syzbot


INFO: task hung in utimes_common

Status: auto-closed as invalid on 2019/10/25 08:48
Reported-by: syzbot+9dfb05ed32f75027f492@syzkaller.appspotmail.com
First crash: 1160d, last: 1160d
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in utimes_common 23 1360d 1458d 0/22 closed as dup on 2018/07/18 11:44
android-49 INFO: task hung in utimes_common 15 1407d 1458d 0/3 auto-closed as invalid on 2019/02/25 22:39

Sample crash report:
INFO: task syz-executor.5:13658 blocked for more than 140 seconds.
kobject: 'rfkill394' (ffff888067969828): kobject_add_internal: parent: 'phy392', set: 'devices'
      Not tainted 4.14.115 #5
kobject: 'rfkill394' (ffff888067969828): kobject_uevent_env
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kobject: 'rfkill394' (ffff888067969828): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim392/ieee80211/phy392/rfkill394'
ieee80211 phy392: Selected rate control algorithm 'minstrel_ht'
syz-executor.5  D29672 13658  10545 0x00000000
kobject: 'net' (ffff888099613a80): kobject_add_internal: parent: 'hwsim392', set: '(null)'
Call Trace:
kobject: 'wlan51' (ffff888058b4cff0): kobject_add_internal: parent: 'net', set: 'devices'
 context_switch kernel/sched/core.c:2807 [inline]
 __schedule+0x7be/0x1cf0 kernel/sched/core.c:3383
kobject: 'wlan51' (ffff888058b4cff0): kobject_uevent_env
kobject: 'wlan51' (ffff888058b4cff0): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim392/net/wlan51'
kobject: 'queues' (ffff88804269b948): kobject_add_internal: parent: 'wlan51', set: '<NULL>'
 schedule+0x92/0x1c0 kernel/sched/core.c:3427
kobject: 'queues' (ffff88804269b948): kobject_uevent_env
 __rwsem_down_write_failed_common kernel/locking/rwsem-xadd.c:572 [inline]
 rwsem_down_write_failed+0x5cd/0xbe0 kernel/locking/rwsem-xadd.c:601
kobject: 'queues' (ffff88804269b948): kobject_uevent_env: filter function caused the event to drop!
kobject: 'rx-0' (ffff888096f080d0): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'rx-0' (ffff888096f080d0): kobject_uevent_env
 call_rwsem_down_write_failed+0x17/0x30 arch/x86/lib/rwsem.S:105
kobject: 'rx-0' (ffff888096f080d0): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim392/net/wlan51/queues/rx-0'
kobject: 'tx-0' (ffff8880a5254bd8): kobject_add_internal: parent: 'queues', set: 'queues'
 __down_write arch/x86/include/asm/rwsem.h:126 [inline]
 down_write+0x53/0x90 kernel/locking/rwsem.c:56
kobject: 'tx-0' (ffff8880a5254bd8): kobject_uevent_env
kobject: 'tx-0' (ffff8880a5254bd8): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim392/net/wlan51/queues/tx-0'
 inode_lock include/linux/fs.h:715 [inline]
 utimes_common.isra.0+0x28c/0x560 fs/utimes.c:90
kobject: 'tx-1' (ffff8880a5254d58): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'tx-1' (ffff8880a5254d58): kobject_uevent_env
kobject: 'tx-1' (ffff8880a5254d58): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim392/net/wlan51/queues/tx-1'
kobject: 'tx-2' (ffff8880a5254ed8): kobject_add_internal: parent: 'queues', set: 'queues'
 do_utimes+0x172/0x270 fs/utimes.c:156
kobject: 'tx-2' (ffff8880a5254ed8): kobject_uevent_env
kobject: 'tx-2' (ffff8880a5254ed8): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim392/net/wlan51/queues/tx-2'
kobject: 'tx-3' (ffff8880a5255058): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'tx-3' (ffff8880a5255058): kobject_uevent_env
kobject: 'tx-3' (ffff8880a5255058): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim392/net/wlan51/queues/tx-3'
kobject: 'batman_adv' (ffff8880a5ee7580): kobject_add_internal: parent: 'wlan51', set: '<NULL>'
ieee80211 phy392: hwaddr 02:00:00:01:88:00 registered
kobject: 'hwsim393' (ffff888067509350): kobject_add_internal: parent: 'mac80211_hwsim', set: 'devices'
kobject: 'hwsim393' (ffff888067509350): kobject_uevent_env
kobject: 'hwsim393' (ffff888067509350): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim393'
kobject: 'hwsim393' (ffff888067509350): kobject_uevent_env
kobject: 'hwsim393' (ffff888067509350): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim393'
kobject: 'ieee80211' (ffff8880911e0700): kobject_add_internal: parent: 'hwsim393', set: '(null)'
kobject: 'phy393' (ffff88805c7b3eb0): kobject_add_internal: parent: 'ieee80211', set: 'devices'
 SYSC_utime fs/utimes.c:35 [inline]
 SyS_utime+0xe8/0x130 fs/utimes.c:24
kobject: 'loop5' (ffff8880a4adc9e0): kobject_uevent_env
kobject: 'loop5' (ffff8880a4adc9e0): fill_kobj_path: path = '/devices/virtual/block/loop5'
kobject: 'phy393' (ffff88805c7b3eb0): kobject_uevent_env
 do_syscall_64+0x1eb/0x630 arch/x86/entry/common.c:289
kobject: 'phy393' (ffff88805c7b3eb0): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim393/ieee80211/phy393'
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x458da9
RSP: 002b:00007f9370c18c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000084
kobject: 'rfkill395' (ffff8880a87845e8): kobject_add_internal: parent: 'phy393', set: 'devices'
RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000458da9
kobject: 'rfkill395' (ffff8880a87845e8): kobject_uevent_env
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
kobject: 'rfkill395' (ffff8880a87845e8): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim393/ieee80211/phy393/rfkill395'
RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9370c196d4
ieee80211 phy393: Selected rate control algorithm 'minstrel_ht'
R13: 00000000004c7e6d R14: 00000000004de120 R15: 00000000ffffffff
kobject: 'net' (ffff888093fba480): kobject_add_internal: parent: 'hwsim393', set: '(null)'

Showing all locks held in the system:
kobject: 'wlan94' (ffff88805e39e0f0): kobject_add_internal: parent: 'net', set: 'devices'
1 lock held by khungtaskd/1010:
 #0:  (tasklist_lock){.+.+}, at: [<ffffffff81488b68>] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4541
kobject: 'wlan94' (ffff88805e39e0f0): kobject_uevent_env
1 lock held by rsyslogd/7003:
 #0:  (&f->f_pos_lock){+.+.}, at: [<ffffffff8194598b>] __fdget_pos+0xab/0xd0 fs/file.c:769
kobject: 'wlan94' (ffff88805e39e0f0): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim393/net/wlan94'
2 locks held by getty/7125:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861cb473>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
kobject: 'queues' (ffff88804269b848): kobject_add_internal: parent: 'wlan94', set: '<NULL>'
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff83115716>] n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7126:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861cb473>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff83115716>] n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
kobject: 'queues' (ffff88804269b848): kobject_uevent_env
2 locks held by getty/7127:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861cb473>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff83115716>] n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7128:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861cb473>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff83115716>] n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7129:
 #0:  (&tty->ldisc_sem){++++}
kobject: 'queues' (ffff88804269b848): kobject_uevent_env: filter function caused the event to drop!
, at: [<ffffffff861cb473>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff83115716>] n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7130:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861cb473>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff83115716>] n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by getty/7131:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861cb473>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff83115716>] n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by syz-executor.5/11904:
 #0:  (sb_writers#20){.+.+}, at: [<ffffffff8194ec9f>] sb_start_write include/linux/fs.h:1545 [inline]
 #0:  (sb_writers#20){.+.+}, at: [<ffffffff8194ec9f>] mnt_want_write+0x3f/0xb0 fs/namespace.c:386
 #1:  (&sb->s_type->i_mutex_key#24){+.+.}, at: [<ffffffff8199101c>] inode_lock include/linux/fs.h:715 [inline]
 #1:  (&sb->s_type->i_mutex_key#24){+.+.}, at: [<ffffffff8199101c>] utimes_common.isra.0+0x28c/0x560 fs/utimes.c:90
2 locks held by syz-executor.5/12251:
 #0:  (sb_writers#20){.+.+}, at: [<ffffffff8194ec9f>] sb_start_write include/linux/fs.h:1545 [inline]
 #0:  (sb_writers#20){.+.+}, at: [<ffffffff8194ec9f>] mnt_want_write+0x3f/0xb0 fs/namespace.c:386
 #1:  (&sb->s_type->i_mutex_key#24){+.+.}, at: [<ffffffff8199101c>] inode_lock include/linux/fs.h:715 [inline]
 #1:  (&sb->s_type->i_mutex_key#24){+.+.}, at: [<ffffffff8199101c>] utimes_common.isra.0+0x28c/0x560 fs/utimes.c:90
2 locks held by syz-executor.5/12271:
 #0:  (sb_writers#20){.+.+}, at: [<ffffffff8194ec9f>] sb_start_write include/linux/fs.h:1545 [inline]
 #0:  (sb_writers#20){.+.+}, at: [<ffffffff8194ec9f>] mnt_want_write+0x3f/0xb0 fs/namespace.c:386
 #1:  (&sb->s_type->i_mutex_key#24){+.+.}, at: [<ffffffff8199101c>] inode_lock include/linux/fs.h:715 [inline]
 #1:  (&sb->s_type->i_mutex_key#24){+.+.}, at: [<ffffffff8199101c>] utimes_common.isra.0+0x28c/0x560 fs/utimes.c:90
2 locks held by syz-executor.5/13100:
 #0:  (sb_writers#20){.+.+}, at: [<ffffffff8194ec9f>] sb_start_write include/linux/fs.h:1545 [inline]
 #0:  (sb_writers#20){.+.+}, at: [<ffffffff8194ec9f>] mnt_want_write+0x3f/0xb0 fs/namespace.c:386
 #1:  (&sb->s_type->i_mutex_key#24){+.+.}, at: [<ffffffff8199101c>] inode_lock include/linux/fs.h:715 [inline]
 #1:  (&sb->s_type->i_mutex_key#24){+.+.}, at: [<ffffffff8199101c>] utimes_common.isra.0+0x28c/0x560 fs/utimes.c:90
2 locks held by syz-executor.5/13636:
 #0:  (sb_writers#20){.+.+}, at: [<ffffffff8194ec9f>] sb_start_write include/linux/fs.h:1545 [inline]
 #0:  (sb_writers#20){.+.+}, at: [<ffffffff8194ec9f>] mnt_want_write+0x3f/0xb0 fs/namespace.c:386
 #1:  (&sb->s_type->i_mutex_key#24){+.+.}, at: [<ffffffff8195f921>] inode_lock include/linux/fs.h:715 [inline]
 #1:  (&sb->s_type->i_mutex_key#24){+.+.}, at: [<ffffffff8195f921>] vfs_setxattr+0x91/0xf0 fs/xattr.c:219
2 locks held by syz-executor.5/13658:
 #0:  (sb_writers#20){.+.+}, at: [<ffffffff8194ec9f>] sb_start_write include/linux/fs.h:1545 [inline]
 #0:  (sb_writers#20){.+.+}, at: [<ffffffff8194ec9f>] mnt_want_write+0x3f/0xb0 fs/namespace.c:386
 #1:  (&sb->s_type->i_mutex_key#24){+.+.}, at: [<ffffffff8199101c>] inode_lock include/linux/fs.h:715 [inline]
 #1:  (&sb->s_type->i_mutex_key#24){+.+.}, at: [<ffffffff8199101c>] utimes_common.isra.0+0x28c/0x560 fs/utimes.c:90
2 locks held by syz-executor.2/22569:
 #0:  (&tty->legacy_mutex){+.+.}, at: [<ffffffff83127e66>] tty_lock+0x66/0x80 drivers/tty/tty_mutex.c:19
 #1:  (&tty->ldisc_sem){++++}, at: [<ffffffff861cb4b3>] ldsem_down_write+0x33/0x39 drivers/tty/tty_ldsem.c:403
1 lock held by syz-executor.2/22572:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861cb473>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
2 locks held by syz-executor.2/22557:
 #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861cb473>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377
 #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff83115716>] n_tty_read+0x1e6/0x17b0 drivers/tty/n_tty.c:2156
2 locks held by syz-executor.0/22560:
 #0:  (cb_lock){++++}, at: [<ffffffff84f5010a>] genl_rcv+0x1a/0x40 net/netlink/genetlink.c:635
 #1:  (genl_mutex){+.+.}, at: [<ffffffff84f50e89>] genl_lock net/netlink/genetlink.c:33 [inline]
 #1:  (genl_mutex){+.+.}, at: [<ffffffff84f50e89>] genl_rcv_msg+0x119/0x150 net/netlink/genetlink.c:623
2 locks held by syz-executor.1/22565:
 #0:  (cb_lock){++++}, at: [<ffffffff84f5010a>] genl_rcv+0x1a/0x40 net/netlink/genetlink.c:635
 #1:  (genl_mutex){+.+.}, at: [<ffffffff84f50e89>] genl_lock net/netlink/genetlink.c:33 [inline]
 #1:  (genl_mutex){+.+.}, at: [<ffffffff84f50e89>] genl_rcv_msg+0x119/0x150 net/netlink/genetlink.c:623
2 locks held by syz-executor.3/22566:
 #0:  (cb_lock){++++}, at: [<ffffffff84f5010a>] genl_rcv+0x1a/0x40 net/netlink/genetlink.c:635
 #1:  (genl_mutex){+.+.}, at: [<ffffffff84f50e89>] genl_lock net/netlink/genetlink.c:33 [inline]
 #1:  (genl_mutex){+.+.}, at: [<ffffffff84f50e89>] genl_rcv_msg+0x119/0x150 net/netlink/genetlink.c:623
2 locks held by syz-executor.5/22575:
 #0:  (cb_lock){++++}, at: [<ffffffff84f5010a>] genl_rcv+0x1a/0x40 net/netlink/genetlink.c:635
 #1:  (genl_mutex){+.+.}, at: [<ffffffff84f50e89>] genl_lock net/netlink/genetlink.c:33 [inline]
 #1:  (genl_mutex){+.+.}, at: [<ffffffff84f50e89>] genl_rcv_msg+0x119/0x150 net/netlink/genetlink.c:623

=============================================

kobject: 'rx-0' (ffff88808d70e250): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'rx-0' (ffff88808d70e250): kobject_uevent_env
NMI backtrace for cpu 0
kobject: 'rx-0' (ffff88808d70e250): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim393/net/wlan94/queues/rx-0'
CPU: 0 PID: 1010 Comm: khungtaskd Not tainted 4.14.115 #5
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x138/0x19c lib/dump_stack.c:53
 nmi_cpu_backtrace.cold+0x57/0x94 lib/nmi_backtrace.c:101
kobject: 'tx-0' (ffff888065e3ac58): kobject_add_internal: parent: 'queues', set: 'queues'
 nmi_trigger_cpumask_backtrace+0x141/0x189 lib/nmi_backtrace.c:62
 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38
kobject: 'tx-0' (ffff888065e3ac58): kobject_uevent_env
 trigger_all_cpu_backtrace include/linux/nmi.h:140 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:195 [inline]
 watchdog+0x5e7/0xb90 kernel/hung_task.c:274
 kthread+0x31c/0x430 kernel/kthread.c:232
kobject: 'tx-0' (ffff888065e3ac58): fill_kobj_path: path = '/devices/virtual/mac80211_hwsim/hwsim393/net/wlan94/queues/tx-0'
 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402
Sending NMI from CPU 0 to CPUs 1:
kobject: 'tx-1' (ffff888065e3add8): kobject_add_internal: parent: 'queues', set: 'queues'
NMI backtrace for cpu 1
CPU: 1 PID: 22540 Comm: syz-executor.4 Not tainted 4.14.115 #5
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8880878a4080 task.stack: ffff888068308000
RIP: 0010:preempt_count_sub+0x4b/0x130 kernel/sched/core.c:3130
RSP: 0018:ffff8880aef07cf0 EFLAGS: 00000002
RAX: 0000000000010002 RBX: 0000000000000001 RCX: 0000000000000000
RDX: 0000000000000004 RSI: ffffffff869bee00 RDI: 0000000000000001
RBP: ffff8880aef07cf8 R08: 0000000000000000 R09: ffff8880878a4998
R10: ffff8880878a4978 R11: ffff8880878a4080 R12: 0000000000000001
R13: ffff8880aef2c4c0 R14: ffff8880aef2ce48 R15: 0000000100006a7c
FS:  00007f997b754700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b33720000 CR3: 000000005ee42000 CR4: 00000000001426e0
Call Trace:
 <IRQ>
 rcu_lockdep_current_cpu_online kernel/rcu/tree.c:1190 [inline]
 rcu_lockdep_current_cpu_online+0xf2/0x140 kernel/rcu/tree.c:1177
 rcu_read_lock_held+0x8a/0xd0 kernel/rcu/update.c:330
 set_cpu_sd_state_busy kernel/sched/fair.c:8681 [inline]
 nohz_kick_needed kernel/sched/fair.c:8950 [inline]
 trigger_load_balance+0x2d2/0xa00 kernel/sched/fair.c:9045
 scheduler_tick+0x1d9/0x2d0 kernel/sched/core.c:3042
 update_process_times+0x49/0x70 kernel/time/timer.c:1593
 tick_sched_handle+0x85/0x160 kernel/time/tick-sched.c:161
 tick_sched_timer+0x43/0x130 kernel/time/tick-sched.c:1219
 __run_hrtimer kernel/time/hrtimer.c:1220 [inline]
 __hrtimer_run_queues+0x273/0xbd0 kernel/time/hrtimer.c:1284
 hrtimer_interrupt+0x1d8/0x5d0 kernel/time/hrtimer.c:1318
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1037 [inline]
 smp_apic_timer_interrupt+0x12c/0x600 arch/x86/kernel/apic/apic.c:1062
 apic_timer_interrupt+0x8e/0xa0 arch/x86/entry/entry_64.S:787
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:778 [inline]
RIP: 0010:console_trylock_spinning kernel/printk/printk.c:1679 [inline]
RIP: 0010:vprintk_emit kernel/printk/printk.c:1916 [inline]
RIP: 0010:vprintk_emit+0x524/0x600 kernel/printk/printk.c:1882
RSP: 0018:ffff88806830f028 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10
RAX: 0000000000040000 RBX: 1ffffffff0ee296d RCX: ffffc9000c862000
RDX: 0000000000040000 RSI: ffffffff814b274f RDI: 0000000000000246
RBP: ffff88806830f068 R08: ffff8880878a4080 R09: ffff8880878a4970
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000059
R13: 0000000000000246 R14: ffff8880a8612540 R15: 0000000000000000
 vprintk_default+0x28/0x30 kernel/printk/printk.c:1957
 vprintk_func+0x5d/0x159 kernel/printk/printk_safe.c:401
 printk+0x9e/0xbc kernel/printk/printk.c:1990
 kobject_add_internal.part.0.cold+0x101/0x5b1 lib/kobject.c:224
 kobject_add_internal lib/kobject.c:363 [inline]
 kobject_add_varg lib/kobject.c:364 [inline]
 kobject_init_and_add+0x12c/0x140 lib/kobject.c:436
 netdev_queue_add_kobject net/core/net-sysfs.c:1326 [inline]
 netdev_queue_update_kobjects+0xe8/0x360 net/core/net-sysfs.c:1355
 register_queue_kobjects net/core/net-sysfs.c:1397 [inline]
 netdev_register_kobject+0x28a/0x3a0 net/core/net-sysfs.c:1603
 register_netdevice+0x81c/0xca0 net/core/dev.c:7665
 ieee80211_if_add+0xfa0/0x17f0 net/mac80211/iface.c:1902
 ieee80211_register_hw+0x2628/0x2f30 net/mac80211/main.c:1119
 mac80211_hwsim_new_radio+0x19a1/0x2980 drivers/net/wireless/mac80211_hwsim.c:2705
 hwsim_new_radio_nl+0x3f2/0x62e drivers/net/wireless/mac80211_hwsim.c:3164
 genl_family_rcv_msg+0x61c/0xc40 net/netlink/genetlink.c:600
 genl_rcv_msg+0xb4/0x150 net/netlink/genetlink.c:625
 netlink_rcv_skb+0x152/0x3c0 net/netlink/af_netlink.c:2432
 genl_rcv+0x29/0x40 net/netlink/genetlink.c:636
 netlink_unicast_kernel net/netlink/af_netlink.c:1286 [inline]
 netlink_unicast+0x466/0x780 net/netlink/af_netlink.c:1312
 netlink_sendmsg+0x7c4/0xc60 net/netlink/af_netlink.c:1877
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xd0/0x110 net/socket.c:656
 ___sys_sendmsg+0x70c/0x850 net/socket.c:2062
 __sys_sendmsg+0xb9/0x140 net/socket.c:2096
 SYSC_sendmsg net/socket.c:2107 [inline]
 SyS_sendmsg+0x2d/0x50 net/socket.c:2103
 do_syscall_64+0x1eb/0x630 arch/x86/entry/common.c:289
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x458da9
RSP: 002b:00007f997b753c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9
RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f997b7546d4
R13: 00000000004c6681 R14: 00000000004dafd0 R15: 00000000ffffffff
Code: 83 c0 03 89 fb 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c8 00 00 00 8b 0d c5 62 da 07 85 c9 75 18 65 8b 05 0a fa c1 7e 25 ff ff ff 7f <39> c3 7f 1b 81 fb fe 00 00 00 76 55 65 8b 05 f2 f9 c1 7e f7 db 

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-14 2019/05/04 01:36 linux-4.14.y 1c046f373132 d28f4ce5 .config log report