syzbot


INFO: task hung in reg_check_chans_work

Status: auto-closed as invalid on 2019/02/22 15:19
First crash: 2481d, last: 2383d
Similar bugs (11)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 INFO: task hung in reg_check_chans_work 10 14d 299d 0/3 upstream: reported on 2024/01/27 00:47
upstream INFO: task hung in reg_check_chans_work (6) wireless C error 129 137d 211d 26/28 fixed on 2024/07/09 19:14
upstream INFO: task hung in reg_check_chans_work (3) wireless 60 1082d 1145d 0/28 auto-closed as invalid on 2022/04/03 20:03
linux-4.14 INFO: task hung in reg_check_chans_work 1 928d 928d 0/1 auto-obsoleted due to no activity on 2022/09/05 08:58
upstream INFO: task hung in reg_check_chans_work (7) wireless C error 294 1d12h 59d 0/28 upstream: reported C repro on 2024/09/23 08:39
upstream INFO: task hung in reg_check_chans_work (4) wireless 4 874d 877d 0/28 auto-closed as invalid on 2022/09/28 14:08
upstream INFO: task hung in reg_check_chans_work net 15 2412d 2471d 0/28 closed as dup on 2018/02/14 15:33
android-44 INFO: task hung in reg_check_chans_work 18 2384d 2458d 0/2 auto-closed as invalid on 2019/02/22 14:50
linux-6.1 INFO: task hung in reg_check_chans_work 3 161d 179d 0/3 auto-obsoleted due to no activity on 2024/09/20 17:51
upstream INFO: task hung in reg_check_chans_work (5) wireless 26 388d 517d 0/28 auto-obsoleted due to no activity on 2024/01/08 12:17
upstream INFO: task hung in reg_check_chans_work (2) wireless 3 1506d 1515d 0/28 auto-closed as invalid on 2021/01/04 12:48

Sample crash report:
IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
IPVS: stopping backup sync thread 9245 ...
INFO: task kworker/0:2:1832 blocked for more than 120 seconds.
      Not tainted 4.9.99-gc2f9bce #22
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
kworker/0:2     D26488  1832      2 0x00000000
Workqueue: events_power_efficient reg_check_chans_work
 ffff8801ce098000 0000000000000000 ffff8801c36a8540 ffffffff84629800
 ffff8801db221b98 ffff8801ce0c7a18 ffffffff839e377d ffff8801ce0988c8
 ffffed0039c13118 ffff8801ce098000 00fffc0000000000 ffff8801db222468
Call Trace:
 [<ffffffff839e4d7f>] schedule+0x7f/0x1b0 kernel/sched/core.c:3557
 [<ffffffff839e5703>] schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3590
 [<ffffffff839e9b86>] __mutex_lock_common kernel/locking/mutex.c:582 [inline]
 [<ffffffff839e9b86>] mutex_lock_nested+0x326/0x870 kernel/locking/mutex.c:621
 [<ffffffff830b1837>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
 [<ffffffff836ddda4>] reg_check_chans_work+0x74/0xd90 net/wireless/reg.c:1652
 [<ffffffff8118ae31>] process_one_work+0x7e1/0x1500 kernel/workqueue.c:2092
 [<ffffffff8118bc26>] worker_thread+0xd6/0x10a0 kernel/workqueue.c:2226
 [<ffffffff8119ad5d>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff839f481c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373

Showing all locks held in the system:
3 locks held by kworker/1:1/24:
 #0:  ("%s"("ipv6_addrconf")){.+.+..}, at: [<ffffffff8118ad3e>] work_static include/linux/workqueue.h:186 [inline]
 #0:  ("%s"("ipv6_addrconf")){.+.+..}, at: [<ffffffff8118ad3e>] set_work_data kernel/workqueue.c:617 [inline]
 #0:  ("%s"("ipv6_addrconf")){.+.+..}, at: [<ffffffff8118ad3e>] set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline]
 #0:  ("%s"("ipv6_addrconf")){.+.+..}, at: [<ffffffff8118ad3e>] process_one_work+0x6ee/0x1500 kernel/workqueue.c:2085
 #1:  ((addr_chk_work).work){+.+...}, at: [<ffffffff8118ad78>] process_one_work+0x728/0x1500 kernel/workqueue.c:2089
 #2:  (rtnl_mutex){+.+.+.}, at: [<ffffffff830b1837>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
2 locks held by khungtaskd/519:
 #0:  (rcu_read_lock){......}, at: [<ffffffff813646ec>] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline]
 #0:  (rcu_read_lock){......}, at: [<ffffffff813646ec>] watchdog+0x11c/0xa20 kernel/hung_task.c:239
 #1:  (tasklist_lock){.+.+..}, at: [<ffffffff81423bc0>] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336
3 locks held by kworker/0:2/1832:
 #0:  ("events_power_efficient"){.+.+.+}, at: [<ffffffff8118ad3e>] work_static include/linux/workqueue.h:186 [inline]
 #0:  ("events_power_efficient"){.+.+.+}, at: [<ffffffff8118ad3e>] set_work_data kernel/workqueue.c:617 [inline]
 #0:  ("events_power_efficient"){.+.+.+}, at: [<ffffffff8118ad3e>] set_work_pool_and_clear_pending kernel/workqueue.c:644 [inline]
 #0:  ("events_power_efficient"){.+.+.+}, at: [<ffffffff8118ad3e>] process_one_work+0x6ee/0x1500 kernel/workqueue.c:2085
 #1:  ((reg_check_chans).work){+.+...}, at: [<ffffffff8118ad78>] process_one_work+0x728/0x1500 kernel/workqueue.c:2089
 #2:  (rtnl_mutex){+.+.+.}, at: [<ffffffff830b1837>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by rsyslogd/3534:
 #0:  (&f->f_pos_lock){+.+.+.}, at: [<ffffffff815d567c>] __fdget_pos+0xac/0xd0 fs/file.c:781
2 locks held by getty/3639:
 #0:  (&tty->ldisc_sem){++++++}, at: [<ffffffff839f2822>] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367
 #1:  (&ldata->atomic_read_lock){+.+.+.}, at: [<ffffffff8211cc32>] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2133
2 locks held by syz-executor0/9183:
 #0:  (net_mutex){+.+.+.}, at: [<ffffffff83058fb5>] copy_net_ns+0x155/0x290 net/core/net_namespace.c:406
 #1:  (rtnl_mutex){+.+.+.}, at: [<ffffffff830b1837>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor0/9260:
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff830b1837>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor0/9261:
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff830b1837>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor0/9269:
 #0:  (net_mutex){+.+.+.}, at: [<ffffffff83058fb5>] copy_net_ns+0x155/0x290 net/core/net_namespace.c:406
1 lock held by syz-executor7/9194:
 #0:  (net_mutex){+.+.+.}, at: [<ffffffff83058fb5>] copy_net_ns+0x155/0x290 net/core/net_namespace.c:406
1 lock held by syz-executor7/9262:
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff830b1837>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor7/9265:
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff830b1837>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor7/9268:
 #0:  (net_mutex){+.+.+.}, at: [<ffffffff83058fb5>] copy_net_ns+0x155/0x290 net/core/net_namespace.c:406
1 lock held by syz-executor7/9273:
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff830b1837>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
1 lock held by syz-executor7/9276:
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff830b1837>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
2 locks held by syz-executor6/9204:
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff830b1837>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70
 #1:  (ipvs->sync_mutex){+.+.+.}, at: [<ffffffff832df74d>] do_ip_vs_set_ctl+0x90d/0xbd0 net/netfilter/ipvs/ip_vs_ctl.c:2397
1 lock held by syz-executor6/9242:
 #0:  (ipvs->sync_mutex){+.+.+.}, at: [<ffffffff832df485>] do_ip_vs_set_ctl+0x645/0xbd0 net/netfilter/ipvs/ip_vs_ctl.c:2402
1 lock held by ipvs-b:8:0/9245:
 #0:  (rtnl_mutex){+.+.+.}, at: [<ffffffff830b1837>] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 519 Comm: khungtaskd Not tainted 4.9.99-gc2f9bce #22
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801d965fd08 ffffffff81eb0f09 0000000000000000 0000000000000000
 0000000000000000 0000000000000001 ffffffff810b7da0 ffff8801d965fd40
 ffffffff81ebc207 0000000000000000 0000000000000000 0000000000000003
Call Trace:
 [<ffffffff81eb0f09>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81eb0f09>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff81ebc207>] nmi_cpu_backtrace.cold.2+0x48/0x87 lib/nmi_backtrace.c:99
 [<ffffffff81ebc19a>] nmi_trigger_cpumask_backtrace+0x12a/0x14f lib/nmi_backtrace.c:60
 [<ffffffff810b7ea4>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37
 [<ffffffff81364c84>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline]
 [<ffffffff81364c84>] check_hung_task kernel/hung_task.c:125 [inline]
 [<ffffffff81364c84>] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline]
 [<ffffffff81364c84>] watchdog+0x6b4/0xa20 kernel/hung_task.c:239
 [<ffffffff8119ad5d>] kthread+0x26d/0x300 kernel/kthread.c:211
 [<ffffffff839f481c>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.9.99-gc2f9bce #22
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801d9a6b000 task.stack: ffff8801d9a80000
RIP: 0010:[<ffffffff811e76ef>] c [<ffffffff811e76ef>] decay_load kernel/sched/fair.c:2772 [inline]
RIP: 0010:[<ffffffff811e76ef>] c [<ffffffff811e76ef>] __update_load_avg kernel/sched/fair.c:2906 [inline]
RIP: 0010:[<ffffffff811e76ef>] c [<ffffffff811e76ef>] update_cfs_rq_load_avg+0x77f/0x1f10 kernel/sched/fair.c:3291
RSP: 0018:ffff8801db307c90  EFLAGS: 00000093
RAX: 0000000002259047 RBX: ffff8801db321c20 RCX: 000000000000001f
RDX: 0000000000000365 RSI: ffff8801db321c80 RDI: 0000000000000004
RBP: ffff8801db307d30 R08: 0000000000000001 R09: 0000000000000004
R10: 000000000000009b R11: 0000000000000000 R12: 000000000000001f
R13: 0000000000000000 R14: ffff8801db321ce8 R15: ffff8801db321c88
FS:  0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9be533a95f CR3: 00000001c9a13000 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffffffff810cccf3c ffff8801db307ca8c ffff8801d9a6b000c ffffed003b34d718c
 ffff8801d9a6b8c8c ffff8801db321b98c 0000000000000000c 0000000000000c1fc
 ffffffff8122e3f2c 0000000000000003c 0000000000000004c 0000000000000004c
Call Trace:
 [<ffffffff811f019a>] update_blocked_averages+0x26a/0x520 kernel/sched/fair.c:8201
 [<ffffffff812058b4>] rebalance_domains+0xe4/0xbc0 kernel/sched/fair.c:10075
 [<ffffffff81206689>] run_rebalance_domains+0x2f9/0x510 kernel/sched/fair.c:10332
 [<ffffffff839fb23b>] __do_softirq+0x20b/0x937 kernel/softirq.c:284
 [<ffffffff81149037>] invoke_softirq kernel/softirq.c:364 [inline]
 [<ffffffff81149037>] irq_exit+0x147/0x190 kernel/softirq.c:405
 [<ffffffff839f8de1>] smp_reschedule_interrupt+0x71/0x90 arch/x86/kernel/smp.c:270
 [<ffffffff839f6950>] reschedule_interrupt+0xa0/0xb0 arch/x86/entry/entry_64.S:671
 <EOI> d [<ffffffff839f3286>] ? native_safe_halt+0x6/0x10 arch/x86/include/asm/irqflags.h:53
 [<ffffffff839f28c5>] arch_safe_halt arch/x86/include/asm/paravirt.h:104 [inline]
 [<ffffffff839f28c5>] default_idle+0x55/0x360 arch/x86/kernel/process.c:295
 [<ffffffff81069fa0>] arch_cpu_idle+0x10/0x20 arch/x86/kernel/process.c:286
 [<ffffffff839f36e5>] default_idle_call+0x45/0x60 kernel/sched/idle.c:97
 [<ffffffff81220e65>] cpuidle_idle_call kernel/sched/idle.c:155 [inline]
 [<ffffffff81220e65>] cpu_idle_loop kernel/sched/idle.c:248 [inline]
 [<ffffffff81220e65>] cpu_startup_entry+0x2b5/0x380 kernel/sched/idle.c:303
 [<ffffffff810ad1f3>] start_secondary+0x323/0x400 arch/x86/kernel/smpboot.c:254
Code: c4c c89 c64 c24 c38 c48 c89 c7c c24 c48 c48 c83 cc7 c01 c49 c89 ccc c48 c81 cff ce0 c07 c00 c00 c48 c89 c7c c24 c58 c0f c87 cb2 c09 c00 c00 c48 c83 cff c1f c89 c7c c24 c50 c<0f> c87 c37 c0b c00 c00 c48 cba c00 c00 c00 c00 c00 cfc cff cdf c8b c4c c24 c58 c48 c

Crashes (18):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/05/13 12:05 https://android.googlesource.com/kernel/common android-4.9 c2f9bce9fee8 c05b619d .config console log report ci-android-49-kasan-gce-root
2018/05/12 17:24 https://android.googlesource.com/kernel/common android-4.9 c2f9bce9fee8 e726f42b .config console log report ci-android-49-kasan-gce-root
2018/05/11 10:40 https://android.googlesource.com/kernel/common android-4.9 c462abbf779b 12c7428a .config console log report ci-android-49-kasan-gce
2018/05/11 03:53 https://android.googlesource.com/kernel/common android-4.9 c462abbf779b 12c7428a .config console log report ci-android-49-kasan-gce
2018/05/08 07:10 https://android.googlesource.com/kernel/common android-4.9 a03d0bbacd41 045bbd4a .config console log report ci-android-49-kasan-gce-root
2018/05/05 05:57 https://android.googlesource.com/kernel/common android-4.9 f5a861c30cb7 9ce14f4b .config console log report ci-android-49-kasan-gce
2018/04/29 20:02 https://android.googlesource.com/kernel/common android-4.9 71fce1edd26d bb79c6ab .config console log report ci-android-49-kasan-gce-root
2018/04/26 07:08 https://android.googlesource.com/kernel/common android-4.9 132f097f6547 73417389 .config console log report ci-android-49-kasan-gce-root
2018/04/23 06:46 https://android.googlesource.com/kernel/common android-4.9 ee0bcd679075 d23fcf6c .config console log report ci-android-49-kasan-gce
2018/04/22 22:03 https://android.googlesource.com/kernel/common android-4.9 ee0bcd679075 d23fcf6c .config console log report ci-android-49-kasan-gce
2018/04/18 05:51 https://android.googlesource.com/kernel/common android-4.9 8683408f8e81 b80fd3b5 .config console log report ci-android-49-kasan-gce
2018/04/18 02:20 https://android.googlesource.com/kernel/common android-4.9 8683408f8e81 b80fd3b5 .config console log report ci-android-49-kasan-gce
2018/04/17 12:45 https://android.googlesource.com/kernel/common android-4.9 8683408f8e81 b80fd3b5 .config console log report ci-android-49-kasan-gce
2018/04/14 16:17 https://android.googlesource.com/kernel/common android-4.9 2ba4887f2937 7a67784c .config console log report ci-android-49-kasan-gce
2018/04/04 02:48 https://android.googlesource.com/kernel/common android-4.9 13b40d327b49 676bd07e .config console log report ci-android-49-kasan-gce
2018/02/04 14:33 https://android.googlesource.com/kernel/common android-4.9 b30d2b5deba5 a1bc9d40 .config console log report ci-android-49-kasan-gce
2018/03/28 07:48 https://android.googlesource.com/kernel/common android-4.9 dd1e37e64645 bf5e585c .config console log report ci-android-49-kasan-gce-386
2018/03/26 17:13 https://android.googlesource.com/kernel/common android-4.9 dd1e37e64645 0ca7878b .config console log report ci-android-49-kasan-gce-386
* Struck through repros no longer work on HEAD.