INFO: task hung in register_netdevice

[upstream] INFO: task hung in register_netdevice_notifier (2)
Status: moderation: reported on 2018/08/09 02:59
Reported-by: syzbot+5447806d1e55938f5019@syzkaller.appspotmail.com
First: 78d, last: 1d04h

similar bugs:
Kernel	Title	Repro	Count	Last	Reported	Patched	Status
upstream	INFO: task hung in register_netdevice_notifier		602	191d	204d		closed as invalid on 2018/05/03 10:15

Sample crash report:

INFO: task syz-executor0:17216 blocked for more than 140 seconds.
      Not tainted 4.19.0-rc8+ #284
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor0   D25272 17216  10804 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2825 [inline]
 __schedule+0x86c/0x1ed0 kernel/sched/core.c:3473
 schedule+0xfe/0x460 kernel/sched/core.c:3517
 __rwsem_down_write_failed_common+0xbb9/0x1670 kernel/locking/rwsem-xadd.c:566
 rwsem_down_write_failed+0xe/0x10 kernel/locking/rwsem-xadd.c:595
 call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:117
 __down_write arch/x86/include/asm/rwsem.h:142 [inline]
 down_write+0xa5/0x130 kernel/locking/rwsem.c:72
 register_netdevice_notifier+0xbc/0x910 net/core/dev.c:1628
 raw_init+0x2a3/0x330 net/can/raw.c:343
 can_create+0x28a/0x4b0 net/can/af_can.c:183
 __sock_create+0x536/0x930 net/socket.c:1277
 sock_create net/socket.c:1317 [inline]
 __sys_socket+0x106/0x260 net/socket.c:1347
 __do_sys_socket net/socket.c:1356 [inline]
 __se_sys_socket net/socket.c:1354 [inline]
 __x64_sys_socket+0x73/0xb0 net/socket.c:1354
 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457569
Code: Bad RIP value.
RSP: 002b:00007fd3bdc47c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569
RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d
RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd3bdc486d4
R13: 00000000004c442c R14: 00000000004d74a0 R15: 00000000ffffffff
INFO: task syz-executor0:17225 blocked for more than 140 seconds.
      Not tainted 4.19.0-rc8+ #284
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor0   D25272 17225  10804 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2825 [inline]
 __schedule+0x86c/0x1ed0 kernel/sched/core.c:3473
 schedule+0xfe/0x460 kernel/sched/core.c:3517
 __rwsem_down_write_failed_common+0xbb9/0x1670 kernel/locking/rwsem-xadd.c:566
 rwsem_down_write_failed+0xe/0x10 kernel/locking/rwsem-xadd.c:595
 call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:117
 __down_write arch/x86/include/asm/rwsem.h:142 [inline]
 down_write+0xa5/0x130 kernel/locking/rwsem.c:72
 register_netdevice_notifier+0xbc/0x910 net/core/dev.c:1628
 raw_init+0x2a3/0x330 net/can/raw.c:343
 can_create+0x28a/0x4b0 net/can/af_can.c:183
 __sock_create+0x536/0x930 net/socket.c:1277
 sock_create net/socket.c:1317 [inline]
 __sys_socket+0x106/0x260 net/socket.c:1347
 __do_sys_socket net/socket.c:1356 [inline]
 __se_sys_socket net/socket.c:1354 [inline]
 __x64_sys_socket+0x73/0xb0 net/socket.c:1354
 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457569
Code: Bad RIP value.
RSP: 002b:00007fd3bdc26c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569
RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d
RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd3bdc276d4
R13: 00000000004c442c R14: 00000000004d74a0 R15: 00000000ffffffff

Showing all locks held in the system:
1 lock held by khungtaskd/983:
 #0: 000000009c1fbf4b (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 kernel/locking/lockdep.c:4435
2 locks held by rsyslogd/5232:
 #0: 0000000086c2c8aa (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 fs/file.c:766
 #1: 000000009a98ace0 (&rq->lock){-.-.}, at: syslog_print kernel/printk/printk.c:1305 [inline]
 #1: 000000009a98ace0 (&rq->lock){-.-.}, at: do_syslog+0xc45/0x1690 kernel/printk/printk.c:1465
2 locks held by getty/5322:
 #0: 00000000c9abb361 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
 #1: 00000000beb5ff10 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5323:
 #0: 00000000c8ea317c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
 #1: 0000000037e88dc8 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5324:
 #0: 0000000058d1eed2 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
 #1: 00000000fb123521 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5325:
 #0: 000000009c96a27c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
 #1: 00000000f4e1689f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5326:
 #0: 00000000838bfbe6 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
 #1: 0000000041736970 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5327:
 #0: 000000008446ed41 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
 #1: 00000000fc5e77ef (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
2 locks held by getty/5328:
 #0: 000000005c697e32 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:353
 #1: 00000000d7cf6adf (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 drivers/tty/n_tty.c:2140
4 locks held by kworker/u4:6/10583:
 #0: 0000000024550630 ((wq_completion)"%s""netns"){+.+.}, at: __write_once_size include/linux/compiler.h:215 [inline]
 #0: 0000000024550630 ((wq_completion)"%s""netns"){+.+.}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: 0000000024550630 ((wq_completion)"%s""netns"){+.+.}, at: atomic64_set include/asm-generic/atomic-instrumented.h:40 [inline]
 #0: 0000000024550630 ((wq_completion)"%s""netns"){+.+.}, at: atomic_long_set include/asm-generic/atomic-long.h:59 [inline]
 #0: 0000000024550630 ((wq_completion)"%s""netns"){+.+.}, at: set_work_data kernel/workqueue.c:617 [inline]
 #0: 0000000024550630 ((wq_completion)"%s""netns"){+.+.}, at: set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline]
 #0: 0000000024550630 ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0xb43/0x1b90 kernel/workqueue.c:2124
 #1: 000000002850f45c (net_cleanup_work){+.+.}, at: process_one_work+0xb9a/0x1b90 kernel/workqueue.c:2128
 #2: 00000000991848e2 (pernet_ops_rwsem){++++}, at: cleanup_net+0x13f/0xb10 net/core/net_namespace.c:518
 #3: 0000000015c3cb7d (rcu_preempt_state.barrier_mutex){+.+.}, at: _rcu_barrier+0x144/0x790 kernel/rcu/tree.c:3413
1 lock held by syz-executor0/17216:
 #0: 00000000991848e2 (pernet_ops_rwsem){++++}, at: register_netdevice_notifier+0xbc/0x910 net/core/dev.c:1628
1 lock held by syz-executor0/17225:
 #0: 00000000991848e2 (pernet_ops_rwsem){++++}, at: register_netdevice_notifier+0xbc/0x910 net/core/dev.c:1628

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 983 Comm: khungtaskd Not tainted 4.19.0-rc8+ #284
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1c4/0x2b4 lib/dump_stack.c:113
 nmi_cpu_backtrace.cold.3+0x63/0xa2 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1b3/0x1ed lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_all_cpu_backtrace include/linux/nmi.h:144 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:204 [inline]
 watchdog+0xb3e/0x1050 kernel/hung_task.c:265
 kthread+0x35a/0x420 kernel/kthread.c:246
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:413
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x6/0x10 arch/x86/include/asm/irqflags.h:57

All crashes (18):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Maintainers
ci-upstream-kasan-gce	2018/10/15 13:58	upstream	35a7f35a	caf12900	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-kasan-gce-smack-root	2018/10/15 01:51	upstream	3a272031	caf12900	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-kasan-gce-386	2018/10/08 20:01	upstream	0854ba5f	8b311eaf	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-net-this-kasan-gce	2018/10/17 12:06	net	0ac1077e	1ba7fd7e	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-net-this-kasan-gce	2018/09/28 18:33	net	d4ce5808	137d7c66	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-net-kasan-gce	2018/10/21 11:57	net-next	d92060bc	ecb386fe	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-net-kasan-gce	2018/10/20 14:53	net-next	4c16128b	ecb386fe	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-net-kasan-gce	2018/10/19 03:59	net-next	3a3295bf	9aba67b5	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-net-kasan-gce	2018/10/18 22:29	net-next	3a3295bf	9aba67b5	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-net-kasan-gce	2018/10/17 04:40	net-next	aadd4355	1ba7fd7e	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-net-kasan-gce	2018/10/13 22:22	net-next	d864991b	caf12900	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-net-kasan-gce	2018/10/12 09:51	net-next	96de2506	ba6ddb43	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-net-kasan-gce	2018/10/11 21:56	net-next	9dffa76c	ba6ddb43	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-linux-next-kasan-gce-root	2018/08/05 01:50	linux-next	116b181b	3476a2df	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-linux-next-kasan-gce-root	2018/10/19 23:24	linux-next	8c60c36d	ecb386fe	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-linux-next-kasan-gce-root	2018/10/17 23:20	linux-next	4efacb72	b2695b95	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-linux-next-kasan-gce-root	2018/10/16 04:29	linux-next	ca0591d0	8cd30605	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net
ci-upstream-linux-next-kasan-gce-root	2018/10/06 02:59	linux-next	12ffaa11	8b311eaf	.config	log	report	davem@davemloft.net, linux-can@vger.kernel.org, linux-kernel@vger.kernel.org, mkl@pengutronix.de, netdev@vger.kernel.org, socketcan@hartkopp.net