syzbot


INFO: task hung in ieee80211_register_hw (5)

Status: auto-obsoleted due to no activity on 2024/04/15 01:54
Subsystems: wireless
[Documentation on labels]
First crash: 482d, last: 482d
Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 INFO: task hung in ieee80211_register_hw 4 330d 335d 0/3 auto-obsoleted due to no activity on 2024/09/23 16:13
upstream INFO: task hung in ieee80211_register_hw (2) wireless 2 1196d 1254d 0/28 closed as invalid on 2022/02/08 09:40
linux-4.19 INFO: task hung in ieee80211_register_hw 1 964d 964d 0/1 auto-obsoleted due to no activity on 2023/01/18 17:32
upstream INFO: task hung in ieee80211_register_hw (6) wireless 4 328d 354d 0/28 auto-obsoleted due to no activity on 2024/09/16 03:48
linux-5.15 INFO: task hung in ieee80211_register_hw 1 339d 339d 0/3 auto-obsoleted due to no activity on 2024/09/15 00:03
upstream INFO: task hung in ieee80211_register_hw (3) wireless 1 1163d 1163d 0/28 auto-closed as invalid on 2022/06/03 18:58
upstream INFO: task hung in ieee80211_register_hw (7) wireless syz 5 192d 207d 0/28 closed as invalid on 2024/11/22 14:52
upstream INFO: task hung in ieee80211_register_hw (4) wireless 1 650d 650d 0/28 auto-obsoleted due to no activity on 2023/10/29 15:52
upstream INFO: task hung in ieee80211_register_hw wireless 1 1881d 1881d 0/28 auto-closed as invalid on 2020/06/15 23:33

Sample crash report:
INFO: task syz-executor.0:28174 blocked for more than 143 seconds.
      Not tainted 6.7.0-syzkaller-04629-g3e7aeb78ab01 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0  state:D stack:25592 pid:28174 tgid:28171 ppid:14740  flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5400 [inline]
 __schedule+0xf12/0x5c00 kernel/sched/core.c:6727
 __schedule_loop kernel/sched/core.c:6802 [inline]
 schedule+0xe9/0x270 kernel/sched/core.c:6817
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6874
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x5b9/0x9d0 kernel/locking/mutex.c:752
 ieee80211_register_hw+0x26dd/0x4290 net/mac80211/main.c:1410
 mac80211_hwsim_new_radio+0x2541/0x4d50 drivers/net/wireless/virtual/mac80211_hwsim.c:5329
 hwsim_new_radio_nl+0xaf9/0x1240 drivers/net/wireless/virtual/mac80211_hwsim.c:6010
 genl_family_rcv_msg_doit+0x1fc/0x2e0 net/netlink/genetlink.c:1113
 genl_family_rcv_msg net/netlink/genetlink.c:1193 [inline]
 genl_rcv_msg+0x561/0x800 net/netlink/genetlink.c:1208
 netlink_rcv_skb+0x16b/0x440 net/netlink/af_netlink.c:2543
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1217
 netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]
 netlink_unicast+0x53b/0x810 net/netlink/af_netlink.c:1367
 netlink_sendmsg+0x8b7/0xd70 net/netlink/af_netlink.c:1908
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg+0xd5/0x180 net/socket.c:745
 ____sys_sendmsg+0x6ac/0x940 net/socket.c:2584
 ___sys_sendmsg+0x135/0x1d0 net/socket.c:2638
 __sys_sendmsg+0x117/0x1e0 net/socket.c:2667
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xd3/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7f2c9647cda9
RSP: 002b:00007f2c9713d0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f2c965abf80 RCX: 00007f2c9647cda9
RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
RBP: 00007f2c964c947a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000000b R14: 00007f2c965abf80 R15: 00007ffd18583668
 </TASK>
INFO: task syz-executor.5:28280 blocked for more than 143 seconds.
      Not tainted 6.7.0-syzkaller-04629-g3e7aeb78ab01 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5  state:D stack:29528 pid:28280 tgid:28277 ppid:5091   flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5400 [inline]
 __schedule+0xf12/0x5c00 kernel/sched/core.c:6727
 __schedule_loop kernel/sched/core.c:6802 [inline]
 schedule+0xe9/0x270 kernel/sched/core.c:6817
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6874
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x5b9/0x9d0 kernel/locking/mutex.c:752
 genl_lock net/netlink/genetlink.c:33 [inline]
 genl_op_lock net/netlink/genetlink.c:58 [inline]
 genl_op_lock net/netlink/genetlink.c:55 [inline]
 genl_rcv_msg+0x57c/0x800 net/netlink/genetlink.c:1207
 netlink_rcv_skb+0x16b/0x440 net/netlink/af_netlink.c:2543
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1217
 netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]
 netlink_unicast+0x53b/0x810 net/netlink/af_netlink.c:1367
 netlink_sendmsg+0x8b7/0xd70 net/netlink/af_netlink.c:1908
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg+0xd5/0x180 net/socket.c:745
 __sys_sendto+0x225/0x310 net/socket.c:2191
 __do_sys_sendto net/socket.c:2203 [inline]
 __se_sys_sendto net/socket.c:2199 [inline]
 __x64_sys_sendto+0xe0/0x1b0 net/socket.c:2199
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xd3/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7fe45447ea9c
RSP: 002b:00007fe455138f60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe455139050 RCX: 00007fe45447ea9c
RDX: 0000000000000020 RSI: 00007fe4551390a0 RDI: 0000000000000005
RBP: 0000000000000000 R08: 00007fe455138fb4 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
R13: 00007fe455139008 R14: 00007fe4551390a0 R15: 0000000000000000
 </TASK>
INFO: task syz-executor.5:28283 blocked for more than 144 seconds.
      Not tainted 6.7.0-syzkaller-04629-g3e7aeb78ab01 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5  state:D stack:29368 pid:28283 tgid:28277 ppid:5091   flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5400 [inline]
 __schedule+0xf12/0x5c00 kernel/sched/core.c:6727
 __schedule_loop kernel/sched/core.c:6802 [inline]
 schedule+0xe9/0x270 kernel/sched/core.c:6817
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6874
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x5b9/0x9d0 kernel/locking/mutex.c:752
 genl_lock net/netlink/genetlink.c:33 [inline]
 genl_op_lock net/netlink/genetlink.c:58 [inline]
 genl_op_lock net/netlink/genetlink.c:55 [inline]
 genl_rcv_msg+0x57c/0x800 net/netlink/genetlink.c:1207
 netlink_rcv_skb+0x16b/0x440 net/netlink/af_netlink.c:2543
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1217
 netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]
 netlink_unicast+0x53b/0x810 net/netlink/af_netlink.c:1367
 netlink_sendmsg+0x8b7/0xd70 net/netlink/af_netlink.c:1908
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg+0xd5/0x180 net/socket.c:745
 __sys_sendto+0x225/0x310 net/socket.c:2191
 __do_sys_sendto net/socket.c:2203 [inline]
 __se_sys_sendto net/socket.c:2199 [inline]
 __x64_sys_sendto+0xe0/0x1b0 net/socket.c:2199
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xd3/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7fe45447ea9c
RSP: 002b:00007fe455117f60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe455118050 RCX: 00007fe45447ea9c
RDX: 0000000000000020 RSI: 00007fe4551180a0 RDI: 0000000000000008
RBP: 0000000000000000 R08: 00007fe455117fb4 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008
R13: 00007fe455118008 R14: 00007fe4551180a0 R15: 0000000000000000
 </TASK>
INFO: task syz-executor.5:28284 blocked for more than 144 seconds.
      Not tainted 6.7.0-syzkaller-04629-g3e7aeb78ab01 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5  state:D stack:28264 pid:28284 tgid:28277 ppid:5091   flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5400 [inline]
 __schedule+0xf12/0x5c00 kernel/sched/core.c:6727
 __schedule_loop kernel/sched/core.c:6802 [inline]
 schedule+0xe9/0x270 kernel/sched/core.c:6817
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6874
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x5b9/0x9d0 kernel/locking/mutex.c:752
 genl_lock net/netlink/genetlink.c:33 [inline]
 genl_op_lock net/netlink/genetlink.c:58 [inline]
 genl_op_lock net/netlink/genetlink.c:55 [inline]
 genl_rcv_msg+0x57c/0x800 net/netlink/genetlink.c:1207
 netlink_rcv_skb+0x16b/0x440 net/netlink/af_netlink.c:2543
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1217
 netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline]
 netlink_unicast+0x53b/0x810 net/netlink/af_netlink.c:1367
 netlink_sendmsg+0x8b7/0xd70 net/netlink/af_netlink.c:1908
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg+0xd5/0x180 net/socket.c:745
 __sys_sendto+0x225/0x310 net/socket.c:2191
 __do_sys_sendto net/socket.c:2203 [inline]
 __se_sys_sendto net/socket.c:2199 [inline]
 __x64_sys_sendto+0xe0/0x1b0 net/socket.c:2199
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xd3/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7fe45447ea9c
RSP: 002b:00007fe4537fdf60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007fe4537fe050 RCX: 00007fe45447ea9c
RDX: 0000000000000020 RSI: 00007fe4537fe0a0 RDI: 000000000000000c
RBP: 0000000000000000 R08: 00007fe4537fdfb4 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c
R13: 00007fe4537fe008 R14: 00007fe4537fe0a0 R15: 0000000000000000
 </TASK>
INFO: task syz-executor.5:28285 blocked for more than 144 seconds.
      Not tainted 6.7.0-syzkaller-04629-g3e7aeb78ab01 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5  state:D stack:28680 pid:28285 tgid:28277 ppid:5091   flags:0x00000006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5400 [inline]
 __schedule+0xf12/0x5c00 kernel/sched/core.c:6727
 __schedule_loop kernel/sched/core.c:6802 [inline]
 schedule+0xe9/0x270 kernel/sched/core.c:6817
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6874
 __mutex_lock_common kernel/locking/mutex.c:684 [inline]
 __mutex_lock+0x5b9/0x9d0 kernel/locking/mutex.c:752
 __tun_chr_ioctl+0x4f8/0x4790 drivers/net/tun.c:3109
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:871 [inline]
 __se_sys_ioctl fs/ioctl.c:857 [inline]
 __x64_sys_ioctl+0x18f/0x210 fs/ioctl.c:857
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xd3/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7fe45447cda9
RSP: 002b:00007fe4537de0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fe4545ac1f0 RCX: 00007fe45447cda9
RDX: 0000000020000080 RSI: 00000000400454ca RDI: 000000000000000d
RBP: 00007fe4544c947a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007fe4545ac1f0 R15: 00007ffd021bf4e8
 </TASK>
INFO: lockdep is turned off.
NMI backtrace for cpu 1
CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.7.0-syzkaller-04629-g3e7aeb78ab01 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xd9/0x1b0 lib/dump_stack.c:106
 nmi_cpu_backtrace+0x277/0x390 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x299/0x300 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:160 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]
 watchdog+0xf87/0x1210 kernel/hung_task.c:379
 kthread+0x2c6/0x3a0 kernel/kthread.c:388
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 23176 Comm: kworker/u4:7 Not tainted 6.7.0-syzkaller-04629-g3e7aeb78ab01 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
Workqueue: events_unbound cfg80211_wiphy_work
RIP: 0010:__hlist_del include/linux/list.h:985 [inline]
RIP: 0010:hlist_del include/linux/list.h:1002 [inline]
RIP: 0010:__alloc_object lib/debugobjects.c:213 [inline]
RIP: 0010:alloc_object lib/debugobjects.c:226 [inline]
RIP: 0010:lookup_object_or_alloc.part.0+0xb5/0xaf0 lib/debugobjects.c:587
Code: 02 00 0f 85 cd 08 00 00 4c 8b 65 00 4d 85 e4 0f 84 22 03 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 80 3c 02 00 <0f> 85 de 08 00 00 49 8d 44 24 08 4d 8b 2c 24 48 ba 00 00 00 00 00
RSP: 0018:ffffc9000320f2e8 EFLAGS: 00000046
RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: 1ffff11005393cff RSI: ffffffff8b2f85c0 RDI: ffffffff8ca86a60
RBP: ffff8880b9839650 R08: 0000000000000001 R09: 0000000000000206
R10: 0000000000000003 R11: ffffffff8ace31a0 R12: ffff888029c9e7f8
R13: ffff88805a3652c0 R14: ffffffff92c03b60 R15: ffff88805a3652c0
FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000c00121eabc CR3: 000000002a3c3000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 lookup_object_or_alloc lib/debugobjects.c:567 [inline]
 debug_object_activate+0x384/0x540 lib/debugobjects.c:710
 debug_rcu_head_queue kernel/rcu/rcu.h:227 [inline]
 kvfree_call_rcu+0x30/0xbe0 kernel/rcu/tree.c:3391
 cfg80211_update_known_bss+0x34a/0xb20 net/wireless/scan.c:1791
 __cfg80211_bss_update+0x1b8/0x2550 net/wireless/scan.c:1837
 cfg80211_inform_single_bss_frame_data+0x91e/0x12c0 net/wireless/scan.c:3033
 cfg80211_inform_bss_frame_data+0x14c/0x350 net/wireless/scan.c:3068
 ieee80211_bss_info_update+0x311/0xab0 net/mac80211/scan.c:226
 ieee80211_rx_bss_info net/mac80211/ibss.c:1098 [inline]
 ieee80211_rx_mgmt_probe_beacon net/mac80211/ibss.c:1577 [inline]
 ieee80211_ibss_rx_queued_mgmt+0x1973/0x30e0 net/mac80211/ibss.c:1604
 ieee80211_iface_process_skb net/mac80211/iface.c:1589 [inline]
 ieee80211_iface_work+0xa67/0xda0 net/mac80211/iface.c:1643
 cfg80211_wiphy_work+0x24e/0x330 net/wireless/core.c:437
 process_one_work+0x886/0x15d0 kernel/workqueue.c:2633
 process_scheduled_works kernel/workqueue.c:2706 [inline]
 worker_thread+0x8b9/0x1290 kernel/workqueue.c:2787
 kthread+0x2c6/0x3a0 kernel/kthread.c:388
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:242
 </TASK>

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/01/16 01:49 net-next 3e7aeb78ab01 2a7bcc7f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-kasan-gce INFO: task hung in ieee80211_register_hw
* Struck through repros no longer work on HEAD.