syzbot


INFO: task hung in register_netdevice_notifier

Status: auto-closed as invalid on 2021/09/21 07:27
Reported-by: syzbot+fcb6acc1c3d7ada0a944@syzkaller.appspotmail.com
First crash: 1256d, last: 497d
similar bugs (3):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in register_netdevice_notifier (2) syz done 10555 472d 1076d 22/24 fixed on 2021/11/10 00:50
upstream INFO: task hung in register_netdevice_notifier 602 1634d 1647d 0/24 closed as invalid on 2018/05/03 10:15
upstream INFO: task can't die in register_netdevice_notifier 94 463d 762d 0/24 auto-closed as invalid on 2021/08/27 02:37

Sample crash report:
bond983 (unregistering): Released all slaves
bond982 (unregistering): Released all slaves
bond981 (unregistering): Released all slaves
bond980 (unregistering): Released all slaves
bond979 (unregistering): Released all slaves
INFO: task syz-executor.4:9547 blocked for more than 140 seconds.
bond978 (unregistering): Released all slaves
      Not tainted 4.19.191-syzkaller #0
bond977 (unregistering): Released all slaves
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
bond976 (unregistering): Released all slaves
syz-executor.4  D29192  9547   8134 0x00000004
bond975 (unregistering): Released all slaves
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
bond974 (unregistering): Released all slaves
bond973 (unregistering): Released all slaves
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
bond972 (unregistering): Released all slaves
 __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:589 [inline]
 rwsem_down_write_failed+0x3aa/0x760 kernel/locking/rwsem-xadd.c:618
bond971 (unregistering): Released all slaves
bond970 (unregistering): Released all slaves
 call_rwsem_down_write_failed+0x13/0x20 arch/x86/lib/rwsem.S:117
bond969 (unregistering): Released all slaves
 __down_write arch/x86/include/asm/rwsem.h:142 [inline]
 down_write+0x4f/0x90 kernel/locking/rwsem.c:72
bond968 (unregistering): Released all slaves
 register_netdevice_notifier+0x7b/0x5b0 net/core/dev.c:1639
bond967 (unregistering): Released all slaves
bond966 (unregistering): Released all slaves
 bcm_init+0x1a3/0x210 net/can/bcm.c:1502
bond965 (unregistering): Released all slaves
 can_create+0x27c/0x470 net/can/af_can.c:184
bond964 (unregistering): Released all slaves
 __sock_create+0x3d8/0x740 net/socket.c:1276
 sock_create net/socket.c:1316 [inline]
 __sys_socket+0xef/0x200 net/socket.c:1346
bond963 (unregistering): Released all slaves
 __do_sys_socket net/socket.c:1355 [inline]
 __se_sys_socket net/socket.c:1353 [inline]
 __x64_sys_socket+0x6f/0xb0 net/socket.c:1353
bond962 (unregistering): Released all slaves
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
bond961 (unregistering): Released all slaves
RIP: 0033:0x4665d9
Code: Bad RIP value.
RSP: 002b:00007f0dce8cf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
bond960 (unregistering): Released all slaves
RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665d9
RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d
bond959 (unregistering): Released all slaves
RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0f0
bond958 (unregistering): Released all slaves
R13: 00007ffcd10806df R14: 00007f0dce8cf300 R15: 0000000000022000
bond957 (unregistering): Released all slaves
INFO: task syz-executor.4:9553 blocked for more than 140 seconds.
bond956 (unregistering): Released all slaves
      Not tainted 4.19.191-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
bond955 (unregistering): Released all slaves
syz-executor.4  D30280  9553   8134 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
bond954 (unregistering): Released all slaves
bond953 (unregistering): Released all slaves
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:589 [inline]
 rwsem_down_write_failed+0x3aa/0x760 kernel/locking/rwsem-xadd.c:618
bond952 (unregistering): Released all slaves
bond951 (unregistering): Released all slaves
 call_rwsem_down_write_failed+0x13/0x20 arch/x86/lib/rwsem.S:117
bond950 (unregistering): Released all slaves
 __down_write arch/x86/include/asm/rwsem.h:142 [inline]
 down_write+0x4f/0x90 kernel/locking/rwsem.c:72
bond949 (unregistering): Released all slaves
 register_netdevice_notifier+0x7b/0x5b0 net/core/dev.c:1639
bond948 (unregistering): Released all slaves
bond947 (unregistering): Released all slaves
 bcm_init+0x1a3/0x210 net/can/bcm.c:1502
bond946 (unregistering): Released all slaves
 can_create+0x27c/0x470 net/can/af_can.c:184
 __sock_create+0x3d8/0x740 net/socket.c:1276
 sock_create net/socket.c:1316 [inline]
 __sys_socket+0xef/0x200 net/socket.c:1346
bond945 (unregistering): Released all slaves
bond944 (unregistering): Released all slaves
bond943 (unregistering): Released all slaves
 __do_sys_socket net/socket.c:1355 [inline]
 __se_sys_socket net/socket.c:1353 [inline]
 __x64_sys_socket+0x6f/0xb0 net/socket.c:1353
bond942 (unregistering): Released all slaves
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
bond941 (unregistering): Released all slaves
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4665d9
Code: Bad RIP value.
bond940 (unregistering): Released all slaves
RSP: 002b:00007f0dce8ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
bond939 (unregistering): Released all slaves
RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9
RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d
bond938 (unregistering): Released all slaves
RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
bond937 (unregistering): Released all slaves
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c1a8
R13: 00007ffcd10806df R14: 00007f0dce8ae300 R15: 0000000000022000
bond936 (unregistering): Released all slaves

Showing all locks held in the system:
1 lock held by khungtaskd/1569:
 #0: 00000000d78eb0f5 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4441
bond935 (unregistering): Released all slaves
1 lock held by in:imklog/7761:
 #0: 000000003fcf1995 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 fs/file.c:767
bond934 (unregistering): Released all slaves
3 locks held by kworker/0:5/5635:
 #0: 0000000006076502 ((wq_completion)"events"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2123
 #1: 00000000d66df15c (deferred_process_work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2127
bond933 (unregistering): Released all slaves
 #2: 00000000f18f4734 (rtnl_mutex){+.+.}, at: switchdev_deferred_process_work+0xa/0x20 net/switchdev/switchdev.c:150
bond932 (unregistering): Released all slaves
2 locks held by agetty/12276:
 #0: 00000000d31f7c38 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272
bond931 (unregistering): Released all slaves
 #1: 000000002cc7de2d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1950 drivers/tty/n_tty.c:2154
bond930 (unregistering): Released all slaves
7 locks held by kworker/u4:2/5357:
3 locks held by kworker/1:2/7863:
bond929 (unregistering): Released all slaves
 #0: 0000000006076502 ((wq_completion)"events"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2123
bond928 (unregistering): Released all slaves
 #1: 00000000d21c37dd ((linkwatch_work).work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2127
bond927 (unregistering): Released all slaves
 #2: 00000000f18f4734 (rtnl_mutex){+.+.}, at: linkwatch_event+0xb/0x60 net/core/link_watch.c:236
bond926 (unregistering): Released all slaves
1 lock held by syz-executor.4/9547:
bond925 (unregistering): Released all slaves
 #0: 0000000070e247b6 (pernet_ops_rwsem){++++}, at: register_netdevice_notifier+0x7b/0x5b0 net/core/dev.c:1639
1 lock held by syz-executor.4/9553:
bond924 (unregistering): Released all slaves
 #0: 0000000070e247b6 (pernet_ops_rwsem){++++}, at: register_netdevice_notifier+0x7b/0x5b0 net/core/dev.c:1639
bond923 (unregistering): Released all slaves
1 lock held by syz-executor.5/9605:
 #0: 00000000f18f4734 (rtnl_mutex){+.+.}, at: rtnl_lock net/core/rtnetlink.c:77 [inline]
 #0: 00000000f18f4734 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x3fe/0xb80 net/core/rtnetlink.c:4775
bond922 (unregistering): Released all slaves
3 locks held by kworker/0:2/9625:
 #0: 000000007a002443 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2123
bond921 (unregistering): Released all slaves
 #1: 00000000b9f7871d ((addr_chk_work).work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2127
 #2: 00000000f18f4734 (rtnl_mutex){+.+.}, at: addrconf_verify_work+0xa/0x20 net/ipv6/addrconf.c:4476
bond920 (unregistering): Released all slaves

=============================================

bond919 (unregistering): Released all slaves
NMI backtrace for cpu 1
CPU: 1 PID: 1569 Comm: khungtaskd Not tainted 4.19.191-syzkaller #0
bond918 (unregistering): Released all slaves
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
bond917 (unregistering): Released all slaves
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline]
 watchdog+0x991/0xe60 kernel/hung_task.c:287
bond916 (unregistering): Released all slaves
 kthread+0x33f/0x460 kernel/kthread.c:259
bond915 (unregistering): Released all slaves
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Sending NMI from CPU 1 to CPUs 0:
bond914 (unregistering): Released all slaves
NMI backtrace for cpu 0
CPU: 0 PID: 5357 Comm: kworker/u4:2 Not tainted 4.19.191-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: netns cleanup_net
RIP: 0010:io_serial_out+0x68/0x80 drivers/tty/serial/8250/8250_port.c:456
Code: e1 00 00 00 48 8d 7d 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 d3 e3 80 3c 02 00 75 15 03 5d 38 44 89 e0 89 da ee <5b> 5d 41 5c c3 e8 ce 87 d7 fd eb c7 e8 17 8a d7 fd eb e4 0f 1f 44
RSP: 0018:ffff888228057438 EFLAGS: 00000002
RAX: 000000000000005b RBX: 00000000000003f8 RCX: 0000000000000000
RDX: 00000000000003f8 RSI: ffffffff83c0b081 RDI: ffffffff8dc8c218
RBP: ffffffff8dc8c1e0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: 000000000000005b
R13: 000000000000005b R14: ffffffff8dc8c1e0 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff0b863a010 CR3: 00000000b3b42000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 uart_console_write+0x59/0x100 drivers/tty/serial/serial_core.c:1888
 serial8250_console_write+0x637/0xad0 drivers/tty/serial/8250/8250_port.c:3288
 call_console_drivers kernel/printk/printk.c:1764 [inline]
 console_unlock+0xbb6/0x1110 kernel/printk/printk.c:2460
 vprintk_emit+0x2d1/0x740 kernel/printk/printk.c:1965
 vprintk_func+0x79/0x180 kernel/printk/printk_safe.c:405
 printk+0xba/0xed kernel/printk/printk.c:2040
 __netdev_printk.cold+0x5f/0xbe net/core/dev.c:9632
 netdev_info+0xd8/0x110 net/core/dev.c:9679
 bond_uninit+0x14e/0x420 drivers/net/bonding/bond_main.c:4407
 rollback_registered_many+0x927/0xe70 net/core/dev.c:8202
 unregister_netdevice_many.part.0+0x1a/0x300 net/core/dev.c:9316
 unregister_netdevice_many net/core/dev.c:9315 [inline]
 default_device_exit_batch+0x2fa/0x3c0 net/core/dev.c:9787
 ops_exit_list+0xf9/0x150 net/core/net_namespace.c:156
 cleanup_net+0x3b4/0x8b0 net/core/net_namespace.c:553
 process_one_work+0x864/0x1570 kernel/workqueue.c:2152
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2295
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415

Crashes (64):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-19 2021/05/24 07:27 linux-4.19.y 1e986fe9ad15 3c7fef33 .config log report info INFO: task hung in register_netdevice_notifier
ci2-linux-4-19 2021/05/07 08:22 linux-4.19.y 97a8651cadce f6da8120 .config log report info INFO: task hung in register_netdevice_notifier
ci2-linux-4-19 2021/02/06 04:23 linux-4.19.y 811218eceeaa 23a562df .config log report info INFO: task hung in register_netdevice_notifier
ci2-linux-4-19 2020/12/05 17:04 linux-4.19.y daefdc9eb24b 0ef84591 .config log report info
ci2-linux-4-19 2020/08/30 14:10 linux-4.19.y f6d5cb9e2c06 d5a3ae1f .config log report
ci2-linux-4-19 2020/08/20 15:19 linux-4.19.y a834132bd465 ed282a3a .config log report
ci2-linux-4-19 2020/08/01 15:11 linux-4.19.y 13af6c74b14a 8df85ed9 .config log report
ci2-linux-4-19 2020/06/20 23:15 linux-4.19.y 3fc898571b97 c655ec77 .config log report
ci2-linux-4-19 2020/06/19 15:14 linux-4.19.y 3fc898571b97 123cf502 .config log report
ci2-linux-4-19 2020/04/16 02:56 linux-4.19.y 6dd0e32665e5 3f3c5574 .config log report
ci2-linux-4-19 2020/03/16 18:04 linux-4.19.y 339485c9a80f 749688d2 .config log report
ci2-linux-4-19 2020/03/16 15:04 linux-4.19.y 339485c9a80f 749688d2 .config log report
ci2-linux-4-19 2020/02/25 05:24 linux-4.19.y f25804f38984 59b57593 .config log report
ci2-linux-4-19 2020/01/29 03:48 linux-4.19.y 88d6de67e390 c8e81ce4 .config log report
ci2-linux-4-19 2020/01/21 22:26 linux-4.19.y dc4ba5be1bab 8eda0b95 .config log report
ci2-linux-4-19 2020/01/15 12:51 linux-4.19.y db5b9190ff82 fa12bd3c .config log report
ci2-linux-4-19 2020/01/14 14:09 linux-4.19.y dcd888983542 32881205 .config log report
ci2-linux-4-19 2020/01/14 06:29 linux-4.19.y dcd888983542 32881205 .config log report
ci2-linux-4-19 2020/01/12 15:07 linux-4.19.y dcd888983542 31290a45 .config log report
ci2-linux-4-19 2020/01/12 04:09 linux-4.19.y cb1f9a169a0e 4c04afaa .config log report
ci2-linux-4-19 2020/01/08 21:58 linux-4.19.y 3d40d7117e35 ddc3e859 .config log report
ci2-linux-4-19 2019/12/18 09:59 linux-4.19.y 7d120bf21c05 64ca0a37 .config log report
ci2-linux-4-19 2019/12/10 02:37 linux-4.19.y fb683b5e3f53 b31eda3d .config log report
ci2-linux-4-19 2019/12/01 19:55 linux-4.19.y 174651bdf802 a76bf83f .config log report
ci2-linux-4-19 2019/11/27 12:07 linux-4.19.y 14260788bbb9 1048481f .config log report
ci2-linux-4-19 2019/11/20 08:36 linux-4.19.y c555efaf1402 432c7650 .config log report
ci2-linux-4-19 2019/11/09 00:52 linux-4.19.y 5ee93551c703 1e35461e .config log report
ci2-linux-4-19 2019/11/08 23:02 linux-4.19.y 5ee93551c703 1e35461e .config log report
ci2-linux-4-19 2019/11/02 13:24 linux-4.19.y ef244c308885 997ccc67 .config log report
ci2-linux-4-19 2019/10/30 14:58 linux-4.19.y ef244c308885 5ea87a66 .config log report
ci2-linux-4-19 2019/10/24 22:51 linux-4.19.y c3038e718a19 d01bb02a .config log report
ci2-linux-4-19 2019/10/14 06:48 linux-4.19.y dafd634415a7 2f661ec4 .config log report
ci2-linux-4-19 2019/09/12 14:06 linux-4.19.y ee809c7e0895 0b7672ee .config log report
ci2-linux-4-19 2019/08/11 06:59 linux-4.19.y 893af1c79e42 acb51638 .config log report
ci2-linux-4-19 2019/08/11 04:27 linux-4.19.y 893af1c79e42 acb51638 .config log report
ci2-linux-4-19 2019/07/28 04:49 linux-4.19.y 7250956f6eaf c85e1c5b .config log report
ci2-linux-4-19 2019/07/03 12:33 linux-4.19.y 1a0592436669 55565fa0 .config log report
ci2-linux-4-19 2019/06/24 11:21 linux-4.19.y 78778071092e 472f0082 .config log report
ci2-linux-4-19 2019/06/23 09:35 linux-4.19.y 78778071092e 34bf9440 .config log report
ci2-linux-4-19 2019/06/22 04:12 linux-4.19.y 9f31eb60d7a2 34bf9440 .config log report
ci2-linux-4-19 2019/06/19 22:32 linux-4.19.y 9f31eb60d7a2 34bf9440 .config log report
ci2-linux-4-19 2019/06/19 19:01 linux-4.19.y 9f31eb60d7a2 34bf9440 .config log report
ci2-linux-4-19 2019/06/13 17:15 linux-4.19.y 768292d05361 d25bb7ad .config log report
ci2-linux-4-19 2019/06/12 18:02 linux-4.19.y 768292d05361 794a1ad7 .config log report
ci2-linux-4-19 2019/06/11 12:28 linux-4.19.y 768292d05361 5b5826d0 .config log report
ci2-linux-4-19 2019/06/11 10:28 linux-4.19.y bb7b450e61a1 5b5826d0 .config log report
ci2-linux-4-19 2019/06/09 08:31 linux-4.19.y bb7b450e61a1 0159583c .config log report
ci2-linux-4-19 2019/06/07 16:47 linux-4.19.y e109a984cf38 cf9c3a50 .config log report
ci2-linux-4-19 2019/06/07 16:33 linux-4.19.y e109a984cf38 cf9c3a50 .config log report
ci2-linux-4-19 2019/06/07 15:09 linux-4.19.y e109a984cf38 cf9c3a50 .config log report
ci2-linux-4-19 2019/05/20 17:52 linux-4.19.y dafc674bbcb1 b5641f32 .config log report
ci2-linux-4-19 2019/05/15 08:41 linux-4.19.y 3351e9d39947 bd4e3ac7 .config log report
ci2-linux-4-19 2019/05/13 20:39 linux-4.19.y 9c2556f428cf 7c305b44 .config log report
ci2-linux-4-19 2019/05/12 18:46 linux-4.19.y 9c2556f428cf 5f302c04 .config log report
ci2-linux-4-19 2019/05/12 06:21 linux-4.19.y 9c2556f428cf c017728b .config log report
ci2-linux-4-19 2019/05/10 03:17 linux-4.19.y 21de7eb67cff 018207ef .config log report
ci2-linux-4-19 2019/05/08 15:28 linux-4.19.y 21de7eb67cff 1bb034d0 .config log report
ci2-linux-4-19 2019/05/03 08:42 linux-4.19.y a03957ab0fd5 1bfa09b9 .config log report
ci2-linux-4-19 2019/05/01 09:49 linux-4.19.y 19bb613acb9a 618456b4 .config log report
ci2-linux-4-19 2019/04/29 09:43 linux-4.19.y 19bb613acb9a b617407b .config log report
ci2-linux-4-19 2019/04/28 23:24 linux-4.19.y 19bb613acb9a b617407b .config log report
ci2-linux-4-19 2019/04/28 13:37 linux-4.19.y 19bb613acb9a b617407b .config log report
ci2-linux-4-19 2019/04/28 10:46 linux-4.19.y 19bb613acb9a b617407b .config log report
ci2-linux-4-19 2019/04/27 03:09 linux-4.19.y c98875d930e9 b617407b .config log report
* Struck through repros no longer work on HEAD.