syzbot


INFO: task hung in rfkill_unregister

Status: upstream: reported on 2024/04/17 14:01
Reported-by: syzbot+c07f5c64b3fd1ef07bf0@syzkaller.appspotmail.com
First crash: 305d, last: 72d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in rfkill_unregister wireless 2 1174d 1176d 0/28 auto-closed as invalid on 2022/01/29 14:25
linux-4.14 INFO: task hung in rfkill_unregister 1 1737d 1737d 0/1 auto-closed as invalid on 2020/09/13 12:44
upstream INFO: task hung in rfkill_unregister (2) wireless 2 994d 1049d 0/28 auto-closed as invalid on 2022/08/27 03:13
upstream INFO: task hung in rfkill_unregister (3) net nfc C 261 1d20h 620d 0/28 upstream: reported C repro on 2023/06/07 09:58

Sample crash report:
INFO: task syz-executor:4244 blocked for more than 143 seconds.
      Not tainted 6.1.119-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:21080 pid:4244  ppid:1      flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5241 [inline]
 __schedule+0x143f/0x4570 kernel/sched/core.c:6558
 schedule+0xbf/0x180 kernel/sched/core.c:6634
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6693
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x6b9/0xd80 kernel/locking/mutex.c:747
 rfkill_unregister+0xcc/0x220 net/rfkill/core.c:1130
 hci_unregister_dev+0x362/0x500 net/bluetooth/hci_core.c:2724
 vhci_release+0x7f/0xd0 drivers/bluetooth/hci_vhci.c:573
 __fput+0x3f6/0x8d0 fs/file_table.c:320
 task_work_run+0x246/0x300 kernel/task_work.c:203
 exit_task_work include/linux/task_work.h:39 [inline]
 do_exit+0xa73/0x26a0 kernel/exit.c:871
 do_group_exit+0x202/0x2b0 kernel/exit.c:1021
 get_signal+0x16f7/0x17d0 kernel/signal.c:2871
 arch_do_signal_or_restart+0xb0/0x1a10 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x6a/0x100 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:303
 do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f6620f76197
RSP: 002b:00007ffea5bae480 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
RAX: fffffffffffffe00 RBX: 000000000000023f RCX: 00007f6620f76197
RDX: 0000000040000000 RSI: 00007ffea5bae4dc RDI: 00000000ffffffff
RBP: 00007ffea5bae4dc R08: 0000000000000000 R09: 0000000000000010
R10: 0000000000000000 R11: 0000000000000293 R12: 000055557723e5eb
R13: 000055557723e590 R14: 0000000000061aaf R15: 00007ffea5bae530
 </TASK>
INFO: task kworker/0:11:6533 blocked for more than 143 seconds.
      Not tainted 6.1.119-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/0:11    state:D stack:25624 pid:6533  ppid:2      flags:0x00004000
Workqueue: events rfkill_global_led_trigger_worker
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5241 [inline]
 __schedule+0x143f/0x4570 kernel/sched/core.c:6558
 schedule+0xbf/0x180 kernel/sched/core.c:6634
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6693
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x6b9/0xd80 kernel/locking/mutex.c:747
 rfkill_global_led_trigger_worker+0x23/0xd0 net/rfkill/core.c:181
 process_one_work+0x8a9/0x11d0 kernel/workqueue.c:2292
 worker_thread+0xa47/0x1200 kernel/workqueue.c:2439
 kthread+0x28d/0x320 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
INFO: task syz.3.831:8397 blocked for more than 143 seconds.
      Not tainted 6.1.119-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.3.831       state:D stack:24888 pid:8397  ppid:4244   flags:0x00004006
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5241 [inline]
 __schedule+0x143f/0x4570 kernel/sched/core.c:6558
 schedule+0xbf/0x180 kernel/sched/core.c:6634
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6693
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x6b9/0xd80 kernel/locking/mutex.c:747
 rfkill_unregister+0xcc/0x220 net/rfkill/core.c:1130
 nfc_unregister_device+0x92/0x290 net/nfc/core.c:1167
 virtual_ncidev_close+0x55/0x90 drivers/nfc/virtual_ncidev.c:170
 __fput+0x3f6/0x8d0 fs/file_table.c:320
 task_work_run+0x246/0x300 kernel/task_work.c:203
 exit_task_work include/linux/task_work.h:39 [inline]
 do_exit+0xa73/0x26a0 kernel/exit.c:871
 do_group_exit+0x202/0x2b0 kernel/exit.c:1021
 get_signal+0x16f7/0x17d0 kernel/signal.c:2871
 arch_do_signal_or_restart+0xb0/0x1a10 arch/x86/kernel/signal.c:871
 exit_to_user_mode_loop+0x6a/0x100 kernel/entry/common.c:174
 exit_to_user_mode_prepare+0xb1/0x140 kernel/entry/common.c:210
 __syscall_exit_to_user_mode_work kernel/entry/common.c:292 [inline]
 syscall_exit_to_user_mode+0x60/0x270 kernel/entry/common.c:303
 do_syscall_64+0x47/0xb0 arch/x86/entry/common.c:87
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f6620f7ff19
RSP: 002b:00007f6621d010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f6621146088 RCX: 00007f6620f7ff19
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6621146088
RBP: 00007f6621146080 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f662114608c
R13: 0000000000000000 R14: 00007ffea5bae040 R15: 00007ffea5bae128
 </TASK>
INFO: task syz.4.838:8439 blocked for more than 144 seconds.
      Not tainted 6.1.119-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz.4.838       state:D stack:25416 pid:8439  ppid:4256   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5241 [inline]
 __schedule+0x143f/0x4570 kernel/sched/core.c:6558
 schedule+0xbf/0x180 kernel/sched/core.c:6634
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6693
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x6b9/0xd80 kernel/locking/mutex.c:747
 device_lock include/linux/device.h:837 [inline]
 nfc_dev_down net/nfc/core.c:143 [inline]
 nfc_rfkill_set_block+0x4c/0x2f0 net/nfc/core.c:179
 rfkill_set_block+0x1e7/0x430 net/rfkill/core.c:345
 rfkill_fop_write+0x5b7/0x790 net/rfkill/core.c:1286
 vfs_write+0x2d9/0xbc0 fs/read_write.c:582
 ksys_write+0x19c/0x2c0 fs/read_write.c:637
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f44a4b7ff19
RSP: 002b:00007f44a5a34058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f44a4d46080 RCX: 00007f44a4b7ff19
RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000003
RBP: 00007f44a4bf3986 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f44a4d46080 R15: 00007fffd7a3cfd8
 </TASK>
INFO: task syz-executor:8572 blocked for more than 144 seconds.
      Not tainted 6.1.119-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:25168 pid:8572  ppid:1      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5241 [inline]
 __schedule+0x143f/0x4570 kernel/sched/core.c:6558
 schedule+0xbf/0x180 kernel/sched/core.c:6634
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6693
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x6b9/0xd80 kernel/locking/mutex.c:747
 rfkill_register+0x30/0x880 net/rfkill/core.c:1057
 hci_register_dev+0x4df/0xa40 net/bluetooth/hci_core.c:2624
 __vhci_create_device drivers/bluetooth/hci_vhci.c:340 [inline]
 vhci_create_device+0x3ba/0x700 drivers/bluetooth/hci_vhci.c:379
 vhci_get_user drivers/bluetooth/hci_vhci.c:436 [inline]
 vhci_write+0x38b/0x440 drivers/bluetooth/hci_vhci.c:516
 call_write_iter include/linux/fs.h:2265 [inline]
 new_sync_write fs/read_write.c:491 [inline]
 vfs_write+0x857/0xbc0 fs/read_write.c:584
 ksys_write+0x19c/0x2c0 fs/read_write.c:637
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fce63b7e990
RSP: 002b:00007ffc6a409588 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fce63b7e990
RDX: 0000000000000002 RSI: 00007ffc6a40959a RDI: 00000000000000ca
RBP: 00007fce63d46738 R08: 0000000000000000 R09: 00007fce6487d6c0
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
 </TASK>
INFO: task syz-executor:8601 blocked for more than 144 seconds.
      Not tainted 6.1.119-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor    state:D stack:27392 pid:8601  ppid:1      flags:0x00004000
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5241 [inline]
 __schedule+0x143f/0x4570 kernel/sched/core.c:6558
 schedule+0xbf/0x180 kernel/sched/core.c:6634
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6693
 __mutex_lock_common kernel/locking/mutex.c:679 [inline]
 __mutex_lock+0x6b9/0xd80 kernel/locking/mutex.c:747
 rfkill_register+0x30/0x880 net/rfkill/core.c:1057
 hci_register_dev+0x4df/0xa40 net/bluetooth/hci_core.c:2624
 __vhci_create_device drivers/bluetooth/hci_vhci.c:340 [inline]
 vhci_create_device+0x3ba/0x700 drivers/bluetooth/hci_vhci.c:379
 vhci_get_user drivers/bluetooth/hci_vhci.c:436 [inline]
 vhci_write+0x38b/0x440 drivers/bluetooth/hci_vhci.c:516
 call_write_iter include/linux/fs.h:2265 [inline]
 new_sync_write fs/read_write.c:491 [inline]
 vfs_write+0x857/0xbc0 fs/read_write.c:584
 ksys_write+0x19c/0x2c0 fs/read_write.c:637
 do_syscall_x64 arch/x86/entry/common.c:51 [inline]
 do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:81
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f327b37e990
RSP: 002b:00007ffd407a0708 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f327b37e990
RDX: 0000000000000002 RSI: 00007ffd407a071a RDI: 00000000000000ca
RBP: 00007f327b546738 R08: 0000000000000000 R09: 00007f327c07d6c0
R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
 </TASK>

Showing all locks held in the system:
5 locks held by kworker/u4:0/9:
1 lock held by rcu_tasks_kthre/12:
 #0: ffffffff8d32b110 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 kernel/rcu/tasks.h:517
1 lock held by rcu_tasks_trace/13:
 #0: ffffffff8d32b910 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 kernel/rcu/tasks.h:517
1 lock held by khungtaskd/27:
 #0: ffffffff8d32af40 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:350 [inline]
 #0: ffffffff8d32af40 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:791 [inline]
 #0: ffffffff8d32af40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 kernel/locking/lockdep.c:6510
2 locks held by getty/4001:
 #0: ffff88814ccc7098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 drivers/tty/tty_ldisc.c:244
 #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 drivers/tty/n_tty.c:2198
1 lock held by syz-executor/4244:
 #0: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 net/rfkill/core.c:1130
1 lock held by syz-executor/4245:
 #0: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 net/rfkill/core.c:1130
1 lock held by syz-executor/4247:
 #0: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 net/rfkill/core.c:1130
1 lock held by syz-executor/4856:
 #0: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 net/rfkill/core.c:1130
4 locks held by kworker/u4:12/5141:
 #0: ffff8880b8e3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140 kernel/sched/core.c:545
 #1: ffff8880b8e27788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x419/0x790 kernel/sched/psi.c:999
 #2: ffff8880b8e28358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 kernel/time/timer.c:999
 #3: ffffffff97666310 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x68/0x4e0 lib/debugobjects.c:698
3 locks held by kworker/0:11/6533:
 #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
 #1: ffffc9000c59fd20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 kernel/workqueue.c:2267
 #2: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x23/0xd0 net/rfkill/core.c:181
2 locks held by syz.3.831/8397:
 #0: ffff88802b381100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:837 [inline]
 #0: ffff88802b381100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x5f/0x290 net/nfc/core.c:1165
 #1: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 net/rfkill/core.c:1130
2 locks held by syz.4.838/8439:
 #0: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 net/rfkill/core.c:1278
 #1: ffff88802b381100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:837 [inline]
 #1: ffff88802b381100 (&dev->mutex){....}-{3:3}, at: nfc_dev_down net/nfc/core.c:143 [inline]
 #1: ffff88802b381100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2f0 net/nfc/core.c:179
2 locks held by syz-executor/8572:
 #0: ffff88805655e918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 drivers/bluetooth/hci_vhci.c:378
 #1: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 net/rfkill/core.c:1057
2 locks held by syz-executor/8601:
 #0: ffff888056f4e918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 drivers/bluetooth/hci_vhci.c:378
 #1: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 net/rfkill/core.c:1057
2 locks held by syz-executor/8800:
 #0: ffff888056750918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 drivers/bluetooth/hci_vhci.c:378
 #1: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 net/rfkill/core.c:1057
2 locks held by syz-executor/9023:
 #0: ffff88807c388918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 drivers/bluetooth/hci_vhci.c:378
 #1: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 net/rfkill/core.c:1057
2 locks held by syz-executor/9049:
 #0: ffff888055d9a918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 drivers/bluetooth/hci_vhci.c:378
 #1: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 net/rfkill/core.c:1057
2 locks held by syz-executor/9106:
 #0: ffff88807e1d5118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 drivers/bluetooth/hci_vhci.c:378
 #1: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 net/rfkill/core.c:1057
2 locks held by syz-executor/9137:
 #0: ffff88801aecf118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 drivers/bluetooth/hci_vhci.c:378
 #1: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 net/rfkill/core.c:1057
2 locks held by syz-executor/9140:
 #0: ffff88807a819918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 drivers/bluetooth/hci_vhci.c:378
 #1: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 net/rfkill/core.c:1057
2 locks held by syz-executor/9143:
 #0: ffff888029e6a118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 drivers/bluetooth/hci_vhci.c:378
 #1: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 net/rfkill/core.c:1057
2 locks held by syz-executor/9146:
 #0: ffff888027576918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 drivers/bluetooth/hci_vhci.c:378
 #1: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 net/rfkill/core.c:1057
2 locks held by syz-executor/9149:
 #0: ffff88807b221918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 drivers/bluetooth/hci_vhci.c:378
 #1: ffffffff8e7ba208 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 net/rfkill/core.c:1057

=============================================

NMI backtrace for cpu 1
CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.119-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106
 nmi_cpu_backtrace+0x4e1/0x560 lib/nmi_backtrace.c:111
 nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:220 [inline]
 watchdog+0xf88/0xfd0 kernel/hung_task.c:377
 kthread+0x28d/0x320 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 33 Comm: kworker/u4:2 Not tainted 6.1.119-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: events_unbound toggle_allocation_gate
RIP: 0010:trace_lock_acquire include/trace/events/lock.h:24 [inline]
RIP: 0010:lock_acquire+0xf3/0x5a0 kernel/locking/lockdep.c:5633
Code: 0d 0f 86 e4 02 00 00 89 db 48 89 d8 48 c1 e8 06 48 8d 3c c5 a8 f7 9a 8e be 08 00 00 00 e8 a5 84 77 00 48 0f a3 1d a5 55 30 0d <73> 0d e8 96 e5 08 00 84 c0 0f 84 b9 02 00 00 48 c7 c0 74 2c 9b 8e
RSP: 0018:ffffc90000aa7620 EFLAGS: 00000257
RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff816aa1fb
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e9af7a8
RBP: ffffc90000aa7778 R08: dffffc0000000000 R09: fffffbfff1d35ef6
R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000154ecc
R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888017c67558
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055e6fa52c1f8 CR3: 000000000d08e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <TASK>
 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline]
 _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154
 spin_lock include/linux/spinlock.h:351 [inline]
 __get_locked_pte+0x169/0x1c0 mm/memory.c:1850
 get_locked_pte include/linux/mm.h:2221 [inline]
 __text_poke+0x280/0x9a0 arch/x86/kernel/alternative.c:1155
 text_poke arch/x86/kernel/alternative.c:1240 [inline]
 text_poke_bp_batch+0x153/0x940 arch/x86/kernel/alternative.c:1531
 text_poke_flush arch/x86/kernel/alternative.c:1725 [inline]
 text_poke_finish+0x16/0x30 arch/x86/kernel/alternative.c:1732
 arch_jump_label_transform_apply+0x13/0x20 arch/x86/kernel/jump_label.c:146
 static_key_disable_cpuslocked+0xce/0x1b0 kernel/jump_label.c:237
 static_key_disable+0x16/0x20 kernel/jump_label.c:245
 toggle_allocation_gate+0x3e0/0x480 mm/kfence/core.c:818
 process_one_work+0x8a9/0x11d0 kernel/workqueue.c:2292
 worker_thread+0xa47/0x1200 kernel/workqueue.c:2439
 kthread+0x28d/0x320 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
 </TASK>

Crashes (8):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/12/06 02:45 linux-6.1.y e4d90d63d385 29f61fce .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in rfkill_unregister
2024/11/28 00:35 linux-6.1.y e4d90d63d385 5df23865 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in rfkill_unregister
2024/11/20 04:42 linux-6.1.y b67dc5c9ade9 7d02db5a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in rfkill_unregister
2024/10/23 17:46 linux-6.1.y 7ec6f9fa3d97 15fa2979 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in rfkill_unregister
2024/08/28 10:23 linux-6.1.y ee5e09825b81 6c853ff9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan INFO: task hung in rfkill_unregister
2024/10/12 09:23 linux-6.1.y aa4cd140bba5 084d8178 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in rfkill_unregister
2024/06/04 15:37 linux-6.1.y 88690811da69 11f2afa5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in rfkill_unregister
2024/04/17 14:01 linux-6.1.y 6741e066ec76 18f6e127 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 INFO: task hung in rfkill_unregister
* Struck through repros no longer work on HEAD.