possible deadlock in evdev_pass

possible deadlock in evdev_pass_values
Status: closed as dup on 2021/07/02 09:55
Reported-by: syzbot+44ec99f248f7052472f1@syzkaller.appspotmail.com
First crash: 328d, last: 200d
Duplicate of (1):
Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported
possible deadlock in kill_fasync	C	done	unreliable	394	93d	422d
Sample crash report:
=====================================================
WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
5.13.0-rc1-syzkaller #0 Not tainted
-----------------------------------------------------
syz-executor.2/32255 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
ffff8880639788a0 (&new->fa_lock){.+.+}-{2:2}, at: kill_fasync_rcu fs/fcntl.c:1012 [inline]
ffff8880639788a0 (&new->fa_lock){.+.+}-{2:2}, at: kill_fasync+0x19b/0x440 fs/fcntl.c:1033

and this task is already holding:
ffff88805fd97028 (&client->buffer_lock){..-.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline]
ffff88805fd97028 (&client->buffer_lock){..-.}-{2:2}, at: evdev_pass_values+0xd9/0xaa0 drivers/input/evdev.c:261
which would create a new lock dependency:
 (&client->buffer_lock){..-.}-{2:2} -> (&new->fa_lock){.+.+}-{2:2}

but this new dependency connects a SOFTIRQ-irq-safe lock:
 (&client->buffer_lock){..-.}-{2:2}

... which became SOFTIRQ-irq-safe at:
  lock_acquire+0x17f/0x720 kernel/locking/lockdep.c:5512
  __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
  _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:151
  spin_lock include/linux/spinlock.h:354 [inline]
  evdev_pass_values+0xd9/0xaa0 drivers/input/evdev.c:261
  evdev_events+0x1c5/0x270 drivers/input/evdev.c:306
  input_to_handler drivers/input/input.c:115 [inline]
  input_pass_values+0x89c/0x11d0 drivers/input/input.c:145
  input_handle_event+0xb99/0x1550 drivers/input/input.c:404
  input_event+0x9c/0xc0 drivers/input/input.c:446
  input_sync include/linux/input.h:450 [inline]
  report_tp_state drivers/input/mouse/bcm5974.c:642 [inline]
  bcm5974_irq_trackpad+0xe35/0x1000 drivers/input/mouse/bcm5974.c:755
  __usb_hcd_giveback_urb+0x375/0x520 drivers/usb/core/hcd.c:1656
  dummy_timer+0x808/0x3100 drivers/usb/gadget/udc/dummy_hcd.c:1978
  call_timer_fn+0xf6/0x210 kernel/time/timer.c:1431
  expire_timers kernel/time/timer.c:1476 [inline]
  __run_timers+0x6ff/0x910 kernel/time/timer.c:1745
  run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1758
  __do_softirq+0x372/0x7a6 kernel/softirq.c:559
  invoke_softirq kernel/softirq.c:433 [inline]
  __irq_exit_rcu+0x245/0x280 kernel/softirq.c:637
  irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
  sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1100
  asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:647
  lock_page_memcg+0x25e/0x460 arch/x86/include/asm/irqflags.h:45
  page_remove_rmap+0x2b/0x1080 mm/rmap.c:1348
  zap_pte_range+0x92a/0x1b60 mm/memory.c:1270
  zap_pmd_range mm/memory.c:1374 [inline]
  zap_pud_range mm/memory.c:1403 [inline]
  zap_p4d_range mm/memory.c:1424 [inline]
  unmap_page_range+0x55a/0x890 mm/memory.c:1445
  unmap_vmas+0x1d1/0x360 mm/memory.c:1522
  exit_mmap+0x2af/0x5f0 mm/mmap.c:3208
  __mmput+0x111/0x370 kernel/fork.c:1096
  exit_mm+0x67e/0x7d0 kernel/exit.c:502
  do_exit+0x6b9/0x23d0 kernel/exit.c:813
  do_group_exit+0x168/0x2d0 kernel/exit.c:923
  __do_sys_exit_group+0x13/0x20 kernel/exit.c:934
  __ia32_sys_exit_group+0x0/0x40 kernel/exit.c:932
  __x64_sys_exit_group+0x37/0x40 kernel/exit.c:932
  do_syscall_64+0x3f/0xb0 arch/x86/entry/common.c:47
  entry_SYSCALL_64_after_hwframe+0x44/0xae

to a SOFTIRQ-irq-unsafe lock:
 (&new->fa_lock){.+.+}-{2:2}

... which became SOFTIRQ-irq-unsafe at:
...
  lock_acquire+0x17f/0x720 kernel/locking/lockdep.c:5512
  __raw_read_lock include/linux/rwlock_api_smp.h:149 [inline]
  _raw_read_lock+0x32/0x40 kernel/locking/spinlock.c:223
  kill_fasync_rcu fs/fcntl.c:1012 [inline]
  kill_fasync+0x19b/0x440 fs/fcntl.c:1033
  pipe_release+0x194/0x310 fs/pipe.c:713
  __fput+0x352/0x7b0 fs/file_table.c:280
  task_work_run+0x146/0x1c0 kernel/task_work.c:164
  tracehook_notify_resume include/linux/tracehook.h:189 [inline]
  exit_to_user_mode_loop kernel/entry/common.c:174 [inline]
  exit_to_user_mode_prepare+0x10b/0x200 kernel/entry/common.c:208
  __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline]
  syscall_exit_to_user_mode+0x26/0x70 kernel/entry/common.c:301
  do_syscall_64+0x4b/0xb0 arch/x86/entry/common.c:57
  entry_SYSCALL_64_after_hwframe+0x44/0xae

other info that might help us debug this:

 Possible interrupt unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&new->fa_lock);
                               local_irq_disable();
                               lock(&client->buffer_lock);
                               lock(&new->fa_lock);
  <Interrupt>
    lock(&client->buffer_lock);

 *** DEADLOCK ***

7 locks held by syz-executor.2/32255:
 #0: ffff8881471ce110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x234/0x780 drivers/input/evdev.c:513
 #1: ffff888144722230 (&dev->event_lock){-.-.}-{2:2}, at: input_inject_event+0xb3/0x280 drivers/input/input.c:471
 #2: ffffffff8cf15c00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:266
 #3: ffffffff8cf15c00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:266
 #4: ffffffff8cf15c00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:266
 #5: ffff88805fd97028 (&client->buffer_lock){..-.}-{2:2}, at: spin_lock include/linux/spinlock.h:354 [inline]
 #5: ffff88805fd97028 (&client->buffer_lock){..-.}-{2:2}, at: evdev_pass_values+0xd9/0xaa0 drivers/input/evdev.c:261
 #6: ffffffff8cf15c00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:266

the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
-> (&client->buffer_lock){..-.}-{2:2} {
   IN-SOFTIRQ-W at:
                    lock_acquire+0x17f/0x720 kernel/locking/lockdep.c:5512
                    __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
                    _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:151
                    spin_lock include/linux/spinlock.h:354 [inline]
                    evdev_pass_values+0xd9/0xaa0 drivers/input/evdev.c:261
                    evdev_events+0x1c5/0x270 drivers/input/evdev.c:306
                    input_to_handler drivers/input/input.c:115 [inline]
                    input_pass_values+0x89c/0x11d0 drivers/input/input.c:145
                    input_handle_event+0xb99/0x1550 drivers/input/input.c:404
                    input_event+0x9c/0xc0 drivers/input/input.c:446
                    input_sync include/linux/input.h:450 [inline]
                    report_tp_state drivers/input/mouse/bcm5974.c:642 [inline]
                    bcm5974_irq_trackpad+0xe35/0x1000 drivers/input/mouse/bcm5974.c:755
                    __usb_hcd_giveback_urb+0x375/0x520 drivers/usb/core/hcd.c:1656
                    dummy_timer+0x808/0x3100 drivers/usb/gadget/udc/dummy_hcd.c:1978
                    call_timer_fn+0xf6/0x210 kernel/time/timer.c:1431
                    expire_timers kernel/time/timer.c:1476 [inline]
                    __run_timers+0x6ff/0x910 kernel/time/timer.c:1745
                    run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1758
                    __do_softirq+0x372/0x7a6 kernel/softirq.c:559
                    invoke_softirq kernel/softirq.c:433 [inline]
                    __irq_exit_rcu+0x245/0x280 kernel/softirq.c:637
                    irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
                    sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1100
                    asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:647
                    lock_page_memcg+0x25e/0x460 arch/x86/include/asm/irqflags.h:45
                    page_remove_rmap+0x2b/0x1080 mm/rmap.c:1348
                    zap_pte_range+0x92a/0x1b60 mm/memory.c:1270
                    zap_pmd_range mm/memory.c:1374 [inline]
                    zap_pud_range mm/memory.c:1403 [inline]
                    zap_p4d_range mm/memory.c:1424 [inline]
                    unmap_page_range+0x55a/0x890 mm/memory.c:1445
                    unmap_vmas+0x1d1/0x360 mm/memory.c:1522
                    exit_mmap+0x2af/0x5f0 mm/mmap.c:3208
                    __mmput+0x111/0x370 kernel/fork.c:1096
                    exit_mm+0x67e/0x7d0 kernel/exit.c:502
                    do_exit+0x6b9/0x23d0 kernel/exit.c:813
                    do_group_exit+0x168/0x2d0 kernel/exit.c:923
                    __do_sys_exit_group+0x13/0x20 kernel/exit.c:934
                    __ia32_sys_exit_group+0x0/0x40 kernel/exit.c:932
                    __x64_sys_exit_group+0x37/0x40 kernel/exit.c:932
                    do_syscall_64+0x3f/0xb0 arch/x86/entry/common.c:47
                    entry_SYSCALL_64_after_hwframe+0x44/0xae
   INITIAL USE at:
                   lock_acquire+0x17f/0x720 kernel/locking/lockdep.c:5512
                   __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
                   _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:151
                   spin_lock include/linux/spinlock.h:354 [inline]
                   evdev_pass_values+0xd9/0xaa0 drivers/input/evdev.c:261
                   evdev_events+0x1c5/0x270 drivers/input/evdev.c:306
                   input_to_handler drivers/input/input.c:115 [inline]
                   input_pass_values+0x89c/0x11d0 drivers/input/input.c:145
                   input_handle_event+0xb99/0x1550 drivers/input/input.c:404
                   input_event+0x9c/0xc0 drivers/input/input.c:446
                   input_sync include/linux/input.h:450 [inline]
                   report_tp_state drivers/input/mouse/bcm5974.c:642 [inline]
                   bcm5974_irq_trackpad+0xe35/0x1000 drivers/input/mouse/bcm5974.c:755
                   __usb_hcd_giveback_urb+0x375/0x520 drivers/usb/core/hcd.c:1656
                   dummy_timer+0x808/0x3100 drivers/usb/gadget/udc/dummy_hcd.c:1978
                   call_timer_fn+0xf6/0x210 kernel/time/timer.c:1431
                   expire_timers kernel/time/timer.c:1476 [inline]
                   __run_timers+0x6ff/0x910 kernel/time/timer.c:1745
                   run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1758
                   __do_softirq+0x372/0x7a6 kernel/softirq.c:559
                   invoke_softirq kernel/softirq.c:433 [inline]
                   __irq_exit_rcu+0x245/0x280 kernel/softirq.c:637
                   irq_exit_rcu+0x5/0x20 kernel/softirq.c:649
                   sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1100
                   asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:647
                   lock_page_memcg+0x25e/0x460 arch/x86/include/asm/irqflags.h:45
                   page_remove_rmap+0x2b/0x1080 mm/rmap.c:1348
                   zap_pte_range+0x92a/0x1b60 mm/memory.c:1270
                   zap_pmd_range mm/memory.c:1374 [inline]
                   zap_pud_range mm/memory.c:1403 [inline]
                   zap_p4d_range mm/memory.c:1424 [inline]
                   unmap_page_range+0x55a/0x890 mm/memory.c:1445
                   unmap_vmas+0x1d1/0x360 mm/memory.c:1522
                   exit_mmap+0x2af/0x5f0 mm/mmap.c:3208
                   __mmput+0x111/0x370 kernel/fork.c:1096
                   exit_mm+0x67e/0x7d0 kernel/exit.c:502
                   do_exit+0x6b9/0x23d0 kernel/exit.c:813
                   do_group_exit+0x168/0x2d0 kernel/exit.c:923
                   __do_sys_exit_group+0x13/0x20 kernel/exit.c:934
                   __ia32_sys_exit_group+0x0/0x40 kernel/exit.c:932
                   __x64_sys_exit_group+0x37/0x40 kernel/exit.c:932
                   do_syscall_64+0x3f/0xb0 arch/x86/entry/common.c:47
                   entry_SYSCALL_64_after_hwframe+0x44/0xae
 }
 ... key      at: [<ffffffff91276fc0>] evdev_open.__key.23+0x0/0x40
 ... acquired at:
   lock_acquire+0x17f/0x720 kernel/locking/lockdep.c:5512
   __raw_read_lock include/linux/rwlock_api_smp.h:149 [inline]
   _raw_read_lock+0x32/0x40 kernel/locking/spinlock.c:223
   kill_fasync_rcu fs/fcntl.c:1012 [inline]
   kill_fasync+0x19b/0x440 fs/fcntl.c:1033
   __pass_event drivers/input/evdev.c:240 [inline]
   evdev_pass_values+0x58a/0xaa0 drivers/input/evdev.c:278
   evdev_events+0x1c5/0x270 drivers/input/evdev.c:306
   input_to_handler drivers/input/input.c:115 [inline]
   input_pass_values+0x89c/0x11d0 drivers/input/input.c:145
   input_handle_event+0xb99/0x1550 drivers/input/input.c:404
   input_inject_event+0x1e8/0x280 drivers/input/input.c:476
   evdev_write+0x5f0/0x780 drivers/input/evdev.c:530
   vfs_write+0x289/0xc90 fs/read_write.c:603
   ksys_write+0x171/0x2a0 fs/read_write.c:658
   do_syscall_64+0x3f/0xb0 arch/x86/entry/common.c:47
   entry_SYSCALL_64_after_hwframe+0x44/0xae


the dependencies between the lock to be acquired
 and SOFTIRQ-irq-unsafe lock:
-> (&new->fa_lock){.+.+}-{2:2} {
   HARDIRQ-ON-R at:
                    lock_acquire+0x17f/0x720 kernel/locking/lockdep.c:5512
                    __raw_read_lock include/linux/rwlock_api_smp.h:149 [inline]
                    _raw_read_lock+0x32/0x40 kernel/locking/spinlock.c:223
                    kill_fasync_rcu fs/fcntl.c:1012 [inline]
                    kill_fasync+0x19b/0x440 fs/fcntl.c:1033
                    pipe_release+0x194/0x310 fs/pipe.c:713
                    __fput+0x352/0x7b0 fs/file_table.c:280
                    task_work_run+0x146/0x1c0 kernel/task_work.c:164
                    tracehook_notify_resume include/linux/tracehook.h:189 [inline]
                    exit_to_user_mode_loop kernel/entry/common.c:174 [inline]
                    exit_to_user_mode_prepare+0x10b/0x200 kernel/entry/common.c:208
                    __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline]
                    syscall_exit_to_user_mode+0x26/0x70 kernel/entry/common.c:301
                    do_syscall_64+0x4b/0xb0 arch/x86/entry/common.c:57
                    entry_SYSCALL_64_after_hwframe+0x44/0xae
   SOFTIRQ-ON-R at:
                    lock_acquire+0x17f/0x720 kernel/locking/lockdep.c:5512
                    __raw_read_lock include/linux/rwlock_api_smp.h:149 [inline]
                    _raw_read_lock+0x32/0x40 kernel/locking/spinlock.c:223
                    kill_fasync_rcu fs/fcntl.c:1012 [inline]
                    kill_fasync+0x19b/0x440 fs/fcntl.c:1033
                    pipe_release+0x194/0x310 fs/pipe.c:713
                    __fput+0x352/0x7b0 fs/file_table.c:280
                    task_work_run+0x146/0x1c0 kernel/task_work.c:164
                    tracehook_notify_resume include/linux/tracehook.h:189 [inline]
                    exit_to_user_mode_loop kernel/entry/common.c:174 [inline]
                    exit_to_user_mode_prepare+0x10b/0x200 kernel/entry/common.c:208
                    __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline]
                    syscall_exit_to_user_mode+0x26/0x70 kernel/entry/common.c:301
                    do_syscall_64+0x4b/0xb0 arch/x86/entry/common.c:57
                    entry_SYSCALL_64_after_hwframe+0x44/0xae
   INITIAL USE at:
                   lock_acquire+0x17f/0x720 kernel/locking/lockdep.c:5512
                   __raw_write_lock_irq include/linux/rwlock_api_smp.h:196 [inline]
                   _raw_write_lock_irq+0xae/0xf0 kernel/locking/spinlock.c:311
                   fasync_remove_entry+0xff/0x1d0 fs/fcntl.c:890
                   pipe_fasync+0xa8/0x1f0 fs/pipe.c:730
                   __fput+0x65b/0x7b0 fs/file_table.c:277
                   task_work_run+0x146/0x1c0 kernel/task_work.c:164
                   tracehook_notify_resume include/linux/tracehook.h:189 [inline]
                   exit_to_user_mode_loop kernel/entry/common.c:174 [inline]
                   exit_to_user_mode_prepare+0x10b/0x200 kernel/entry/common.c:208
                   __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline]
                   syscall_exit_to_user_mode+0x26/0x70 kernel/entry/common.c:301
                   do_syscall_64+0x4b/0xb0 arch/x86/entry/common.c:57
                   entry_SYSCALL_64_after_hwframe+0x44/0xae
   INITIAL READ USE at:
                        lock_acquire+0x17f/0x720 kernel/locking/lockdep.c:5512
                        __raw_read_lock include/linux/rwlock_api_smp.h:149 [inline]
                        _raw_read_lock+0x32/0x40 kernel/locking/spinlock.c:223
                        kill_fasync_rcu fs/fcntl.c:1012 [inline]
                        kill_fasync+0x19b/0x440 fs/fcntl.c:1033
                        pipe_release+0x194/0x310 fs/pipe.c:713
                        __fput+0x352/0x7b0 fs/file_table.c:280
                        task_work_run+0x146/0x1c0 kernel/task_work.c:164
                        tracehook_notify_resume include/linux/tracehook.h:189 [inline]
                        exit_to_user_mode_loop kernel/entry/common.c:174 [inline]
                        exit_to_user_mode_prepare+0x10b/0x200 kernel/entry/common.c:208
                        __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline]
                        syscall_exit_to_user_mode+0x26/0x70 kernel/entry/common.c:301
                        do_syscall_64+0x4b/0xb0 arch/x86/entry/common.c:57
                        entry_SYSCALL_64_after_hwframe+0x44/0xae
 }
 ... key      at: [<ffffffff90f4ce00>] fasync_insert_entry.__key+0x0/0x40
 ... acquired at:
   lock_acquire+0x17f/0x720 kernel/locking/lockdep.c:5512
   __raw_read_lock include/linux/rwlock_api_smp.h:149 [inline]
   _raw_read_lock+0x32/0x40 kernel/locking/spinlock.c:223
   kill_fasync_rcu fs/fcntl.c:1012 [inline]
   kill_fasync+0x19b/0x440 fs/fcntl.c:1033
   __pass_event drivers/input/evdev.c:240 [inline]
   evdev_pass_values+0x58a/0xaa0 drivers/input/evdev.c:278
   evdev_events+0x1c5/0x270 drivers/input/evdev.c:306
   input_to_handler drivers/input/input.c:115 [inline]
   input_pass_values+0x89c/0x11d0 drivers/input/input.c:145
   input_handle_event+0xb99/0x1550 drivers/input/input.c:404
   input_inject_event+0x1e8/0x280 drivers/input/input.c:476
   evdev_write+0x5f0/0x780 drivers/input/evdev.c:530
   vfs_write+0x289/0xc90 fs/read_write.c:603
   ksys_write+0x171/0x2a0 fs/read_write.c:658
   do_syscall_64+0x3f/0xb0 arch/x86/entry/common.c:47
   entry_SYSCALL_64_after_hwframe+0x44/0xae


stack backtrace:
CPU: 0 PID: 32255 Comm: syz-executor.2 Not tainted 5.13.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:79 [inline]
 dump_stack+0x202/0x31e lib/dump_stack.c:120
 print_bad_irq_dependency kernel/locking/lockdep.c:2462 [inline]
 check_irq_usage kernel/locking/lockdep.c:2691 [inline]
 check_prev_add kernel/locking/lockdep.c:2942 [inline]
 check_prevs_add+0x4ecf/0x5b60 kernel/locking/lockdep.c:3061
 validate_chain kernel/locking/lockdep.c:3676 [inline]
 __lock_acquire+0x4307/0x6040 kernel/locking/lockdep.c:4902
 lock_acquire+0x17f/0x720 kernel/locking/lockdep.c:5512
 __raw_read_lock include/linux/rwlock_api_smp.h:149 [inline]
 _raw_read_lock+0x32/0x40 kernel/locking/spinlock.c:223
 kill_fasync_rcu fs/fcntl.c:1012 [inline]
 kill_fasync+0x19b/0x440 fs/fcntl.c:1033
 __pass_event drivers/input/evdev.c:240 [inline]
 evdev_pass_values+0x58a/0xaa0 drivers/input/evdev.c:278
 evdev_events+0x1c5/0x270 drivers/input/evdev.c:306
 input_to_handler drivers/input/input.c:115 [inline]
 input_pass_values+0x89c/0x11d0 drivers/input/input.c:145
 input_handle_event+0xb99/0x1550 drivers/input/input.c:404
 input_inject_event+0x1e8/0x280 drivers/input/input.c:476
 evdev_write+0x5f0/0x780 drivers/input/evdev.c:530
 vfs_write+0x289/0xc90 fs/read_write.c:603
 ksys_write+0x171/0x2a0 fs/read_write.c:658
 do_syscall_64+0x3f/0xb0 arch/x86/entry/common.c:47
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x4665d9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ff38b50b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9
RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003
RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60
R13: 00007ffead20442f R14: 00007ff38b50b300 R15: 0000000000022000
Crashes (10):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Title
ci-upstream-kasan-gce-smack-root	2021/05/13 17:59	upstream	c06a2ba62fc4	ed7d41c5	.config	log	report	info	possible deadlock in evdev_pass_values
ci-upstream-kasan-gce	2021/05/01 13:20	upstream	d2b6f8a17919	77e2b668	.config	log	report	info	possible deadlock in evdev_pass_values
ci-upstream-kasan-gce	2021/04/10 10:40	upstream	d4961772226d	bfeda1b1	.config	log	report	info	possible deadlock in evdev_pass_values
ci-upstream-kasan-gce-386	2021/05/10 02:09	upstream	6efb943b8616	bc5434be	.config	log	report	info	possible deadlock in evdev_pass_values
ci-upstream-kasan-gce-386	2021/04/27 19:34	upstream	57fa2369ab17	805b5003	.config	log	report	info	possible deadlock in evdev_pass_values
ci-upstream-kasan-gce-386	2021/04/18 14:44	upstream	c98ff1d013d2	7e2b734b	.config	log	report	info	possible deadlock in evdev_pass_values
ci-upstream-linux-next-kasan-gce-root	2021/05/11 21:20	linux-next	4bf27b1f7330	b3c3bb8e	.config	log	report	info	possible deadlock in evdev_pass_values
ci-upstream-kasan-gce	2021/01/06 03:00	upstream	6207214a70bf	b1c228e1	.config	log	report	info
ci-upstream-kasan-gce	2021/01/05 11:44	upstream	36bbbd0e234d	a0234d98	.config	log	report	info
ci-upstream-kasan-gce-386	2021/01/09 01:30	upstream	6279d812eab6	c104d4a3	.config	log	report	info