bisecting cause commit starting from cb71b93c2dc36d18a8b05245973328d018272cdf building syzkaller on bff65f44b47bd73f56c3d6a5c3899de5f5775136 testing commit cb71b93c2dc36d18a8b05245973328d018272cdf compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 76205f36be3db30ba2e19a6229d5602a669bff5ad634eb3236acb044f869e81c run #0: crashed: WARNING in notifier_chain_register run #1: crashed: WARNING in notifier_chain_register run #2: crashed: WARNING in notifier_chain_register run #3: crashed: WARNING in notifier_chain_register run #4: crashed: WARNING in notifier_chain_register run #5: crashed: WARNING in notifier_chain_register run #6: crashed: WARNING in notifier_chain_register run #7: crashed: WARNING in notifier_chain_register run #8: crashed: WARNING in notifier_chain_register run #9: crashed: WARNING in notifier_chain_register run #10: crashed: WARNING in notifier_chain_register run #11: crashed: WARNING in notifier_chain_register run #12: crashed: WARNING in notifier_chain_register run #13: crashed: WARNING in notifier_chain_register run #14: crashed: WARNING in notifier_chain_register run #15: crashed: INFO: task hung in hci_dev_close_sync run #16: crashed: WARNING in notifier_chain_register run #17: crashed: WARNING in notifier_chain_register run #18: crashed: WARNING in notifier_chain_register run #19: OK testing release v5.18 testing commit 4b0986a3613c92f4ec1bdc7f60ec66fea135991f compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 35d62efea06b9a10cb738503a2ce1d53406d001c83c47157d6c7f7130d4b91fb all runs: OK # git bisect start cb71b93c2dc36d18a8b05245973328d018272cdf 4b0986a3613c92f4ec1bdc7f60ec66fea135991f Bisecting: 10621 revisions left to test after this (roughly 13 steps) [9d004b2f4fea97cde123e7f1939b80e77bf2e695] Merge tag 'cxl-for-5.19' of git://git.kernel.org/pub/scm/linux/kernel/git/cxl/cxl testing commit 9d004b2f4fea97cde123e7f1939b80e77bf2e695 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 642d676f98bd526e6fdef6413f7c0d73938ee65eec355fa50373e451fe464241 run #0: OK run #1: crashed: INFO: task hung in hci_dev_close_sync run #2: crashed: INFO: task hung in hci_dev_close_sync run #3: crashed: INFO: task hung in hci_dev_close_sync run #4: crashed: INFO: task hung in hci_dev_close_sync run #5: crashed: INFO: task hung in hci_dev_close_sync run #6: crashed: INFO: task hung in hci_dev_close_sync run #7: crashed: INFO: task hung in hci_dev_close_sync run #8: crashed: INFO: task hung in hci_dev_close_sync run #9: crashed: INFO: task hung in hci_dev_close_sync # git bisect bad 9d004b2f4fea97cde123e7f1939b80e77bf2e695 Bisecting: 5473 revisions left to test after this (roughly 12 steps) [86c87bea6b42100c67418af690919c44de6ede6e] Merge tag 'devicetree-for-5.19' of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux testing commit 86c87bea6b42100c67418af690919c44de6ede6e compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 3969b6889c6d11aaa9b76797cd592d1e3d04fa4bc1f337f366dfe5ef9c3c1392 run #0: crashed: INFO: task hung in hci_dev_close_sync run #1: crashed: INFO: task hung in scan_update_work run #2: crashed: INFO: task hung in hci_dev_close_sync run #3: crashed: INFO: task hung in hci_dev_close_sync run #4: crashed: INFO: task hung in hci_dev_close_sync run #5: OK run #6: crashed: INFO: task hung in hci_dev_close_sync run #7: OK run #8: crashed: INFO: task hung in hci_dev_close_sync run #9: OK # git bisect bad 86c87bea6b42100c67418af690919c44de6ede6e Bisecting: 2583 revisions left to test after this (roughly 11 steps) [7208c9842c50f97327aac20be62edc8ad230f05c] Merge tag 'gfs2-v5.18-rc6-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/gfs2/linux-gfs2 testing commit 7208c9842c50f97327aac20be62edc8ad230f05c compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 5348ebb17076c6bf37e4230fa7274fc6fdc116120e81e96a6707354146c80e05 all runs: OK # git bisect good 7208c9842c50f97327aac20be62edc8ad230f05c Bisecting: 1292 revisions left to test after this (roughly 10 steps) [01f4685797a5723b0046da03c30185ac9ff42b30] eth: amd: remove NI6510 support (ni65) testing commit 01f4685797a5723b0046da03c30185ac9ff42b30 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: b3e680bc58e725e7582dc9da520f307cd6ad1725d19619ab9ab11cced725db1d all runs: OK # git bisect good 01f4685797a5723b0046da03c30185ac9ff42b30 Bisecting: 624 revisions left to test after this (roughly 9 steps) [1ef0736c0711e2633a59b540931406de626f2836] Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next testing commit 1ef0736c0711e2633a59b540931406de626f2836 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 57e2361165a71c3e8d95bc6a74de05f56faff146cd8aab835199d8204cb2ff98 run #0: crashed: INFO: task hung in hci_dev_close_sync run #1: OK run #2: OK run #3: crashed: INFO: task hung in hci_dev_open run #4: OK run #5: OK run #6: crashed: INFO: task hung in hci_dev_close_sync run #7: crashed: INFO: task hung in hci_dev_close_sync run #8: OK run #9: OK reproducer seems to be flaky # git bisect bad 1ef0736c0711e2633a59b540931406de626f2836 Bisecting: 295 revisions left to test after this (roughly 8 steps) [d353e1a3bafd468941d42f6aa59bbd8ac42959b6] Merge tag 'wireless-next-2022-05-19' of git://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless-next testing commit d353e1a3bafd468941d42f6aa59bbd8ac42959b6 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 0b33f7b6e501fc68ded3939f59408baeafc6dfdecd7cfd34176fe3c36d6add97 all runs: OK # git bisect good d353e1a3bafd468941d42f6aa59bbd8ac42959b6 Bisecting: 154 revisions left to test after this (roughly 7 steps) [8f445a3ec3fd36feb90c5b2ef8d21e2492819cdc] can: ctucanfd: platform: add missing dependency to HAS_IOMEM testing commit 8f445a3ec3fd36feb90c5b2ef8d21e2492819cdc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d6063dd641694b5f98eaf836b5c608c859b02cb35734c8ca43b6a9f36bf99b63 all runs: OK # git bisect good 8f445a3ec3fd36feb90c5b2ef8d21e2492819cdc Bisecting: 76 revisions left to test after this (roughly 6 steps) [0bed8f374a9981d94c6b03376925419ef588f44a] Merge branch 'Introduce access remote cpu elem support in BPF percpu map' testing commit 0bed8f374a9981d94c6b03376925419ef588f44a compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9785cbef98ac4d461b84b0beaedb41863ba8473c1a6e63988ea4267e2bcc9f5f run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #1: basic kernel testing failed: BUG: program execution failed: executor NUM: failed to write control pipe: write |NUM: broken pipe run #2: OK run #3: OK run #4: OK run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect good 0bed8f374a9981d94c6b03376925419ef588f44a Bisecting: 38 revisions left to test after this (roughly 5 steps) [d88bb5eed04ce50cc20e7f9282977841728be798] bpf: Fill new bpf_prog_pack with illegal instructions testing commit d88bb5eed04ce50cc20e7f9282977841728be798 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 3fcb4b25e52ff12eac18db4bd27f8c23536748cc83eb8df7dd77acb9780eee00 all runs: OK # git bisect good d88bb5eed04ce50cc20e7f9282977841728be798 Bisecting: 19 revisions left to test after this (roughly 4 steps) [0d37ddfc50d9a81f46d3b2ffa156d4fea8a410f7] Bluetooth: btbcm: Add entry for BCM4373A0 UART Bluetooth testing commit 0d37ddfc50d9a81f46d3b2ffa156d4fea8a410f7 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 4d43a6d3c1505e49a4b4431b73b4ce9437a2ea1cbf9d5848600a5ebde1e9f189 run #0: crashed: INFO: task hung in hci_dev_close_sync run #1: crashed: INFO: task hung in hci_dev_close_sync run #2: crashed: INFO: task hung in hci_dev_close_sync run #3: crashed: INFO: task hung in hci_dev_close_sync run #4: crashed: INFO: task hung in hci_dev_close_sync run #5: crashed: INFO: task hung in hci_dev_close_sync run #6: crashed: INFO: task hung in hci_dev_close_sync run #7: OK run #8: OK run #9: crashed: INFO: task hung in hci_dev_open run #10: OK run #11: crashed: INFO: task hung in hci_dev_close_sync run #12: OK run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 0d37ddfc50d9a81f46d3b2ffa156d4fea8a410f7 Bisecting: 9 revisions left to test after this (roughly 3 steps) [d44e1dbda36fff5d7c2586683c4adc0963aef908] Bluetooth: btusb: Set HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN for QCA testing commit d44e1dbda36fff5d7c2586683c4adc0963aef908 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: d16ac6de72cc372f1433ea8071ca469748a2eb8d80fa7b766efba16b47cfcbc2 all runs: OK # git bisect good d44e1dbda36fff5d7c2586683c4adc0963aef908 Bisecting: 4 revisions left to test after this (roughly 2 steps) [4622594766d0bc96d04079a96e13eb58f3f799f2] Bluetooth: btusb: add support for Qualcomm WCN785x testing commit 4622594766d0bc96d04079a96e13eb58f3f799f2 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 9ee059db76578ba83aada656225d167b10f219e8cd8add3d1dbe5e737a2da5d0 all runs: OK # git bisect good 4622594766d0bc96d04079a96e13eb58f3f799f2 Bisecting: 2 revisions left to test after this (roughly 1 step) [247f226adadfb7be09dd537f177429f4415aef8e] Bluetooth: btusb: Set HCI_QUIRK_BROKEN_ERR_DATA_REPORTING for QCA testing commit 247f226adadfb7be09dd537f177429f4415aef8e compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 6e6511982c4180ead5f419678df7f2178ea2cb0ccc1018632d9b1fa1f0e5759f run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #1: crashed: INFO: task hung in hci_dev_close_sync run #2: crashed: INFO: task hung in hci_dev_close_sync run #3: crashed: INFO: task hung in hci_dev_close_sync run #4: crashed: INFO: task hung in hci_dev_close_sync run #5: crashed: INFO: task hung in hci_dev_close_sync run #6: crashed: INFO: task hung in hci_dev_close_sync run #7: crashed: INFO: task hung in hci_dev_close_sync run #8: OK run #9: OK run #10: OK run #11: OK run #12: crashed: INFO: task hung in hci_dev_close_sync run #13: OK run #14: OK run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad 247f226adadfb7be09dd537f177429f4415aef8e Bisecting: 0 revisions left to test after this (roughly 0 steps) [ff7f2926114d3a50f5ffe461a9bce8d761748da5] Bluetooth: core: Fix missing power_on work cancel on HCI close testing commit ff7f2926114d3a50f5ffe461a9bce8d761748da5 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: eaf1988c75a62a03806a415ce2bd301c390a818f9333f193d79663f4c6866019 run #0: crashed: INFO: task hung in hci_dev_close_sync run #1: crashed: INFO: task hung in hci_dev_close_sync run #2: crashed: INFO: task hung in hci_dev_close_sync run #3: OK run #4: crashed: INFO: task hung in hci_dev_open run #5: OK run #6: OK run #7: OK run #8: OK run #9: OK run #10: OK run #11: OK run #12: OK run #13: crashed: INFO: task hung in hci_dev_close_sync run #14: crashed: INFO: task hung in hci_dev_close_sync run #15: OK run #16: OK run #17: OK run #18: OK run #19: OK # git bisect bad ff7f2926114d3a50f5ffe461a9bce8d761748da5 ff7f2926114d3a50f5ffe461a9bce8d761748da5 is the first bad commit commit ff7f2926114d3a50f5ffe461a9bce8d761748da5 Author: Vasyl Vavrychuk Date: Tue Apr 26 11:18:23 2022 +0300 Bluetooth: core: Fix missing power_on work cancel on HCI close Move power_on work cancel to hci_dev_close_sync to ensure that power_on work is canceled after HCI interface down, power off, rfkill, etc. For example, if hciconfig hci0 down is done early enough during boot, it may run before power_on work. Then, power_on work will actually bring up interface despite above hciconfig command. Signed-off-by: Vasyl Vavrychuk Signed-off-by: Marcel Holtmann net/bluetooth/hci_core.c | 2 -- net/bluetooth/hci_sync.c | 1 + 2 files changed, 1 insertion(+), 2 deletions(-) culprit signature: eaf1988c75a62a03806a415ce2bd301c390a818f9333f193d79663f4c6866019 parent signature: 9ee059db76578ba83aada656225d167b10f219e8cd8add3d1dbe5e737a2da5d0 Reproducer flagged being flaky revisions tested: 16, total time: 4h53m4.722448946s (build: 1h47m21.926616669s, test: 3h3m56.06134426s) first bad commit: ff7f2926114d3a50f5ffe461a9bce8d761748da5 Bluetooth: core: Fix missing power_on work cancel on HCI close recipients (to): ["davem@davemloft.net" "edumazet@google.com" "johan.hedberg@gmail.com" "kuba@kernel.org" "linux-bluetooth@vger.kernel.org" "luiz.dentz@gmail.com" "marcel@holtmann.org" "marcel@holtmann.org" "netdev@vger.kernel.org" "pabeni@redhat.com" "vasyl.vavrychuk@opensynergy.com"] recipients (cc): ["linux-kernel@vger.kernel.org"] crash: INFO: task hung in hci_dev_close_sync INFO: task kworker/u5:6:4060 blocked for more than 143 seconds. Not tainted 5.18.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u5:6 state:D stack:27752 pid: 4060 ppid: 2 flags:0x00004000 Workqueue: hci1 hci_power_on Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0xa5a/0x4c70 kernel/sched/core.c:6388 schedule+0xd2/0x1f0 kernel/sched/core.c:6460 schedule_timeout+0x19d/0x250 kernel/time/timer.c:1860 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x373/0x530 kernel/sched/completion.c:106 __flush_work+0x48b/0xa30 kernel/workqueue.c:3075 __cancel_work_timer+0x315/0x460 kernel/workqueue.c:3162 hci_dev_close_sync+0x7b/0xef0 net/bluetooth/hci_sync.c:4092 hci_dev_do_close+0x23/0x60 net/bluetooth/hci_core.c:553 hci_power_on+0x15c/0x4c0 net/bluetooth/hci_core.c:981 process_one_work+0x865/0x13d0 kernel/workqueue.c:2289 worker_thread+0x598/0xec0 kernel/workqueue.c:2436 kthread+0x299/0x340 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298 INFO: task kworker/u5:8:4062 blocked for more than 143 seconds. Not tainted 5.18.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u5:8 state:D stack:28208 pid: 4062 ppid: 2 flags:0x00004000 Workqueue: hci0 hci_power_on Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0xa5a/0x4c70 kernel/sched/core.c:6388 schedule+0xd2/0x1f0 kernel/sched/core.c:6460 schedule_timeout+0x19d/0x250 kernel/time/timer.c:1860 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x373/0x530 kernel/sched/completion.c:106 __flush_work+0x48b/0xa30 kernel/workqueue.c:3075 __cancel_work_timer+0x315/0x460 kernel/workqueue.c:3162 hci_dev_close_sync+0x7b/0xef0 net/bluetooth/hci_sync.c:4092 hci_dev_do_close+0x23/0x60 net/bluetooth/hci_core.c:553 hci_power_on+0x15c/0x4c0 net/bluetooth/hci_core.c:981 process_one_work+0x865/0x13d0 kernel/workqueue.c:2289 worker_thread+0x598/0xec0 kernel/workqueue.c:2436 kthread+0x299/0x340 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298 INFO: task syz-executor234:29986 blocked for more than 143 seconds. Not tainted 5.18.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor234 state:D stack:27536 pid:29986 ppid: 29980 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0xa5a/0x4c70 kernel/sched/core.c:6388 schedule+0xd2/0x1f0 kernel/sched/core.c:6460 schedule_timeout+0x19d/0x250 kernel/time/timer.c:1860 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x373/0x530 kernel/sched/completion.c:106 flush_workqueue+0x352/0x1230 kernel/workqueue.c:2861 hci_dev_open+0xa2/0x260 net/bluetooth/hci_core.c:526 hci_sock_ioctl+0x477/0x6e0 net/bluetooth/hci_sock.c:1027 sock_do_ioctl+0xc9/0x1c0 net/socket.c:1169 sock_ioctl+0x278/0x510 net/socket.c:1286 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f942bbbf2d7 RSP: 002b:00007fffc7b273e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f942bbbf2d7 RDX: 0000000000000000 RSI: 00000000400448c9 RDI: 0000000000000003 RBP: 0000000000000004 R08: 00007f942bb70700 R09: 00007f942bb70700 R10: 00007f942bb709d0 R11: 0000000000000246 R12: 00007f942bb82390 R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 INFO: task syz-executor234:29987 blocked for more than 144 seconds. Not tainted 5.18.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor234 state:D stack:28264 pid:29987 ppid: 29982 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0xa5a/0x4c70 kernel/sched/core.c:6388 schedule+0xd2/0x1f0 kernel/sched/core.c:6460 schedule_timeout+0x19d/0x250 kernel/time/timer.c:1860 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x373/0x530 kernel/sched/completion.c:106 flush_workqueue+0x352/0x1230 kernel/workqueue.c:2861 hci_dev_open+0xa2/0x260 net/bluetooth/hci_core.c:526 hci_sock_ioctl+0x477/0x6e0 net/bluetooth/hci_sock.c:1027 sock_do_ioctl+0xc9/0x1c0 net/socket.c:1169 sock_ioctl+0x278/0x510 net/socket.c:1286 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f942bbbf2d7 RSP: 002b:00007fffc7b273e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f942bbbf2d7 RDX: 0000000000000002 RSI: 00000000400448c9 RDI: 0000000000000003 RBP: 0000000000000004 R08: 00007f942bb70700 R09: 00007f942bb70700 R10: 00007f942bb709d0 R11: 0000000000000246 R12: 00007f942bb82390 R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 INFO: task syz-executor234:29988 blocked for more than 144 seconds. Not tainted 5.18.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor234 state:D stack:28264 pid:29988 ppid: 29984 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0xa5a/0x4c70 kernel/sched/core.c:6388 schedule+0xd2/0x1f0 kernel/sched/core.c:6460 schedule_timeout+0x19d/0x250 kernel/time/timer.c:1860 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x373/0x530 kernel/sched/completion.c:106 flush_workqueue+0x352/0x1230 kernel/workqueue.c:2861 hci_dev_open+0xa2/0x260 net/bluetooth/hci_core.c:526 hci_sock_ioctl+0x477/0x6e0 net/bluetooth/hci_sock.c:1027 sock_do_ioctl+0xc9/0x1c0 net/socket.c:1169 sock_ioctl+0x278/0x510 net/socket.c:1286 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f942bbbf2d7 RSP: 002b:00007fffc7b273e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f942bbbf2d7 RDX: 0000000000000005 RSI: 00000000400448c9 RDI: 0000000000000003 RBP: 0000000000000004 R08: 00007f942bb70700 R09: 00007f942bb70700 R10: 00007f942bb709d0 R11: 0000000000000246 R12: 00007f942bb82390 R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 INFO: task syz-executor234:29989 blocked for more than 144 seconds. Not tainted 5.18.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor234 state:D stack:28192 pid:29989 ppid: 29981 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0xa5a/0x4c70 kernel/sched/core.c:6388 schedule+0xd2/0x1f0 kernel/sched/core.c:6460 schedule_timeout+0x19d/0x250 kernel/time/timer.c:1860 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x373/0x530 kernel/sched/completion.c:106 flush_workqueue+0x352/0x1230 kernel/workqueue.c:2861 hci_dev_open+0xa2/0x260 net/bluetooth/hci_core.c:526 hci_sock_ioctl+0x477/0x6e0 net/bluetooth/hci_sock.c:1027 sock_do_ioctl+0xc9/0x1c0 net/socket.c:1169 sock_ioctl+0x278/0x510 net/socket.c:1286 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f942bbbf2d7 RSP: 002b:00007fffc7b273e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f942bbbf2d7 RDX: 0000000000000004 RSI: 00000000400448c9 RDI: 0000000000000003 RBP: 0000000000000004 R08: 00007f942bb70700 R09: 00007f942bb70700 R10: 00007f942bb709d0 R11: 0000000000000246 R12: 00007f942bb82390 R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 INFO: task syz-executor234:29990 blocked for more than 145 seconds. Not tainted 5.18.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor234 state:D stack:28264 pid:29990 ppid: 29985 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0xa5a/0x4c70 kernel/sched/core.c:6388 schedule+0xd2/0x1f0 kernel/sched/core.c:6460 schedule_timeout+0x19d/0x250 kernel/time/timer.c:1860 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x373/0x530 kernel/sched/completion.c:106 flush_workqueue+0x352/0x1230 kernel/workqueue.c:2861 hci_dev_open+0xa2/0x260 net/bluetooth/hci_core.c:526 hci_sock_ioctl+0x477/0x6e0 net/bluetooth/hci_sock.c:1027 sock_do_ioctl+0xc9/0x1c0 net/socket.c:1169 sock_ioctl+0x278/0x510 net/socket.c:1286 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f942bbbf2d7 RSP: 002b:00007fffc7b273e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f942bbbf2d7 RDX: 0000000000000001 RSI: 00000000400448c9 RDI: 0000000000000003 RBP: 0000000000000004 R08: 00007f942bb70700 R09: 00007f942bb70700 R10: 00007f942bb709d0 R11: 0000000000000246 R12: 00007f942bb82390 R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 INFO: task syz-executor234:29991 blocked for more than 145 seconds. Not tainted 5.18.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor234 state:D stack:28240 pid:29991 ppid: 29983 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0xa5a/0x4c70 kernel/sched/core.c:6388 schedule+0xd2/0x1f0 kernel/sched/core.c:6460 schedule_timeout+0x19d/0x250 kernel/time/timer.c:1860 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x373/0x530 kernel/sched/completion.c:106 flush_workqueue+0x352/0x1230 kernel/workqueue.c:2861 hci_dev_open+0xa2/0x260 net/bluetooth/hci_core.c:526 hci_sock_ioctl+0x477/0x6e0 net/bluetooth/hci_sock.c:1027 sock_do_ioctl+0xc9/0x1c0 net/socket.c:1169 sock_ioctl+0x278/0x510 net/socket.c:1286 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f942bbbf2d7 RSP: 002b:00007fffc7b273e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f942bbbf2d7 RDX: 0000000000000003 RSI: 00000000400448c9 RDI: 0000000000000003 RBP: 0000000000000004 R08: 00007f942bb70700 R09: 00007f942bb70700 R10: 00007f942bb709d0 R11: 0000000000000246 R12: 00007f942bb82390 R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 INFO: task kworker/u5:0:29992 blocked for more than 145 seconds. Not tainted 5.18.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u5:0 state:D stack:28720 pid:29992 ppid: 2 flags:0x00004000 Workqueue: hci2 hci_power_on Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0xa5a/0x4c70 kernel/sched/core.c:6388 schedule+0xd2/0x1f0 kernel/sched/core.c:6460 schedule_timeout+0x19d/0x250 kernel/time/timer.c:1860 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x373/0x530 kernel/sched/completion.c:106 __flush_work+0x48b/0xa30 kernel/workqueue.c:3075 __cancel_work_timer+0x315/0x460 kernel/workqueue.c:3162 hci_dev_close_sync+0x7b/0xef0 net/bluetooth/hci_sync.c:4092 hci_dev_do_close+0x23/0x60 net/bluetooth/hci_core.c:553 hci_power_on+0x15c/0x4c0 net/bluetooth/hci_core.c:981 process_one_work+0x865/0x13d0 kernel/workqueue.c:2289 worker_thread+0x598/0xec0 kernel/workqueue.c:2436 kthread+0x299/0x340 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298 INFO: task kworker/u5:1:29997 blocked for more than 145 seconds. Not tainted 5.18.0-rc6-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/u5:1 state:D stack:28664 pid:29997 ppid: 2 flags:0x00004000 Workqueue: hci3 hci_power_on Call Trace: context_switch kernel/sched/core.c:5073 [inline] __schedule+0xa5a/0x4c70 kernel/sched/core.c:6388 schedule+0xd2/0x1f0 kernel/sched/core.c:6460 schedule_timeout+0x19d/0x250 kernel/time/timer.c:1860 do_wait_for_common kernel/sched/completion.c:85 [inline] __wait_for_common+0x373/0x530 kernel/sched/completion.c:106 __flush_work+0x48b/0xa30 kernel/workqueue.c:3075 __cancel_work_timer+0x315/0x460 kernel/workqueue.c:3162 hci_dev_close_sync+0x7b/0xef0 net/bluetooth/hci_sync.c:4092 hci_dev_do_close+0x23/0x60 net/bluetooth/hci_core.c:553 hci_power_on+0x15c/0x4c0 net/bluetooth/hci_core.c:981 process_one_work+0x865/0x13d0 kernel/workqueue.c:2289 worker_thread+0x598/0xec0 kernel/workqueue.c:2436 kthread+0x299/0x340 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298 Showing all locks held in the system: 1 lock held by khungtaskd/28: #0: ffffffff8af784a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6467 1 lock held by klogd/2949: #0: ffff8880b9d39f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2b/0x120 kernel/sched/core.c:554 2 locks held by getty/3273: #0: ffff88814cb50098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:244 #1: ffffc900028d62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x9d7/0xed0 drivers/tty/n_tty.c:2075 3 locks held by kworker/u5:6/4060: #0: ffff88806b444138 ((wq_completion)hci1){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff88806b444138 ((wq_completion)hci1){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff88806b444138 ((wq_completion)hci1){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff88806b444138 ((wq_completion)hci1){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff88806b444138 ((wq_completion)hci1){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff88806b444138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work+0x78a/0x13d0 kernel/workqueue.c:2260 #1: ffffc90002e0fdb8 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x7b7/0x13d0 kernel/workqueue.c:2264 #2: ffff888077eed048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x1b/0x60 net/bluetooth/hci_core.c:551 3 locks held by kworker/u5:8/4062: #0: ffff88801a2a5138 ((wq_completion)hci0){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff88801a2a5138 ((wq_completion)hci0){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff88801a2a5138 ((wq_completion)hci0){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff88801a2a5138 ((wq_completion)hci0){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff88801a2a5138 ((wq_completion)hci0){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff88801a2a5138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x78a/0x13d0 kernel/workqueue.c:2260 #1: ffffc90002e1fdb8 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x7b7/0x13d0 kernel/workqueue.c:2264 #2: ffff88807ee81048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x1b/0x60 net/bluetooth/hci_core.c:551 3 locks held by kworker/u5:0/29992: #0: ffff88806b441938 ((wq_completion)hci2){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff88806b441938 ((wq_completion)hci2){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff88806b441938 ((wq_completion)hci2){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff88806b441938 ((wq_completion)hci2){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff88806b441938 ((wq_completion)hci2){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff88806b441938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x78a/0x13d0 kernel/workqueue.c:2260 #1: ffffc90002aafdb8 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x7b7/0x13d0 kernel/workqueue.c:2264 #2: ffff888015b41048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x1b/0x60 net/bluetooth/hci_core.c:551 3 locks held by kworker/u5:1/29997: #0: ffff88801edb9938 ((wq_completion)hci3){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff88801edb9938 ((wq_completion)hci3){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff88801edb9938 ((wq_completion)hci3){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff88801edb9938 ((wq_completion)hci3){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff88801edb9938 ((wq_completion)hci3){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff88801edb9938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work+0x78a/0x13d0 kernel/workqueue.c:2260 #1: ffffc90002b5fdb8 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x7b7/0x13d0 kernel/workqueue.c:2264 #2: ffff888015b45048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x1b/0x60 net/bluetooth/hci_core.c:551 3 locks held by kworker/u5:2/30000: #0: ffff888019daa938 ((wq_completion)hci4){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888019daa938 ((wq_completion)hci4){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888019daa938 ((wq_completion)hci4){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888019daa938 ((wq_completion)hci4){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888019daa938 ((wq_completion)hci4){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888019daa938 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x78a/0x13d0 kernel/workqueue.c:2260 #1: ffffc90002bcfdb8 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x7b7/0x13d0 kernel/workqueue.c:2264 #2: ffff88807b63d048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x1b/0x60 net/bluetooth/hci_core.c:551 3 locks held by kworker/u5:3/30001: #0: ffff888019da8138 ((wq_completion)hci5){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline] #0: ffff888019da8138 ((wq_completion)hci5){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline] #0: ffff888019da8138 ((wq_completion)hci5){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline] #0: ffff888019da8138 ((wq_completion)hci5){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:636 [inline] #0: ffff888019da8138 ((wq_completion)hci5){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:663 [inline] #0: ffff888019da8138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x78a/0x13d0 kernel/workqueue.c:2260 #1: ffffc90002befdb8 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x7b7/0x13d0 kernel/workqueue.c:2264 #2: ffff88807b639048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x1b/0x60 net/bluetooth/hci_core.c:551 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 28 Comm: khungtaskd Not tainted 5.18.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x57/0x7d lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x30/0xc0 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x140/0x170 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:212 [inline] watchdog+0x88c/0xbf0 kernel/hung_task.c:369 kthread+0x299/0x340 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:298 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 2942 Comm: syslogd Not tainted 5.18.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 RIP: 0010:__filemap_get_folio+0x38b/0xa60 mm/filemap.c:1974 Code: 20 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 37 06 00 00 48 8b 04 24 49 3b 46 20 0f 85 19 04 00 00 c3 01 0f 85 1b 02 00 00 f6 c3 08 0f 85 ae 01 00 00 80 e7 02 0f RSP: 0018:ffffc900028bf8e0 EFLAGS: 00000297 RAX: 0000000000000001 RBX: 0000000000000182 RCX: ffffffff81907c45 RDX: 1ffffd4000377cb8 RSI: 0000000000000008 RDI: ffffea0001bbe5c0 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffea0001bbe5c7 R10: fffff94000377cb8 R11: 0000000000000001 R12: dffffc0000000000 R13: ffffea0001bbe5c0 R14: ffffea0001bbe5c0 R15: ffffea0001bbe5c0 FS: 00007f9b7f33c800(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055ec19717050 CR3: 0000000022175000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: pagecache_get_page+0x10/0x1a0 mm/folio-compat.c:126 shmem_getpage_gfp+0x36b/0x1c60 mm/shmem.c:1812 shmem_getpage mm/shmem.c:149 [inline] shmem_write_begin+0xcc/0x1a0 mm/shmem.c:2446 generic_perform_write+0x209/0x490 mm/filemap.c:3787 __generic_file_write_iter+0x20e/0x400 mm/filemap.c:3915 generic_file_write_iter+0xb9/0x1c0 mm/filemap.c:3947 call_write_iter include/linux/fs.h:2050 [inline] new_sync_write+0x2e0/0x520 fs/read_write.c:504 vfs_write+0x607/0x8f0 fs/read_write.c:591 ksys_write+0xee/0x1c0 fs/read_write.c:644 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f9b7f4c89a3 Code: 8b 15 d9 f4 0c 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 RSP: 002b:00007fffcf26c518 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f9b7f4c89a3 RDX: 000000000000009d RSI: 000056232cebfc50 RDI: 0000000000000003 RBP: 000056232cebfc50 R08: 00007f9b7f558040 R09: 00007f9b7f5580c0 R10: 00007f9b7f557fc0 R11: 0000000000000246 R12: 000000000000009d R13: 00007f9b7f33c788 R14: 0000000000000004 R15: 000056232cebfa60 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 7: fc ff df a: 48 89 fa mov %rdi,%rdx d: 48 c1 ea 03 shr $0x3,%rdx 11: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) 15: 0f 85 37 06 00 00 jne 0x652 1b: 48 8b 04 24 mov (%rsp),%rax 1f: 49 3b 46 20 cmp 0x20(%r14),%rax 23: 0f 85 19 04 00 00 jne 0x442 * 29: f6 c3 01 test $0x1,%bl <-- trapping instruction 2c: 0f 85 1b 02 00 00 jne 0x24d 32: f6 c3 08 test $0x8,%bl 35: 0f 85 ae 01 00 00 jne 0x1e9 3b: 80 e7 02 and $0x2,%bh 3e: 0f .byte 0xf