audit: type=1400 audit(1673077873.913:14): avc: denied { block_suspend } for pid=7973 comm="syz-executor.7" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 loop5: detected capacity change from 0 to 264192 watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor.1:7960] Modules linked in: irq event stamp: 5168897 hardirqs last enabled at (5168896): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 hardirqs last disabled at (5168897): [] sysvec_apic_timer_interrupt+0xf/0xc0 softirqs last enabled at (5165366): [] __irq_exit_rcu+0x11b/0x180 softirqs last disabled at (5165369): [] __irq_exit_rcu+0x11b/0x180 CPU: 0 PID: 7960 Comm: syz-executor.1 Not tainted 6.2.0-rc2-next-20230106 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:lock_acquire.part.0+0x14d/0x340 Code: 87 84 48 83 c4 20 e8 c2 34 16 03 b8 ff ff ff ff 65 0f c1 05 6d 68 d6 7e 83 f8 01 0f 85 9f 01 00 00 48 85 ed 0f 85 90 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 RSP: 0018:ffff88806ce09598 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff1100d9c12b5 RCX: 0000000057d3ceea RDX: 1ffff11007db812b RSI: 0000000000000102 RDI: 0000000000000000 RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8764e907 R10: fffffbfff0ec9d20 R11: 0000000000000001 R12: 0000000000000002 R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff85608660 FS: 00007f0830314700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f3698e8f718 CR3: 0000000045384000 CR4: 0000000000350ef0 Call Trace: __is_insn_slot_addr+0x41/0x290 kernel_text_address+0x5b/0xc0 __kernel_text_address+0xd/0x40 unwind_get_return_address+0x59/0xa0 arch_stack_walk+0x9d/0xf0 stack_trace_save+0x90/0xd0 kasan_save_stack+0x22/0x50 kasan_set_track+0x25/0x30 __kasan_slab_alloc+0x5c/0x70 kmem_cache_alloc+0x172/0x300 __create_object+0x3d/0xc40 kmem_cache_alloc_node+0x215/0x310 __alloc_skb+0x21a/0x310 __netdev_alloc_skb+0x76/0x3e0 __ieee80211_beacon_get+0x3d9/0x13c0 ieee80211_beacon_get_tim+0x99/0x540 mac80211_hwsim_beacon_tx+0x1d2/0xb10 __iterate_interfaces+0x2d3/0x580 ieee80211_iterate_active_interfaces_atomic+0x73/0x1c0 mac80211_hwsim_beacon+0x105/0x200 __hrtimer_run_queues+0x54b/0xcb0 hrtimer_run_softirq+0x176/0x350 __do_softirq+0x1c7/0x913 __irq_exit_rcu+0x11b/0x180 irq_exit_rcu+0x9/0x30 sysvec_apic_timer_interrupt+0x92/0xc0 asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:__sanitizer_cov_trace_pc+0x50/0x70 Code: 0e 85 c9 74 35 8b 82 14 14 00 00 85 c0 74 2b 8b 82 f0 13 00 00 83 f8 02 75 20 48 8b 8a f8 13 00 00 8b 92 f4 13 00 00 48 8b 01 <48> 83 c0 01 48 39 c2 76 07 48 89 01 48 89 34 c1 e9 5f 11 fb 02 66 RSP: 0018:ffff8880458c77c8 EFLAGS: 00000246 RAX: 000000000001bea1 RBX: ffff888019c1ed38 RCX: ffffc90003fef000 RDX: 0000000000040000 RSI: ffffffff81894e31 RDI: 0000000000000005 RBP: ffff88801b283460 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffff888019c1ee60 R13: ffff888019c1edc8 R14: 0000000000000000 R15: ffff88801b283648 __d_instantiate+0xd1/0x450 d_instantiate_new+0x8e/0x150 ext4_add_nondir+0x1bb/0x2a0 ext4_create+0x38a/0x4e0 lookup_open.isra.0+0xed0/0x1250 path_openat+0x94b/0x2a50 do_filp_open+0x1ba/0x410 do_sys_openat2+0x171/0x4c0 __x64_sys_creat+0xcd/0x120 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7f0832d9eb19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f0830314188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 RAX: ffffffffffffffda RBX: 00007f0832eb1f60 RCX: 00007f0832d9eb19 RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000020000440 RBP: 00007f0832df8f6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdfa847c1f R14: 00007f0830314300 R15: 0000000000022000 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20 Bluetooth: hci7: command 0x0406 tx timeout blk_print_req_error: 18 callbacks suppressed I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 buffer_io_error: 22 callbacks suppressed Buffer I/O error on dev loop5, logical block 0, async page read loop5: unable to read partition table loop5: partition table beyond EOD, truncated ---------------- Code disassembly (best guess): 0: 87 84 48 83 c4 20 e8 xchg %eax,-0x17df3b7d(%rax,%rcx,2) 7: c2 34 16 retq $0x1634 a: 03 b8 ff ff ff ff add -0x1(%rax),%edi 10: 65 0f c1 05 6d 68 d6 xadd %eax,%gs:0x7ed6686d(%rip) # 0x7ed66885 17: 7e 18: 83 f8 01 cmp $0x1,%eax 1b: 0f 85 9f 01 00 00 jne 0x1c0 21: 48 85 ed test %rbp,%rbp 24: 0f 85 90 01 00 00 jne 0x1ba * 2a: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax <-- trapping instruction 31: fc ff df 34: 48 01 c3 add %rax,%rbx 37: 48 c7 03 00 00 00 00 movq $0x0,(%rbx) 3e: 48 rex.W 3f: c7 .byte 0xc7