syzbot


INFO: task hung in packet_set_ring

Status: closed as invalid on 2019/10/23 07:23
Subsystems: net
[Documentation on labels]
Reported-by: syzbot+25642136312e529d48c9@syzkaller.appspotmail.com
First crash: 2056d, last: 1650d

Sample crash report:
INFO: task syz-executor.2:5021 blocked for more than 143 seconds.
      Not tainted 5.4.0-rc3+ #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.2  D29520  5021   7673 0x00004004
Call Trace:
 context_switch kernel/sched/core.c:3384 [inline]
 __schedule+0x74b/0xb80 kernel/sched/core.c:4069
 schedule+0x131/0x1e0 kernel/sched/core.c:4136
 exp_funnel_lock kernel/rcu/tree_exp.h:308 [inline]
 synchronize_rcu_expedited+0x535/0x5a0 kernel/rcu/tree_exp.h:817
 synchronize_rcu+0xa1/0x100 kernel/rcu/tree.c:2735
 synchronize_net+0x47/0x50 net/core/dev.c:9321
 packet_set_ring+0x12d2/0x2760 net/packet/af_packet.c:4377
 packet_setsockopt+0x8b2/0x35a0 net/packet/af_packet.c:3689
 __sys_setsockopt+0x582/0x720 net/socket.c:2084
 __do_sys_setsockopt net/socket.c:2100 [inline]
 __se_sys_setsockopt net/socket.c:2097 [inline]
 __x64_sys_setsockopt+0xbf/0xd0 net/socket.c:2097
 do_syscall_64+0xf7/0x1c0 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x459a59
Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <90> 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
RSP: 002b:00007f2a66b61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459a59
RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000004
RBP: 000000000075bf20 R08: 00000000000000c5 R09: 0000000000000000
R10: 0000000020001000 R11: 0000000000000246 R12: 00007f2a66b626d4
R13: 00000000004c7da3 R14: 00000000004dde50 R15: 00000000ffffffff

Showing all locks held in the system:
1 lock held by khungtaskd/1061:
 #0: ffffffff888d3f80 (rcu_read_lock){....}, at: rcu_lock_acquire+0x4/0x30 include/linux/rcupdate.h:207
1 lock held by rsyslogd/7538:
 #0: ffff88809573f160 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x243/0x2e0 fs/file.c:801
2 locks held by getty/7628:
 #0: ffff8880a4cd1090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:272
 #1: ffffc90005f312e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 drivers/tty/n_tty.c:2156
2 locks held by getty/7629:
 #0: ffff8880a18d8090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:272
 #1: ffffc90005f212e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 drivers/tty/n_tty.c:2156
2 locks held by getty/7630:
 #0: ffff888098144090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:272
 #1: ffffc90005f352e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 drivers/tty/n_tty.c:2156
2 locks held by getty/7631:
 #0: ffff888099902090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:272
 #1: ffffc90005f152e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 drivers/tty/n_tty.c:2156
2 locks held by getty/7632:
 #0: ffff8880a991c090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:272
 #1: ffffc90005f392e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 drivers/tty/n_tty.c:2156
2 locks held by getty/7633:
 #0: ffff8880a9620090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:272
 #1: ffffc90005f2d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 drivers/tty/n_tty.c:2156
2 locks held by getty/7634:
 #0: ffff8880a12f1090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:272
 #1: ffffc90005f012e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 drivers/tty/n_tty.c:2156
1 lock held by syz-executor.2/5021:
 #0: ffff888037862110 (sk_lock-AF_PACKET){+.+.}, at: lock_sock include/net/sock.h:1522 [inline]
 #0: ffff888037862110 (sk_lock-AF_PACKET){+.+.}, at: packet_setsockopt+0x61d/0x35a0 net/packet/af_packet.c:3672

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 1061 Comm: khungtaskd Not tainted 5.4.0-rc3+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1d8/0x2f8 lib/dump_stack.c:113
 nmi_cpu_backtrace+0xaf/0x1a0 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x174/0x290 lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x10/0x20 arch/x86/kernel/apic/hw_nmi.c:38
 trigger_all_cpu_backtrace+0x17/0x20 include/linux/nmi.h:146
 check_hung_uninterruptible_tasks kernel/hung_task.c:205 [inline]
 watchdog+0xbb9/0xbd0 kernel/hung_task.c:289
 kthread+0x332/0x350 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 30285 Comm: kworker/u4:1 Not tainted 5.4.0-rc3+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_nc_worker
RIP: 0010:__kasan_check_read+0x0/0x20 mm/kasan/common.c:91
Code: 99 ff 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 fd 01 00 ff 80 e0 12 00 00 c3 65 48 8b 04 25 c0 fd 01 00 ff 88 e0 12 00 00 c3 <55> 48 89 e5 89 f6 48 8b 4d 08 31 d2 e8 5f 23 00 00 5d c3 0f 1f 00
RSP: 0018:ffff888012337a68 EFLAGS: 00000047
RAX: 0000000000000000 RBX: 0000000000000029 RCX: ffffffff8158785b
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff895de4e0
RBP: ffff888012337bc8 R08: dffffc0000000000 R09: fffffbfff12bbcb3
R10: fffffbfff12bbcb3 R11: 0000000000000000 R12: cec6f943accffe86
R13: ffff88801d354e50 R14: ffffffff89208fd0 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: ffffffffff600400 CR3: 00000000a1fb9000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 lock_acquire+0x158/0x250 kernel/locking/lockdep.c:4487
 rcu_lock_acquire+0x2e/0x40 include/linux/rcupdate.h:208
 rcu_read_lock include/linux/rcupdate.h:599 [inline]
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:407 [inline]
 batadv_nc_worker+0xdc/0x600 net/batman-adv/network-coding.c:718
 process_one_work+0x7ef/0x10e0 kernel/workqueue.c:2269
 worker_thread+0xc01/0x1630 kernel/workqueue.c:2415
 kthread+0x332/0x350 kernel/kthread.c:255
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352

Crashes (53):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/10/18 19:14 upstream 0e2adab6cf28 8c88c9c1 .config console log report ci-upstream-kasan-gce-smack-root
2019/09/23 05:50 upstream 619e17cf75dd d96e88f3 .config console log report ci-upstream-kasan-gce
2019/08/24 10:21 upstream 9140d8bdd4c5 78ded196 .config console log report ci-upstream-kasan-gce-smack-root
2019/06/04 21:38 upstream 788a024921c4 e41a20c5 .config console log report ci-upstream-kasan-gce-root
2019/02/11 19:07 upstream d13937116f1e 73f5f452 .config console log report ci-upstream-kasan-gce
2018/12/27 00:32 upstream eed9688f8513 e747ec98 .config console log report ci-upstream-kasan-gce-selinux-root
2018/11/25 09:19 upstream e195ca6cb6f2 3d3ec907 .config console log report ci-upstream-kasan-gce-smack-root
2018/11/01 10:14 upstream 5b7449810ae6 1f38e9ae .config console log report ci-upstream-kasan-gce-smack-root
2018/09/30 22:17 upstream 17b57b1883c1 41e4b329 .config console log report ci-upstream-kasan-gce-root
2018/09/30 05:42 upstream 291d0e5d81e1 41e4b329 .config console log report ci-upstream-kasan-gce-root
2019/10/20 05:15 upstream 531e93d11470 8c88c9c1 .config console log report ci-upstream-kasan-gce-386
2019/04/02 05:18 net-old b506bc975f60 a9ca43d4 .config console log report ci-upstream-net-this-kasan-gce
2019/02/18 22:34 net-old 21d2cb491b9e 59f36113 .config console log report ci-upstream-net-this-kasan-gce
2018/12/21 02:48 net-old 1d51b4b1d3f2 2b497001 .config console log report ci-upstream-net-this-kasan-gce
2018/12/17 05:56 net-old 369a094d500f def91db3 .config console log report ci-upstream-net-this-kasan-gce
2018/12/11 15:40 net-old 290974d43478 7795ae03 .config console log report ci-upstream-net-this-kasan-gce
2018/12/09 05:44 net-old 5b3279e2cba2 c7918378 .config console log report ci-upstream-net-this-kasan-gce
2018/12/07 10:20 net-old cd9d1a2332b0 dcf836b1 .config console log report ci-upstream-net-this-kasan-gce
2018/11/28 08:56 net-old 4df5ce9bc03e 4b6d14f2 .config console log report ci-upstream-net-this-kasan-gce
2018/11/18 07:32 net-old 160396a722e0 adf636a8 .config console log report ci-upstream-net-this-kasan-gce
2018/11/07 21:44 net-old 042cb5647815 e85d2a61 .config console log report ci-upstream-net-this-kasan-gce
2018/11/07 07:11 net-old 8053e5b93eca 8bd6bd63 .config console log report ci-upstream-net-this-kasan-gce
2018/11/03 22:01 net-old b8a5d06ae234 8bd6bd63 .config console log report ci-upstream-net-this-kasan-gce
2018/10/23 14:31 net-old 23469de647c4 24fa2ad8 .config console log report ci-upstream-net-this-kasan-gce
2018/10/19 02:42 net-old 6b839b6cf9ea 9aba67b5 .config console log report ci-upstream-net-this-kasan-gce
2018/10/11 05:34 net-old 52b5d6f5dcf0 5f818b4b .config console log report ci-upstream-net-this-kasan-gce
2019/07/28 11:33 net-next-old 31cc088a4f5d c85e1c5b .config console log report ci-upstream-net-kasan-gce
2019/07/20 22:02 net-next-old 31cc088a4f5d 1656845f .config console log report ci-upstream-net-kasan-gce
2019/06/27 20:25 net-next-old 8b89d8dad5df 7509bf36 .config console log report ci-upstream-net-kasan-gce
2019/04/25 06:11 net-next-old c049d56eb219 8e3c52b1 .config console log report ci-upstream-net-kasan-gce
2019/03/14 08:51 net-next-old d9862cfbe209 d09a902e .config console log report ci-upstream-net-kasan-gce
2018/12/19 02:45 net-next-old a26d94bff4d5 4edaba93 .config console log report ci-upstream-net-kasan-gce
2018/12/18 22:11 net-next-old b12c97d45cd0 4edaba93 .config console log report ci-upstream-net-kasan-gce
2018/12/18 16:41 net-next-old b12c97d45cd0 4edaba93 .config console log report ci-upstream-net-kasan-gce
2018/12/09 19:26 net-next-old a60956ed72f7 979179d6 .config console log report ci-upstream-net-kasan-gce
2018/11/24 04:56 net-next-old 2882b06ddaa5 eb9ed731 .config console log report ci-upstream-net-kasan-gce
2018/11/24 00:49 net-next-old 2882b06ddaa5 eb9ed731 .config console log report ci-upstream-net-kasan-gce
2018/11/20 15:18 net-next-old cfc6731d2f79 9bc2a903 .config console log report ci-upstream-net-kasan-gce
2018/11/17 09:28 net-next-old e119a369b0f1 b08ee62a .config console log report ci-upstream-net-kasan-gce
2018/11/14 05:07 net-next-old 3e536cff3424 5f5f6d14 .config console log report ci-upstream-net-kasan-gce
2018/11/08 17:50 net-next-old cea0604d3f94 e85d2a61 .config console log report ci-upstream-net-kasan-gce
2018/11/07 16:54 net-next-old 7c588c7468ea e85d2a61 .config console log report ci-upstream-net-kasan-gce
2018/11/04 09:07 net-next-old 7c6c54b505b8 8bd6bd63 .config console log report ci-upstream-net-kasan-gce
2018/11/02 22:37 net-next-old 7c6c54b505b8 8bd6bd63 .config console log report ci-upstream-net-kasan-gce
2018/10/29 22:06 net-next-old 9f51ae62c84a 7df9db2e .config console log report ci-upstream-net-kasan-gce
2018/10/24 22:37 net-next-old 3f80e08f40cd a8292de9 .config console log report ci-upstream-net-kasan-gce
2018/10/24 12:49 net-next-old 68203a67a702 a8292de9 .config console log report ci-upstream-net-kasan-gce
2018/10/20 00:04 net-next-old 9333f2079203 ecb386fe .config console log report ci-upstream-net-kasan-gce
2018/10/16 05:22 net-next-old df52eab23d70 8cd30605 .config console log report ci-upstream-net-kasan-gce
2018/09/22 03:17 net-next-old 957b085c793c 37079712 .config console log report ci-upstream-net-kasan-gce
2018/09/08 16:16 net-next-old 7a8c7f5c30f9 6b5120a4 .config console log report ci-upstream-net-kasan-gce
2018/09/08 16:15 net-next-old 7a8c7f5c30f9 6b5120a4 .config console log report ci-upstream-net-kasan-gce
2019/03/10 09:22 linux-next cf08baa29613 12365b99 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.