x7f1f2d89ff7f.
RSP: 002b:00007f1f2da47cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f1f2d924430 RCX: 00007f1f2d89ffa9
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffffffffffb8 R09: 00007f1f2d8f01b7
R10: 00007f1f2da47d60 R11: 0000000000000246 R12: 00007f1f2d924430
R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
----------------
Code disassembly (best guess):
   0:	7e e8                	jle    0xffffffea
   2:	73 26                	jae    0x2a
   4:	d3 07                	roll   %cl,(%rdi)
   6:	48 c7 c3 c0 28 03 00 	mov    $0x328c0,%rbx
   d:	83 f8 07             	cmp    $0x7,%eax
  10:	89 c5                	mov    %eax,%ebp
  12:	0f 87 f5 00 00 00    	ja     0x10d
  18:	48 8d 3c ed 80 78 33 	lea    -0x74cc8780(,%rbp,8),%rdi
  1f:	8b
  20:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  27:	fc ff df
* 2a:	48 89 fa             	mov    %rdi,%rdx <-- trapping instruction
  2d:	48 c1 ea 03          	shr    $0x3,%rdx
  31:	80 3c 02 00          	cmpb   $0x0,(%rdx,%rax,1)
  35:	0f 85 ad 00 00 00    	jne    0xe8
  3b:	48                   	rex.W
  3c:	03                   	.byte 0x3
  3d:	1c ed                	sbb    $0xed,%al
  3f:	80                   	.byte 0x80

Crashes (578):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2021/09/22 12:10 upstream 92477dd1faa6 169724fe .config console log report syz C ci-upstream-kasan-gce INFO: task hung in rtnetlink_rcv_msg
2019/02/17 08:10 upstream 64c0133eb88a f42dee6d .config console log report syz C ci-upstream-kasan-gce-root
2019/02/17 07:52 upstream 64c0133eb88a f42dee6d .config console log report syz C ci-upstream-kasan-gce-smack-root
2019/02/16 09:43 net-old 24f0a48743a2 f42dee6d .config console log report syz C ci-upstream-net-this-kasan-gce
2020/10/06 07:58 net-next-old c2568c8c9e63 1880b4a9 .config console log report syz C ci-upstream-net-kasan-gce
2019/02/16 15:27 net-next-old bb015f2216fe f42dee6d .config console log report syz C ci-upstream-net-kasan-gce
2021/10/21 07:32 linux-next 51dba6e335ff f111d03b .config console log report syz C ci-upstream-linux-next-kasan-gce-root INFO: task can't die in dev_deactivate_many
2021/10/20 21:08 linux-next 51dba6e335ff 418a00eb .config console log report syz C ci-upstream-linux-next-kasan-gce-root INFO: task can't die in dev_deactivate_many
2021/10/20 19:54 linux-next 51dba6e335ff 418a00eb .config console log report syz C ci-upstream-linux-next-kasan-gce-root INFO: task can't die in dev_deactivate_many
2021/01/06 23:52 linux-next 7e4525a4232f c104d4a3 .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2019/02/16 09:44 linux-next 7a92eb7cc1dc f42dee6d .config console log report syz C ci-upstream-linux-next-kasan-gce-root
2023/01/24 14:22 upstream 7bf70dbb1882 9dfcf09c .config console log report syz [disk image] [vmlinux] [kernel image] ci2-upstream-fs INFO: task hung in rtnetlink_rcv_msg
2023/09/15 16:43 upstream 9fdfb15a3dbf 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in rtnetlink_rcv_msg
2023/09/29 00:43 upstream 9ed22ae6be81 c2ab1e5d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in rtnetlink_rcv_msg
2023/09/12 23:22 upstream a747acc0b752 59da8366 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in rtnetlink_rcv_msg
2023/08/20 07:01 upstream 9e6c269de404 d216d8a0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: task hung in rtnetlink_rcv_msg
2023/07/07 03:40 upstream a452483508d7 1a2f6297 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in rtnetlink_rcv_msg
2023/07/06 04:34 upstream 6cd06ab12d1a ba5dba36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in rtnetlink_rcv_msg
2023/08/20 13:47 upstream b320441c04c9 d216d8a0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in rtnetlink_rcv_msg
2023/07/10 17:42 upstream 06c2afb862f9 52ae002a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in rtnetlink_rcv_msg
2023/08/18 01:02 net e9bbd6016947 74b106b6 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in rtnetlink_rcv_msg
2023/07/05 23:17 net 3674fbf0451d ba5dba36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in rtnetlink_rcv_msg
2021/06/28 22:55 bpf d6765985a42a 9d2ab5df .config console log report info ci-upstream-bpf-kasan-gce INFO: task hung in rtnetlink_rcv_msg
2023/07/20 11:23 net-next 03b123debcbc 7b630fdb .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in rtnetlink_rcv_msg
2023/07/08 14:14 net-next 6843306689af 668cb1fa .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in rtnetlink_rcv_msg
2023/06/30 02:53 net-next ae230642190a 7b33cf8f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in rtnetlink_rcv_msg
2023/09/07 01:09 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci fe4469582053 72324844 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 INFO: task hung in rtnetlink_rcv_msg
2023/06/11 03:40 https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-testing d37537a1f7cf 49519f06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-usb INFO: task hung in rtnetlink_rcv_msg
2023/02/02 20:40 git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux.git fixes 0966d385830d 33fc5c09 .config console log report info ci-qemu2-riscv64 INFO: task hung in rtnetlink_rcv_msg
2023/09/19 12:20 upstream 2cf0f7156238 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in __netlink_dump_start
2023/09/13 07:08 upstream a747acc0b752 59da8366 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in nl80211_pre_doit
2023/09/25 20:44 upstream 6465e260f487 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in __netlink_dump_start
2023/09/25 17:31 upstream 6465e260f487 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in tun_chr_close
2023/09/18 02:32 upstream e789286468a9 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in nl80211_pre_doit
2023/09/13 16:01 upstream 3669558bdf35 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in nl80211_pre_doit
2023/07/13 04:54 upstream eb26cbb1a754 86081196 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in nl80211_pre_doit
2023/07/10 13:41 upstream 06c2afb862f9 52ae002a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in nl80211_pre_doit
2023/07/09 06:01 upstream 1c7873e33645 668cb1fa .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in nl80211_pre_doit
2023/07/08 06:55 upstream 4f6b6c2b2f86 668cb1fa .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in __netlink_dump_start
2023/07/06 15:00 upstream c17414a273b8 1a2f6297 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root INFO: task hung in __netlink_dump_start
2023/07/05 14:25 upstream d528014517f2 80298b6f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in __netlink_dump_start
2023/07/04 09:11 upstream 24be4d0b46bb 6e553898 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in __netlink_dump_start
2023/05/21 03:21 upstream 0dd2a6fb1e34 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in sock_ioctl
2022/07/29 11:47 upstream 6e2c0490769e fef302b1 .config console log report info ci-upstream-kasan-gce INFO: task hung in ip_rt_ioctl
2021/12/15 21:04 upstream 2b14864acbaa 572bcb40 .config console log report info ci-upstream-kasan-gce-selinux-root INFO: task hung in ipv6_route_ioctl
2021/01/07 16:12 upstream 71c061d24438 c104d4a3 .config console log report info ci-upstream-kasan-gce
2019/11/30 13:21 upstream 81b6b96475ac 3a75be00 .config console log report ci-qemu-upstream
2023/08/26 15:33 upstream 7d2f353b2682 03d9c195 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in nl80211_pre_doit
2023/08/16 22:31 upstream 4853c74bd7ab 7773e940 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in __netlink_dump_start
2023/08/08 18:00 upstream 14f9643dc90a 3c27dfcd .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in nl80211_pre_doit
2023/08/08 03:50 upstream a027b2eca0b7 b1b6ae3d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in __netlink_dump_start
2023/08/08 01:51 upstream a027b2eca0b7 b1b6ae3d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in nl80211_pre_doit
2023/08/03 11:29 upstream ec351c8f2e62 39a91c18 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in __netlink_dump_start
2023/07/31 13:19 upstream 5d0c230f1de8 2a0d0f29 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in __netlink_dump_start
2023/07/30 09:06 upstream 12214540ad87 92476829 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in nl80211_pre_doit
2023/07/25 09:44 upstream 0b5547c51827 9a0ddda3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in nl80211_pre_doit
2023/07/13 17:32 upstream eb26cbb1a754 86081196 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in nl80211_pre_doit
2023/07/10 16:11 upstream 06c2afb862f9 52ae002a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in nl80211_pre_doit
2023/09/06 23:17 net 1a961e74d5ab 72324844 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in __netlink_dump_start
2023/08/28 14:30 net bb5ed01cd242 03d9c195 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in __netlink_dump_start
2023/08/21 14:46 net d1cdbf66e18c d216d8a0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in __netlink_dump_start
2023/08/18 15:50 net 820a38d8f2cb d216d8a0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in __netlink_dump_start
2023/07/17 17:56 net 4bdf79d686b4 e5f10889 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in __netlink_dump_start
2023/07/17 14:33 net 4bdf79d686b4 e5f10889 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in __netlink_dump_start
2023/07/15 19:29 net 0dd1805fe498 35d9ecc5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in __netlink_dump_start
2023/07/12 17:53 net d3f87278bcb8 979d5fe2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in __netlink_dump_start
2023/07/10 11:00 net 9d0aba98316d 668cb1fa .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in __netlink_dump_start
2023/06/28 03:41 net 3674fbf0451d 4cd5bb25 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in __netlink_dump_start
2022/06/30 20:36 net-old 0a18d802d65c 1434eec0 .config console log report info ci-upstream-net-this-kasan-gce INFO: task hung in ip_setsockopt
2023/09/13 17:26 net-next 7e6cadf51a55 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in __netlink_dump_start
2023/09/10 22:32 net-next 73be7fb14e83 6654cf89 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in tun_chr_close
2023/07/21 02:33 net-next b44693495af8 28847498 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in __netlink_dump_start
2023/07/06 12:39 net-next 6843306689af 1a2f6297 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in tun_chr_close
2023/07/04 19:20 net-next ae230642190a 17a98177 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in __netlink_dump_start
2023/07/04 04:43 net-next ae230642190a 6e553898 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in tun_chr_close
2023/06/30 22:45 net-next ae230642190a 01298212 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in __netlink_dump_start
2023/06/30 17:59 net-next ae230642190a 01298212 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in __netlink_dump_start
2023/08/21 09:21 linux-next 47d9bb711707 d216d8a0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: task hung in __netlink_dump_start
2023/07/21 04:51 linux-next ae867bc97b71 28847498 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: task hung in dev_ioctl
2023/07/10 06:01 linux-next fe57d0d86f03 668cb1fa .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: task hung in __netlink_dump_start
2023/07/06 02:59 linux-next e1f6a8eaf1c2 ba5dba36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: task hung in nl80211_pre_doit
2023/07/01 09:56 linux-next 6352a698ca5b af3053d2 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: task hung in __netlink_dump_start
2023/06/20 14:47 linux-next f7efed9f38f8 09ffe269 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root INFO: task hung in pipe_write
2021/10/21 08:46 linux-next 51dba6e335ff f111d03b .config console log report info ci-upstream-linux-next-kasan-gce-root INFO: task can't die in dev_deactivate_many
2021/10/21 02:12 linux-next 51dba6e335ff f111d03b .config console log report info ci-upstream-linux-next-kasan-gce-root INFO: task can't die in rtnetlink_rcv_msg
2021/09/20 13:15 linux-next 1f77990c4b79 70b76c1d .config console log report info ci-upstream-linux-next-kasan-gce-root INFO: task can't die in synchronize_rcu_expedited
* Struck through repros no longer work on HEAD.