syzbot


INFO: task hung in rtnetlink_rcv_msg (2)

Status: auto-closed as invalid on 2022/05/18 11:30
Reported-by: syzbot+71f8709a75e6edb269a0@syzkaller.appspotmail.com
First crash: 557d, last: 378d
similar bugs (4):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 INFO: task hung in rtnetlink_rcv_msg (3) 7 2d15h 224d 0/1 upstream: reported on 2022/06/20 23:55
linux-4.19 INFO: task hung in rtnetlink_rcv_msg 11 809d 1131d 0/1 auto-closed as invalid on 2021/03/12 19:03
upstream INFO: task hung in rtnetlink_rcv_msg C inconclusive inconclusive 402 2d07h 1438d 0/24 upstream: reported C repro on 2019/02/22 17:00
upstream INFO: task hung in cangw_pernet_exit (3) syz unreliable 290 399d 505d 0/24 closed as invalid on 2022/02/08 10:22

Sample crash report:
ieee802154 phy1 wpan1: encryption failed: -22
ieee802154 phy0 wpan0: encryption failed: -22
ieee802154 phy1 wpan1: encryption failed: -22
ieee802154 phy0 wpan0: encryption failed: -22
ieee802154 phy1 wpan1: encryption failed: -22
INFO: task syz-executor.1:17866 blocked for more than 140 seconds.
      Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.1  D27288 17866  28750 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
 __mutex_lock_common kernel/locking/mutex.c:1016 [inline]
 __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
 rtnl_lock net/core/rtnetlink.c:77 [inline]
 rtnetlink_rcv_msg+0x3fe/0xb80 net/core/rtnetlink.c:4779
 netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2463
 netlink_unicast_kernel net/netlink/af_netlink.c:1325 [inline]
 netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1351
 netlink_sendmsg+0x6c3/0xc50 net/netlink/af_netlink.c:1917
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xc3/0x120 net/socket.c:661
 ___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2227
 __sys_sendmsg net/socket.c:2265 [inline]
 __do_sys_sendmsg net/socket.c:2274 [inline]
 __se_sys_sendmsg net/socket.c:2272 [inline]
 __x64_sys_sendmsg+0x132/0x220 net/socket.c:2272
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fa7c94affe9
Code: Bad RIP value.
RSP: 002b:00007fa7c7e25168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fa7c95c2f60 RCX: 00007fa7c94affe9
RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000013
RBP: 00007fa7c950a08d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd89bb8a7f R14: 00007fa7c7e25300 R15: 0000000000022000
INFO: task syz-executor.1:17879 blocked for more than 140 seconds.
      Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.1  D28576 17879  28750 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
 __mutex_lock_common kernel/locking/mutex.c:1016 [inline]
 __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
 rtnl_lock net/core/rtnetlink.c:77 [inline]
 rtnetlink_rcv_msg+0x3fe/0xb80 net/core/rtnetlink.c:4779
 netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2463
 netlink_unicast_kernel net/netlink/af_netlink.c:1325 [inline]
 netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1351
 netlink_sendmsg+0x6c3/0xc50 net/netlink/af_netlink.c:1917
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xc3/0x120 net/socket.c:661
 ___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2227
 __sys_sendmsg net/socket.c:2265 [inline]
 __do_sys_sendmsg net/socket.c:2274 [inline]
 __se_sys_sendmsg net/socket.c:2272 [inline]
 __x64_sys_sendmsg+0x132/0x220 net/socket.c:2272
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fa7c94affe9
Code: Bad RIP value.
RSP: 002b:00007fa7c7e04168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fa7c95c3030 RCX: 00007fa7c94affe9
RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000015
RBP: 00007fa7c950a08d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffd89bb8a7f R14: 00007fa7c7e04300 R15: 0000000000022000
INFO: task syz-executor.5:17865 blocked for more than 140 seconds.
      Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.5  D25592 17865  28740 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
 __mutex_lock_common kernel/locking/mutex.c:1016 [inline]
 __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
 load_metaops_and_vet net/sched/act_ife.c:281 [inline]
 populate_metalist net/sched/act_ife.c:456 [inline]
 tcf_ife_init+0x105b/0x1730 net/sched/act_ife.c:580
 tcf_action_init_1+0xa06/0xcd0 net/sched/act_api.c:870
 tcf_action_init+0x26e/0x3b0 net/sched/act_api.c:936
 tcf_action_add+0xd9/0x360 net/sched/act_api.c:1317
 tc_ctl_action+0x327/0x410 net/sched/act_api.c:1372
 rtnetlink_rcv_msg+0x453/0xb80 net/core/rtnetlink.c:4782
 netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2463
 netlink_unicast_kernel net/netlink/af_netlink.c:1325 [inline]
 netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1351
 netlink_sendmsg+0x6c3/0xc50 net/netlink/af_netlink.c:1917
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xc3/0x120 net/socket.c:661
 ___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2227
 __sys_sendmsg net/socket.c:2265 [inline]
 __do_sys_sendmsg net/socket.c:2274 [inline]
 __se_sys_sendmsg net/socket.c:2272 [inline]
 __x64_sys_sendmsg+0x132/0x220 net/socket.c:2272
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fe24a934fe9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fe2492aa168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fe24aa47f60 RCX: 00007fe24a934fe9
RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007fe24a98f08d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffc37a468af R14: 00007fe2492aa300 R15: 0000000000022000
INFO: task syz-executor.2:17878 blocked for more than 140 seconds.
      Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.2  D28576 17878  28751 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
 __mutex_lock_common kernel/locking/mutex.c:1016 [inline]
 __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
 rtnl_lock net/core/rtnetlink.c:77 [inline]
 rtnetlink_rcv_msg+0x3fe/0xb80 net/core/rtnetlink.c:4779
 netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2463
 netlink_unicast_kernel net/netlink/af_netlink.c:1325 [inline]
 netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1351
 netlink_sendmsg+0x6c3/0xc50 net/netlink/af_netlink.c:1917
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xc3/0x120 net/socket.c:661
 ___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2227
 __sys_sendmsg net/socket.c:2265 [inline]
 __do_sys_sendmsg net/socket.c:2274 [inline]
 __se_sys_sendmsg net/socket.c:2272 [inline]
 __x64_sys_sendmsg+0x132/0x220 net/socket.c:2272
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f70d24b1fe9
Code: Bad RIP value.
RSP: 002b:00007f70d0e27168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f70d25c4f60 RCX: 00007f70d24b1fe9
RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
RBP: 00007f70d250c08d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fffd4e17fdf R14: 00007f70d0e27300 R15: 0000000000022000
INFO: task syz-executor.4:17882 blocked for more than 140 seconds.
      Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.4  D27792 17882  28759 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
 __mutex_lock_common kernel/locking/mutex.c:1016 [inline]
 __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
 tipc_nl_media_set+0x13/0x30 net/tipc/bearer.c:1238
 genl_family_rcv_msg+0x642/0xc40 net/netlink/genetlink.c:602
 genl_rcv_msg+0xbf/0x160 net/netlink/genetlink.c:627
 netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2463
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:638
 netlink_unicast_kernel net/netlink/af_netlink.c:1325 [inline]
 netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1351
 netlink_sendmsg+0x6c3/0xc50 net/netlink/af_netlink.c:1917
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xc3/0x120 net/socket.c:661
 ___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2227
 __sys_sendmsg net/socket.c:2265 [inline]
 __do_sys_sendmsg net/socket.c:2274 [inline]
 __se_sys_sendmsg net/socket.c:2272 [inline]
 __x64_sys_sendmsg+0x132/0x220 net/socket.c:2272
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7fe618696fe9
Code: Bad RIP value.
RSP: 002b:00007fe61700c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fe6187a9f60 RCX: 00007fe618696fe9
RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003
RBP: 00007fe6186f108d R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffcf474338f R14: 00007fe61700c300 R15: 0000000000022000
INFO: task syz-executor.0:17896 blocked for more than 140 seconds.
      Not tainted 4.19.211-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.0  D27904 17896  28757 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2828 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3517
 schedule+0x8d/0x1b0 kernel/sched/core.c:3561
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619
 __mutex_lock_common kernel/locking/mutex.c:1016 [inline]
 __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078
 genl_lock net/netlink/genetlink.c:33 [inline]
 genl_rcv_msg+0x12f/0x160 net/netlink/genetlink.c:625
 netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2463
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:638
 netlink_unicast_kernel net/netlink/af_netlink.c:1325 [inline]
 netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1351
 netlink_sendmsg+0x6c3/0xc50 net/netlink/af_netlink.c:1917
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xc3/0x120 net/socket.c:661
 __sys_sendto+0x21a/0x320 net/socket.c:1899
 __do_sys_sendto net/socket.c:1911 [inline]
 __se_sys_sendto net/socket.c:1907 [inline]
 __x64_sys_sendto+0xdd/0x1b0 net/socket.c:1907
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f92a1106dac
Code: Bad RIP value.
RSP: 002b:00007f929fac8000 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f929fac80f0 RCX: 00007f92a1106dac
RDX: 0000000000000024 RSI: 00007f929fac8140 RDI: 0000000000000013
RBP: 0000000000000000 R08: 00007f929fac8054 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 00007f929fac80a8
R13: 00007f929fac8140 R14: 0000000000000013 R15: 0000000000000000

Showing all locks held in the system:
1 lock held by khungtaskd/1571:
 #0: 0000000029da1ac3 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4441
1 lock held by in:imklog/7803:
 #0: 000000006d08f7fa (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 fs/file.c:767
2 locks held by kworker/u4:6/8869:
3 locks held by kworker/1:0/23104:
 #0: 000000004f8a17d8 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124
 #1: 00000000854dcc4f ((addr_chk_work).work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128
 #2: 00000000f9583f73 (rtnl_mutex){+.+.}, at: addrconf_verify_work+0xa/0x20 net/ipv6/addrconf.c:4476
1 lock held by syz-executor.1/17866:
 #0: 00000000f9583f73 (rtnl_mutex){+.+.}, at: rtnl_lock net/core/rtnetlink.c:77 [inline]
 #0: 00000000f9583f73 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x3fe/0xb80 net/core/rtnetlink.c:4779
1 lock held by syz-executor.1/17879:
 #0: 00000000f9583f73 (rtnl_mutex){+.+.}, at: rtnl_lock net/core/rtnetlink.c:77 [inline]
 #0: 00000000f9583f73 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x3fe/0xb80 net/core/rtnetlink.c:4779
1 lock held by syz-executor.5/17865:
 #0: 00000000f9583f73 (rtnl_mutex){+.+.}, at: load_metaops_and_vet net/sched/act_ife.c:281 [inline]
 #0: 00000000f9583f73 (rtnl_mutex){+.+.}, at: populate_metalist net/sched/act_ife.c:456 [inline]
 #0: 00000000f9583f73 (rtnl_mutex){+.+.}, at: tcf_ife_init+0x105b/0x1730 net/sched/act_ife.c:580
1 lock held by syz-executor.5/17877:
1 lock held by syz-executor.2/17878:
 #0: 00000000f9583f73 (rtnl_mutex){+.+.}, at: rtnl_lock net/core/rtnetlink.c:77 [inline]
 #0: 00000000f9583f73 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x3fe/0xb80 net/core/rtnetlink.c:4779
3 locks held by syz-executor.4/17882:
 #0: 00000000c0486259 (cb_lock){++++}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:637
 #1: 00000000a3d4e051 (genl_mutex){+.+.}, at: genl_lock net/netlink/genetlink.c:33 [inline]
 #1: 00000000a3d4e051 (genl_mutex){+.+.}, at: genl_rcv_msg+0x12f/0x160 net/netlink/genetlink.c:625
 #2: 00000000f9583f73 (rtnl_mutex){+.+.}, at: tipc_nl_media_set+0x13/0x30 net/tipc/bearer.c:1238
2 locks held by syz-executor.0/17896:
 #0: 00000000c0486259 (cb_lock){++++}, at: genl_rcv+0x15/0x40 net/netlink/genetlink.c:637
 #1: 00000000a3d4e051 (genl_mutex){+.+.}, at: genl_lock net/netlink/genetlink.c:33 [inline]
 #1: 00000000a3d4e051 (genl_mutex){+.+.}, at: genl_rcv_msg+0x12f/0x160 net/netlink/genetlink.c:625

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 1571 Comm: khungtaskd Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1a6/0x1f0 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline]
 watchdog+0x991/0xe60 kernel/hung_task.c:287
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 4695 Comm: systemd-journal Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:bytes_is_nonzero mm/kasan/kasan.c:167 [inline]
RIP: 0010:memory_is_nonzero mm/kasan/kasan.c:184 [inline]
RIP: 0010:memory_is_poisoned_n mm/kasan/kasan.c:210 [inline]
RIP: 0010:memory_is_poisoned mm/kasan/kasan.c:241 [inline]
RIP: 0010:check_memory_region_inline mm/kasan/kasan.c:257 [inline]
RIP: 0010:check_memory_region+0xc8/0x170 mm/kasan/kasan.c:267
Code: 39 d0 74 0e 80 38 00 74 f2 48 85 c0 0f 85 9c 00 00 00 5b 5d 41 5c c3 48 85 d2 74 f6 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 e8 <80> 38 00 74 f2 eb d8 41 bc 08 00 00 00 48 89 ea 45 29 dc 4e 8d 5c
RSP: 0018:ffff8880a08b7838 EFLAGS: 00000082
RAX: ffffed1014116f19 RBX: ffffed1014116f1a RCX: ffffffff814a8578
RDX: ffffed1014116f1a RSI: 0000000000000004 RDI: ffff8880a08b78c8
RBP: ffffed1014116f19 R08: 0000000000000001 R09: ffffed1014116f19
R10: ffff8880a08b78cb R11: 0000000059dfbda2 R12: 0000000000000004
R13: ffff8880a08b78b8 R14: 0000000000000000 R15: 0000000000000001
FS:  00007f487517b8c0(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4872292028 CR3: 00000000a13a9000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 memcpy+0x35/0x50 mm/kasan/kasan.c:303
 memcpy include/linux/string.h:377 [inline]
 __bpf_trace_lock_acquire+0x108/0x200 include/trace/events/lock.h:13
 trace_lock_acquire include/trace/events/lock.h:13 [inline]
 lock_acquire+0x298/0x3c0 kernel/locking/lockdep.c:3907
 __fs_reclaim_acquire mm/page_alloc.c:3759 [inline]
 fs_reclaim_acquire+0x105/0x130 mm/page_alloc.c:3770
 slab_pre_alloc_hook mm/slab.h:419 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc_trace+0x28/0x380 mm/slab.c:3623
 kmalloc include/linux/slab.h:515 [inline]
 kzalloc include/linux/slab.h:709 [inline]
 aa_alloc_file_ctx security/apparmor/include/file.h:60 [inline]
 apparmor_file_alloc_security+0x394/0xad0 security/apparmor/lsm.c:438
 security_file_alloc+0x40/0x90 security/security.c:880
 __alloc_file+0xd8/0x340 fs/file_table.c:105
 alloc_empty_file+0x6d/0x170 fs/file_table.c:150
 path_openat+0xe9/0x2df0 fs/namei.c:3526
 do_filp_open+0x18c/0x3f0 fs/namei.c:3567
 do_sys_open+0x3b3/0x520 fs/open.c:1085
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f487470a85d
Code: bb 20 00 00 75 10 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 67 f6 ff ff 48 89 d0 48 83 c4 08 48 3d 01
RSP: 002b:00007ffe3d3862d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 00007ffe3d3865e0 RCX: 00007f487470a85d
RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 0000561c3ebf36d0
RBP: 000000000000000d R08: 000000000000c0c1 R09: 00000000ffffffff
R10: 0000000000000069 R11: 0000000000000293 R12: 00000000ffffffff
R13: 0000561c3ebe7040 R14: 00007ffe3d3865a0 R15: 0000561c3ebf5110
----------------
Code disassembly (best guess):
   0:	39 d0                	cmp    %edx,%eax
   2:	74 0e                	je     0x12
   4:	80 38 00             	cmpb   $0x0,(%rax)
   7:	74 f2                	je     0xfffffffb
   9:	48 85 c0             	test   %rax,%rax
   c:	0f 85 9c 00 00 00    	jne    0xae
  12:	5b                   	pop    %rbx
  13:	5d                   	pop    %rbp
  14:	41 5c                	pop    %r12
  16:	c3                   	retq
  17:	48 85 d2             	test   %rdx,%rdx
  1a:	74 f6                	je     0x12
  1c:	48 01 ea             	add    %rbp,%rdx
  1f:	eb 09                	jmp    0x2a
  21:	48 83 c0 01          	add    $0x1,%rax
  25:	48 39 d0             	cmp    %rdx,%rax
  28:	74 e8                	je     0x12
* 2a:	80 38 00             	cmpb   $0x0,(%rax) <-- trapping instruction
  2d:	74 f2                	je     0x21
  2f:	eb d8                	jmp    0x9
  31:	41 bc 08 00 00 00    	mov    $0x8,%r12d
  37:	48 89 ea             	mov    %rbp,%rdx
  3a:	45 29 dc             	sub    %r11d,%r12d
  3d:	4e                   	rex.WRX
  3e:	8d                   	.byte 0x8d
  3f:	5c                   	pop    %rsp

Crashes (14):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets Title
ci2-linux-4-19 2022/01/18 11:29 linux-4.19.y 3f8a27f9e27b 731a2d23 .config console log report info INFO: task hung in rtnetlink_rcv_msg
ci2-linux-4-19 2022/01/15 20:45 linux-4.19.y 3f8a27f9e27b 723cfaf0 .config console log report info INFO: task hung in rtnetlink_rcv_msg
ci2-linux-4-19 2022/01/12 08:40 linux-4.19.y 3f8a27f9e27b 44d1319a .config console log report info INFO: task hung in rtnetlink_rcv_msg
ci2-linux-4-19 2021/12/02 21:31 linux-4.19.y 3f8a27f9e27b 61f86278 .config console log report info INFO: task hung in rtnetlink_rcv_msg
ci2-linux-4-19 2021/11/21 02:00 linux-4.19.y 3f8a27f9e27b 4eb20a4e .config console log report info INFO: task hung in rtnetlink_rcv_msg
ci2-linux-4-19 2021/11/04 04:07 linux-4.19.y 3f8a27f9e27b 4c1be0be .config console log report info INFO: task hung in rtnetlink_rcv_msg
ci2-linux-4-19 2021/10/10 16:50 linux-4.19.y e34184f53363 838e7e2c .config console log report info INFO: task hung in rtnetlink_rcv_msg
ci2-linux-4-19 2021/09/29 08:08 linux-4.19.y c2276d585654 d82cb927 .config console log report info INFO: task hung in rtnetlink_rcv_msg
ci2-linux-4-19 2021/09/06 22:16 linux-4.19.y b172b44fcb17 6ca60148 .config console log report info INFO: task hung in rtnetlink_rcv_msg
ci2-linux-4-19 2021/09/05 18:18 linux-4.19.y b172b44fcb17 d236a457 .config console log report info INFO: task hung in rtnetlink_rcv_msg
ci2-linux-4-19 2021/09/01 04:56 linux-4.19.y e23d55af0e1f 7eb7e152 .config console log report info INFO: task hung in rtnetlink_rcv_msg
ci2-linux-4-19 2021/08/16 20:43 linux-4.19.y 59456c9cc40c 6652437d .config console log report info INFO: task hung in rtnetlink_rcv_msg
ci2-linux-4-19 2021/08/14 06:38 linux-4.19.y addba38e7c3b 2489ab88 .config console log report info INFO: task hung in rtnetlink_rcv_msg
ci2-linux-4-19 2021/07/23 04:37 linux-4.19.y 4938296e03bd bc5f1d88 .config console log report info INFO: task hung in rtnetlink_rcv_msg
* Struck through repros no longer work on HEAD.