Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 307.573620][ T26] audit: type=1400 audit(1690831287.794:87): avc: denied { execmem } for pid=5034 comm="syz-executor555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 307.597627][ T26] audit: type=1400 audit(1690831287.824:88): avc: denied { read write } for pid=5037 comm="syz-executor555" name="virtual_nci" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 executing program [ 307.622289][ T26] audit: type=1400 audit(1690831287.834:89): avc: denied { open } for pid=5042 comm="syz-executor555" path="/dev/virtual_nci" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 573.145989][ T27] INFO: task kworker/0:6:5116 blocked for more than 143 seconds. [ 573.153893][ T27] Not tainted 6.5.0-rc4-syzkaller #0 [ 573.159844][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.168602][ T27] task:kworker/0:6 state:D stack:28064 pid:5116 ppid:2 flags:0x00004000 [ 573.177992][ T27] Workqueue: events rfkill_sync_work [ 573.183470][ T27] Call Trace: [ 573.186812][ T27] [ 573.189766][ T27] __schedule+0xee1/0x59f0 [ 573.194278][ T27] ? reacquire_held_locks+0x4b0/0x4b0 [ 573.199771][ T27] ? reacquire_held_locks+0x4b0/0x4b0 [ 573.205192][ T27] ? find_held_lock+0x2d/0x110 [ 573.210040][ T27] ? io_schedule_timeout+0x150/0x150 [ 573.215366][ T27] ? reacquire_held_locks+0x4b0/0x4b0 [ 573.220833][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.226152][ T27] ? lockdep_hardirqs_on+0x7d/0x100 [ 573.231375][ T27] schedule+0xe7/0x1b0 [ 573.235457][ T27] schedule_preempt_disabled+0x13/0x20 [ 573.240997][ T27] __mutex_lock+0x967/0x1340 [ 573.245636][ T27] ? rfkill_sync_work+0x1c/0xc0 [ 573.250578][ T27] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 573.256217][ T27] ? spin_bug+0x1d0/0x1d0 [ 573.260571][ T27] ? rfkill_sync_work+0x1c/0xc0 [ 573.265439][ T27] rfkill_sync_work+0x1c/0xc0 [ 573.270191][ T27] process_one_work+0xaa2/0x16f0 [ 573.275192][ T27] ? lock_sync+0x190/0x190 [ 573.279700][ T27] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 573.285119][ T27] ? spin_bug+0x1d0/0x1d0 [ 573.289524][ T27] worker_thread+0x687/0x1110 [ 573.294248][ T27] ? __kthread_parkme+0x152/0x220 [ 573.299387][ T27] ? process_one_work+0x16f0/0x16f0 [ 573.304640][ T27] kthread+0x33a/0x430 [ 573.308805][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 573.314487][ T27] ret_from_fork+0x2c/0x70 [ 573.319023][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 573.324693][ T27] ret_from_fork_asm+0x11/0x20 [ 573.329550][ T27] [ 573.332605][ T27] INFO: task kworker/0:7:5167 blocked for more than 143 seconds. [ 573.340416][ T27] Not tainted 6.5.0-rc4-syzkaller #0 [ 573.346283][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.355077][ T27] task:kworker/0:7 state:D stack:28288 pid:5167 ppid:2 flags:0x00004000 [ 573.364381][ T27] Workqueue: events rfkill_global_led_trigger_worker [ 573.371130][ T27] Call Trace: [ 573.374408][ T27] [ 573.377402][ T27] __schedule+0xee1/0x59f0 [ 573.381884][ T27] ? reacquire_held_locks+0x4b0/0x4b0 [ 573.387395][ T27] ? reacquire_held_locks+0x4b0/0x4b0 [ 573.392807][ T27] ? find_held_lock+0x2d/0x110 [ 573.397642][ T27] ? io_schedule_timeout+0x150/0x150 [ 573.402959][ T27] ? reacquire_held_locks+0x4b0/0x4b0 [ 573.408386][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.413629][ T27] ? lockdep_hardirqs_on+0x7d/0x100 [ 573.418898][ T27] schedule+0xe7/0x1b0 [ 573.422999][ T27] schedule_preempt_disabled+0x13/0x20 [ 573.428554][ T27] __mutex_lock+0x967/0x1340 [ 573.433193][ T27] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 573.439637][ T27] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 573.445243][ T27] ? reacquire_held_locks+0x4b0/0x4b0 [ 573.450689][ T27] ? spin_bug+0x1d0/0x1d0 [ 573.455054][ T27] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 573.461457][ T27] rfkill_global_led_trigger_worker+0x1b/0x160 [ 573.467707][ T27] process_one_work+0xaa2/0x16f0 [ 573.472675][ T27] ? lock_sync+0x190/0x190 [ 573.477169][ T27] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 573.482590][ T27] ? spin_bug+0x1d0/0x1d0 [ 573.486991][ T27] worker_thread+0x687/0x1110 [ 573.491711][ T27] ? __kthread_parkme+0x152/0x220 [ 573.496822][ T27] ? process_one_work+0x16f0/0x16f0 [ 573.502055][ T27] kthread+0x33a/0x430 [ 573.506190][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 573.511856][ T27] ret_from_fork+0x2c/0x70 [ 573.516355][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 573.522038][ T27] ret_from_fork_asm+0x11/0x20 [ 573.526869][ T27] [ 573.529922][ T27] INFO: task syz-executor555:5770 blocked for more than 143 seconds. [ 573.538040][ T27] Not tainted 6.5.0-rc4-syzkaller #0 [ 573.543857][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.552564][ T27] task:syz-executor555 state:D stack:27792 pid:5770 ppid:5041 flags:0x00004006 [ 573.561880][ T27] Call Trace: [ 573.565170][ T27] [ 573.568152][ T27] __schedule+0xee1/0x59f0 [ 573.572624][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 573.578725][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 573.584749][ T27] ? filter_irq_stacks+0x90/0x90 [ 573.589753][ T27] ? io_schedule_timeout+0x150/0x150 [ 573.595081][ T27] ? __mutex_lock+0x962/0x1340 [ 573.599923][ T27] schedule+0xe7/0x1b0 [ 573.604023][ T27] schedule_preempt_disabled+0x13/0x20 [ 573.609568][ T27] __mutex_lock+0x967/0x1340 [ 573.614210][ T27] ? rfkill_fop_open+0x13c/0x750 [ 573.619227][ T27] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 573.624808][ T27] ? lockdep_init_map_type+0x16d/0x7c0 [ 573.630427][ T27] ? rfkill_uevent_work+0xa0/0xa0 [ 573.635516][ T27] ? rfkill_fop_open+0x13c/0x750 [ 573.640539][ T27] rfkill_fop_open+0x13c/0x750 [ 573.645345][ T27] ? kobject_get_unless_zero+0x157/0x1e0 [ 573.651128][ T27] ? rfkill_uevent_work+0xa0/0xa0 [ 573.656265][ T27] misc_open+0x3da/0x4c0 [ 573.660570][ T27] ? misc_devnode+0x120/0x120 [ 573.665274][ T27] chrdev_open+0x277/0x700 [ 573.669781][ T27] ? __unregister_chrdev+0x100/0x100 [ 573.675126][ T27] ? fsnotify_perm.part.0+0x25d/0x630 [ 573.680626][ T27] ? fsnotify_perm.part.0+0x268/0x630 [ 573.686157][ T27] do_dentry_open+0x88b/0x1780 [ 573.690977][ T27] ? __unregister_chrdev+0x100/0x100 [ 573.696373][ T27] ? may_open+0x1f2/0x400 [ 573.700757][ T27] path_openat+0x19af/0x29c0 [ 573.705414][ T27] ? path_lookupat+0x770/0x770 [ 573.710271][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 573.716350][ T27] do_filp_open+0x1de/0x430 [ 573.720876][ T27] ? may_open_dev+0xf0/0xf0 [ 573.725419][ T27] ? _raw_spin_unlock+0x28/0x40 [ 573.730342][ T27] ? alloc_fd+0x2da/0x6c0 [ 573.734717][ T27] do_sys_openat2+0x176/0x1e0 [ 573.739555][ T27] ? build_open_flags+0x690/0x690 [ 573.744631][ T27] ? xfd_validate_state+0x5d/0x180 [ 573.749836][ T27] __x64_sys_openat+0x175/0x210 [ 573.754750][ T27] ? __ia32_sys_open+0x1e0/0x1e0 [ 573.759773][ T27] ? syscall_enter_from_user_mode+0x26/0x80 [ 573.765795][ T27] do_syscall_64+0x38/0xb0 [ 573.770320][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 573.776352][ T27] RIP: 0033:0x7f4af4a11b69 [ 573.780796][ T27] RSP: 002b:00007fff00e038e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 573.789277][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4af4a11b69 [ 573.797321][ T27] RDX: 0000000000000801 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 573.805299][ T27] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 573.813331][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000004bfa7 [ 573.821384][ T27] R13: 00007fff00e038fc R14: 00007fff00e03910 R15: 00007fff00e03900 [ 573.829416][ T27] [ 573.832466][ T27] INFO: task syz-executor555:5774 blocked for more than 144 seconds. [ 573.840609][ T27] Not tainted 6.5.0-rc4-syzkaller #0 [ 573.846461][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.855125][ T27] task:syz-executor555 state:D stack:27712 pid:5774 ppid:5039 flags:0x00004002 [ 573.864400][ T27] Call Trace: [ 573.867985][ T27] [ 573.870929][ T27] __schedule+0xee1/0x59f0 [ 573.875382][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 573.881470][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 573.887520][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 573.893539][ T27] ? io_schedule_timeout+0x150/0x150 [ 573.898909][ T27] ? __mutex_lock+0x962/0x1340 [ 573.903734][ T27] schedule+0xe7/0x1b0 [ 573.907902][ T27] schedule_preempt_disabled+0x13/0x20 [ 573.913428][ T27] __mutex_lock+0x967/0x1340 [ 573.918119][ T27] ? rfkill_unregister+0xde/0x2c0 [ 573.923208][ T27] ? do_raw_spin_unlock+0x173/0x230 [ 573.928487][ T27] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 573.934075][ T27] ? device_del+0x70b/0xa40 [ 573.938689][ T27] ? __device_link_del+0x380/0x380 [ 573.943833][ T27] ? nfc_genl_device_added+0x230/0x230 [ 573.949462][ T27] ? rfkill_unregister+0xde/0x2c0 [ 573.954539][ T27] rfkill_unregister+0xde/0x2c0 [ 573.959516][ T27] nfc_unregister_device+0x94/0x330 [ 573.964750][ T27] ? virtual_nci_open+0x10/0x10 [ 573.969695][ T27] virtual_ncidev_close+0x51/0xa0 [ 573.974809][ T27] __fput+0x3fd/0xac0 [ 573.978905][ T27] task_work_run+0x14d/0x240 [ 573.983546][ T27] ? task_work_cancel+0x30/0x30 [ 573.988471][ T27] ? do_raw_spin_unlock+0x173/0x230 [ 573.993719][ T27] do_exit+0xa99/0x2a20 [ 573.997964][ T27] ? do_group_exit+0x1c5/0x2a0 [ 574.002771][ T27] ? reacquire_held_locks+0x4b0/0x4b0 [ 574.008196][ T27] ? do_raw_spin_lock+0x12e/0x2b0 [ 574.013279][ T27] ? mm_update_next_owner+0x7d0/0x7d0 [ 574.018751][ T27] ? spin_bug+0x1d0/0x1d0 [ 574.023117][ T27] do_group_exit+0xd4/0x2a0 [ 574.027700][ T27] __x64_sys_exit_group+0x3e/0x50 [ 574.032777][ T27] do_syscall_64+0x38/0xb0 [ 574.037271][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 574.043199][ T27] RIP: 0033:0x7f4af4a0fcb9 [ 574.047667][ T27] RSP: 002b:00007fff00e03888 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 574.056147][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4af4a0fcb9 [ 574.064135][ T27] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 574.072162][ T27] RBP: 00007f4af4a8a290 R08: ffffffffffffffb8 R09: 00000000000000a0 [ 574.080227][ T27] R10: 00000000000000a0 R11: 0000000000000246 R12: 00007f4af4a8a290 [ 574.088265][ T27] R13: 0000000000000000 R14: 00007f4af4a8ad00 R15: 00007f4af49e0e50 [ 574.096343][ T27] [ 574.099403][ T27] INFO: task syz-executor555:5777 blocked for more than 144 seconds. [ 574.107538][ T27] Not tainted 6.5.0-rc4-syzkaller #0 [ 574.113362][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.122096][ T27] task:syz-executor555 state:D stack:27680 pid:5777 ppid:5035 flags:0x00000006 [ 574.131413][ T27] Call Trace: [ 574.134697][ T27] [ 574.137694][ T27] __schedule+0xee1/0x59f0 [ 574.142151][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.148191][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.154213][ T27] ? io_schedule_timeout+0x150/0x150 [ 574.159618][ T27] ? __mutex_lock+0x962/0x1340 [ 574.164447][ T27] schedule+0xe7/0x1b0 [ 574.168586][ T27] schedule_preempt_disabled+0x13/0x20 [ 574.174081][ T27] __mutex_lock+0x967/0x1340 [ 574.178766][ T27] ? nfc_dev_down+0x2d/0x2d0 [ 574.183395][ T27] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 574.189036][ T27] ? lock_acquire+0x1ae/0x510 [ 574.193746][ T27] ? find_held_lock+0x2d/0x110 [ 574.198582][ T27] ? rfkill_set_block+0x195/0x550 [ 574.203641][ T27] ? reacquire_held_locks+0x4b0/0x4b0 [ 574.209092][ T27] ? nfc_dev_down+0x2d/0x2d0 [ 574.213712][ T27] nfc_dev_down+0x2d/0x2d0 [ 574.218218][ T27] nfc_rfkill_set_block+0x39/0xd0 [ 574.223283][ T27] ? nfc_dev_down+0x2d0/0x2d0 [ 574.228054][ T27] rfkill_set_block+0x200/0x550 [ 574.233031][ T27] rfkill_fop_write+0x2d4/0x570 [ 574.237983][ T27] ? rfkill_sync_work+0xc0/0xc0 [ 574.242879][ T27] ? security_file_permission+0x94/0x100 [ 574.248624][ T27] vfs_write+0x2a4/0xe40 [ 574.252898][ T27] ? rfkill_sync_work+0xc0/0xc0 [ 574.257826][ T27] ? kernel_write+0x6c0/0x6c0 [ 574.262531][ T27] ? count_memcg_event_mm.part.0+0x11b/0x340 [ 574.268571][ T27] ? find_held_lock+0x2d/0x110 [ 574.273374][ T27] ? __up_read+0x1fc/0x750 [ 574.277869][ T27] ? __fget_light+0x1fc/0x260 [ 574.282598][ T27] ksys_write+0x1f0/0x250 [ 574.287002][ T27] ? __ia32_sys_read+0xb0/0xb0 [ 574.291799][ T27] ? syscall_enter_from_user_mode+0x26/0x80 [ 574.297786][ T27] do_syscall_64+0x38/0xb0 [ 574.302326][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 574.308283][ T27] RIP: 0033:0x7f4af4a11b69 [ 574.312722][ T27] RSP: 002b:00007fff00e038e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 574.321214][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4af4a11b69 [ 574.329256][ T27] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000004 [ 574.337301][ T27] RBP: 00000000000f4240 R08: 00000000000000a0 R09: 00000000000000a0 [ 574.345300][ T27] R10: 00000000000000a0 R11: 0000000000000246 R12: 000000000004bf51 [ 574.353361][ T27] R13: 00007fff00e038fc R14: 00007fff00e03910 R15: 00007fff00e03900 [ 574.361515][ T27] [ 574.364572][ T27] INFO: task syz-executor555:5788 blocked for more than 144 seconds. [ 574.372698][ T27] Not tainted 6.5.0-rc4-syzkaller #0 [ 574.378554][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.387284][ T27] task:syz-executor555 state:D stack:28400 pid:5788 ppid:5036 flags:0x00000006 [ 574.396577][ T27] Call Trace: [ 574.399865][ T27] [ 574.402802][ T27] __schedule+0xee1/0x59f0 [ 574.407283][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.413336][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.419393][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.425413][ T27] ? io_schedule_timeout+0x150/0x150 [ 574.432589][ T27] ? __mutex_lock+0x962/0x1340 [ 574.437412][ T27] schedule+0xe7/0x1b0 [ 574.441501][ T27] schedule_preempt_disabled+0x13/0x20 [ 574.447037][ T27] __mutex_lock+0x967/0x1340 [ 574.451669][ T27] ? misc_open+0x59/0x4c0 [ 574.456063][ T27] ? avc_has_perm_noaudit+0x14c/0x3b0 [ 574.461483][ T27] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 574.467256][ T27] ? lock_acquire+0x1ae/0x510 [ 574.471973][ T27] ? chrdev_open+0x118/0x700 [ 574.476664][ T27] ? reacquire_held_locks+0x4b0/0x4b0 [ 574.482113][ T27] ? kobject_get_unless_zero+0x157/0x1e0 [ 574.487852][ T27] ? misc_open+0x59/0x4c0 [ 574.492245][ T27] misc_open+0x59/0x4c0 [ 574.496496][ T27] ? misc_devnode+0x120/0x120 [ 574.501234][ T27] chrdev_open+0x277/0x700 [ 574.505694][ T27] ? __unregister_chrdev+0x100/0x100 [ 574.511072][ T27] ? fsnotify_perm.part.0+0x25d/0x630 [ 574.516524][ T27] ? fsnotify_perm.part.0+0x268/0x630 [ 574.521960][ T27] do_dentry_open+0x88b/0x1780 [ 574.526798][ T27] ? __unregister_chrdev+0x100/0x100 [ 574.532130][ T27] ? may_open+0x1f2/0x400 [ 574.536621][ T27] path_openat+0x19af/0x29c0 [ 574.541253][ T27] ? path_lookupat+0x770/0x770 [ 574.546091][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.552120][ T27] do_filp_open+0x1de/0x430 [ 574.556686][ T27] ? may_open_dev+0xf0/0xf0 [ 574.561235][ T27] ? _raw_spin_unlock+0x28/0x40 [ 574.566162][ T27] ? alloc_fd+0x2da/0x6c0 [ 574.570542][ T27] do_sys_openat2+0x176/0x1e0 [ 574.575233][ T27] ? build_open_flags+0x690/0x690 [ 574.580322][ T27] ? __up_read+0x1fc/0x750 [ 574.584774][ T27] __x64_sys_openat+0x175/0x210 [ 574.589764][ T27] ? __ia32_sys_open+0x1e0/0x1e0 [ 574.594773][ T27] ? syscall_enter_from_user_mode+0x26/0x80 [ 574.600749][ T27] do_syscall_64+0x38/0xb0 [ 574.605201][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 574.611193][ T27] RIP: 0033:0x7f4af4a11b69 [ 574.615650][ T27] RSP: 002b:00007fff00e038e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 574.624133][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4af4a11b69 [ 574.632159][ T27] RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 574.640181][ T27] RBP: 00000000000f4240 R08: 0000000000000000 R09: 00000000000000a0 [ 574.648199][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000004bfec [ 574.656219][ T27] R13: 00007fff00e038fc R14: 00007fff00e03910 R15: 00007fff00e03900 [ 574.664218][ T27] [ 574.667292][ T27] INFO: task syz-executor555:5791 blocked for more than 144 seconds. [ 574.675388][ T27] Not tainted 6.5.0-rc4-syzkaller #0 [ 574.681320][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.690041][ T27] task:syz-executor555 state:D stack:28416 pid:5791 ppid:5040 flags:0x00000006 [ 574.699304][ T27] Call Trace: [ 574.702600][ T27] [ 574.705535][ T27] __schedule+0xee1/0x59f0 [ 574.710076][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.716123][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.722121][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.728181][ T27] ? io_schedule_timeout+0x150/0x150 [ 574.733508][ T27] ? __mutex_lock+0x962/0x1340 [ 574.738379][ T27] schedule+0xe7/0x1b0 [ 574.742492][ T27] schedule_preempt_disabled+0x13/0x20 [ 574.748016][ T27] __mutex_lock+0x967/0x1340 [ 574.752642][ T27] ? misc_open+0x59/0x4c0 [ 574.757035][ T27] ? avc_has_perm_noaudit+0x14c/0x3b0 [ 574.762448][ T27] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 574.768060][ T27] ? lock_acquire+0x1ae/0x510 [ 574.772771][ T27] ? chrdev_open+0x118/0x700 [ 574.777427][ T27] ? reacquire_held_locks+0x4b0/0x4b0 [ 574.782835][ T27] ? kobject_get_unless_zero+0x157/0x1e0 [ 574.788536][ T27] ? misc_open+0x59/0x4c0 [ 574.792988][ T27] misc_open+0x59/0x4c0 [ 574.797211][ T27] ? misc_devnode+0x120/0x120 [ 574.801938][ T27] chrdev_open+0x277/0x700 [ 574.806441][ T27] ? __unregister_chrdev+0x100/0x100 [ 574.811773][ T27] ? fsnotify_perm.part.0+0x25d/0x630 [ 574.817241][ T27] ? fsnotify_perm.part.0+0x268/0x630 [ 574.822670][ T27] do_dentry_open+0x88b/0x1780 [ 574.827521][ T27] ? __unregister_chrdev+0x100/0x100 [ 574.832858][ T27] ? may_open+0x1f2/0x400 [ 574.837288][ T27] path_openat+0x19af/0x29c0 [ 574.841924][ T27] ? path_lookupat+0x770/0x770 [ 574.846765][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.852837][ T27] do_filp_open+0x1de/0x430 [ 574.857431][ T27] ? may_open_dev+0xf0/0xf0 [ 574.862000][ T27] ? _raw_spin_unlock+0x28/0x40 [ 574.866957][ T27] ? alloc_fd+0x2da/0x6c0 [ 574.871347][ T27] do_sys_openat2+0x176/0x1e0 [ 574.876110][ T27] ? build_open_flags+0x690/0x690 [ 574.881186][ T27] ? __up_read+0x1fc/0x750 [ 574.885617][ T27] __x64_sys_openat+0x175/0x210 [ 574.890542][ T27] ? __ia32_sys_open+0x1e0/0x1e0 [ 574.895529][ T27] ? syscall_enter_from_user_mode+0x26/0x80 [ 574.901516][ T27] do_syscall_64+0x38/0xb0 [ 574.906103][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 574.912032][ T27] RIP: 0033:0x7f4af4a11b69 [ 574.916530][ T27] RSP: 002b:00007fff00e038e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 574.924997][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4af4a11b69 [ 574.933016][ T27] RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 574.941028][ T27] RBP: 00000000000f4240 R08: 0000000000000000 R09: 00000000000000a0 [ 574.949042][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000004c016 [ 574.957060][ T27] R13: 00007fff00e038fc R14: 00007fff00e03910 R15: 00007fff00e03900 [ 574.965045][ T27] [ 574.968152][ T27] INFO: task syz-executor555:5795 blocked for more than 145 seconds. [ 574.976335][ T27] Not tainted 6.5.0-rc4-syzkaller #0 [ 574.982168][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.990900][ T27] task:syz-executor555 state:D stack:28400 pid:5795 ppid:5038 flags:0x00000006 [ 575.000191][ T27] Call Trace: [ 575.003492][ T27] [ 575.006484][ T27] __schedule+0xee1/0x59f0 [ 575.010965][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 575.017011][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 575.023033][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 575.029079][ T27] ? io_schedule_timeout+0x150/0x150 [ 575.034422][ T27] ? __mutex_lock+0x962/0x1340 [ 575.039240][ T27] schedule+0xe7/0x1b0 [ 575.043339][ T27] schedule_preempt_disabled+0x13/0x20 [ 575.048866][ T27] __mutex_lock+0x967/0x1340 [ 575.053517][ T27] ? misc_open+0x59/0x4c0 [ 575.057910][ T27] ? avc_has_perm_noaudit+0x14c/0x3b0 [ 575.063334][ T27] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 575.068936][ T27] ? lock_acquire+0x1ae/0x510 [ 575.073652][ T27] ? chrdev_open+0x118/0x700 [ 575.078304][ T27] ? reacquire_held_locks+0x4b0/0x4b0 [ 575.083806][ T27] ? kobject_get_unless_zero+0x157/0x1e0 [ 575.089516][ T27] ? misc_open+0x59/0x4c0 [ 575.093884][ T27] misc_open+0x59/0x4c0 [ 575.098186][ T27] ? misc_devnode+0x120/0x120 [ 575.102901][ T27] chrdev_open+0x277/0x700 [ 575.107384][ T27] ? __unregister_chrdev+0x100/0x100 [ 575.112712][ T27] ? fsnotify_perm.part.0+0x25d/0x630 [ 575.118182][ T27] ? fsnotify_perm.part.0+0x268/0x630 [ 575.123613][ T27] do_dentry_open+0x88b/0x1780 [ 575.128477][ T27] ? __unregister_chrdev+0x100/0x100 [ 575.133825][ T27] ? may_open+0x1f2/0x400 [ 575.138211][ T27] path_openat+0x19af/0x29c0 [ 575.142841][ T27] ? path_lookupat+0x770/0x770 [ 575.147686][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 575.153712][ T27] do_filp_open+0x1de/0x430 [ 575.158286][ T27] ? may_open_dev+0xf0/0xf0 [ 575.162864][ T27] ? _raw_spin_unlock+0x28/0x40 [ 575.167804][ T27] ? alloc_fd+0x2da/0x6c0 [ 575.172211][ T27] do_sys_openat2+0x176/0x1e0 [ 575.176957][ T27] ? build_open_flags+0x690/0x690 [ 575.182021][ T27] ? xfd_validate_state+0x5d/0x180 [ 575.187195][ T27] __x64_sys_openat+0x175/0x210 [ 575.192084][ T27] ? __ia32_sys_open+0x1e0/0x1e0 [ 575.197087][ T27] ? syscall_enter_from_user_mode+0x26/0x80 [ 575.203025][ T27] do_syscall_64+0x38/0xb0 [ 575.207507][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 575.213427][ T27] RIP: 0033:0x7f4af4a11b69 [ 575.217941][ T27] RSP: 002b:00007fff00e038e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.226516][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4af4a11b69 [ 575.234529][ T27] RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 575.242578][ T27] RBP: 00000000000f4240 R08: 0000000000000000 R09: 00000000000000a0 [ 575.250628][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000004bfd6 [ 575.258668][ T27] R13: 00007fff00e038fc R14: 00007fff00e03910 R15: 00007fff00e03900 [ 575.266742][ T27] [ 575.269796][ T27] [ 575.269796][ T27] Showing all locks held in the system: [ 575.277552][ T27] 1 lock held by rcu_tasks_kthre/12: [ 575.282862][ T27] #0: ffffffff8c9a2730 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xe20 [ 575.293399][ T27] 1 lock held by rcu_tasks_trace/13: [ 575.298761][ T27] #0: ffffffff8c9a2430 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x2c/0xe20 [ 575.309851][ T27] 1 lock held by khungtaskd/27: [ 575.314719][ T27] #0: ffffffff8c9a3340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 [ 575.324674][ T27] 2 locks held by getty/4772: [ 575.329486][ T27] #0: ffff88802a655098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 575.339318][ T27] #1: ffffc900020482f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfcb/0x1480 [ 575.349522][ T27] 3 locks held by kworker/0:6/5116: [ 575.354725][ T27] #0: ffff888012869d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x96a/0x16f0 [ 575.365170][ T27] #1: ffffc9000370fd80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x99e/0x16f0 [ 575.377024][ T27] #2: ffffffff8e84d088 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_sync_work+0x1c/0xc0 [ 575.387050][ T27] 3 locks held by kworker/0:7/5167: [ 575.392278][ T27] #0: ffff888012869d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x96a/0x16f0 [ 575.402762][ T27] #1: ffffc900037cfd80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x99e/0x16f0 [ 575.415795][ T27] #2: ffffffff8e84d088 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 575.427307][ T27] 2 locks held by syz-executor555/5770: [ 575.432872][ T27] #0: ffffffff8d4d6c28 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 575.441419][ T27] #1: ffffffff8e84d088 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x13c/0x750 [ 575.452000][ T27] 2 locks held by syz-executor555/5774: [ 575.457594][ T27] #0: ffff88807da70100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x60/0x330 [ 575.467462][ T27] #1: ffffffff8e84d088 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xde/0x2c0 [ 575.477675][ T27] 2 locks held by syz-executor555/5777: [ 575.483243][ T27] #0: ffffffff8e84d088 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x16e/0x570 [ 575.493422][ T27] #1: ffff88807da70100 (&dev->mutex){....}-{3:3}, at: nfc_dev_down+0x2d/0x2d0 [ 575.502493][ T27] 1 lock held by syz-executor555/5788: [ 575.508027][ T27] #0: ffffffff8d4d6c28 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 575.516608][ T27] 1 lock held by syz-executor555/5791: [ 575.522092][ T27] #0: ffffffff8d4d6c28 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 575.530625][ T27] 1 lock held by syz-executor555/5795: [ 575.536128][ T27] #0: ffffffff8d4d6c28 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x59/0x4c0 [ 575.544607][ T27] [ 575.546971][ T27] ============================================= [ 575.546971][ T27] [ 575.555407][ T27] NMI backtrace for cpu 0 [ 575.559732][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.5.0-rc4-syzkaller #0 [ 575.567807][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 575.577866][ T27] Call Trace: [ 575.581143][ T27] [ 575.584069][ T27] dump_stack_lvl+0xd9/0x1b0 [ 575.588689][ T27] nmi_cpu_backtrace+0x277/0x380 [ 575.593679][ T27] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 575.598894][ T27] nmi_trigger_cpumask_backtrace+0x2ac/0x310 [ 575.604905][ T27] watchdog+0xf29/0x11b0 [ 575.609178][ T27] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 575.615202][ T27] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 575.621195][ T27] kthread+0x33a/0x430 [ 575.625262][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 575.630908][ T27] ret_from_fork+0x2c/0x70 [ 575.635344][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 575.641029][ T27] ret_from_fork_asm+0x11/0x20 [ 575.645823][ T27] [ 575.648914][ T27] Sending NMI from CPU 0 to CPUs 1: [ 575.654146][ C1] NMI backtrace for cpu 1 [ 575.654157][ C1] CPU: 1 PID: 47 Comm: kworker/u4:3 Not tainted 6.5.0-rc4-syzkaller #0 [ 575.654179][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 575.654193][ C1] Workqueue: events_unbound toggle_allocation_gate [ 575.654222][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x60/0x70 [ 575.654262][ C1] Code: 82 e0 15 00 00 83 f8 02 75 20 48 8b 8a e8 15 00 00 8b 92 e4 15 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 f3 0f 1e fa 41 57 [ 575.654284][ C1] RSP: 0018:ffffc90000d8f988 EFLAGS: 00000293 [ 575.654300][ C1] RAX: 0000000000000000 RBX: ffffc90000d8fa70 RCX: 0000000000000000 [ 575.654315][ C1] RDX: ffff8880142f0080 RSI: ffffffff8a262619 RDI: ffffc90000d8fad0 [ 575.654330][ C1] RBP: ffffffff8a6672ae R08: 0000000000000005 R09: 0000000000000001 [ 575.654344][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8a6672af [ 575.654357][ C1] R13: 000000000000000f R14: 0000000000000000 R15: ffffffff8a6672aa [ 575.654371][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 575.654393][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.654408][ C1] CR2: 00005594fb609e98 CR3: 000000000c776000 CR4: 00000000003506e0 [ 575.654422][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 575.654435][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 575.654449][ C1] Call Trace: [ 575.654454][ C1] [ 575.654460][ C1] ? nmi_cpu_backtrace+0x1d4/0x380 [ 575.654496][ C1] ? __sanitizer_cov_trace_pc+0x60/0x70 [ 575.654528][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 575.654560][ C1] ? nmi_handle+0x145/0x400 [ 575.654586][ C1] ? irqentry_nmi_enter+0x7f/0x90 [ 575.654614][ C1] ? __sanitizer_cov_trace_pc+0x60/0x70 [ 575.654645][ C1] ? default_do_nmi+0x69/0x160 [ 575.654668][ C1] ? exc_nmi+0x171/0x1e0 [ 575.654690][ C1] ? end_repeat_nmi+0x16/0x31 [ 575.654716][ C1] ? insn_get_displacement+0x2a9/0x680 [ 575.654739][ C1] ? __sanitizer_cov_trace_pc+0x60/0x70 [ 575.654771][ C1] ? __sanitizer_cov_trace_pc+0x60/0x70 [ 575.654802][ C1] ? __sanitizer_cov_trace_pc+0x60/0x70 [ 575.654833][ C1] [ 575.654838][ C1] [ 575.654844][ C1] insn_get_displacement+0x2a9/0x680 [ 575.654867][ C1] insn_get_immediate+0x550/0x1c50 [ 575.654889][ C1] ? kmem_cache_alloc_bulk+0xf0/0x400 [ 575.654922][ C1] insn_decode+0x2ae/0x340 [ 575.654943][ C1] text_poke_loc_init+0xc2/0x4d0 [ 575.654963][ C1] ? kmem_cache_alloc_bulk+0xf0/0x400 [ 575.654995][ C1] ? text_poke_memset+0x60/0x60 [ 575.655017][ C1] ? kmem_cache_alloc_bulk+0xf0/0x400 [ 575.655048][ C1] ? __jump_label_patch+0x173/0x340 [ 575.655080][ C1] arch_jump_label_transform_queue+0x97/0x100 [ 575.655114][ C1] __jump_label_update+0x125/0x420 [ 575.655172][ C1] jump_label_update+0x32e/0x410 [ 575.655208][ C1] static_key_disable_cpuslocked+0x154/0x1b0 [ 575.655230][ C1] static_key_disable+0x1a/0x20 [ 575.655249][ C1] toggle_allocation_gate+0x13f/0x250 [ 575.655279][ C1] ? wake_up_kfence_timer+0x30/0x30 [ 575.655303][ C1] ? spin_bug+0x1d0/0x1d0 [ 575.655333][ C1] process_one_work+0xaa2/0x16f0 [ 575.655379][ C1] ? lock_sync+0x190/0x190 [ 575.655407][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 575.655435][ C1] ? spin_bug+0x1d0/0x1d0 [ 575.655467][ C1] worker_thread+0x687/0x1110 [ 575.655497][ C1] ? process_one_work+0x16f0/0x16f0 [ 575.655524][ C1] kthread+0x33a/0x430 [ 575.655545][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 575.655571][ C1] ret_from_fork+0x2c/0x70 [ 575.655598][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 575.655623][ C1] ret_from_fork_asm+0x11/0x20 [ 575.655662][ C1] [ 575.655669][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.524 msecs [ 575.656144][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 575.656159][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.5.0-rc4-syzkaller #0 [ 575.656193][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 575.656210][ T27] Call Trace: [ 575.656218][ T27] [ 575.656227][ T27] dump_stack_lvl+0xd9/0x1b0 [ 575.656260][ T27] panic+0x6a4/0x750 [ 575.656295][ T27] ? panic_smp_self_stop+0xa0/0xa0 [ 575.656331][ T27] ? __irq_work_queue_local+0x132/0x3f0 [ 575.656371][ T27] ? irq_work_queue+0x2a/0x70 [ 575.656405][ T27] ? __wake_up_klogd.part.0+0x99/0xf0 [ 575.656448][ T27] ? watchdog+0xce1/0x11b0 [ 575.656493][ T27] watchdog+0xcf2/0x11b0 [ 575.656550][ T27] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 575.656608][ T27] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 575.656651][ T27] kthread+0x33a/0x430 [ 575.656677][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 575.656708][ T27] ret_from_fork+0x2c/0x70 [ 575.656740][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 575.656775][ T27] ret_from_fork_asm+0x11/0x20 [ 575.656818][ T27] [ 575.660461][ T27] Kernel Offset: disabled [ 576.140756][ T27] Rebooting in 86400 seconds..