Message-ID: <679165f1.050a0220.194594.001d.GAE@google.com>
Date: Wed, 22 Jan 2025 13:41:05 -0800
From: syzbot <syzbot+2e5de9e3ab986b71d2bf@...kaller.appspotmail.com>
To: kuba@...nel.org, linux-kernel@...r.kernel.org, 
	syzkaller-bugs@...glegroups.com
Subject: Re: [syzbot] [net?] WARNING in nsim_udp_tunnel_set_port

Hello,

syzbot has tested the proposed patch but the reproducer is still triggering an issue:
INFO: task hung in reg_process_self_managed_hints

INFO: task kworker/0:0:8 blocked for more than 143 seconds.
      Not tainted 6.13.0-syzkaller-g7004a2e46d16-dirty #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:0     state:D stack:23184 pid:8     tgid:8     ppid:2      flags:0x00004000
Workqueue: events reg_todo
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5373 [inline]
 __schedule+0x1142/0x5b60 kernel/sched/core.c:6760
 __schedule_loop kernel/sched/core.c:6837 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6852
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6909
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x6bd/0xb10 kernel/locking/mutex.c:730
 class_wiphy_constructor include/net/cfg80211.h:6061 [inline]
 reg_process_self_managed_hints+0x95/0x1f0 net/wireless/reg.c:3206
 reg_todo+0x684/0x910 net/wireless/reg.c:3219
 process_one_work+0x958/0x1b30 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/u8:1:12 blocked for more than 143 seconds.
      Not tainted 6.13.0-syzkaller-g7004a2e46d16-dirty #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:1    state:D stack:22400 pid:12    tgid:12    ppid:2      flags:0x00004000
Workqueue: netns cleanup_net
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5373 [inline]
 __schedule+0x1142/0x5b60 kernel/sched/core.c:6760
 __schedule_loop kernel/sched/core.c:6837 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6852
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6909
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x6bd/0xb10 kernel/locking/mutex.c:730
 rtnl_acquire_if_cleanup_net net/core/dev.c:10272 [inline]
 unregister_netdevice_many_notify+0x1a51/0x21a0 net/core/dev.c:11792
 unregister_netdevice_many net/core/dev.c:11875 [inline]
 unregister_netdevice_queue+0x307/0x3f0 net/core/dev.c:11741
 unregister_netdevice include/linux/netdevice.h:3329 [inline]
 _cfg80211_unregister_wdev+0x64b/0x830 net/wireless/core.c:1251
 ieee80211_remove_interfaces+0x34f/0x720 net/mac80211/iface.c:2305
 ieee80211_unregister_hw+0x55/0x3a0 net/mac80211/main.c:1681
 mac80211_hwsim_del_radio+0x268/0x370 drivers/net/wireless/virtual/mac80211_hwsim.c:5664
 hwsim_exit_net+0x33f/0x6d0 drivers/net/wireless/virtual/mac80211_hwsim.c:6544
 ops_exit_list+0xb0/0x180 net/core/net_namespace.c:172
 cleanup_net+0x5c6/0xbf0 net/core/net_namespace.c:652
 process_one_work+0x958/0x1b30 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/u8:3:52 blocked for more than 144 seconds.
      Not tainted 6.13.0-syzkaller-g7004a2e46d16-dirty #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:3    state:D stack:24448 pid:52    tgid:52    ppid:2      flags:0x00004000
Workqueue: events_unbound linkwatch_event
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5373 [inline]
 __schedule+0x1142/0x5b60 kernel/sched/core.c:6760
 __schedule_loop kernel/sched/core.c:6837 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6852
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6909
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x6bd/0xb10 kernel/locking/mutex.c:730
 linkwatch_event+0x51/0xc0 net/core/link_watch.c:285
 process_one_work+0x958/0x1b30 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task kworker/u8:7:4539 blocked for more than 144 seconds.
      Not tainted 6.13.0-syzkaller-g7004a2e46d16-dirty #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/u8:7    state:D stack:22480 pid:4539  tgid:4539  ppid:2      flags:0x00004000
Workqueue: ipv6_addrconf addrconf_dad_work
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5373 [inline]
 __schedule+0x1142/0x5b60 kernel/sched/core.c:6760
 __schedule_loop kernel/sched/core.c:6837 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6852
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6909
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x6bd/0xb10 kernel/locking/mutex.c:730
 rtnl_net_lock include/linux/rtnetlink.h:129 [inline]
 addrconf_dad_work+0x121/0x14e0 net/ipv6/addrconf.c:4190
 process_one_work+0x958/0x1b30 kernel/workqueue.c:3236
 process_scheduled_works kernel/workqueue.c:3317 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
INFO: task syz-executor:6486 blocked for more than 144 seconds.
      Not tainted 6.13.0-syzkaller-g7004a2e46d16-dirty #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:24416 pid:6486  tgid:6486  ppid:6483   flags:0x00000000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5373 [inline]
 __schedule+0x1142/0x5b60 kernel/sched/core.c:6760
 __schedule_loop kernel/sched/core.c:6837 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6852
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6909
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x6bd/0xb10 kernel/locking/mutex.c:730
 rtnl_lock net/core/rtnetlink.c:79 [inline]
 rtnl_nets_lock net/core/rtnetlink.c:335 [inline]
 rtnl_newlink+0x5e4/0x1d70 net/core/rtnetlink.c:4020
 rtnetlink_rcv_msg+0x95b/0xea0 net/core/rtnetlink.c:6911
 netlink_rcv_skb+0x165/0x410 net/netlink/af_netlink.c:2543
 netlink_unicast_kernel net/netlink/af_netlink.c:1322 [inline]
 netlink_unicast+0x53c/0x7f0 net/netlink/af_netlink.c:1348
 netlink_sendmsg+0x8b8/0xd70 net/netlink/af_netlink.c:1892
 sock_sendmsg_nosec net/socket.c:713 [inline]
 __sock_sendmsg net/socket.c:728 [inline]
 __sys_sendto+0x488/0x4f0 net/socket.c:2182
 __do_sys_sendto net/socket.c:2189 [inline]
 __se_sys_sendto net/socket.c:2185 [inline]
 __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2185
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f11c0787b63
RSP: 002b:00007fffb998ac68 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f11c14a4620 RCX: 00007f11c0787b63
RDX: 0000000000000068 RSI: 00007f11c14a4670 RDI: 0000000000000003
RBP: 0000000000000001 R08: 00007fffb998ac84 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f11c14a4670 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:6527 blocked for more than 144 seconds.
      Not tainted 6.13.0-syzkaller-g7004a2e46d16-dirty #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:26712 pid:6527  tgid:6527  ppid:6467   flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5373 [inline]
 __schedule+0x1142/0x5b60 kernel/sched/core.c:6760
 __schedule_loop kernel/sched/core.c:6837 [inline]
 schedule+0xe7/0x350 kernel/sched/core.c:6852
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6909
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x6bd/0xb10 kernel/locking/mutex.c:730
 register_nexthop_notifier+0x1b/0x70 net/ipv4/nexthop.c:3878
 ops_init+0x1df/0x5f0 net/core/net_namespace.c:138
 setup_net+0x21f/0x860 net/core/net_namespace.c:362
 copy_net_ns+0x2b4/0x6c0 net/core/net_namespace.c:516
 create_new_namespaces+0x3ea/0xad0 kernel/nsproxy.c:110
 unshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c:228
 ksys_unshare+0x45d/0xa40 kernel/fork.c:3330
 __do_sys_unshare kernel/fork.c:3401 [inline]
 __se_sys_unshare kernel/fork.c:3399 [inline]
 __x64_sys_unshare+0x31/0x40 kernel/fork.c:3399
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fcd83987527
RSP: 002b:00007ffd7d056878 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd83987527
RDX: 00007fcd83985d29 RSI: 00007ffd7d056840 RDI: 0000000040000000
RBP: 0000000000000000 R08: 00007fcd83b3a9d0 R09: 00007fcd83b3a9d0
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd7d0568e0
R13: 00007ffd7d0568e8 R14: 0000000000000009 R15: 0000000000000000
 </TASK>
INFO: lockdep is turned off.
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-g7004a2e46d16-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 nmi_cpu_backtrace+0x27b/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x29c/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:234 [inline]
 watchdog+0xf14/0x1240 kernel/hung_task.c:397
 kthread+0x3af/0x750 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 6467 Comm: syz-executor Not tainted 6.13.0-syzkaller-g7004a2e46d16-dirty #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
RIP: 0010:entry_SYSCALL_64_after_hwframe+0x58/0x7f
Code: ed 45 31 e4 45 31 ed 45 31 f6 45 31 ff 48 89 e7 48 63 f0 66 90 b9 48 00 00 00 65 48 8b 15 57 7a c2 74 89 d0 48 c1 ea 20 0f 30 <90> 0f 1f 44 00 00 eb 0d cc cc cc cc cc cc cc cc cc cc cc cc cc e8
RSP: 0018:ffffc90003637f58 EFLAGS: 00000046
RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000048
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003637f58
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
FS:  000055555b584500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055d971876600 CR3: 0000000060c72000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:


Tested on:

commit:         7004a2e4 Merge tag 'linux_kselftest-nolibc-6.14-rc1' o..
git tree:       upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=1711cab0580000
kernel config:  https://syzkaller.appspot.com/x/.config?x=5d506ed4ac7a7a13
dashboard link: https://syzkaller.appspot.com/bug?extid=2e5de9e3ab986b71d2bf
compiler:       gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40
patch:          https://syzkaller.appspot.com/x/patch.diff?x=141dc9f8580000

Powered by blists - more mailing lists