ci starts bisection 2024-08-06 09:29:38.411179337 +0000 UTC m=+21443.574657586
bisecting fixing commit since b25f62ccb490680a8cee755ac4528909395e0711
building syzkaller on af3053d2643582378a817d3c9d6a96dd1623c862
ensuring issue is reproducible on original commit b25f62ccb490680a8cee755ac4528909395e0711
testing commit b25f62ccb490680a8cee755ac4528909395e0711 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 68e8d8946b58cec220a2837e95eca47d1632b13061d1ceeceb9edcd453022024
run #0: crashed: INFO: task hung in misc_open
run #1: crashed: INFO: task hung in rfkill_unregister
run #2: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #3: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #4: crashed: INFO: task hung in rfkill_register
run #5: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #6: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #7: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #8: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #9: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #10: crashed: INFO: task hung in misc_open
run #11: crashed: INFO: task hung in rfkill_unregister
run #12: crashed: INFO: task hung in rfkill_sync_work
run #13: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #14: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #15: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #16: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #17: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #18: crashed: INFO: task hung in rfkill_sync_work
run #19: crashed: INFO: task hung in rfkill_global_led_trigger_worker
representative crash: INFO: task hung in misc_open, types: [HANG]
check whether we can drop unnecessary instrumentation
disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP LEAK UBSAN BUG], they are not needed
testing commit b25f62ccb490680a8cee755ac4528909395e0711 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 9eacde28c14b4788390dcdd8710b1950eab314182e8b19c02781986f6a4f7817
all runs: boot failed: BUG: unable to handle kernel NULL pointer dereference in ip_vs_protocol_init
unable to determine the verdict: 0 good runs (wanted 5), for bad wanted 5 in total, got 0
kconfig minimization: base=4001 full=7624 leaves diff=2013
split chunks (needed=false): <2013>
split chunk #0 of len 2013 into 5 parts
testing without sub-chunk 1/5
testing commit b25f62ccb490680a8cee755ac4528909395e0711 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 847a62c772821cb6f48a88980c4a4b8b9c3310bdcffafd9c116c4e7298c9a2e8
run #0: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #1: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #2: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #3: crashed: INFO: task hung in rfkill_sync_work
run #4: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #5: crashed: INFO: task hung in rfkill_unregister
run #6: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #7: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #8: crashed: INFO: task hung in rfkill_sync_work
run #9: crashed: INFO: task hung in rfkill_global_led_trigger_worker
representative crash: INFO: task hung in rfkill_global_led_trigger_worker, types: [HANG]
the chunk can be dropped
testing without sub-chunk 2/5
testing commit b25f62ccb490680a8cee755ac4528909395e0711 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 0fece2f8c5c0eb1ce893f37fa7052ee1755149f9fb8db07afc9c9a427a28c6dc
run #0: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #1: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #2: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #3: crashed: INFO: task hung in rfkill_unregister
run #4: crashed: INFO: task hung in rfkill_unregister
run #5: crashed: INFO: task hung in rfkill_unregister
run #6: crashed: INFO: task hung in misc_open
run #7: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #8: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #9: crashed: INFO: task hung in rfkill_global_led_trigger_worker
representative crash: INFO: task hung in rfkill_global_led_trigger_worker, types: [HANG]
the chunk can be dropped
testing without sub-chunk 3/5
testing commit b25f62ccb490680a8cee755ac4528909395e0711 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 9cdeb70a551aaf46ba3d3978ab72a53b04407e98e1dd2ea719285ec44009cdee
all runs: OK
false negative chance: 0.000
testing without sub-chunk 4/5
testing commit b25f62ccb490680a8cee755ac4528909395e0711 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 4f5cddbdc137cee77b1b598f21982f16be1301fc42eb17d6f48c36623563ddb0
run #0: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #1: crashed: INFO: task hung in misc_open
run #2: crashed: INFO: task hung in rfkill_sync_work
run #3: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #4: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #5: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #6: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #7: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #8: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #9: crashed: INFO: task hung in rfkill_global_led_trigger_worker
representative crash: INFO: task hung in rfkill_global_led_trigger_worker, types: [HANG]
the chunk can be dropped
testing without sub-chunk 5/5
testing commit b25f62ccb490680a8cee755ac4528909395e0711 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: 3cc744d1d2d9673e078babc0bca0a28c521d8b86e29d79300b1017064cd78d00
run #0: crashed: INFO: task hung in rfkill_unregister
run #1: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #2: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #3: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #4: crashed: INFO: task hung in rfkill_sync_work
run #5: crashed: INFO: task hung in rfkill_sync_work
run #6: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #7: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #8: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #9: crashed: INFO: task hung in rfkill_global_led_trigger_worker
representative crash: INFO: task hung in rfkill_unregister, types: [HANG]
the chunk can be dropped
minimized to 403 configs; suspects: [AX25 BRIDGE BRIDGE_NETFILTER CAN CC_IS_GCC CFG80211 CHECKPOINT_RESTORE DVB_CORE FB FSCACHE HAMRADIO HAVE_KVM HSR INFINIBAND INFINIBAND_ADDR_TRANS INFINIBAND_USER_ACCESS INPUT_JOYSTICK INPUT_MOUSE IP6_NF_RAW IPV6_MULTIPLE_TABLES IP_NF_RAW IP_SET IP_VS IP_VS_LBLCR IP_VS_LC IP_VS_MH IP_VS_NFCT IP_VS_NQ IP_VS_OVF IP_VS_PE_SIP IP_VS_PROTO_AH IP_VS_PROTO_AH_ESP IP_VS_PROTO_ESP IP_VS_PROTO_SCTP IP_VS_PROTO_UDP IP_VS_RR IP_VS_SED IP_VS_SH IP_VS_TWOS IP_VS_WLC IP_VS_WRR IRQ_BYPASS_MANAGER IRQ_POLL IR_IGORPLUGUSB IR_IGUANA IR_IMON IR_MCEUSB IR_REDRAT3 IR_STREAMZAP IR_TTUSBIR ISDN ISDN_CAPI_MIDDLEWARE JFFS2_CMODE_PRIORITY JFFS2_COMPRESSION_OPTIONS JFFS2_FS JFFS2_FS_POSIX_ACL JFFS2_FS_SECURITY JFFS2_FS_WRITEBUFFER JFFS2_FS_XATTR JFFS2_LZO JFFS2_RTIME JFFS2_RUBIN JFFS2_SUMMARY JFFS2_ZLIB JFS_DEBUG JFS_FS JFS_POSIX_ACL JFS_SECURITY JOYSTICK_IFORCE JOYSTICK_IFORCE_USB JOYSTICK_XPAD JOYSTICK_XPAD_FF JOYSTICK_XPAD_LEDS KARMA_PARTITION KCOV KCOV_ENABLE_COMPARISONS KCOV_INSTRUMENT_ALL KEYS_REQUEST_CACHE KEY_DH_OPERATIONS KEY_NOTIFICATIONS KSM KVM KVM_AMD KVM_ASYNC_PF KVM_COMPAT KVM_GENERIC_DIRTYLOG_READ_PROTECT KVM_GENERIC_HARDWARE_ENABLING KVM_MMIO KVM_VFIO KVM_XEN KVM_XFER_TO_GUEST_WORK L2TP L2TP_ETH L2TP_IP L2TP_V3 LAPB LAPBETHER LDM_PARTITION LEDS_TRIGGER_AUDIO LEGACY_PTYS LIBCRC32C LIBNVDIMM LINEAR_RANGES LLC LLC2 LOCALVERSION_AUTO LOGIG940_FF LOGIRUMBLEPAD2_FF LOGO LOGO_LINUX_MONO LOGO_LINUX_VGA16 LPC_ICH LWTUNNEL LWTUNNEL_BPF LZ4HC_COMPRESS LZ4_COMPRESS MAC80211 MAC80211_DEBUGFS MAC80211_HAS_RC MAC80211_HWSIM MAC80211_MESH MAC80211_RC_DEFAULT_MINSTREL MAC80211_RC_MINSTREL MACSEC MACVLAN MACVTAP MAC_PARTITION MAPPING_DIRTY_HELPERS MD_LINEAR MD_MULTIPATH MD_RAID0 MD_RAID1 MD_RAID10 MD_RAID456 MEDIA_ANALOG_TV_SUPPORT MEDIA_ATTACH MEDIA_CONTROLLER MEDIA_CONTROLLER_DVB MEDIA_CONTROLLER_REQUEST_API MEDIA_DIGITAL_TV_SUPPORT MEDIA_RADIO_SUPPORT MEDIA_SDR_SUPPORT MEDIA_SUPPORT MEDIA_SUPPORT_FILTER MEDIA_TUNER MEDIA_TUNER_MSI001 MEMORY_BALLOON MEMORY_HOTPLUG MEMORY_HOTPLUG_DEFAULT_ONLINE MEMORY_ISOLATION MEMREGION MEMSTICK MEMSTICK_REALTEK_USB MEM_SOFT_DIRTY MFD_CORE MFD_SYSCON MHI_BUS MHI_WWAN_CTRL MHP_MEMMAP_ON_MEMORY MICROCHIP_PHY MICROCODE_AMD MICROCODE_INTEL MINIX_FS MINIX_SUBPARTITION MISC_RTSX MISC_RTSX_USB MISDN MISDN_DSP MISDN_HFCUSB MISDN_L1OIP MKISS MLX4_CORE MLX4_INFINIBAND MMC MMC_REALTEK_USB MMC_USHC MMC_VUB300 MODULE_SRCVERSION_ALL MODVERSIONS MOST MOUSE_APPLETOUCH MOUSE_BCM5974 MOUSE_PS2 MOUSE_PS2_ALPS MOUSE_PS2_BYD MOUSE_PS2_CYPRESS MOUSE_PS2_FOCALTECH MOUSE_PS2_LIFEBOOK MOUSE_PS2_LOGIPS2PP MOUSE_PS2_SMBUS MOUSE_PS2_SYNAPTICS MOUSE_PS2_SYNAPTICS_SMBUS MOUSE_PS2_TRACKPOINT MOUSE_SYNAPTICS_USB MPLS MPLS_IPTUNNEL MPLS_ROUTING MPTCP MPTCP_IPV6 MRP MTD MTD_BLKDEVS MTD_BLOCK MTD_BLOCK2MTD MTD_CFI_I1 MTD_CFI_I2 MTD_MAP_BANK_WIDTH_1 MTD_MAP_BANK_WIDTH_2 MTD_MAP_BANK_WIDTH_4 MTD_MTDRAM MTD_PHRAM MTD_SLRAM MUSB_PIO_ONLY ND_BTT ND_CLAIM ND_PFN NETDEVSIM NETFILTER_ADVANCED NETFILTER_BPF_LINK NETFILTER_FAMILY_ARP NETFILTER_FAMILY_BRIDGE NETFILTER_NETLINK_ACCT NETFILTER_NETLINK_GLUE_CT NETFILTER_NETLINK_OSF NETFILTER_NETLINK_QUEUE NETFILTER_SYNPROXY NETFILTER_XTABLES_COMPAT NETFILTER_XT_CONNMARK NETFILTER_XT_MATCH_BPF NETFILTER_XT_MATCH_CGROUP NETFILTER_XT_MATCH_CLUSTER NETFILTER_XT_MATCH_COMMENT NETFILTER_XT_MATCH_CONNBYTES NETFILTER_XT_MATCH_CONNLABEL NETFILTER_XT_MATCH_CONNLIMIT NETFILTER_XT_MATCH_CONNMARK NETFILTER_XT_MATCH_CPU NETFILTER_XT_MATCH_DCCP NETFILTER_XT_MATCH_DEVGROUP NETFILTER_XT_MATCH_DSCP NETFILTER_XT_MATCH_ECN NETFILTER_XT_MATCH_ESP NETFILTER_XT_MATCH_HASHLIMIT NETFILTER_XT_MATCH_HELPER NETFILTER_XT_MATCH_HL NETFILTER_XT_MATCH_IPCOMP NETFILTER_XT_MATCH_IPRANGE NETFILTER_XT_MATCH_IPVS NETFILTER_XT_MATCH_L2TP NETFILTER_XT_MATCH_LENGTH NETFILTER_XT_MATCH_LIMIT NETFILTER_XT_MATCH_MAC NETFILTER_XT_MATCH_MARK NETFILTER_XT_MATCH_MULTIPORT NETFILTER_XT_MATCH_NFACCT NETFILTER_XT_MATCH_OSF NETFILTER_XT_MATCH_OWNER NETFILTER_XT_MATCH_PHYSDEV NETFILTER_XT_MATCH_PKTTYPE NETFILTER_XT_MATCH_QUOTA NETFILTER_XT_MATCH_RATEEST NETFILTER_XT_MATCH_REALM NETFILTER_XT_MATCH_RECENT NETFILTER_XT_MATCH_SCTP NETFILTER_XT_MATCH_SOCKET NETFILTER_XT_MATCH_STATISTIC NETFILTER_XT_MATCH_STRING NETFILTER_XT_MATCH_TCPMSS NETFILTER_XT_MATCH_TIME NETFILTER_XT_MATCH_U32 NETFILTER_XT_SET NETFILTER_XT_TARGET_AUDIT NETFILTER_XT_TARGET_CHECKSUM NETFILTER_XT_TARGET_CLASSIFY NETFILTER_XT_TARGET_CONNMARK NETFILTER_XT_TARGET_CT NETFILTER_XT_TARGET_DSCP NETFILTER_XT_TARGET_HL NETFILTER_XT_TARGET_HMARK NETFILTER_XT_TARGET_IDLETIMER NETFILTER_XT_TARGET_LED NETFILTER_XT_TARGET_MARK NETFILTER_XT_TARGET_NETMAP NETFILTER_XT_TARGET_NFQUEUE NETFILTER_XT_TARGET_NOTRACK NETFILTER_XT_TARGET_RATEEST NETFILTER_XT_TARGET_REDIRECT NETFILTER_XT_TARGET_TCPOPTSTRIP NETFILTER_XT_TARGET_TEE NETFILTER_XT_TARGET_TPROXY NETFILTER_XT_TARGET_TRACE NETLABEL NETLINK_DIAG NETROM NET_9P_RDMA NET_ACT_BPF NET_ACT_CONNMARK NET_ACT_CSUM NET_ACT_CT NET_ACT_CTINFO NET_ACT_GATE NET_ACT_IFE NET_ACT_IPT NET_ACT_MPLS NET_ACT_NAT NET_ACT_PEDIT NET_ACT_POLICE NET_ACT_SAMPLE NET_ACT_SIMP NET_ACT_SKBEDIT NET_ACT_SKBMOD NET_ACT_TUNNEL_KEY NET_ACT_VLAN NET_CLS_BASIC NET_CLS_BPF NET_CLS_FLOW NET_CLS_FLOWER NET_CLS_FW NET_CLS_MATCHALL NET_CLS_ROUTE4 NET_DEVLINK NET_DROP_MONITOR NET_DSA NET_DSA_TAG_BRCM NET_DSA_TAG_BRCM_COMMON NET_DSA_TAG_BRCM_PREPEND NET_DSA_TAG_MTK NET_DSA_TAG_QCA NET_DSA_TAG_RTL4_A NET_EMATCH_CANID NET_EMATCH_CMP NET_EMATCH_IPSET NET_EMATCH_IPT NET_EMATCH_META NET_EMATCH_NBYTE NET_EMATCH_TEXT NET_EMATCH_U32 NET_FC NET_FOU NET_FOU_IP_TUNNELS NET_IFE NET_IFE_SKBMARK NET_IFE_SKBPRIO NET_IFE_SKBTCINDEX NET_IPGRE NET_IPGRE_BROADCAST NET_IPGRE_DEMUX NET_IPIP NET_IPVTI NET_KEY NET_KEY_MIGRATE NET_L3_MASTER_DEV NET_MPLS_GSO NET_NCSI NET_NSH NET_REDIRECT NET_SCH_CAKE NET_SCH_CBS NET_SCH_CHOKE NET_SCH_CODEL NET_SCH_DRR NET_SCH_ETF NET_SCH_ETS NET_SCH_FQ NET_SCH_FQ_CODEL NET_SCH_FQ_PIE NET_SCH_GRED NET_SCH_HFSC NET_SCH_HHF NET_SCH_HTB NET_SCH_INGRESS NET_SCH_MQPRIO NET_SCH_MQPRIO_LIB NET_SCH_MULTIQ NET_SCH_NETEM NET_SCH_PIE NET_SCH_PLUG NET_SCH_PRIO NET_SCH_QFQ NET_SCH_RED NET_SCH_SFB NET_SCH_SFQ NET_SCH_SKBPRIO NET_SCH_TAPRIO NET_SCH_TBF NET_SCH_TEQL NET_SOCK_MSG NET_SWITCHDEV NET_TC_SKB_EXT NET_TEAM NET_TEAM_MODE_ACTIVEBACKUP NET_TEAM_MODE_BROADCAST NET_TEAM_MODE_LOADBALANCE NET_TEAM_MODE_RANDOM NET_TEAM_MODE_ROUNDROBIN NET_UDP_TUNNEL NET_VRF NFC NFC_DIGITAL NFC_FDP NFC_HCI NFC_MRVL NFC_MRVL_USB NFC_NCI NFC_NCI_UART NFC_PN533 NFC_PN533_USB NFC_PORT100 NFC_SHDLC NFC_SIM NFC_VIRTUAL_NCI NFSD NFSD_BLOCKLAYOUT NFSD_FLEXFILELAYOUT NFSD_PNFS NFSD_SCSILAYOUT NFSD_V3_ACL NFSD_V4 NFSD_V4_2_INTER_SSC NFSD_V4_SECURITY_LABEL NFS_FSCACHE NFS_V2 NFS_V4_1 NFS_V4_2 NFS_V4_2_READ_PLUS NFS_V4_2_SSC_HELPER NFS_V4_SECURITY_LABEL NFT_BRIDGE_META NFT_BRIDGE_REJECT NFT_COMPAT NFT_CONNLIMIT NFT_CT NFT_DUP_IPV4 NFT_DUP_IPV6 NFT_DUP_NETDEV NFT_FIB NFT_FIB_INET NFT_FIB_IPV4 NFT_FIB_IPV6 NFT_FIB_NETDEV NFT_FLOW_OFFLOAD NFT_HASH NFT_LIMIT NFT_LOG NFT_MASQ NFT_NAT NFT_NUMGEN NFT_OSF NFT_QUEUE NFT_QUOTA NFT_REDIR NFT_REJECT NFT_REJECT_INET NFT_REJECT_IPV4 NFT_REJECT_IPV6 NFT_REJECT_NETDEV NFT_SOCKET NFT_SYNPROXY NFT_TPROXY NFT_TUNNEL NFT_XFRM NF_CONNTRACK_AMANDA NF_CONNTRACK_BRIDGE NF_CONNTRACK_BROADCAST NF_CONNTRACK_EVENTS NF_CONNTRACK_H323 NF_CONNTRACK_LABELS NF_CONNTRACK_MARK NF_CONNTRACK_NETBIOS_NS NF_CONNTRACK_OVS NF_CONNTRACK_PPTP NF_CONNTRACK_SANE NF_CONNTRACK_TFTP NF_CONNTRACK_TIMEOUT NF_CONNTRACK_TIMESTAMP NF_CONNTRACK_ZONES NF_CT_NETLINK_HELPER NF_CT_NETLINK_TIMEOUT NF_CT_PROTO_DCCP NF_CT_PROTO_GRE NF_CT_PROTO_SCTP NF_CT_PROTO_UDPLITE NF_DUP_IPV4 NF_DUP_IPV6 NF_DUP_NETDEV NF_FLOW_TABLE NF_FLOW_TABLE_INET NF_NAT_AMANDA NF_NAT_H323 NF_NAT_OVS NF_TABLES NF_TABLES_BRIDGE NF_TABLES_INET NF_TABLES_IPV4 NF_TABLES_IPV6 NF_TABLES_NETDEV PARTITION_ADVANCED PSAMPLE RC_CORE RC_DEVICES RFKILL SPI USB_GADGET USB_MUSB_HDRC VIDEO_DEV WAN WATCH_QUEUE WIRELESS WLAN WWAN X25 X86_X32_ABI]
testing current HEAD b446a2dae984fa5bd56dd7c3a02a426f87e05813
testing commit b446a2dae984fa5bd56dd7c3a02a426f87e05813 gcc
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
kernel signature: b67def107e46e2352207eac6cc59769c13a4ba7dd922f8958c1c5af378ef3f6e
run #0: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #1: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #2: crashed: INFO: task hung in uevent_show
run #3: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #4: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #5: crashed: INFO: task hung in uevent_show
run #6: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #7: crashed: INFO: task hung in rfkill_global_led_trigger_worker
run #8: crashed: INFO: task hung in uevent_show
run #9: crashed: INFO: task hung in rfkill_sync_work
representative crash: INFO: task hung in rfkill_global_led_trigger_worker, types: [HANG]
crash still not fixed/happens on the oldest tested release
revisions tested: 8, total time: 2h26m24.169575082s (build: 1h12m56.662261929s, test: 1h8m51.368653008s)
crash still not fixed or there were kernel test errors
commit msg: Merge tag 'linux_kselftest-fixes-6.11-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest
crash: INFO: task hung in rfkill_global_led_trigger_worker
INFO: task kworker/1:1:39 blocked for more than 143 seconds.
Not tainted 6.11.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:kworker/1:1 state:D stack:24528 pid:39 tgid:39 ppid:2 flags:0x00004000
Workqueue: events rfkill_global_led_trigger_worker
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x1772/0x25f0 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6621
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rfkill_global_led_trigger_worker+0x27/0xd0 net/rfkill/core.c:182
process_one_work kernel/workqueue.c:3231 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
worker_thread+0x86d/0xd40 kernel/workqueue.c:3390
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
INFO: task udevd:1685 blocked for more than 143 seconds.
Not tainted 6.11.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:udevd state:D stack:23632 pid:1685 tgid:1685 ppid:1 flags:0x00000002
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x1772/0x25f0 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6621
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
device_lock include/linux/device.h:1009 [inline]
uevent_show+0x17d/0x340 drivers/base/core.c:2743
dev_attr_show+0x55/0xc0 drivers/base/core.c:2437
sysfs_kf_seq_show+0x331/0x4c0 fs/sysfs/file.c:59
seq_read_iter+0x445/0xd60 fs/seq_file.c:230
new_sync_read fs/read_write.c:395 [inline]
vfs_read+0x9e2/0xc50 fs/read_write.c:476
ksys_read+0x1a0/0x2c0 fs/read_write.c:619
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd5b3c23b6a
RSP: 002b:00007ffd01284af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 000055ad6bea8870 RCX: 00007fd5b3c23b6a
RDX: 0000000000001000 RSI: 000055ad6beac680 RDI: 000000000000000c
RBP: 000055ad6bea8870 R08: 000000000000000c R09: 0000000000002000
R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000003fff R14: 00007ffd01284fd8 R15: 000000000000000a
INFO: task syz-executor.3:5972 blocked for more than 144 seconds.
Not tainted 6.11.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3 state:D stack:26992 pid:5972 tgid:5972 ppid:2621 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x1772/0x25f0 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6621
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rfkill_unregister+0xd0/0x230 net/rfkill/core.c:1149
nfc_unregister_device+0x96/0x2a0 net/nfc/core.c:1167
virtual_ncidev_close+0x59/0x90 drivers/nfc/virtual_ncidev.c:172
__fput+0x24a/0x8a0 fs/file_table.c:422
__do_sys_close fs/open.c:1566 [inline]
__se_sys_close fs/open.c:1551 [inline]
__x64_sys_close+0x7f/0x110 fs/open.c:1551
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3fb15aba1a
RSP: 002b:00007ffce0db2c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f3fb15aba1a
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f3fb16cd980 R08: 0000001b2ed60000 R09: 7fffffffffffffff
R10: 00007f3fb22050b8 R11: 0000000000000293 R12: 000000000001b879
R13: ffffffffffffffff R14: 00007f3fb1130000 R15: 000000000001b538
INFO: task syz-executor.3:5983 blocked for more than 144 seconds.
Not tainted 6.11.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.3 state:D stack:25832 pid:5983 tgid:5972 ppid:2621 flags:0x00000006
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x1772/0x25f0 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6621
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rfkill_fop_write+0x1a9/0x790 net/rfkill/core.c:1297
vfs_write+0x2f4/0xd20 fs/read_write.c:588
ksys_write+0x1a0/0x2c0 fs/read_write.c:643
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f3fb15acb29
RSP: 002b:00007f3fb112f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f3fb16cbf80 RCX: 00007f3fb15acb29
RDX: 0000000000000008 RSI: 0000000020000200 RDI: 0000000000000004
RBP: 00007f3fb15f847a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000006 R14: 00007f3fb16cbf80 R15: 00007ffce0db2ba8
INFO: task syz-executor.4:5973 blocked for more than 144 seconds.
Not tainted 6.11.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4 state:D stack:26992 pid:5973 tgid:5973 ppid:2622 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x1772/0x25f0 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6621
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rfkill_unregister+0xd0/0x230 net/rfkill/core.c:1149
nfc_unregister_device+0x96/0x2a0 net/nfc/core.c:1167
virtual_ncidev_close+0x59/0x90 drivers/nfc/virtual_ncidev.c:172
__fput+0x24a/0x8a0 fs/file_table.c:422
__do_sys_close fs/open.c:1566 [inline]
__se_sys_close fs/open.c:1551 [inline]
__x64_sys_close+0x7f/0x110 fs/open.c:1551
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6b197fba1a
RSP: 002b:00007fff958c52c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f6b197fba1a
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007f6b1991d980 R08: 0000001b2f260000 R09: 7fffffffffffffff
R10: 00007f6b1977a0b8 R11: 0000000000000293 R12: 000000000001b86b
R13: ffffffffffffffff R14: 00007f6b1937a000 R15: 000000000001b52a
INFO: task syz-executor.4:5975 blocked for more than 145 seconds.
Not tainted 6.11.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.4 state:D stack:25848 pid:5975 tgid:5973 ppid:2622 flags:0x00000006
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x1772/0x25f0 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6621
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rfkill_fop_write+0x1a9/0x790 net/rfkill/core.c:1297
vfs_write+0x2f4/0xd20 fs/read_write.c:588
ksys_write+0x1a0/0x2c0 fs/read_write.c:643
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f6b197fcb29
RSP: 002b:00007f6b193790c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f6b1991bf80 RCX: 00007f6b197fcb29
RDX: 0000000000000008 RSI: 0000000020000200 RDI: 0000000000000004
RBP: 00007f6b1984847a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000006 R14: 00007f6b1991bf80 R15: 00007fff958c51f8
INFO: task syz-executor.0:5974 blocked for more than 145 seconds.
Not tainted 6.11.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.0 state:D stack:26992 pid:5974 tgid:5974 ppid:2613 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x1772/0x25f0 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6621
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rfkill_unregister+0xd0/0x230 net/rfkill/core.c:1149
nfc_unregister_device+0x96/0x2a0 net/nfc/core.c:1167
virtual_ncidev_close+0x59/0x90 drivers/nfc/virtual_ncidev.c:172
__fput+0x24a/0x8a0 fs/file_table.c:422
__do_sys_close fs/open.c:1566 [inline]
__se_sys_close fs/open.c:1551 [inline]
__x64_sys_close+0x7f/0x110 fs/open.c:1551
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7faa1e84ba1a
RSP: 002b:00007fff043afda0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007faa1e84ba1a
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000032 R08: 0000001b2e960000 R09: 00007faa1e96bf8c
R10: 00007fff043afef0 R11: 0000000000000293 R12: 00007faa1e3ca298
R13: ffffffffffffffff R14: 00007faa1e3ca000 R15: 000000000001b535
INFO: task syz-executor.5:5976 blocked for more than 145 seconds.
Not tainted 6.11.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5 state:D stack:26992 pid:5976 tgid:5976 ppid:5389 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x1772/0x25f0 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6621
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rfkill_unregister+0xd0/0x230 net/rfkill/core.c:1149
nfc_unregister_device+0x96/0x2a0 net/nfc/core.c:1167
virtual_ncidev_close+0x59/0x90 drivers/nfc/virtual_ncidev.c:172
__fput+0x24a/0x8a0 fs/file_table.c:422
__do_sys_close fs/open.c:1566 [inline]
__se_sys_close fs/open.c:1551 [inline]
__x64_sys_close+0x7f/0x110 fs/open.c:1551
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f5c6168ba1a
RSP: 002b:00007ffe9b2388a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f5c6168ba1a
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 0000000000000032 R08: 0000001b2c760000 R09: 00007f5c617abf8c
R10: 00007ffe9b2389f0 R11: 0000000000000293 R12: 00007f5c6120a298
R13: ffffffffffffffff R14: 00007f5c6120a000 R15: 000000000001b535
INFO: task syz-executor.2:5977 blocked for more than 146 seconds.
Not tainted 6.11.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2 state:D stack:26992 pid:5977 tgid:5977 ppid:2610 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x1772/0x25f0 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6621
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rfkill_unregister+0xd0/0x230 net/rfkill/core.c:1149
nfc_unregister_device+0x96/0x2a0 net/nfc/core.c:1167
virtual_ncidev_close+0x59/0x90 drivers/nfc/virtual_ncidev.c:172
__fput+0x24a/0x8a0 fs/file_table.c:422
__do_sys_close fs/open.c:1566 [inline]
__se_sys_close fs/open.c:1551 [inline]
__x64_sys_close+0x7f/0x110 fs/open.c:1551
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa9f9ebba1a
RSP: 002b:00007ffe2f4be360 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fa9f9ebba1a
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007fa9f9fdd980 R08: 0000001b2e660000 R09: 7fffffffffffffff
R10: 00007fa9fab100b8 R11: 0000000000000293 R12: 000000000001b87d
R13: ffffffffffffffff R14: 00007fa9f9a40000 R15: 000000000001b53c
INFO: task syz-executor.2:5985 blocked for more than 146 seconds.
Not tainted 6.11.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.2 state:D stack:25952 pid:5985 tgid:5977 ppid:2610 flags:0x00000006
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x1772/0x25f0 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6621
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
device_lock include/linux/device.h:1009 [inline]
nfc_dev_down net/nfc/core.c:143 [inline]
nfc_rfkill_set_block+0x50/0x310 net/nfc/core.c:179
rfkill_set_block+0x1f1/0x440 net/rfkill/core.c:346
rfkill_fop_write+0x5bb/0x790 net/rfkill/core.c:1305
vfs_write+0x2f4/0xd20 fs/read_write.c:588
ksys_write+0x1a0/0x2c0 fs/read_write.c:643
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fa9f9ebcb29
RSP: 002b:00007fa9f9a3f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007fa9f9fdbf80 RCX: 00007fa9f9ebcb29
RDX: 0000000000000008 RSI: 0000000020000200 RDI: 0000000000000004
RBP: 00007fa9f9f0847a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000006 R14: 00007fa9f9fdbf80 R15: 00007ffe2f4be298
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
INFO: task syz-executor.1:6003 blocked for more than 146 seconds.
Not tainted 6.11.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1 state:D stack:25936 pid:6003 tgid:6002 ppid:2611 flags:0x00004006
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x1772/0x25f0 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6621
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
rfkill_register+0x34/0x830 net/rfkill/core.c:1075
nfc_register_device+0x148/0x320 net/nfc/core.c:1132
nci_register_device+0x7c2/0x900 net/nfc/nci/core.c:1266
virtual_ncidev_open+0x13c/0x1b0 drivers/nfc/virtual_ncidev.c:157
misc_open+0x313/0x390 drivers/char/misc.c:165
chrdev_open+0x5b0/0x630 fs/char_dev.c:414
do_dentry_open+0x94f/0x12f0 fs/open.c:959
vfs_open+0x3e/0x330 fs/open.c:1089
do_open fs/namei.c:3727 [inline]
path_openat+0x2b3e/0x3470 fs/namei.c:3886
do_filp_open+0x235/0x490 fs/namei.c:3913
do_sys_openat2+0x13e/0x1d0 fs/open.c:1416
do_sys_open fs/open.c:1431 [inline]
__do_sys_openat fs/open.c:1447 [inline]
__se_sys_openat fs/open.c:1442 [inline]
__x64_sys_openat+0x247/0x2a0 fs/open.c:1442
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f299599cb29
RSP: 002b:00007f299551f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f2995abbf80 RCX: 00007f299599cb29
RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c
RBP: 00007f29959e847a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000006 R14: 00007f2995abbf80 R15: 00007ffcb9621318
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
INFO: task syz-executor.1:6007 blocked for more than 147 seconds.
Not tainted 6.11.0-rc2-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.1 state:D stack:27952 pid:6007 tgid:6002 ppid:2611 flags:0x00000006
Call Trace:
context_switch kernel/sched/core.c:5188 [inline]
__schedule+0x1772/0x25f0 kernel/sched/core.c:6529
__schedule_loop kernel/sched/core.c:6606 [inline]
schedule+0x14b/0x320 kernel/sched/core.c:6621
schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:6678
__mutex_lock_common kernel/locking/mutex.c:684 [inline]
__mutex_lock+0x6a4/0xd70 kernel/locking/mutex.c:752
misc_open+0x5c/0x390 drivers/char/misc.c:129
chrdev_open+0x5b0/0x630 fs/char_dev.c:414
do_dentry_open+0x94f/0x12f0 fs/open.c:959
vfs_open+0x3e/0x330 fs/open.c:1089
do_open fs/namei.c:3727 [inline]
path_openat+0x2b3e/0x3470 fs/namei.c:3886
do_filp_open+0x235/0x490 fs/namei.c:3913
do_sys_openat2+0x13e/0x1d0 fs/open.c:1416
do_sys_open fs/open.c:1431 [inline]
__do_sys_openat fs/open.c:1447 [inline]
__se_sys_openat fs/open.c:1442 [inline]
__x64_sys_openat+0x247/0x2a0 fs/open.c:1442
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f299599cb29
RSP: 002b:00007f29954fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f2995abc050 RCX: 00007f299599cb29
RDX: 0000000000080602 RSI: 00000000200001c0 RDI: ffffffffffffff9c
RBP: 00007f29959e847a R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 000000000000006e R14: 00007f2995abc050 R15: 00007ffcb9621318
Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
Showing all locks held in the system:
2 locks held by kworker/u8:0/11:
#0: ffff888100089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
#0: ffff888100089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1: ffffc900000bfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
#1: ffffc900000bfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:1/13:
#0: ffff888100089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
#0: ffff888100089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1: ffffc900000dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
#1: ffffc900000dfd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
1 lock held by khungtaskd/29:
#0: ffffffff86cc8b60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline]
#0: ffffffff86cc8b60 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline]
#0: ffffffff86cc8b60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6620
2 locks held by kworker/u8:2/34:
#0: ffff888100089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
#0: ffff888100089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1: ffffc90000247d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
#1: ffffc90000247d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:3/36:
#0: ffff888100089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
#0: ffff888100089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1: ffffc90000267d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
#1: ffffc90000267d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
3 locks held by kworker/1:1/39:
#0: ffff888100080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
#0: ffff888100080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1: ffffc90000297d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
#1: ffffc90000297d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
#2: ffffffff875acea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 net/rfkill/core.c:182
5 locks held by kworker/u8:6/1199:
#0: ffff8881f6a3b998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:560 [inline]
#0: ffff8881f6a3b998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock kernel/sched/sched.h:1415 [inline]
#0: ffff8881f6a3b998 (&rq->__lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1714 [inline]
#0: ffff8881f6a3b998 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x31a/0x25f0 kernel/sched/core.c:6436
#1: ffffc900026efd00 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
#1: ffffc900026efd00 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
#2: ffff8881f6a2a358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 kernel/time/timer.c:1051
#3: ffffffff8aba75e0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x16d/0x510 lib/debugobjects.c:709
#4: ffffffff86b7bdc8 (text_mutex){+.+.}-{3:3}, at: arch_jump_label_transform_apply+0x17/0x30 arch/x86/kernel/jump_label.c:145
2 locks held by kworker/u8:9/1298:
#0: ffff888100089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
#0: ffff888100089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1: ffffc90002f3fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
#1: ffffc90002f3fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
2 locks held by kworker/u8:13/1616:
#0: ffff888100089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3206 [inline]
#0: ffff888100089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 kernel/workqueue.c:3312
#1: ffffc9000375fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3207 [inline]
#1: ffffc9000375fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 kernel/workqueue.c:3312
4 locks held by udevd/1685:
#0: ffff888118be0e80 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 fs/seq_file.c:182
#1: ffff888118f5f088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 fs/kernfs/file.c:154
#2: ffff8881165404b8 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 fs/kernfs/file.c:155
#3: ffff8881052a0100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
#3: ffff8881052a0100 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 drivers/base/core.c:2743
2 locks held by getty/1809:
#0: ffff8881111ce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243
#1: ffffc900000732f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 drivers/tty/n_tty.c:2211
2 locks held by syz-executor.3/5972:
#0: ffff8881171c8100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
#0: ffff8881171c8100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 net/nfc/core.c:1165
#1: ffffffff875acea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 net/rfkill/core.c:1149
1 lock held by syz-executor.3/5983:
#0: ffffffff875acea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a9/0x790 net/rfkill/core.c:1297
2 locks held by syz-executor.4/5973:
#0: ffff8881052b4100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
#0: ffff8881052b4100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 net/nfc/core.c:1165
#1: ffffffff875acea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 net/rfkill/core.c:1149
1 lock held by syz-executor.4/5975:
#0: ffffffff875acea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a9/0x790 net/rfkill/core.c:1297
2 locks held by syz-executor.0/5974:
#0: ffff8881171cf100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
#0: ffff8881171cf100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 net/nfc/core.c:1165
#1: ffffffff875acea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 net/rfkill/core.c:1149
2 locks held by syz-executor.5/5976:
#0: ffff8881052b7100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
#0: ffff8881052b7100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 net/nfc/core.c:1165
#1: ffffffff875acea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 net/rfkill/core.c:1149
2 locks held by syz-executor.2/5977:
#0: ffff88811e82b100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
#0: ffff88811e82b100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 net/nfc/core.c:1165
#1: ffffffff875acea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 net/rfkill/core.c:1149
2 locks held by syz-executor.2/5985:
#0: ffffffff875acea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a9/0x790 net/rfkill/core.c:1297
#1: ffff8881052b7100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
#1: ffff8881052b7100 (&dev->mutex){....}-{3:3}, at: nfc_dev_down net/nfc/core.c:143 [inline]
#1: ffff8881052b7100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 net/nfc/core.c:179
3 locks held by syz-executor.1/6003:
#0: ffffffff87031728 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 drivers/char/misc.c:129
#1: ffff8881052a0100 (&dev->mutex){....}-{3:3}, at: device_lock include/linux/device.h:1009 [inline]
#1: ffff8881052a0100 (&dev->mutex){....}-{3:3}, at: nfc_register_device+0x9c/0x320 net/nfc/core.c:1128
#2: ffffffff875acea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x830 net/rfkill/core.c:1075
1 lock held by syz-executor.1/6007:
#0: ffffffff87031728 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 drivers/char/misc.c:129
1 lock held by syz-executor.0/6015:
#0: ffffffff87031728 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 drivers/char/misc.c:129
1 lock held by syz-executor.1/6017:
#0: ffffffff87031728 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 drivers/char/misc.c:129
1 lock held by syz-executor.5/6018:
#0: ffffffff87031728 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 drivers/char/misc.c:129
1 lock held by syz-executor.4/6019:
#0: ffffffff87031728 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 drivers/char/misc.c:129
1 lock held by syz-executor.2/6020:
#0: ffffffff87031728 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 drivers/char/misc.c:129
1 lock held by syz-executor.3/6021:
#0: ffffffff87031728 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 drivers/char/misc.c:129
1 lock held by modprobe/10151:
1 lock held by modprobe/10179:
1 lock held by modprobe/10181:
=============================================
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 29 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
Call Trace:
__dump_stack lib/dump_stack.c:93 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119
nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113
nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62
trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline]
check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline]
watchdog+0xfee/0x1030 kernel/hung_task.c:379
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 10181 Comm: modprobe Not tainted 6.11.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:200
Code: 89 fb e8 23 00 00 00 48 8b 3d fc 43 09 05 48 89 de 5b e9 13 e5 39 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 c0 a6 03 00 65 8b 15 10 db
RSP: 0018:ffffc9000385efc0 EFLAGS: 00000202
RAX: ffffffff878038f4 RBX: ffffffff878038f8 RCX: ffff88811df18000
RDX: 0000000000000000 RSI: ffffffff82663e54 RDI: ffffffff82663e75
RBP: ffffffff82663e75 R08: ffffffff8137ac00 R09: ffffc9000385f190
R10: 0000000000000003 R11: ffffffff8161aad0 R12: ffffffff878038f4
R13: ffffffff878038f8 R14: ffffffff82663e54 R15: ffffffff878038f4
FS: 0000000000000000(0000) GS:ffff8881f6a00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbfddd58ba8 CR3: 00000001365ea000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
__orc_find arch/x86/kernel/unwind_orc.c:99 [inline]
orc_find arch/x86/kernel/unwind_orc.c:227 [inline]
unwind_next_frame+0x54e/0x2a00 arch/x86/kernel/unwind_orc.c:494
arch_stack_walk+0x151/0x1b0 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
kasan_save_stack mm/kasan/common.c:47 [inline]
kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
poison_kmalloc_redzone mm/kasan/common.c:370 [inline]
__kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:387
kasan_kmalloc include/linux/kasan.h:211 [inline]
__do_kmalloc_node mm/slub.c:4158 [inline]
__kmalloc_noprof+0x1fc/0x400 mm/slub.c:4170
kmalloc_noprof include/linux/slab.h:685 [inline]
kzalloc_noprof include/linux/slab.h:807 [inline]
tomoyo_encode2 security/tomoyo/realpath.c:45 [inline]
tomoyo_encode+0x26f/0x540 security/tomoyo/realpath.c:80
tomoyo_realpath_from_path+0x59e/0x5e0 security/tomoyo/realpath.c:283
tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
tomoyo_check_open_permission+0x255/0x500 security/tomoyo/file.c:771
security_file_open+0x65/0x90 security/security.c:2988
do_dentry_open+0x39b/0x12f0 fs/open.c:946
vfs_open+0x3e/0x330 fs/open.c:1089
do_open fs/namei.c:3727 [inline]
path_openat+0x2b3e/0x3470 fs/namei.c:3886
do_filp_open+0x235/0x490 fs/namei.c:3913
do_sys_openat2+0x13e/0x1d0 fs/open.c:1416
do_sys_open fs/open.c:1431 [inline]
__do_sys_openat fs/open.c:1447 [inline]
__se_sys_openat fs/open.c:1442 [inline]
__x64_sys_openat+0x247/0x2a0 fs/open.c:1442
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fbfde005a46
Code: 10 00 00 00 44 8b 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 0a 48 01 00 48 83 c8 ff c3 31
RSP: 002b:00007ffeda0d28d8 EFLAGS: 00000287 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffeda0d2b38 RCX: 00007fbfde005a46
RDX: 0000000000080000 RSI: 00007ffeda0d2950 RDI: 00000000ffffff9c
RBP: 00007ffeda0d2940 R08: 0000000000080000 R09: 00007ffeda0d2950
R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffeda0d2950
R13: 0000000000000009 R14: 00007ffeda0d2b1f R15: 00000000ffffffff