syzbot


possible deadlock in tty_port_close_start

Status: upstream: reported C repro on 2020/02/15 19:33
Reported-by: syzbot+a4ce323dabefd0c46ba0@syzkaller.appspotmail.com
First crash: 1523d, last: 589d
Fix bisection: failed (error log, bisect log)
  
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 possible deadlock in tty_port_close_start C done 47 1067d 1533d 1/1 fixed on 2021/06/15 21:27
upstream possible deadlock in tty_port_close_start serial C done error 43 931d 1525d 0/26 auto-obsoleted due to no activity on 2022/10/02 01:37
Fix bisection attempts (17)
Created Duration User Patch Repo Result
2022/10/13 02:19 0m bisect fix linux-4.14.y error job log (0)
2022/09/06 12:19 23m bisect fix linux-4.14.y job log (0) log
2022/08/07 11:56 23m bisect fix linux-4.14.y job log (0) log
2022/07/08 11:28 27m bisect fix linux-4.14.y job log (0) log
2022/06/08 11:04 24m bisect fix linux-4.14.y job log (0) log
2022/05/09 10:33 30m bisect fix linux-4.14.y job log (0) log
2022/04/07 07:24 25m bisect fix linux-4.14.y job log (0) log
2022/03/08 06:56 27m bisect fix linux-4.14.y job log (0) log
2022/02/05 21:49 23m bisect fix linux-4.14.y job log (0) log
2022/01/06 21:23 25m bisect fix linux-4.14.y job log (0) log
2021/12/07 20:58 25m bisect fix linux-4.14.y job log (0) log
2021/11/07 20:20 23m bisect fix linux-4.14.y job log (0) log
2021/10/08 19:57 22m bisect fix linux-4.14.y job log (0) log
2021/09/08 19:24 23m bisect fix linux-4.14.y job log (0) log
2021/08/09 18:58 25m bisect fix linux-4.14.y job log (0) log
2021/07/10 18:36 21m bisect fix linux-4.14.y job log (0) log
2021/06/10 18:07 28m bisect fix linux-4.14.y job log (0) log

Sample crash report:
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
ttyprintk ttyprintk: tty_port_close_start: tty->count = 1 port count = 21
ieee80211 phy10: hwaddr 02:00:00:00:0a:00 registered
======================================================
WARNING: possible circular locking dependency detected
4.14.203-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor330/9523 is trying to acquire lock:
 (console_owner){....}, at: [<ffffffff8145a90a>] console_trylock_spinning kernel/printk/printk.c:1658 [inline]
 (console_owner){....}, at: [<ffffffff8145a90a>] vprintk_emit+0x32a/0x620 kernel/printk/printk.c:1922

but task is already holding lock:
 (&(&port->lock)->rlock){-.-.}, at: [<ffffffff835e7238>] tty_port_close_start.part.0+0x28/0x4c0 drivers/tty/tty_port.c:573

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #2 (&(&port->lock)->rlock){-.-.}:
       __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
       _raw_spin_lock_irqsave+0x8c/0xc0 kernel/locking/spinlock.c:160
       tty_port_tty_get+0x1d/0x80 drivers/tty/tty_port.c:288
       tty_port_default_wakeup+0x11/0x40 drivers/tty/tty_port.c:46
       serial8250_tx_chars+0x3fe/0xbf0 drivers/tty/serial/8250/8250_port.c:1810
       serial8250_handle_irq.part.0+0x28d/0x330 drivers/tty/serial/8250/8250_port.c:1897
       serial8250_handle_irq drivers/tty/serial/8250/8250_port.c:1870 [inline]
       serial8250_default_handle_irq+0x8a/0x1f0 drivers/tty/serial/8250/8250_port.c:1913
       serial8250_interrupt+0xf3/0x210 drivers/tty/serial/8250/8250_core.c:129
       __handle_irq_event_percpu+0xee/0x7f0 kernel/irq/handle.c:147
       handle_irq_event_percpu kernel/irq/handle.c:187 [inline]
       handle_irq_event+0xf0/0x246 kernel/irq/handle.c:204
       handle_edge_irq+0x224/0xc40 kernel/irq/chip.c:770
       generic_handle_irq_desc include/linux/irqdesc.h:159 [inline]
       handle_irq+0x35/0x50 arch/x86/kernel/irq_64.c:87
       do_IRQ+0x93/0x1d0 arch/x86/kernel/irq.c:230
       ret_from_intr+0x0/0x1e
       native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:60
       arch_safe_halt arch/x86/include/asm/paravirt.h:94 [inline]
       default_idle+0x47/0x370 arch/x86/kernel/process.c:558
       cpuidle_idle_call kernel/sched/idle.c:156 [inline]
       do_idle+0x250/0x3c0 kernel/sched/idle.c:246
       cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:351
       start_secondary+0x4db/0x670 arch/x86/kernel/smpboot.c:272
       secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:240

-> #1 (&port_lock_key){-.-.}:
       __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
       _raw_spin_lock_irqsave+0x8c/0xc0 kernel/locking/spinlock.c:160
       serial8250_console_write+0x7a7/0x9d0 drivers/tty/serial/8250/8250_port.c:3253
       call_console_drivers kernel/printk/printk.c:1725 [inline]
       console_unlock+0x99d/0xf20 kernel/printk/printk.c:2400
       vprintk_emit+0x224/0x620 kernel/printk/printk.c:1923
       vprintk_func+0x58/0x152 kernel/printk/printk_safe.c:401
       printk+0x9e/0xbc kernel/printk/printk.c:1996
       register_console+0x6f4/0xad0 kernel/printk/printk.c:2719
       univ8250_console_init+0x2f/0x3a drivers/tty/serial/8250/8250_core.c:691
       console_init+0x46/0x53 kernel/printk/printk.c:2800
       start_kernel+0x52e/0x770 init/main.c:634
       secondary_startup_64+0xa5/0xb0 arch/x86/kernel/head_64.S:240

-> #0 (console_owner){....}:
       lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998
       console_trylock_spinning kernel/printk/printk.c:1679 [inline]
       vprintk_emit+0x367/0x620 kernel/printk/printk.c:1922
       vprintk_func+0x58/0x152 kernel/printk/printk_safe.c:401
       printk+0x9e/0xbc kernel/printk/printk.c:1996
       tty_port_close_start.part.0+0x46c/0x4c0 drivers/tty/tty_port.c:575
       tty_port_close_start drivers/tty/tty_port.c:647 [inline]
       tty_port_close+0x3b/0x130 drivers/tty/tty_port.c:640
       tty_release+0x40b/0x10d0 drivers/tty/tty_io.c:1670
       __fput+0x25f/0x7a0 fs/file_table.c:210
       task_work_run+0x11f/0x190 kernel/task_work.c:113
       tracehook_notify_resume include/linux/tracehook.h:191 [inline]
       exit_to_usermode_loop+0x1ad/0x200 arch/x86/entry/common.c:164
       prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline]
       syscall_return_slowpath arch/x86/entry/common.c:270 [inline]
       do_syscall_64+0x4a3/0x640 arch/x86/entry/common.c:297
       entry_SYSCALL_64_after_hwframe+0x46/0xbb

other info that might help us debug this:

Chain exists of:
  console_owner --> &port_lock_key --> &(&port->lock)->rlock

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&(&port->lock)->rlock);
                               lock(&port_lock_key);
                               lock(&(&port->lock)->rlock);
  lock(console_owner);

 *** DEADLOCK ***

2 locks held by syz-executor330/9523:
 #0:  (&tty->legacy_mutex){+.+.}, at: [<ffffffff835e89af>] tty_lock+0x5f/0x70 drivers/tty/tty_mutex.c:19
 #1:  (&(&port->lock)->rlock){-.-.}, at: [<ffffffff835e7238>] tty_port_close_start.part.0+0x28/0x4c0 drivers/tty/tty_port.c:573

stack backtrace:
CPU: 1 PID: 9523 Comm: syz-executor330 Not tainted 4.14.203-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x1b2/0x283 lib/dump_stack.c:58
 print_circular_bug.constprop.0.cold+0x2d7/0x41e kernel/locking/lockdep.c:1258
 check_prev_add kernel/locking/lockdep.c:1905 [inline]
 check_prevs_add kernel/locking/lockdep.c:2022 [inline]
 validate_chain kernel/locking/lockdep.c:2464 [inline]
 __lock_acquire+0x2e0e/0x3f20 kernel/locking/lockdep.c:3491
 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998
 console_trylock_spinning kernel/printk/printk.c:1679 [inline]
 vprintk_emit+0x367/0x620 kernel/printk/printk.c:1922
 vprintk_func+0x58/0x152 kernel/printk/printk_safe.c:401
 printk+0x9e/0xbc kernel/printk/printk.c:1996
 tty_port_close_start.part.0+0x46c/0x4c0 drivers/tty/tty_port.c:575
 tty_port_close_start drivers/tty/tty_port.c:647 [inline]
 tty_port_close+0x3b/0x130 drivers/tty/tty_port.c:640
 tty_release+0x40b/0x10d0 drivers/tty/tty_io.c:1670
 __fput+0x25f/0x7a0 fs/file_table.c:210
 task_work_run+0x11f/0x190 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:191 [inline]
 exit_to_usermode_loop+0x1ad/0x200 arch/x86/entry/common.c:164
 prepare_exit_to_usermode arch/x86/entry/common.c:199 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:270 [inline]
 do_syscall_64+0x4a3/0x640 arch/x86/entry/common.c:297
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x409621
RSP: 002b:00007fff253b9f90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000409621
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00000000006e1c30 R08: 00000000004b36ec R09: 00000000004b36ec
R10: 00007fff253b9fb0 R11: 0000000000000293 R12: 00000000006e1c3c
R13: 0000000000000001 R14: 000000000000002d R15: 20c49ba5e353f7cf
ieee80211 phy9: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
ieee80211 phy8: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
ieee80211 phy9: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
ieee80211 phy8: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
ieee80211 phy9: mac80211_hwsim_bss_info_changed(changed=0x40000 vif->addr=02:00:00:00:09:00)
ieee80211 phy8: mac80211_hwsim_bss_info_changed(changed=0x40000 vif->addr=02:00:00:00:08:00)
ieee80211 phy9:   TX Power: 20 dBm
ieee80211 phy8:   TX Power: 20 dBm
ieee80211 phy9: mac80211_hwsim_bss_info_changed(changed=0x4000 vif->addr=02:00:00:00:09:00)
ieee80211 phy8: mac80211_hwsim_bss_info_changed(changed=0x4000 vif->addr=02:00:00:00:08:00)
ieee80211 phy9: mac80211_hwsim_conf_tx (queue=0 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy8: mac80211_hwsim_conf_tx (queue=0 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy9: mac80211_hwsim_conf_tx (queue=1 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy8: mac80211_hwsim_conf_tx (queue=1 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy9: mac80211_hwsim_conf_tx (queue=2 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy8: mac80211_hwsim_conf_tx (queue=2 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy9: mac80211_hwsim_conf_tx (queue=3 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy8: mac80211_hwsim_conf_tx (queue=3 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy9: mac80211_hwsim_bss_info_changed(changed=0x2000 vif->addr=02:00:00:00:09:00)
ieee80211 phy8: mac80211_hwsim_bss_info_changed(changed=0x2000 vif->addr=02:00:00:00:08:00)
ieee80211 phy9: mac80211_hwsim_bss_info_changed(changed=0x8bfe vif->addr=02:00:00:00:09:00)
ieee80211 phy8: mac80211_hwsim_bss_info_changed(changed=0x8bfe vif->addr=02:00:00:00:08:00)
ieee80211 phy9: mac80211_hwsim_bss_info_changed: BSSID changed: 50:50:50:50:50:50
ieee80211 phy11: Selected rate control algorithm 'minstrel_ht'
ieee80211 phy9:   BCN EN: 1 (BI=100)
ieee80211 phy8: mac80211_hwsim_bss_info_changed: BSSID changed: 50:50:50:50:50:50
ieee80211 phy9:   ERP_CTS_PROT: 0
ieee80211 phy11: hwaddr 02:00:00:00:0b:00 registered
ieee80211 phy9:   ERP_PREAMBLE: 0
ieee80211 phy8:   BCN EN: 1 (BI=100)
ieee80211 phy9:   ERP_SLOT: 0
ieee80211 phy8:   ERP_CTS_PROT: 0
ieee80211 phy9:   HT: op_mode=0xb
ieee80211 phy12: Selected rate control algorithm 'minstrel_ht'
ieee80211 phy9:   BASIC_RATES: 0x1
ieee80211 phy8:   ERP_PREAMBLE: 0
ieee80211 phy8:   ERP_SLOT: 0
ieee80211 phy8:   HT: op_mode=0xb
ieee80211 phy8:   BASIC_RATES: 0x1
IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
ieee80211 phy12: hwaddr 02:00:00:00:0c:00 registered
IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
ieee80211 phy10: mac80211_hwsim_start
ieee80211 phy10: mac80211_hwsim_add_interface (type=1 mac_addr=02:00:00:00:0a:00)
ieee80211 phy10: mac80211_hwsim_bss_info_changed(changed=0xe vif->addr=02:00:00:00:0a:00)
ieee80211 phy10:   ERP_CTS_PROT: 0
ieee80211 phy10:   ERP_PREAMBLE: 0
ieee80211 phy10:   ERP_SLOT: 0
ieee80211 phy10: mac80211_hwsim_conf_tx (queue=0 txop=47 cw_min=3 cw_max=7 aifs=2)
ieee80211 phy10: mac80211_hwsim_conf_tx (queue=1 txop=94 cw_min=7 cw_max=15 aifs=2)
ieee80211 phy10: mac80211_hwsim_conf_tx (queue=2 txop=0 cw_min=15 cw_max=1023 aifs=3)
ieee80211 phy10: mac80211_hwsim_conf_tx (queue=3 txop=0 cw_min=15 cw_max=1023 aifs=7)
ieee80211 phy10: mac80211_hwsim_bss_info_changed(changed=0x2000 vif->addr=02:00:00:00:0a:00)
ieee80211 phy10: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=1 ps=0 smps=static)
ieee80211 phy10: mac80211_hwsim_configure_filter
IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
ieee80211 phy10: mac80211_hwsim_configure_filter
ieee80211 phy8: mac80211_hwsim_configure_filter
ieee80211 phy9: mac80211_hwsim_configure_filter
ieee80211 phy11: mac80211_hwsim_start
ieee80211 phy11: mac80211_hwsim_add_interface (type=1 mac_addr=02:00:00:00:0b:00)
ieee80211 phy11: mac80211_hwsim_bss_info_changed(changed=0xe vif->addr=02:00:00:00:0b:00)
ieee80211 phy11:   ERP_CTS_PROT: 0
ieee80211 phy11:   ERP_PREAMBLE: 0
ieee80211 phy11:   ERP_SLOT: 0
ieee80211 phy11: mac80211_hwsim_conf_tx (queue=0 txop=47 cw_min=3 cw_max=7 aifs=2)
ieee80211 phy11: mac80211_hwsim_conf_tx (queue=1 txop=94 cw_min=7 cw_max=15 aifs=2)
ieee80211 phy11: mac80211_hwsim_conf_tx (queue=2 txop=0 cw_min=15 cw_max=1023 aifs=3)
ieee80211 phy11: mac80211_hwsim_conf_tx (queue=3 txop=0 cw_min=15 cw_max=1023 aifs=7)
ieee80211 phy11: mac80211_hwsim_bss_info_changed(changed=0x2000 vif->addr=02:00:00:00:0b:00)
ieee80211 phy11: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=1 ps=0 smps=static)
ieee80211 phy11: mac80211_hwsim_configure_filter
IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
ieee80211 phy11: mac80211_hwsim_configure_filter
ieee80211 phy10: mac80211_hwsim_bss_info_changed(changed=0x10 vif->addr=02:00:00:00:0a:00)
ieee80211 phy10:   HT: op_mode=0xb
wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
ieee80211 phy12: mac80211_hwsim_start
ieee80211 phy12: mac80211_hwsim_add_interface (type=1 mac_addr=02:00:00:00:0c:00)
ieee80211 phy10: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
ieee80211 phy12: mac80211_hwsim_bss_info_changed(changed=0xe vif->addr=02:00:00:00:0c:00)
ieee80211 phy10: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
ieee80211 phy12:   ERP_CTS_PROT: 0
ieee80211 phy10: mac80211_hwsim_bss_info_changed(changed=0x40000 vif->addr=02:00:00:00:0a:00)
ieee80211 phy12:   ERP_PREAMBLE: 0
ieee80211 phy10:   TX Power: 20 dBm
ieee80211 phy12:   ERP_SLOT: 0
ieee80211 phy10: mac80211_hwsim_bss_info_changed(changed=0x4000 vif->addr=02:00:00:00:0a:00)
ieee80211 phy12: mac80211_hwsim_conf_tx (queue=0 txop=47 cw_min=3 cw_max=7 aifs=2)
ieee80211 phy10: mac80211_hwsim_conf_tx (queue=0 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy12: mac80211_hwsim_conf_tx (queue=1 txop=94 cw_min=7 cw_max=15 aifs=2)
ieee80211 phy10: mac80211_hwsim_conf_tx (queue=1 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy12: mac80211_hwsim_conf_tx (queue=2 txop=0 cw_min=15 cw_max=1023 aifs=3)
ieee80211 phy10: mac80211_hwsim_conf_tx (queue=2 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy12: mac80211_hwsim_conf_tx (queue=3 txop=0 cw_min=15 cw_max=1023 aifs=7)
ieee80211 phy10: mac80211_hwsim_conf_tx (queue=3 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy12: mac80211_hwsim_bss_info_changed(changed=0x2000 vif->addr=02:00:00:00:0c:00)
ieee80211 phy10: mac80211_hwsim_bss_info_changed(changed=0x2000 vif->addr=02:00:00:00:0a:00)
ieee80211 phy12: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=1 ps=0 smps=static)
ieee80211 phy10: mac80211_hwsim_bss_info_changed(changed=0x8bfe vif->addr=02:00:00:00:0a:00)
ieee80211 phy12: mac80211_hwsim_configure_filter
ieee80211 phy10: mac80211_hwsim_bss_info_changed: BSSID changed: 50:50:50:50:50:50
ieee80211 phy10:   BCN EN: 1 (BI=100)
ieee80211 phy10:   ERP_CTS_PROT: 0
ieee80211 phy10:   ERP_PREAMBLE: 0
ieee80211 phy10:   ERP_SLOT: 0
ieee80211 phy10:   HT: op_mode=0xb
ieee80211 phy10:   BASIC_RATES: 0x1
IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
ieee80211 phy12: mac80211_hwsim_configure_filter
ieee80211 phy11: mac80211_hwsim_bss_info_changed(changed=0x10 vif->addr=02:00:00:00:0b:00)
ieee80211 phy11:   HT: op_mode=0xb
wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
ieee80211 phy10: mac80211_hwsim_configure_filter
ieee80211 phy11: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
ieee80211 phy12: mac80211_hwsim_bss_info_changed(changed=0x10 vif->addr=02:00:00:00:0c:00)
ieee80211 phy11: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
ieee80211 phy12:   HT: op_mode=0xb
ieee80211 phy11: mac80211_hwsim_bss_info_changed(changed=0x40000 vif->addr=02:00:00:00:0b:00)
wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
ieee80211 phy11:   TX Power: 20 dBm
ieee80211 phy11: mac80211_hwsim_bss_info_changed(changed=0x4000 vif->addr=02:00:00:00:0b:00)
ieee80211 phy13: Selected rate control algorithm 'minstrel_ht'
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
ieee80211 phy11: mac80211_hwsim_conf_tx (queue=0 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy12: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
ieee80211 phy11: mac80211_hwsim_conf_tx (queue=1 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy13: hwaddr 02:00:00:00:0d:00 registered
ieee80211 phy12: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
ieee80211 phy11: mac80211_hwsim_conf_tx (queue=2 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy13: mac80211_hwsim_start
ieee80211 phy12: mac80211_hwsim_bss_info_changed(changed=0x40000 vif->addr=02:00:00:00:0c:00)
ieee80211 phy11: mac80211_hwsim_conf_tx (queue=3 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy13: mac80211_hwsim_add_interface (type=1 mac_addr=02:00:00:00:0d:00)
ieee80211 phy11: mac80211_hwsim_bss_info_changed(changed=0x2000 vif->addr=02:00:00:00:0b:00)
ieee80211 phy12:   TX Power: 20 dBm
ieee80211 phy12: mac80211_hwsim_bss_info_changed(changed=0x4000 vif->addr=02:00:00:00:0c:00)
ieee80211 phy11: mac80211_hwsim_bss_info_changed(changed=0x8bfe vif->addr=02:00:00:00:0b:00)
ieee80211 phy13: mac80211_hwsim_bss_info_changed(changed=0xe vif->addr=02:00:00:00:0d:00)
ieee80211 phy11: mac80211_hwsim_bss_info_changed: BSSID changed: 50:50:50:50:50:50
ieee80211 phy12: mac80211_hwsim_conf_tx (queue=0 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy11:   BCN EN: 1 (BI=100)
ieee80211 phy13:   ERP_CTS_PROT: 0
ieee80211 phy11:   ERP_CTS_PROT: 0
ieee80211 phy12: mac80211_hwsim_conf_tx (queue=1 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy11:   ERP_PREAMBLE: 0
ieee80211 phy13:   ERP_PREAMBLE: 0
ieee80211 phy13:   ERP_SLOT: 0
ieee80211 phy11:   ERP_SLOT: 0
ieee80211 phy13: mac80211_hwsim_conf_tx (queue=0 txop=47 cw_min=3 cw_max=7 aifs=2)
ieee80211 phy11:   HT: op_mode=0xb
ieee80211 phy12: mac80211_hwsim_conf_tx (queue=2 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy11:   BASIC_RATES: 0x1
ieee80211 phy13: mac80211_hwsim_conf_tx (queue=1 txop=94 cw_min=7 cw_max=15 aifs=2)
ieee80211 phy12: mac80211_hwsim_conf_tx (queue=3 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy13: mac80211_hwsim_conf_tx (queue=2 txop=0 cw_min=15 cw_max=1023 aifs=3)
ieee80211 phy12: mac80211_hwsim_bss_info_changed(changed=0x2000 vif->addr=02:00:00:00:0c:00)
ieee80211 phy13: mac80211_hwsim_conf_tx (queue=3 txop=0 cw_min=15 cw_max=1023 aifs=7)
ieee80211 phy12: mac80211_hwsim_bss_info_changed(changed=0x8bfe vif->addr=02:00:00:00:0c:00)
ieee80211 phy13: mac80211_hwsim_bss_info_changed(changed=0x2000 vif->addr=02:00:00:00:0d:00)
ieee80211 phy12: mac80211_hwsim_bss_info_changed: BSSID changed: 50:50:50:50:50:50
ieee80211 phy13: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=1 ps=0 smps=static)
ieee80211 phy12:   BCN EN: 1 (BI=100)
IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
ieee80211 phy13: mac80211_hwsim_configure_filter
ieee80211 phy12:   ERP_CTS_PROT: 0
ieee80211 phy13: mac80211_hwsim_bss_info_changed(changed=0x10 vif->addr=02:00:00:00:0d:00)
ieee80211 phy12:   ERP_PREAMBLE: 0
ieee80211 phy12:   ERP_SLOT: 0
ieee80211 phy12:   HT: op_mode=0xb
ieee80211 phy13:   HT: op_mode=0xb
ieee80211 phy12:   BASIC_RATES: 0x1
wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
ieee80211 phy13: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
ieee80211 phy12: mac80211_hwsim_configure_filter
ieee80211 phy13: mac80211_hwsim_config (freq=2412(2412 - 0)/noht idle=0 ps=0 smps=static)
ieee80211 phy11: mac80211_hwsim_configure_filter
ieee80211 phy13: mac80211_hwsim_bss_info_changed(changed=0x40000 vif->addr=02:00:00:00:0d:00)
ieee80211 phy13:   TX Power: 20 dBm
ieee80211 phy13: mac80211_hwsim_bss_info_changed(changed=0x4000 vif->addr=02:00:00:00:0d:00)
ieee80211 phy13: mac80211_hwsim_conf_tx (queue=0 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy13: mac80211_hwsim_conf_tx (queue=1 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy13: mac80211_hwsim_conf_tx (queue=2 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy13: mac80211_hwsim_conf_tx (queue=3 txop=0 cw_min=15 cw_max=1023 aifs=2)
ieee80211 phy13: mac80211_hwsim_bss_info_changed(changed=0x2000 vif->addr=02:00:00:00:0d:00)
ieee80211 phy13: mac80211_hwsim_bss_info_changed(changed=0x8bfe vif->addr=02:00:00:00:0d:00)
ieee80211 phy13: mac80211_hwsim_bss_info_changed: BSSID changed: 50:50:50:50:50:50
ieee80211 phy13:   BCN EN: 1 (BI=100)
ieee80211 phy13:   ERP_CTS_PROT: 0
ieee80211 phy13:   ERP_PREAMBLE: 0
ieee80211 phy13:   ERP_SLOT: 0
ieee80211 phy13:   HT: op_mode=0xb
ieee80211 phy13:   BASIC_RATES: 0x1
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
ieee80211 phy13: mac80211_hwsim_configure_filter

Crashes (49):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/10/30 12:21 linux-4.14.y 2b7915014161 a6e3ac3b .config console log report syz C ci2-linux-4-14
2021/05/11 18:07 linux-4.14.y 7d7d1c0ab3eb ca873091 .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/04/28 17:19 linux-4.14.y 7d7d1c0ab3eb 77e2b668 .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/04/25 08:55 linux-4.14.y cf256fbcbe34 36c88236 .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/04/23 04:31 linux-4.14.y cf256fbcbe34 590921a5 .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/04/12 04:56 linux-4.14.y 958e517f4e16 6a81331a .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/04/06 05:09 linux-4.14.y bd634aa64163 6a81331a .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/03/26 05:17 linux-4.14.y 670d6552eda8 6a383ecf .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/03/21 22:14 linux-4.14.y cb83ddcd5332 4c9a64da .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/03/03 01:11 linux-4.14.y 3242aa3a635c e5b64d68 .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/02/27 12:13 linux-4.14.y 3242aa3a635c 4c37c133 .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/02/24 04:39 linux-4.14.y 3242aa3a635c fcc6d71b .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/02/15 00:25 linux-4.14.y 2c8a3fceddf0 98682e5e .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/02/10 15:17 linux-4.14.y 2c8a3fceddf0 9c8b8541 .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/02/09 21:35 linux-4.14.y 2c8a3fceddf0 2bd9619f .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/02/09 01:33 linux-4.14.y 2c8a3fceddf0 2bd9619f .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/02/05 13:47 linux-4.14.y 2c8a3fceddf0 23a562df .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/02/01 20:56 linux-4.14.y 2c8a3fceddf0 e6b95f32 .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/02/01 20:55 linux-4.14.y 2c8a3fceddf0 e6b95f32 .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/01/29 14:05 linux-4.14.y 2d2791fce891 6593fd32 .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/01/27 00:38 linux-4.14.y 2d2791fce891 55a7d4df .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/01/26 10:47 linux-4.14.y 2d2791fce891 52e37319 .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/01/25 08:28 linux-4.14.y 2d2791fce891 52e37319 .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/01/20 00:00 linux-4.14.y 2762b48e9611 63631df1 .config console log report info ci2-linux-4-14 possible deadlock in tty_port_close_start
2021/01/17 13:02 linux-4.14.y f79dc86058bc 813be542 .config console log report info ci2-linux-4-14
2021/01/13 09:42 linux-4.14.y f79dc86058bc 0cdd6185 .config console log report info ci2-linux-4-14
2020/12/19 09:01 linux-4.14.y 3f2ecb86cb90 04201c06 .config console log report info ci2-linux-4-14
2020/12/09 20:12 linux-4.14.y 47cbf4cc32db 99917735 .config console log report info ci2-linux-4-14
2020/12/03 14:09 linux-4.14.y c196b3a9c83a 59ad4022 .config console log report info ci2-linux-4-14
2020/11/30 22:21 linux-4.14.y 87335852c5d9 76831598 .config console log report info ci2-linux-4-14
2020/11/17 07:27 linux-4.14.y 27ce4f2a6817 1bf9a662 .config console log report info ci2-linux-4-14
2020/11/14 05:11 linux-4.14.y 27ce4f2a6817 1bf9a662 .config console log report info ci2-linux-4-14
2020/09/30 09:21 linux-4.14.y cbfa1702aaf6 8516f6d3 .config console log report info ci2-linux-4-14
2020/09/29 18:07 linux-4.14.y cbfa1702aaf6 5abc3f1a .config console log report info ci2-linux-4-14
2020/09/26 21:36 linux-4.14.y cbfa1702aaf6 2d5ea0cb .config console log report info ci2-linux-4-14
2020/09/12 10:12 linux-4.14.y 458a534cac0c 79fb24e2 .config console log report ci2-linux-4-14
2020/09/11 08:56 linux-4.14.y 458a534cac0c ac7ca78e .config console log report ci2-linux-4-14
2020/09/09 06:34 linux-4.14.y 2f166cdcf8a9 0ea7a887 .config console log report ci2-linux-4-14
2020/08/29 14:19 linux-4.14.y d7e78d08fa77 d5a3ae1f .config console log report ci2-linux-4-14
2020/08/26 22:39 linux-4.14.y d7e78d08fa77 318430cb .config console log report ci2-linux-4-14
2020/08/24 22:23 linux-4.14.y 6a24ca2506d6 67b599d1 .config console log report ci2-linux-4-14
2020/07/28 20:46 linux-4.14.y 69b94dd6dcd1 cb93dc6a .config console log report ci2-linux-4-14
2020/07/14 22:34 linux-4.14.y b850307b279c 6f458026 .config console log report ci2-linux-4-14
2020/06/20 09:33 linux-4.14.y b850307b279c c655ec77 .config console log report ci2-linux-4-14
2020/05/26 14:10 linux-4.14.y a41ba30d9df2 8ca3b7d2 .config console log report ci2-linux-4-14
2020/03/21 16:51 linux-4.14.y 01364dad1d45 aa6c6a55 .config console log report ci2-linux-4-14
2020/02/25 16:54 linux-4.14.y 98db2bf27b9e 4c886d6a .config console log report ci2-linux-4-14
2020/02/18 03:27 linux-4.14.y 98db2bf27b9e 1ce142dc .config console log report ci2-linux-4-14
2020/02/15 19:32 linux-4.14.y 98db2bf27b9e 5d7b90f1 .config console log report ci2-linux-4-14
* Struck through repros no longer work on HEAD.