mac80211_hwsim_new_radio+0x1d3f/0x3c60 drivers/net/wireless/mac80211_hwsim.c:2896
INFO: task kworker/0:0:5 blocked for more than 140 seconds.
Not tainted 4.19.152-syzkaller #0
hwsim_new_radio_nl+0x5c3/0x850 drivers/net/wireless/mac80211_hwsim.c:3374
genl_family_rcv_msg+0x642/0xc40 net/netlink/genetlink.c:602
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
genl_rcv_msg+0xbf/0x160 net/netlink/genetlink.c:627
netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2455
genl_rcv+0x24/0x40 net/netlink/genetlink.c:638
netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1344
kworker/0:0 D26872 5 2 0x80000000
netlink_sendmsg+0x6bb/0xc40 net/netlink/af_netlink.c:1909
sock_sendmsg_nosec net/socket.c:622 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:632
___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2115
Workqueue: usb_hub_wq hub_event
Call Trace:
__sys_sendmsg net/socket.c:2153 [inline]
__do_sys_sendmsg net/socket.c:2162 [inline]
__se_sys_sendmsg net/socket.c:2160 [inline]
__x64_sys_sendmsg+0x132/0x220 net/socket.c:2160
context_switch kernel/sched/core.c:2828 [inline]
__schedule+0x887/0x2040 kernel/sched/core.c:3517
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de59
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f14740dec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 000000000002e400 RCX: 000000000045de59
RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c
R13: 00007ffd1e5faf1f R14: 00007f14740df9c0 R15: 000000000118bf2c
sysfs: cannot create duplicate filename '/class/ieee80211/M!Ü)vÑS´'
CPU: 1 PID: 18887 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
sysfs_warn_dup.cold+0x1c/0x2d fs/sysfs/dir.c:30
sysfs_do_create_link_sd+0x116/0x130 fs/sysfs/symlink.c:50
sysfs_do_create_link fs/sysfs/symlink.c:79 [inline]
sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:91
device_add_class_symlinks drivers/base/core.c:1918 [inline]
device_add+0x7d1/0x16d0 drivers/base/core.c:2120
wiphy_register+0x1664/0x2130 net/wireless/core.c:832
ieee80211_register_hw+0x13a7/0x3410 net/mac80211/main.c:1092
mac80211_hwsim_new_radio+0x1d3f/0x3c60 drivers/net/wireless/mac80211_hwsim.c:2896
hwsim_new_radio_nl+0x5c3/0x850 drivers/net/wireless/mac80211_hwsim.c:3374
genl_family_rcv_msg+0x642/0xc40 net/netlink/genetlink.c:602
genl_rcv_msg+0xbf/0x160 net/netlink/genetlink.c:627
netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2455
genl_rcv+0x24/0x40 net/netlink/genetlink.c:638
netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1344
schedule+0x8d/0x1b0 kernel/sched/core.c:3561
netlink_sendmsg+0x6bb/0xc40 net/netlink/af_netlink.c:1909
usb_kill_urb.part.0+0x197/0x220 drivers/usb/core/urb.c:697
sock_sendmsg_nosec net/socket.c:622 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:632
___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2115
__sys_sendmsg net/socket.c:2153 [inline]
__do_sys_sendmsg net/socket.c:2162 [inline]
__se_sys_sendmsg net/socket.c:2160 [inline]
__x64_sys_sendmsg+0x132/0x220 net/socket.c:2160
usb_kill_urb+0x7c/0x90 drivers/usb/core/urb.c:692
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
usb_start_wait_urb+0x252/0x4c0 drivers/usb/core/message.c:63
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de59
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f14740dec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 000000000002e400 RCX: 000000000045de59
RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c
R13: 00007ffd1e5faf1f R14: 00007f14740df9c0 R15: 000000000118bf2c
sysfs: cannot create duplicate filename '/class/ieee80211/M!Ü)vÑS´'
CPU: 0 PID: 18952 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
usb_internal_control_msg drivers/usb/core/message.c:101 [inline]
usb_control_msg+0x31c/0x4a0 drivers/usb/core/message.c:152
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
sysfs_warn_dup.cold+0x1c/0x2d fs/sysfs/dir.c:30
sysfs_do_create_link_sd+0x116/0x130 fs/sysfs/symlink.c:50
sysfs_do_create_link fs/sysfs/symlink.c:79 [inline]
sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:91
device_add_class_symlinks drivers/base/core.c:1918 [inline]
device_add+0x7d1/0x16d0 drivers/base/core.c:2120
wiphy_register+0x1664/0x2130 net/wireless/core.c:832
ieee80211_register_hw+0x13a7/0x3410 net/mac80211/main.c:1092
mac80211_hwsim_new_radio+0x1d3f/0x3c60 drivers/net/wireless/mac80211_hwsim.c:2896
hwsim_new_radio_nl+0x5c3/0x850 drivers/net/wireless/mac80211_hwsim.c:3374
genl_family_rcv_msg+0x642/0xc40 net/netlink/genetlink.c:602
hub_port_init+0x12d9/0x2fa0 drivers/usb/core/hub.c:4654
genl_rcv_msg+0xbf/0x160 net/netlink/genetlink.c:627
netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2455
genl_rcv+0x24/0x40 net/netlink/genetlink.c:638
netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1344
hub_port_connect drivers/usb/core/hub.c:5020 [inline]
hub_port_connect_change drivers/usb/core/hub.c:5203 [inline]
port_event drivers/usb/core/hub.c:5311 [inline]
hub_event+0x1cf8/0x43f0 drivers/usb/core/hub.c:5391
netlink_sendmsg+0x6bb/0xc40 net/netlink/af_netlink.c:1909
process_one_work+0x864/0x1570 kernel/workqueue.c:2155
sock_sendmsg_nosec net/socket.c:622 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:632
___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2115
__sys_sendmsg net/socket.c:2153 [inline]
__do_sys_sendmsg net/socket.c:2162 [inline]
__se_sys_sendmsg net/socket.c:2160 [inline]
__x64_sys_sendmsg+0x132/0x220 net/socket.c:2160
worker_thread+0x64c/0x1130 kernel/workqueue.c:2298
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de59
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f14740dec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 000000000002e400 RCX: 000000000045de59
RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c
R13: 00007ffd1e5faf1f R14: 00007f14740df9c0 R15: 000000000118bf2c
kthread+0x33f/0x460 kernel/kthread.c:259
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Showing all locks held in the system:
5 locks held by kworker/0:0/5:
#0: 0000000023e7ab4c ((wq_completion)"usb_hub_wq"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2126
#1: 00000000ea7b4d04 ((work_completion)(&hub->events)){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2130
#2: 00000000cda3af66 (&dev->mutex){....}, at: device_lock include/linux/device.h:1173 [inline]
#2: 00000000cda3af66 (&dev->mutex){....}, at: hub_event+0x11b/0x43f0 drivers/usb/core/hub.c:5337
#3: 0000000079261312 (&port_dev->status_lock){+.+.}, at: usb_lock_port drivers/usb/core/hub.c:2977 [inline]
#3: 0000000079261312 (&port_dev->status_lock){+.+.}, at: hub_port_connect drivers/usb/core/hub.c:5019 [inline]
#3: 0000000079261312 (&port_dev->status_lock){+.+.}, at: hub_port_connect_change drivers/usb/core/hub.c:5203 [inline]
#3: 0000000079261312 (&port_dev->status_lock){+.+.}, at: port_event drivers/usb/core/hub.c:5311 [inline]
#3: 0000000079261312 (&port_dev->status_lock){+.+.}, at: hub_event+0x1ce3/0x43f0 drivers/usb/core/hub.c:5391
#4: 00000000a953a94d (hcd->address0_mutex){+.+.}, at: hub_port_init+0x1b6/0x2fa0 drivers/usb/core/hub.c:4528
2 locks held by kworker/1:0/19:
#0: 0000000098d12a65 ((wq_completion)"rcu_gp"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2126
#1: 0000000084c60f47 ((work_completion)(&rew.rew_work)){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2130
sysfs: cannot create duplicate filename '/class/ieee80211/M!Ü)vÑS´'
CPU: 1 PID: 18998 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
sysfs_warn_dup.cold+0x1c/0x2d fs/sysfs/dir.c:30
sysfs_do_create_link_sd+0x116/0x130 fs/sysfs/symlink.c:50
sysfs_do_create_link fs/sysfs/symlink.c:79 [inline]
sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:91
device_add_class_symlinks drivers/base/core.c:1918 [inline]
device_add+0x7d1/0x16d0 drivers/base/core.c:2120
wiphy_register+0x1664/0x2130 net/wireless/core.c:832
ieee80211_register_hw+0x13a7/0x3410 net/mac80211/main.c:1092
mac80211_hwsim_new_radio+0x1d3f/0x3c60 drivers/net/wireless/mac80211_hwsim.c:2896
hwsim_new_radio_nl+0x5c3/0x850 drivers/net/wireless/mac80211_hwsim.c:3374
genl_family_rcv_msg+0x642/0xc40 net/netlink/genetlink.c:602
genl_rcv_msg+0xbf/0x160 net/netlink/genetlink.c:627
netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2455
genl_rcv+0x24/0x40 net/netlink/genetlink.c:638
netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1344
netlink_sendmsg+0x6bb/0xc40 net/netlink/af_netlink.c:1909
sock_sendmsg_nosec net/socket.c:622 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:632
___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2115
__sys_sendmsg net/socket.c:2153 [inline]
__do_sys_sendmsg net/socket.c:2162 [inline]
__se_sys_sendmsg net/socket.c:2160 [inline]
__x64_sys_sendmsg+0x132/0x220 net/socket.c:2160
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de59
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f14740bdc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 000000000002e400 RCX: 000000000045de59
RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
RBP: 000000000118c008 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4
R13: 00007ffd1e5faf1f R14: 00007f14740be9c0 R15: 000000000118bfd4
1 lock held by khungtaskd/1566:
#0: 00000000f22d3d60 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4440
1 lock held by khugepaged/1573:
1 lock held by in:imklog/7793:
#0: 000000000bbca5aa (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 fs/file.c:767
3 locks held by kworker/1:3/9232:
#0: 000000000438775f ((wq_completion)"events"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2126
sysfs: cannot create duplicate filename '/class/ieee80211/M!Ü)vÑS´'
#1: 000000000103cea7 (key_gc_work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2130
CPU: 1 PID: 19011 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
#2: 00000000215f3d7f (rcu_preempt_state.exp_mutex){+.+.}, at: exp_funnel_lock kernel/rcu/tree_exp.h:297 [inline]
#2: 00000000215f3d7f (rcu_preempt_state.exp_mutex){+.+.}, at: _synchronize_rcu_expedited+0x4dc/0x6f0 kernel/rcu/tree_exp.h:667
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
sysfs_warn_dup.cold+0x1c/0x2d fs/sysfs/dir.c:30
sysfs_do_create_link_sd+0x116/0x130 fs/sysfs/symlink.c:50
6 locks held by syz-executor.4/19011:
sysfs_do_create_link fs/sysfs/symlink.c:79 [inline]
sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:91
device_add_class_symlinks drivers/base/core.c:1918 [inline]
device_add+0x7d1/0x16d0 drivers/base/core.c:2120
wiphy_register+0x1664/0x2130 net/wireless/core.c:832
=============================================
NMI backtrace for cpu 0
ieee80211_register_hw+0x13a7/0x3410 net/mac80211/main.c:1092
mac80211_hwsim_new_radio+0x1d3f/0x3c60 drivers/net/wireless/mac80211_hwsim.c:2896
hwsim_new_radio_nl+0x5c3/0x850 drivers/net/wireless/mac80211_hwsim.c:3374
genl_family_rcv_msg+0x642/0xc40 net/netlink/genetlink.c:602
genl_rcv_msg+0xbf/0x160 net/netlink/genetlink.c:627
netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2455
genl_rcv+0x24/0x40 net/netlink/genetlink.c:638
netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1344
netlink_sendmsg+0x6bb/0xc40 net/netlink/af_netlink.c:1909
sock_sendmsg_nosec net/socket.c:622 [inline]
sock_sendmsg+0xc3/0x120 net/socket.c:632
___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2115
__sys_sendmsg net/socket.c:2153 [inline]
__do_sys_sendmsg net/socket.c:2162 [inline]
__se_sys_sendmsg net/socket.c:2160 [inline]
__x64_sys_sendmsg+0x132/0x220 net/socket.c:2160
do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45de59
Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f14740dec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 000000000002e400 RCX: 000000000045de59
RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c
R13: 00007ffd1e5faf1f R14: 00007f14740df9c0 R15: 000000000118bf2c
CPU: 0 PID: 1566 Comm: khungtaskd Not tainted 4.19.152-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101
nmi_trigger_cpumask_backtrace+0x1a6/0x1eb lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline]
watchdog+0x991/0xe60 kernel/hung_task.c:287
kthread+0x33f/0x460 kernel/kthread.c:259
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 4.19.152-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bat_events batadv_tt_purge
RIP: 0010:__local_bh_disable_ip+0x97/0x190 kernel/softirq.c:128
Code: fd 00 00 00 48 83 3d 57 54 b7 08 00 0f 84 c9 00 00 00 fa 66 0f 1f 44 00 00 65 01 1d 03 b4 c7 7e 65 8b 05 fc b3 c7 7e 48 31 d8 <f6> c4 ff 74 4c 48 c7 c0 48 7f f1 89 48 ba 00 00 00 00 00 fc ff df
RSP: 0018:ffff8880b5a57c98 EFLAGS: 00000006
RAX: 0000000080000000 RBX: 0000000000000201 RCX: ffffffff87fc32cb
RDX: dffffc0000000000 RSI: 0000000000000201 RDI: ffffffff87fc3033
RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000324
R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff87fc3033
R13: dffffc0000000000 R14: 0000000000000324 R15: ffff8880a483d000
FS: 0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe307ea7020 CR3: 00000000a11ab000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__raw_spin_lock_bh include/linux/spinlock_api_smp.h:134 [inline]
_raw_spin_lock_bh+0x13/0x40 kernel/locking/spinlock.c:168
spin_lock_bh include/linux/spinlock.h:334 [inline]
batadv_tt_global_purge net/batman-adv/translation-table.c:2519 [inline]
batadv_tt_purge+0x123/0xa00 net/batman-adv/translation-table.c:3810
process_one_work+0x864/0x1570 kernel/workqueue.c:2155
worker_thread+0x64c/0x1130 kernel/workqueue.c:2298
kthread+0x33f/0x460 kernel/kthread.c:259
ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
sysfs: cannot create duplicate filename '/class/ieee80211/M!Ü)vÑS´'