syzbot


INFO: task hung in nl80211_pre_doit (3)

Status: upstream: reported syz repro on 2024/11/14 08:18
Subsystems: wireless
[Documentation on labels]
Reported-by: syzbot+da14e8c0ada830335981@syzkaller.appspotmail.com
First crash: 236d, last: 27d
Discussions (1)
Title Replies (including bot) Last reply
[syzbot] [wireless?] INFO: task hung in nl80211_pre_doit (3) 1 (2) 2024/11/14 15:58
Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in rtnetlink_rcv_msg net C inconclusive inconclusive 1970 262d 2225d 26/28 fixed on 2024/07/09 19:14
upstream INFO: task hung in nl80211_pre_doit wireless 5 1511d 1589d 0/28 auto-closed as invalid on 2021/05/17 09:21
linux-4.19 INFO: task hung in nl80211_pre_doit 1 1170d 1170d 0/1 auto-closed as invalid on 2022/05/13 08:55
upstream INFO: task hung in nl80211_pre_doit (2) wireless 18 1256d 1296d 0/28 auto-closed as invalid on 2022/01/17 00:54
linux-5.15 INFO: task hung in nl80211_pre_doit 9 267d 307d 0/3 auto-obsoleted due to no activity on 2024/10/11 11:32
linux-5.15 INFO: task hung in nl80211_pre_doit (2) 2 136d 154d 0/3 auto-obsoleted due to no activity on 2025/02/19 14:46
linux-4.19 INFO: task hung in nl80211_pre_doit (2) 1 818d 818d 0/1 upstream: reported on 2022/12/31 06:52
linux-6.1 INFO: task hung in nl80211_pre_doit 7 280d 308d 0/3 auto-obsoleted due to no activity on 2024/09/28 20:22
Last patch testing requests (3)
Created Duration User Patch Repo Result
2025/03/15 04:32 21m retest repro upstream report log
2025/02/09 10:31 23m retest repro upstream report log
2024/11/24 08:17 16m retest repro upstream report log

Sample crash report:
INFO: task syz-executor:5417 blocked for more than 143 seconds.
      Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:19568 pid:5417  tgid:5417  ppid:1      task_flags:0x400140 flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5378 [inline]
 __schedule+0x190e/0x4c90 kernel/sched/core.c:6765
 __schedule_loop kernel/sched/core.c:6842 [inline]
 schedule+0x14b/0x320 kernel/sched/core.c:6857
 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6914
 __mutex_lock_common kernel/locking/mutex.c:662 [inline]
 __mutex_lock+0x817/0x1010 kernel/locking/mutex.c:730
 nl80211_pre_doit+0x5f/0x8b0 net/wireless/nl80211.c:16664
 genl_family_rcv_msg_doit net/netlink/genetlink.c:1110 [inline]
 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
 genl_rcv_msg+0xab5/0xec0 net/netlink/genetlink.c:1210
 netlink_rcv_skb+0x206/0x480 net/netlink/af_netlink.c:2543
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219
 netlink_unicast_kernel net/netlink/af_netlink.c:1322 [inline]
 netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1348
 netlink_sendmsg+0x8de/0xcb0 net/netlink/af_netlink.c:1892
 sock_sendmsg_nosec net/socket.c:718 [inline]
 __sock_sendmsg+0x221/0x270 net/socket.c:733
 __sys_sendto+0x363/0x4c0 net/socket.c:2187
 __do_sys_sendto net/socket.c:2194 [inline]
 __se_sys_sendto net/socket.c:2190 [inline]
 __x64_sys_sendto+0xde/0x100 net/socket.c:2190
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f22e738ec7c
RSP: 002b:00007ffeced20990 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f22e80d4620 RCX: 00007f22e738ec7c
RDX: 0000000000000024 RSI: 00007f22e80d4670 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffeced209e4 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
R13: 0000000000000000 R14: 00007f22e80d4670 R15: 0000000000000000
 </TASK>

Showing all locks held in the system:
2 locks held by kworker/0:0/8:
3 locks held by kworker/u4:0/11:
3 locks held by kworker/u4:1/12:
1 lock held by khungtaskd/25:
 #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]
 #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline]
 #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6746
3 locks held by kworker/u4:3/46:
4 locks held by kworker/u5:0/48:
 #0: ffff8880580af148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff8880580af148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 kernel/workqueue.c:3317
 #1: ffffc90000637c60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc90000637c60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 kernel/workqueue.c:3317
 #2: ffff888057538d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 net/bluetooth/hci_sync.c:331
 #3: ffff888057538078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9ee/0x1340 net/bluetooth/hci_sync.c:5569
4 locks held by kworker/u4:4/58:
2 locks held by kswapd1/81:
 #0: ffffffff8ec3a180 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat mm/vmscan.c:6886 [inline]
 #0: ffffffff8ec3a180 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xb9f/0x3b10 mm/vmscan.c:7264
 #1: ffffe8ffffc38170 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}, at: acomp_ctx_get_cpu_lock mm/zswap.c:905 [inline]
 #1: ffffe8ffffc38170 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}, at: zswap_compress mm/zswap.c:937 [inline]
 #1: ffffe8ffffc38170 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}, at: zswap_store_page mm/zswap.c:1462 [inline]
 #1: ffffe8ffffc38170 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}, at: zswap_store+0xa3b/0x1c30 mm/zswap.c:1569
3 locks held by kworker/u4:5/131:
3 locks held by kworker/u4:8/1041:
 #0: ffff88803f1fb148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88803f1fb148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 kernel/workqueue.c:3317
 #1: ffffc900026dfc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc900026dfc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 kernel/workqueue.c:3317
 #2: ffffffff8fed4d08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:129 [inline]
 #2: ffffffff8fed4d08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x10e/0x16a0 net/ipv6/addrconf.c:4190
3 locks held by kworker/u4:10/3014:
 #0: ffff88801b079148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff88801b079148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 kernel/workqueue.c:3317
 #1: ffffc9000dc9fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc9000dc9fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 kernel/workqueue.c:3317
 #2: ffffffff8fed4d08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:285
5 locks held by kworker/u5:1/4664:
 #0: ffff8880508fb948 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
 #0: ffff8880508fb948 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 kernel/workqueue.c:3317
 #1: ffffc9000dc77c60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
 #1: ffffc9000dc77c60 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 kernel/workqueue.c:3317
 #2: ffff888055af4078 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_request_evt+0x3f0/0xf00 net/bluetooth/hci_event.c:3257
 #3: ffffffff8ec3a180 (fs_reclaim){+.+.}-{0:0}, at: __perform_reclaim mm/page_alloc.c:3926 [inline]
 #3: ffffffff8ec3a180 (fs_reclaim){+.+.}-{0:0}, at: __alloc_pages_direct_reclaim+0xd4/0x3c0 mm/page_alloc.c:3951
 #4: ffffe8ffffc38170 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}, at: acomp_ctx_get_cpu_lock mm/zswap.c:905 [inline]
 #4: ffffe8ffffc38170 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}, at: zswap_compress mm/zswap.c:937 [inline]
 #4: ffffe8ffffc38170 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}, at: zswap_store_page mm/zswap.c:1462 [inline]
 #4: ffffe8ffffc38170 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}, at: zswap_store+0xa3b/0x1c30 mm/zswap.c:1569
1 lock held by jbd2/sda1-8/4687:
 #0: ffffe8ffffc38170 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}, at: acomp_ctx_get_cpu_lock mm/zswap.c:905 [inline]
 #0: ffffe8ffffc38170 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}, at: zswap_compress mm/zswap.c:937 [inline]
 #0: ffffe8ffffc38170 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}, at: zswap_store_page mm/zswap.c:1462 [inline]
 #0: ffffe8ffffc38170 (&per_cpu_ptr(pool->acomp_ctx, cpu)->mutex){+.+.}-{4:4}, at: zswap_store+0xa3b/0x1c30 mm/zswap.c:1569

Crashes (27):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/18 02:13 upstream 2408a807bfc3 429ea007 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root INFO: task hung in nl80211_pre_doit
2024/11/10 08:04 upstream de2f378f2b77 6b856513 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root INFO: task hung in nl80211_pre_doit
2025/01/26 10:14 upstream aa22f4da2a46 9fbd772e .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in nl80211_pre_doit
2025/01/24 00:24 upstream d0d106a2bd21 f6a35ef3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in nl80211_pre_doit
2024/12/04 21:49 upstream feffde684ac2 b50eb251 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in nl80211_pre_doit
2024/10/12 07:10 upstream 9e4c6c1ad9a1 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root INFO: task hung in nl80211_pre_doit
2024/10/10 13:50 upstream d3d1556696c1 8fbfc0c8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in nl80211_pre_doit
2024/10/05 13:38 upstream 27cc6fdf7201 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: task hung in nl80211_pre_doit
2024/09/30 15:01 upstream 9852d85ec9d4 bbd4e0a4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in nl80211_pre_doit
2024/09/28 13:52 upstream ad46e8f95e93 440b26ec .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: task hung in nl80211_pre_doit
2024/09/23 13:18 upstream de5cb0dcb74c 89298aad .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root INFO: task hung in nl80211_pre_doit
2024/08/05 16:38 upstream de9c2c66ad8e e35c337f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in nl80211_pre_doit
2024/08/03 15:47 upstream 17712b7ea075 1786a2a8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce INFO: task hung in nl80211_pre_doit
2024/10/12 14:38 upstream 9e4c6c1ad9a1 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in nl80211_pre_doit
2024/10/10 11:54 upstream b983b271662b 0278d004 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in nl80211_pre_doit
2024/10/05 22:42 upstream fc20a3e57247 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in nl80211_pre_doit
2024/09/26 13:24 upstream aa486552a110 0d19f247 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in nl80211_pre_doit
2024/08/03 22:07 upstream 17712b7ea075 1786a2a8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 INFO: task hung in nl80211_pre_doit
2024/10/09 09:15 net 08c8acc9d8f3 402f1df0 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in nl80211_pre_doit
2024/10/03 21:28 net a0ffa68c70b3 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce INFO: task hung in nl80211_pre_doit
2025/03/01 04:22 net-next 090119a35783 1e7a43e1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in nl80211_pre_doit
2024/10/20 20:53 net-next 6d858708d465 cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in nl80211_pre_doit
2024/10/10 11:07 net-next 09cf85ef183a 0278d004 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in nl80211_pre_doit
2024/10/05 20:02 net-next d521db38f339 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in nl80211_pre_doit
2024/10/02 16:24 net-next 44badc908f2c a4c7fd36 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in nl80211_pre_doit
2024/09/30 23:52 net-next c824deb1a897 bbd4e0a4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in nl80211_pre_doit
2024/08/09 09:29 net-next eb3ab13d997a 61405512 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in nl80211_pre_doit
* Struck through repros no longer work on HEAD.