syzkaller login: [ 113.884826][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:63463' (ED25519) to the list of known hosts. [ 132.203631][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.208202][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.266478][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.271592][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.346750][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.351389][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.401674][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.424389][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.455854][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.463544][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.520930][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.532029][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.572253][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.597831][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program executing program [ 132.779404][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 132.812455][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program [ 132.916387][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.920366][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program executing program executing program [ 133.053033][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.137654][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 133.484627][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.539241][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program executing program executing program executing program executing program executing program executing program [ 133.746506][ T5394] [ 133.747529][ T5394] ===================================================== [ 133.760532][ T5394] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 133.768352][ T5394] 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 Not tainted [ 133.777259][ T5394] ----------------------------------------------------- [ 133.790301][ T5394] syz-executor408/5394 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 133.793533][ T5394] ffff8880345bc558 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 133.797169][ T5394] [ 133.797169][ T5394] and this task is already holding: [ 133.810587][ T5394] ffff88804359a028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 133.816021][ T5394] which would create a new lock dependency: [ 133.819339][ T5394] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 133.829634][ T5394] [ 133.829634][ T5394] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 133.833484][ T5394] (&dev->event_lock#2){..-.}-{3:3} [ 133.833511][ T5394] [ 133.833511][ T5394] ... which became SOFTIRQ-irq-safe at: [ 133.838677][ T5394] lock_acquire+0x120/0x360 [ 133.851870][ T5394] _raw_spin_lock_irqsave+0xa7/0xf0 [ 133.854496][ T5394] input_inject_event+0xab/0x320 [ 133.860115][ T5394] led_trigger_event+0x138/0x210 [ 133.862466][ T5394] kbd_bh+0x1c6/0x2e0 [ 133.870235][ T5394] tasklet_action_common+0x36c/0x580 [ 133.872579][ T5394] handle_softirqs+0x286/0x870 [ 133.880176][ T5394] __irq_exit_rcu+0xca/0x1f0 [ 133.890899][ T5394] irq_exit_rcu+0x9/0x30 [ 133.893126][ T5394] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 133.897031][ T5394] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 133.910201][ T5394] rcu_is_watching+0x10/0xb0 [ 133.912049][ T5394] lock_release+0x4b/0x3e0 [ 133.913823][ T5394] unwind_next_frame+0x19a9/0x2390 [ 133.915833][ T5394] arch_stack_walk+0x11c/0x150 [ 133.917586][ T5394] stack_trace_save+0x9c/0xe0 [ 133.921105][ T5394] kasan_save_track+0x3e/0x80 [ 133.929879][ T5394] __kasan_slab_alloc+0x6c/0x80 [ 133.934292][ T5394] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 133.942739][ T5394] security_inode_alloc+0x39/0x330 [ 133.944904][ T5394] inode_init_always_gfp+0x9ed/0xdc0 [ 133.951321][ T5394] alloc_inode+0x82/0x1b0 [ 133.953868][ T5394] new_inode+0x22/0x170 [ 133.961352][ T5394] __debugfs_create_file+0x14d/0x4f0 [ 133.964493][ T5394] debugfs_create_file_unsafe+0x3a/0x50 [ 133.966990][ T5394] ieee80211_debugfs_recreate_netdev+0xca1/0x1460 [ 133.984999][ T5394] ieee80211_if_add+0xc17/0x1390 [ 133.987296][ T5394] ieee80211_register_hw+0x350d/0x4120 [ 133.989968][ T5394] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 133.992686][ T5394] hwsim_new_radio_nl+0xea4/0x1b10 [ 133.995012][ T5394] genl_family_rcv_msg_doit+0x215/0x300 [ 133.997509][ T5394] genl_rcv_msg+0x60e/0x790 [ 133.999611][ T5394] netlink_rcv_skb+0x21c/0x490 [ 134.012415][ T5394] genl_rcv+0x28/0x40 [ 134.014254][ T5394] netlink_unicast+0x758/0x8d0 [ 134.016477][ T5394] netlink_sendmsg+0x805/0xb30 [ 134.018691][ T5394] __sock_sendmsg+0x219/0x270 [ 134.037227][ T5394] __sys_sendto+0x3bd/0x520 [ 134.039072][ T5394] __x64_sys_sendto+0xde/0x100 [ 134.041079][ T5394] do_syscall_64+0xf6/0x210 [ 134.042885][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.045187][ T5394] [ 134.045187][ T5394] to a SOFTIRQ-irq-unsafe lock: [ 134.048462][ T5394] (tasklist_lock){.+.+}-{3:3} [ 134.048485][ T5394] [ 134.048485][ T5394] ... which became SOFTIRQ-irq-unsafe at: [ 134.064867][ T5394] ... [ 134.064878][ T5394] lock_acquire+0x120/0x360 [ 134.068407][ T5394] _raw_read_lock+0x36/0x50 [ 134.081503][ T5394] __do_wait+0xde/0x740 [ 134.083467][ T5394] do_wait+0x1f8/0x520 [ 134.085264][ T5394] kernel_wait+0xab/0x170 [ 134.088925][ T5394] call_usermodehelper_exec_work+0xbe/0x230 [ 134.093883][ T5394] process_scheduled_works+0xadb/0x17a0 [ 134.096056][ T5394] worker_thread+0x8a0/0xda0 [ 134.097855][ T5394] kthread+0x70e/0x8a0 [ 134.123280][ T5394] ret_from_fork+0x4b/0x80 [ 134.125329][ T5394] ret_from_fork_asm+0x1a/0x30 [ 134.135020][ T5394] [ 134.135020][ T5394] other info that might help us debug this: [ 134.135020][ T5394] [ 134.145473][ T5394] Chain exists of: [ 134.145473][ T5394] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 134.145473][ T5394] [ 134.164838][ T5394] Possible interrupt unsafe locking scenario: [ 134.164838][ T5394] [ 134.178965][ T5394] CPU0 CPU1 [ 134.187162][ T5394] ---- ---- [ 134.189633][ T5394] lock(tasklist_lock); [ 134.198230][ T5394] local_irq_disable(); [ 134.206804][ T5394] lock(&dev->event_lock#2); [ 134.220300][ T5394] lock(&client->buffer_lock); [ 134.223540][ T5394] [ 134.225130][ T5394] lock(&dev->event_lock#2); [ 134.227355][ T5394] [ 134.227355][ T5394] *** DEADLOCK *** [ 134.227355][ T5394] [ 134.249340][ T5394] 7 locks held by syz-executor408/5394: [ 134.260198][ T5394] #0: ffff8880363a6118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 134.275308][ T5394] #1: ffff88801f34a230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 134.296246][ T5394] #2: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 134.315372][ T5394] #3: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 134.331774][ T5394] #4: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 134.336172][ T5394] #5: ffff88804359a028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 134.361130][ T5394] #6: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 134.369556][ T5394] [ 134.369556][ T5394] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 134.391627][ T5394] -> (&dev->event_lock#2){..-.}-{3:3} { [ 134.397814][ T5394] IN-SOFTIRQ-W at: [ 134.412638][ T5394] lock_acquire+0x120/0x360 [ 134.419147][ T5394] _raw_spin_lock_irqsave+0xa7/0xf0 [ 134.424215][ T5394] input_inject_event+0xab/0x320 [ 134.432994][ T5394] led_trigger_event+0x138/0x210 [ 134.440548][ T5394] kbd_bh+0x1c6/0x2e0 [ 134.448621][ T5394] tasklet_action_common+0x36c/0x580 [ 134.451911][ T5394] handle_softirqs+0x286/0x870 [ 134.454897][ T5394] __irq_exit_rcu+0xca/0x1f0 [ 134.457862][ T5394] irq_exit_rcu+0x9/0x30 [ 134.470810][ T5394] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 134.481659][ T5394] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 134.487604][ T5394] rcu_is_watching+0x10/0xb0 [ 134.496097][ T5394] lock_release+0x4b/0x3e0 [ 134.501107][ T5394] unwind_next_frame+0x19a9/0x2390 [ 134.512446][ T5394] arch_stack_walk+0x11c/0x150 [ 134.515445][ T5394] stack_trace_save+0x9c/0xe0 [ 134.521746][ T5394] kasan_save_track+0x3e/0x80 [ 134.525093][ T5394] __kasan_slab_alloc+0x6c/0x80 [ 134.532223][ T5394] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 134.535365][ T5394] security_inode_alloc+0x39/0x330 [ 134.557060][ T5394] inode_init_always_gfp+0x9ed/0xdc0 [ 134.560451][ T5394] alloc_inode+0x82/0x1b0 [ 134.563180][ T5394] new_inode+0x22/0x170 [ 134.566394][ T5394] __debugfs_create_file+0x14d/0x4f0 [ 134.580037][ T5394] debugfs_create_file_unsafe+0x3a/0x50 [ 134.583789][ T5394] ieee80211_debugfs_recreate_netdev+0xca1/0x1460 [ 134.588642][ T5394] ieee80211_if_add+0xc17/0x1390 [ 134.601833][ T5394] ieee80211_register_hw+0x350d/0x4120 [ 134.605125][ T5394] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 134.608697][ T5394] hwsim_new_radio_nl+0xea4/0x1b10 [ 134.622206][ T5394] genl_family_rcv_msg_doit+0x215/0x300 [ 134.625748][ T5394] genl_rcv_msg+0x60e/0x790 [ 134.629494][ T5394] netlink_rcv_skb+0x21c/0x490 [ 134.644377][ T5394] genl_rcv+0x28/0x40 [ 134.647556][ T5394] netlink_unicast+0x758/0x8d0 [ 134.651506][ T5394] netlink_sendmsg+0x805/0xb30 [ 134.662916][ T5394] __sock_sendmsg+0x219/0x270 [ 134.665954][ T5394] __sys_sendto+0x3bd/0x520 [ 134.681519][ T5394] __x64_sys_sendto+0xde/0x100 [ 134.686240][ T5394] do_syscall_64+0xf6/0x210 [ 134.695132][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.706790][ T5394] INITIAL USE at: [ 134.709108][ T5394] lock_acquire+0x120/0x360 [ 134.721831][ T5394] _raw_spin_lock_irqsave+0xa7/0xf0 [ 134.725839][ T5394] input_inject_event+0xab/0x320 [ 134.731943][ T5394] kbd_led_trigger_activate+0xbc/0x100 [ 134.740838][ T5394] led_trigger_set+0x52d/0x950 [ 134.743425][ T5394] led_trigger_set_default+0x215/0x250 [ 134.746345][ T5394] led_classdev_register_ext+0x73d/0x930 [ 134.749268][ T5394] input_leds_connect+0x517/0x790 [ 134.762582][ T5394] input_register_device+0xcee/0x10b0 [ 134.766036][ T5394] atkbd_connect+0x70e/0x9c0 [ 134.776448][ T5394] serio_driver_probe+0x7f/0xa0 [ 134.790913][ T5394] really_probe+0x26d/0x9a0 [ 134.794915][ T5394] __driver_probe_device+0x18c/0x2f0 [ 134.799052][ T5394] driver_probe_device+0x4f/0x430 [ 134.813273][ T5394] __driver_attach+0x452/0x700 [ 134.816216][ T5394] bus_for_each_dev+0x233/0x2b0 [ 134.819279][ T5394] serio_handle_event+0x1a2/0x860 [ 134.822866][ T5394] process_scheduled_works+0xadb/0x17a0 [ 134.844781][ T5394] worker_thread+0x8a0/0xda0 [ 134.847738][ T5394] kthread+0x70e/0x8a0 [ 134.850461][ T5394] ret_from_fork+0x4b/0x80 [ 134.853299][ T5394] ret_from_fork_asm+0x1a/0x30 [ 134.856185][ T5394] } [ 134.859999][ T5394] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 134.875522][ T5394] -> (&client->buffer_lock){....}-{3:3} { [ 134.879519][ T5394] INITIAL USE at: [ 134.882731][ T5394] lock_acquire+0x120/0x360 [ 134.892340][ T5394] _raw_spin_lock+0x2e/0x40 [ 134.895323][ T5394] evdev_pass_values+0xb9/0xbd0 [ 134.909341][ T5394] evdev_events+0x1e6/0x340 [ 134.912328][ T5394] input_pass_values+0x288/0x890 [ 134.915914][ T5394] input_event_dispose+0x330/0x6b0 [ 134.922195][ T5394] input_inject_event+0x1fe/0x320 [ 134.932147][ T5394] evdev_write+0x2fc/0x480 [ 134.934828][ T5394] vfs_write+0x27b/0xa90 [ 134.937368][ T5394] ksys_write+0x145/0x250 [ 134.950106][ T5394] do_syscall_64+0xf6/0x210 [ 134.953535][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.956994][ T5394] } [ 134.975733][ T5394] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 134.979538][ T5394] ... acquired at: [ 134.981356][ T5394] lock_acquire+0x120/0x360 [ 134.983517][ T5394] _raw_spin_lock+0x2e/0x40 [ 134.985608][ T5394] evdev_pass_values+0xb9/0xbd0 [ 134.987900][ T5394] evdev_events+0x1e6/0x340 [ 134.990160][ T5394] input_pass_values+0x288/0x890 [ 134.992425][ T5394] input_event_dispose+0x330/0x6b0 [ 135.000708][ T5394] input_inject_event+0x1fe/0x320 [ 135.003137][ T5394] evdev_write+0x2fc/0x480 [ 135.011580][ T5394] vfs_write+0x27b/0xa90 [ 135.013631][ T5394] ksys_write+0x145/0x250 [ 135.020978][ T5394] do_syscall_64+0xf6/0x210 [ 135.029959][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.033090][ T5394] [ 135.034287][ T5394] [ 135.034287][ T5394] the dependencies between the lock to be acquired [ 135.034296][ T5394] and SOFTIRQ-irq-unsafe lock: [ 135.044161][ T5394] -> (tasklist_lock){.+.+}-{3:3} { [ 135.052678][ T5394] HARDIRQ-ON-R at: [ 135.054512][ T5394] lock_acquire+0x120/0x360 [ 135.057149][ T5394] _raw_read_lock+0x36/0x50 [ 135.072338][ T5394] __do_wait+0xde/0x740 [ 135.075599][ T5394] do_wait+0x1f8/0x520 [ 135.079310][ T5394] kernel_wait+0xab/0x170 [ 135.082791][ T5394] call_usermodehelper_exec_work+0xbe/0x230 [ 135.085929][ T5394] process_scheduled_works+0xadb/0x17a0 [ 135.110495][ T5394] worker_thread+0x8a0/0xda0 [ 135.113369][ T5394] kthread+0x70e/0x8a0 [ 135.116065][ T5394] ret_from_fork+0x4b/0x80 [ 135.128481][ T5394] ret_from_fork_asm+0x1a/0x30 [ 135.135533][ T5394] SOFTIRQ-ON-R at: [ 135.137462][ T5394] lock_acquire+0x120/0x360 [ 135.149318][ T5394] _raw_read_lock+0x36/0x50 [ 135.152292][ T5394] __do_wait+0xde/0x740 [ 135.155137][ T5394] do_wait+0x1f8/0x520 [ 135.157829][ T5394] kernel_wait+0xab/0x170 [ 135.170751][ T5394] call_usermodehelper_exec_work+0xbe/0x230 [ 135.174147][ T5394] process_scheduled_works+0xadb/0x17a0 [ 135.177193][ T5394] worker_thread+0x8a0/0xda0 [ 135.190176][ T5394] kthread+0x70e/0x8a0 [ 135.192951][ T5394] ret_from_fork+0x4b/0x80 [ 135.195835][ T5394] ret_from_fork_asm+0x1a/0x30 [ 135.198569][ T5394] INITIAL USE at: [ 135.210465][ T5394] lock_acquire+0x120/0x360 [ 135.213052][ T5394] _raw_write_lock_irq+0xa2/0xf0 [ 135.216014][ T5394] copy_process+0x21d5/0x3b80 [ 135.219176][ T5394] kernel_clone+0x21e/0x870 [ 135.231265][ T5394] user_mode_thread+0xdd/0x140 [ 135.234154][ T5394] rest_init+0x23/0x300 [ 135.236860][ T5394] start_kernel+0x470/0x4f0 [ 135.249871][ T5394] x86_64_start_reservations+0x2a/0x30 [ 135.252830][ T5394] x86_64_start_kernel+0x66/0x70 [ 135.255540][ T5394] common_startup_64+0x13e/0x147 [ 135.258427][ T5394] INITIAL READ USE at: [ 135.270625][ T5394] lock_acquire+0x120/0x360 [ 135.273733][ T5394] _raw_read_lock+0x36/0x50 [ 135.276799][ T5394] __do_wait+0xde/0x740 [ 135.289901][ T5394] do_wait+0x1f8/0x520 [ 135.292771][ T5394] kernel_wait+0xab/0x170 [ 135.295825][ T5394] call_usermodehelper_exec_work+0xbe/0x230 [ 135.301995][ T5394] process_scheduled_works+0xadb/0x17a0 [ 135.305130][ T5394] worker_thread+0x8a0/0xda0 [ 135.307910][ T5394] kthread+0x70e/0x8a0 [ 135.320878][ T5394] ret_from_fork+0x4b/0x80 [ 135.329297][ T5394] ret_from_fork_asm+0x1a/0x30 [ 135.332267][ T5394] } [ 135.333376][ T5394] ... key at: [] tasklist_lock+0x18/0x40 [ 135.336518][ T5394] ... acquired at: [ 135.338157][ T5394] lock_acquire+0x120/0x360 [ 135.340175][ T5394] _raw_read_lock+0x36/0x50 [ 135.342070][ T5394] send_sigio+0x101/0x370 [ 135.344039][ T5394] kill_fasync+0x24d/0x4d0 [ 135.345898][ T5394] lease_break_callback+0x26/0x30 [ 135.348072][ T5394] __break_lease+0x6a5/0x1620 [ 135.350187][ T5394] vfs_truncate+0x428/0x520 [ 135.352190][ T5394] do_sys_truncate+0xdb/0x190 [ 135.354199][ T5394] __x64_sys_truncate+0x5b/0x70 [ 135.358561][ T5394] do_syscall_64+0xf6/0x210 [ 135.360779][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.365348][ T5394] [ 135.367141][ T5394] -> (&f_owner->lock){....}-{3:3} { [ 135.370570][ T5394] INITIAL USE at: [ 135.376156][ T5394] lock_acquire+0x120/0x360 [ 135.382449][ T5394] _raw_write_lock_irq+0xa2/0xf0 [ 135.388946][ T5394] __f_setown+0x67/0x370 [ 135.394952][ T5394] generic_setlease+0xd5d/0x1240 [ 135.403584][ T5394] fcntl_setlease+0x3a2/0x4c0 [ 135.410895][ T5394] do_fcntl+0x6a0/0x1910 [ 135.414837][ T5394] __se_sys_fcntl+0xc8/0x150 [ 135.420686][ T5394] do_syscall_64+0xf6/0x210 [ 135.423937][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.426968][ T5394] INITIAL READ USE at: [ 135.428923][ T5394] lock_acquire+0x120/0x360 [ 135.431766][ T5394] _raw_read_lock_irq+0xaa/0xf0 [ 135.442682][ T5394] f_getown+0x54/0x2a0 [ 135.450479][ T5394] sock_ioctl+0x536/0x790 [ 135.457024][ T5394] __se_sys_ioctl+0xf9/0x170 [ 135.460287][ T5394] do_syscall_64+0xf6/0x210 [ 135.462917][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.466160][ T5394] } [ 135.467254][ T5394] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 135.470968][ T5394] ... acquired at: [ 135.472612][ T5394] lock_acquire+0x120/0x360 [ 135.475335][ T5394] _raw_read_lock_irqsave+0xaf/0x100 [ 135.481518][ T5394] send_sigio+0x38/0x370 [ 135.487593][ T5394] kill_fasync+0x24d/0x4d0 [ 135.494243][ T5394] lease_break_callback+0x26/0x30 [ 135.498723][ T5394] __break_lease+0x6a5/0x1620 [ 135.502498][ T5394] vfs_truncate+0x428/0x520 [ 135.507045][ T5394] do_sys_truncate+0xdb/0x190 [ 135.512323][ T5394] __x64_sys_truncate+0x5b/0x70 [ 135.515556][ T5394] do_syscall_64+0xf6/0x210 [ 135.518575][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.523335][ T5394] [ 135.524297][ T5394] -> (&new->fa_lock){....}-{3:3} { [ 135.526362][ T5394] INITIAL USE at: [ 135.527940][ T5394] lock_acquire+0x120/0x360 [ 135.530467][ T5394] _raw_write_lock_irq+0xa2/0xf0 [ 135.533176][ T5394] fasync_remove_entry+0xf1/0x1c0 [ 135.539637][ T5394] lease_modify+0x1ca/0x3c0 [ 135.543061][ T5394] locks_remove_file+0x4bf/0xea0 [ 135.546556][ T5394] __fput+0x3ab/0xa70 [ 135.550204][ T5394] task_work_run+0x1d1/0x260 [ 135.554904][ T5394] do_exit+0x8d6/0x2550 [ 135.558375][ T5394] do_group_exit+0x21c/0x2d0 [ 135.563645][ T5394] get_signal+0x125e/0x1310 [ 135.570881][ T5394] arch_do_signal_or_restart+0x95/0x780 [ 135.578344][ T5394] syscall_exit_to_user_mode+0x8b/0x120 [ 135.584634][ T5394] do_syscall_64+0x103/0x210 [ 135.590539][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.596068][ T5394] INITIAL READ USE at: [ 135.597968][ T5394] lock_acquire+0x120/0x360 [ 135.601597][ T5394] _raw_read_lock_irqsave+0xaf/0x100 [ 135.606554][ T5394] kill_fasync+0x199/0x4d0 [ 135.614590][ T5394] lease_break_callback+0x26/0x30 [ 135.621262][ T5394] __break_lease+0x6a5/0x1620 [ 135.626011][ T5394] vfs_truncate+0x428/0x520 [ 135.630288][ T5394] do_sys_truncate+0xdb/0x190 [ 135.635994][ T5394] __x64_sys_truncate+0x5b/0x70 [ 135.640414][ T5394] do_syscall_64+0xf6/0x210 [ 135.643513][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.647133][ T5394] } [ 135.648387][ T5394] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 135.653310][ T5394] ... acquired at: [ 135.656034][ T5394] lock_acquire+0x120/0x360 [ 135.659337][ T5394] _raw_read_lock_irqsave+0xaf/0x100 [ 135.662273][ T5394] kill_fasync+0x199/0x4d0 [ 135.664790][ T5394] evdev_pass_values+0x627/0xbd0 [ 135.667400][ T5394] evdev_events+0x1e6/0x340 [ 135.670395][ T5394] input_pass_values+0x288/0x890 [ 135.673499][ T5394] input_event_dispose+0x330/0x6b0 [ 135.676008][ T5394] input_inject_event+0x1fe/0x320 [ 135.678007][ T5394] evdev_write+0x2fc/0x480 [ 135.679973][ T5394] vfs_write+0x27b/0xa90 [ 135.681700][ T5394] ksys_write+0x145/0x250 [ 135.683535][ T5394] do_syscall_64+0xf6/0x210 [ 135.685959][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.688985][ T5394] [ 135.690483][ T5394] [ 135.690483][ T5394] stack backtrace: [ 135.693432][ T5394] CPU: 0 UID: 0 PID: 5394 Comm: syz-executor408 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 135.693448][ T5394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.693456][ T5394] Call Trace: [ 135.693464][ T5394] [ 135.693470][ T5394] dump_stack_lvl+0x189/0x250 [ 135.693528][ T5394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.693543][ T5394] ? __pfx__printk+0x10/0x10 [ 135.693554][ T5394] validate_chain+0x1f05/0x2140 [ 135.693569][ T5394] __lock_acquire+0xaac/0xd20 [ 135.693624][ T5394] ? kill_fasync+0x199/0x4d0 [ 135.693635][ T5394] lock_acquire+0x120/0x360 [ 135.693647][ T5394] ? kill_fasync+0x199/0x4d0 [ 135.693656][ T5394] ? __lock_acquire+0xaac/0xd20 [ 135.693669][ T5394] _raw_read_lock_irqsave+0xaf/0x100 [ 135.693681][ T5394] ? kill_fasync+0x199/0x4d0 [ 135.693689][ T5394] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 135.693706][ T5394] ? do_raw_spin_lock+0x121/0x290 [ 135.693720][ T5394] kill_fasync+0x199/0x4d0 [ 135.693729][ T5394] ? kill_fasync+0x53/0x4d0 [ 135.693739][ T5394] evdev_pass_values+0x627/0xbd0 [ 135.693752][ T5394] ? evdev_pass_values+0x5d1/0xbd0 [ 135.693763][ T5394] evdev_events+0x1e6/0x340 [ 135.693772][ T5394] ? evdev_events+0x79/0x340 [ 135.693781][ T5394] ? input_pass_values+0x8d/0x890 [ 135.693795][ T5394] input_pass_values+0x288/0x890 [ 135.693812][ T5394] ? input_handle_event+0x70c/0xf30 [ 135.693825][ T5394] input_event_dispose+0x330/0x6b0 [ 135.693840][ T5394] input_inject_event+0x1fe/0x320 [ 135.693853][ T5394] ? input_inject_event+0xbc/0x320 [ 135.693866][ T5394] evdev_write+0x2fc/0x480 [ 135.693876][ T5394] ? __pfx_evdev_write+0x10/0x10 [ 135.693884][ T5394] ? bpf_lsm_file_permission+0x9/0x20 [ 135.693898][ T5394] ? security_file_permission+0x75/0x290 [ 135.693915][ T5394] ? rw_verify_area+0x258/0x650 [ 135.693927][ T5394] ? __pfx_evdev_write+0x10/0x10 [ 135.693937][ T5394] vfs_write+0x27b/0xa90 [ 135.693951][ T5394] ? __pfx_vfs_write+0x10/0x10 [ 135.693963][ T5394] ? __fget_files+0x2a/0x420 [ 135.693977][ T5394] ? __fget_files+0x2a/0x420 [ 135.693990][ T5394] ? __fget_files+0x3a0/0x420 [ 135.694002][ T5394] ? __fget_files+0x2a/0x420 [ 135.694017][ T5394] ksys_write+0x145/0x250 [ 135.694029][ T5394] ? rcu_is_watching+0x15/0xb0 [ 135.694038][ T5394] ? __pfx_ksys_write+0x10/0x10 [ 135.694051][ T5394] ? do_syscall_64+0xba/0x210 [ 135.694066][ T5394] do_syscall_64+0xf6/0x210 [ 135.694080][ T5394] ? clear_bhb_loop+0x60/0xb0 [ 135.694092][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.694103][ T5394] RIP: 0033:0x7f666844d4f9 [ 135.694115][ T5394] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 135.694124][ T5394] RSP: 002b:00007f66683f9218 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.694137][ T5394] RAX: ffffffffffffffda RBX: 00007f66684cd428 RCX: 00007f666844d4f9 [ 135.694145][ T5394] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000008 [ 135.694152][ T5394] RBP: 00007f66684cd420 R08: 0000000000000000 R09: 0000000000000000 [ 135.694159][ T5394] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f666849a548 [ 135.694166][ T5394] R13: 0000200000000040 R14: 00002000000001c0 R15: 00002000000000c0 [ 135.694178][ T5394] executing program executing program executing program executing program [ 136.039660][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.053127][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program VM DIAGNOSIS: 20:37:09 Registers: info registers vcpu 0 CPU#0 RAX=000000000000000a RBX=000000000000000a RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000dbd7030 R8 =ffff888000c80237 R9 =1ffff11000190046 R10=dffffc0000000000 R11=ffffffff853e2810 R12=dffffc0000000000 R13=ffffffff99850c93 R14=ffffffff99b55c40 R15=0000000000000000 RIP=ffffffff853e288c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f66683f96c0 ffffffff 00c00000 GS =0000 ffff88808d6c2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000001540 CR3=000000003e533000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffe0000 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 746e6576652f7475 706e692f7665642f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f66683f8de0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f666847ac97 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f66684d72e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 746e6576652f7475 706e692f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000013 574d4655460c5756 534d4a0c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000