[ 26.569648][ T3185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.582382][ T3185] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 52.108499][ T3613] can: request_module (can-proto-0) failed. [ 52.131002][ T3613] can: request_module (can-proto-0) failed. [ 52.151224][ T3613] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.130' (ECDSA) to the list of known hosts. 2022/09/30 13:38:15 parsed 1 programs 2022/09/30 13:38:15 executed programs: 0 [ 72.516805][ T3682] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.525978][ T3682] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.534465][ T3682] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.543236][ T3682] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.551582][ T3682] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.559544][ T3682] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.644336][ T3679] chnl_net:caif_netlink_parms(): no params data found [ 72.686601][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.694830][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.703066][ T3679] device bridge_slave_0 entered promiscuous mode [ 72.712117][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.719404][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.727156][ T3679] device bridge_slave_1 entered promiscuous mode [ 72.748323][ T3679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.759983][ T3679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.781930][ T3679] team0: Port device team_slave_0 added [ 72.790074][ T3679] team0: Port device team_slave_1 added [ 72.807551][ T3679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.814688][ T3679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.840931][ T3679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.854042][ T3679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.861107][ T3679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.887241][ T3679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.913390][ T3679] device hsr_slave_0 entered promiscuous mode [ 72.920165][ T3679] device hsr_slave_1 entered promiscuous mode [ 73.006690][ T3679] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.017491][ T3679] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.026626][ T3679] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.036117][ T3679] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.057832][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.065211][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.073650][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.080994][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.125374][ T3679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.141080][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.152116][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.162109][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.170911][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 73.184621][ T3679] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.196220][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.204720][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.211875][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.229871][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.238402][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.245909][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.258313][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.266810][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.279091][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.291026][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.304493][ T3679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.317294][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.325861][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.344396][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.352529][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.364220][ T3679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.479642][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.494186][ T3679] device veth0_vlan entered promiscuous mode [ 73.502508][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.514926][ T3679] device veth1_vlan entered promiscuous mode [ 73.523341][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.532553][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.542033][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.564017][ T3679] device veth0_macvtap entered promiscuous mode [ 73.571682][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.580715][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.589889][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.601459][ T3679] device veth1_macvtap entered promiscuous mode [ 73.618784][ T3679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.626280][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.641036][ T3679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.649820][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.658648][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.671406][ T3679] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.680458][ T3679] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.689262][ T3679] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.697962][ T3679] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.846054][ T3700] nbd0: detected capacity change from 0 to 10 [ 74.570778][ T3682] block nbd0: Receive control failed (result -104) [ 74.589223][ T146] Bluetooth: hci0: command 0x0409 tx timeout [ 76.349943][ T15] cfg80211: failed to load regulatory.db [ 76.668989][ T3612] Bluetooth: hci0: command 0x041b tx timeout [ 78.748788][ T143] Bluetooth: hci0: command 0x040f tx timeout [ 80.828390][ T3612] Bluetooth: hci0: command 0x0419 tx timeout [ 103.868869][ T10] block nbd0: Possible stuck request ffff88801f188000: control (read@0,4096B). Runtime 30 seconds [ 133.958631][ T10] block nbd0: Possible stuck request ffff88801f188000: control (read@0,4096B). Runtime 60 seconds [ 135.397158][ T2972] udevd[2972]: worker [3683] /devices/virtual/block/nbd0 is taking a long time [ 164.028445][ T10] block nbd0: Possible stuck request ffff88801f188000: control (read@0,4096B). Runtime 90 seconds [ 194.109268][ T10] block nbd0: Possible stuck request ffff88801f188000: control (read@0,4096B). Runtime 120 seconds [ 196.188347][ T3612] Bluetooth: hci0: command 0x0406 tx timeout [ 224.188417][ T10] block nbd0: Possible stuck request ffff88801f188000: control (read@0,4096B). Runtime 150 seconds [ 254.268433][ T10] block nbd0: Possible stuck request ffff88801f188000: control (read@0,4096B). Runtime 180 seconds [ 255.612831][ T2972] udevd[2972]: worker [3683] /devices/virtual/block/nbd0 timeout; kill it [ 255.621751][ T3683] ldm_validate_partition_table(): Disk read failed. [ 255.622804][ T2972] udevd[2972]: seq 7888 '/devices/virtual/block/nbd0' killed [ 255.629496][ T3683] Dev nbd0: unable to read RDB block 0 [ 255.641842][ T3683] nbd0: unable to read partition table [ 255.647660][ T3683] nbd0: partition table beyond EOD, truncated 2022/09/30 13:41:20 executed programs: 1 2022/09/30 13:41:20 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe [ 255.883750][ T3679] syz-executor.0 (3679) used greatest stack depth: 19728 bytes left 2022/09/30 13:41:23 result: hanged=false err=executor 0: exit status 67 wrong response packet (errno 16) loop exited with status 67 wrong response packet (errno 16) loop exited with status 67 [ 258.988488][ T3682] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 260.033681][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.041676][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.050728][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.059694][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.067330][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.074935][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.159644][ T3716] chnl_net:caif_netlink_parms(): no params data found [ 260.200478][ T3716] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.208070][ T3716] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.216267][ T3716] device bridge_slave_0 entered promiscuous mode [ 260.224347][ T3716] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.231895][ T3716] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.240118][ T3716] device bridge_slave_1 entered promiscuous mode [ 260.261759][ T3716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.272903][ T3716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.296409][ T3716] team0: Port device team_slave_0 added [ 260.304692][ T3716] team0: Port device team_slave_1 added [ 260.321869][ T3716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.329050][ T3716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.355193][ T3716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.367479][ T3716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.374549][ T3716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.400675][ T3716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.426691][ T3716] device hsr_slave_0 entered promiscuous mode [ 260.434164][ T3716] device hsr_slave_1 entered promiscuous mode [ 260.441517][ T3716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.449684][ T3716] Cannot create hsr debugfs directory [ 260.508998][ T3716] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.516183][ T3716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.523793][ T3716] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.531388][ T3716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.572644][ T3716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.585469][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.595139][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.603932][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.613318][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 260.625849][ T3716] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.637973][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.648014][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.655155][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.668793][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.677167][ T3689] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.684358][ T3689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.711872][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.720668][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.729238][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.737985][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.746589][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.757916][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.777120][ T3716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.786520][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.794689][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.990471][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.006400][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.014964][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.024591][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.035522][ T3716] device veth0_vlan entered promiscuous mode [ 261.045853][ T3716] device veth1_vlan entered promiscuous mode [ 261.065013][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 261.073775][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 261.082532][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.093740][ T3716] device veth0_macvtap entered promiscuous mode [ 261.103713][ T3716] device veth1_macvtap entered promiscuous mode [ 261.118825][ T3716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 261.129630][ T3716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.141544][ T3716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.151954][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.164921][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.176029][ T3716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 261.186676][ T3716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.199011][ T3716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.206651][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.215617][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.108808][ T146] Bluetooth: hci0: command 0x0409 tx timeout [ 264.188445][ T27] Bluetooth: hci0: command 0x041b tx timeout [ 266.278401][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 268.348381][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 284.348844][ T10] block nbd0: Possible stuck request ffff88801f188000: control (read@0,4096B). Runtime 210 seconds [ 314.428423][ T10] block nbd0: Possible stuck request ffff88801f188000: control (read@0,4096B). Runtime 240 seconds [ 344.508481][ T10] block nbd0: Possible stuck request ffff88801f188000: control (read@0,4096B). Runtime 270 seconds [ 374.588421][ T10] block nbd0: Possible stuck request ffff88801f188000: control (read@0,4096B). Runtime 300 seconds [ 385.628501][ T146] Bluetooth: hci0: command 0x0406 tx timeout [ 404.668524][ T10] block nbd0: Possible stuck request ffff88801f188000: control (read@0,4096B). Runtime 330 seconds [ 429.628567][ T29] INFO: task udevd:3683 blocked for more than 143 seconds. [ 429.636004][ T29] Not tainted 6.0.0-rc7-syzkaller-00132-g987a926c1d8a #0 [ 429.649202][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.658163][ T29] task:udevd state:D stack:24512 pid: 3683 ppid: 2972 flags:0x00004006 [ 429.668161][ T29] Call Trace: [ 429.671664][ T29] [ 429.674699][ T29] __schedule+0x957/0xe20 [ 429.679468][ T29] ? release_firmware_map_entry+0x184/0x184 [ 429.685474][ T29] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 429.691838][ T29] ? print_irqtrace_events+0x220/0x220 [ 429.697297][ T29] ? _raw_spin_lock_irq+0xdb/0x110 [ 429.702675][ T29] schedule+0xcb/0x190 [ 429.706802][ T29] io_schedule+0x83/0x100 [ 429.711940][ T29] folio_wait_bit_common+0x98a/0x14b0 [ 429.717739][ T29] ? folio_wait_bit+0x20/0x20 [ 429.722721][ T29] ? pfn_swap_entry_to_page+0x320/0x320 [ 429.728371][ T29] __filemap_get_folio+0x556/0x1230 [ 429.733716][ T29] ? page_cache_prev_miss+0x500/0x500 [ 429.739478][ T29] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 429.745498][ T29] ? print_irqtrace_events+0x220/0x220 [ 429.751346][ T29] truncate_inode_pages_range+0x5eb/0x17b0 [ 429.757230][ T29] ? smp_call_function_many_cond+0xec1/0x16f0 [ 429.763743][ T29] ? mapping_evict_folio+0x570/0x570 [ 429.769318][ T29] ? xas_next_entry+0x3c0/0x3c0 [ 429.774189][ T29] ? filemap_write_and_wait_range+0x234/0x2c0 [ 429.780878][ T29] ? __bread_gfp+0x320/0x320 [ 429.785639][ T29] ? invalidate_bh_lrus+0x30/0x30 [ 429.791046][ T29] blkdev_flush_mapping+0x153/0x2c0 [ 429.796324][ T29] blkdev_put+0x4a5/0x730 [ 429.800726][ T29] ? blkdev_open+0x2e0/0x2e0 [ 429.805338][ T29] blkdev_close+0x55/0x80 [ 429.809748][ T29] __fput+0x3b9/0x820 [ 429.813875][ T29] task_work_run+0x146/0x1c0 [ 429.818662][ T29] do_exit+0x55e/0x20a0 [ 429.822884][ T29] ? mm_update_next_owner+0x6d0/0x6d0 [ 429.828635][ T29] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 429.834648][ T29] ? print_irqtrace_events+0x220/0x220 [ 429.840184][ T29] ? _raw_spin_lock_irq+0xdb/0x110 [ 429.845319][ T29] do_group_exit+0x23b/0x2f0 [ 429.849970][ T29] ? _raw_spin_unlock_irq+0x1f/0x40 [ 429.855365][ T29] ? lockdep_hardirqs_on+0x95/0x140 [ 429.860789][ T29] get_signal+0x172f/0x1780 [ 429.865422][ T29] ? ptrace_notify+0x340/0x340 [ 429.870248][ T29] ? do_sys_openat2+0x428/0x500 [ 429.875118][ T29] arch_do_signal_or_restart+0x8d/0x750 [ 429.880970][ T29] ? get_sigframe_size+0x10/0x10 [ 429.885935][ T29] ? __ia32_sys_open+0x270/0x270 [ 429.890938][ T29] ? exit_to_user_mode_loop+0x42/0x160 [ 429.896520][ T29] exit_to_user_mode_loop+0x74/0x160 [ 429.901956][ T29] exit_to_user_mode_prepare+0xad/0x110 [ 429.907698][ T29] syscall_exit_to_user_mode+0x2e/0x60 [ 429.913220][ T29] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 429.919216][ T29] RIP: 0033:0x7f2c47588697 [ 429.923637][ T29] RSP: 002b:00007ffeb5e8fa40 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 429.932079][ T29] RAX: 0000000000000008 RBX: 000055c72468e300 RCX: 00007f2c47588697 [ 429.940110][ T29] RDX: 00000000000a0800 RSI: 000055c7246909e0 RDI: 00000000ffffff9c [ 429.948085][ T29] RBP: 000055c7246909e0 R08: 0000000000000001 R09: 0000000000000010 [ 429.956109][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 429.964117][ T29] R13: 000055c724681720 R14: 0000000000000001 R15: 000055c724667910 [ 429.972136][ T29] [ 429.975191][ T29] INFO: task syz-executor.0:3737 blocked for more than 143 seconds. [ 429.983244][ T29] Not tainted 6.0.0-rc7-syzkaller-00132-g987a926c1d8a #0 [ 429.990812][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.999727][ T29] task:syz-executor.0 state:D stack:27360 pid: 3737 ppid: 3716 flags:0x00004004 [ 430.009044][ T29] Call Trace: [ 430.012416][ T29] [ 430.015367][ T29] __schedule+0x957/0xe20 [ 430.019783][ T29] ? release_firmware_map_entry+0x184/0x184 [ 430.025778][ T29] ? __mutex_trylock_common+0x8e/0x2f0 [ 430.031309][ T29] ? do_raw_spin_unlock+0x134/0x8a0 [ 430.036525][ T29] schedule+0xcb/0x190 [ 430.040747][ T29] schedule_preempt_disabled+0xf/0x20 [ 430.046215][ T29] __mutex_lock_common+0xecf/0x26c0 [ 430.051833][ T29] ? blkdev_get_by_dev+0xfd/0xa40 [ 430.056956][ T29] ? mutex_lock_io_nested+0x60/0x60 [ 430.062338][ T29] ? kobject_get_unless_zero+0x220/0x310 [ 430.068078][ T29] ? _atomic_dec_and_lock+0x85/0x110 [ 430.073588][ T29] ? iput+0x198/0x760 [ 430.077773][ T29] ? ilookup+0x1c1/0x200 [ 430.082055][ T29] mutex_lock_nested+0x17/0x20 [ 430.086825][ T29] blkdev_get_by_dev+0xfd/0xa40 [ 430.091725][ T29] blkdev_open+0x128/0x2e0 [ 430.096169][ T29] ? blkdev_write_iter+0x750/0x750 [ 430.101408][ T29] do_dentry_open+0x777/0x1180 [ 430.106189][ T29] path_openat+0x260e/0x2e00 [ 430.110972][ T29] ? mark_lock+0x9a/0x350 [ 430.115315][ T29] ? do_filp_open+0x500/0x500 [ 430.120053][ T29] ? alloc_fd+0x5ca/0x670 [ 430.124405][ T29] ? rcu_read_lock_sched_held+0x89/0x130 [ 430.130186][ T29] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 430.136184][ T29] do_filp_open+0x275/0x500 [ 430.140744][ T29] ? vfs_tmpfile+0x2e0/0x2e0 [ 430.145356][ T29] ? _raw_spin_unlock+0x24/0x40 [ 430.150343][ T29] ? alloc_fd+0x5ca/0x670 [ 430.154695][ T29] do_sys_openat2+0x13b/0x500 [ 430.159409][ T29] ? read_lock_is_recursive+0x10/0x10 [ 430.164877][ T29] ? __ct_user_exit+0x81/0xe0 [ 430.169606][ T29] ? do_sys_open+0x220/0x220 [ 430.174208][ T29] __x64_sys_openat+0x243/0x290 [ 430.179120][ T29] ? __ia32_sys_open+0x270/0x270 [ 430.184066][ T29] ? __ct_user_exit+0x81/0xe0 [ 430.188838][ T29] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 430.194855][ T29] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 430.201053][ T29] do_syscall_64+0x2b/0x70 [ 430.205567][ T29] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 430.211496][ T29] RIP: 0033:0x418484 [ 430.215400][ T29] RSP: 002b:00007f70ad288cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 430.223866][ T29] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000418484 [ 430.231868][ T29] RDX: 0000000000000000 RSI: 00007f70ad288d60 RDI: 00000000ffffff9c [ 430.239904][ T29] RBP: 00007f70ad288d60 R08: 0000000000000000 R09: 002364626e2f7665 [ 430.247888][ T29] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 430.255938][ T29] R13: 00007ffc125a704f R14: 00007f70ad289300 R15: 0000000000022000 [ 430.263971][ T29] [ 430.267008][ T29] [ 430.267008][ T29] Showing all locks held in the system: [ 430.274821][ T29] 1 lock held by rcu_tasks_kthre/13: [ 430.280151][ T29] #0: ffffffff8cd20a70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 [ 430.290863][ T29] 1 lock held by rcu_tasks_trace/14: [ 430.296147][ T29] #0: ffffffff8cd21270 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 [ 430.307172][ T29] 1 lock held by khungtaskd/29: [ 430.312068][ T29] #0: ffffffff8cd208a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 430.321479][ T29] 2 locks held by getty/3286: [ 430.326162][ T29] #0: ffff888027a3f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 430.336097][ T29] #1: ffffc90002d232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6e8/0x1e50 [ 430.346402][ T29] 1 lock held by udevd/3683: [ 430.351083][ T29] #0: ffff88801f1184c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x730 [ 430.360847][ T29] 1 lock held by syz-executor.0/3737: [ 430.366303][ T29] #0: ffff88801f1184c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfd/0xa40 [ 430.376611][ T29] [ 430.379244][ T29] ============================================= [ 430.379244][ T29] [ 430.387670][ T29] NMI backtrace for cpu 1 [ 430.392069][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.0.0-rc7-syzkaller-00132-g987a926c1d8a #0 [ 430.401853][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 430.411992][ T29] Call Trace: [ 430.415348][ T29] [ 430.418357][ T29] dump_stack_lvl+0x1e3/0x2cb [ 430.423024][ T29] ? io_alloc_page_table+0x110/0x110 [ 430.428296][ T29] ? panic+0x76b/0x76b [ 430.432457][ T29] ? console_unlock+0x6bd/0x6f0 [ 430.437317][ T29] ? console_trylock_spinning+0x450/0x450 [ 430.443035][ T29] ? nmi_cpu_backtrace+0x248/0x4b0 [ 430.448157][ T29] nmi_cpu_backtrace+0x47c/0x4b0 [ 430.453091][ T29] ? vprintk_emit+0x109/0x1e0 [ 430.457765][ T29] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 430.463913][ T29] ? _printk+0xcf/0x10f [ 430.468066][ T29] ? panic+0x76b/0x76b [ 430.472128][ T29] ? __wake_up_klogd+0xcd/0x100 [ 430.476975][ T29] ? panic+0x76b/0x76b [ 430.481067][ T29] ? __rcu_read_unlock+0x8f/0x100 [ 430.486086][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 430.492295][ T29] nmi_trigger_cpumask_backtrace+0x169/0x280 [ 430.498358][ T29] watchdog+0xcd5/0xd20 [ 430.502584][ T29] kthread+0x266/0x300 [ 430.506869][ T29] ? hungtask_pm_notify+0x50/0x50 [ 430.511886][ T29] ? kthread_blkcg+0xd0/0xd0 [ 430.516594][ T29] ret_from_fork+0x1f/0x30 [ 430.521057][ T29] [ 430.524318][ T29] Sending NMI from CPU 1 to CPUs 0: [ 430.529575][ C0] NMI backtrace for cpu 0 [ 430.529586][ C0] CPU: 0 PID: 92 Comm: kworker/u4:4 Not tainted 6.0.0-rc7-syzkaller-00132-g987a926c1d8a #0 [ 430.529601][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 430.529609][ C0] Workqueue: bat_events batadv_nc_worker [ 430.529694][ C0] RIP: 0010:kasan_check_range+0x1ff/0x2e0 [ 430.529737][ C0] Code: d6 eb 03 4d 89 cf 49 8d 6e 07 4d 85 f6 49 0f 49 ee 48 83 e5 f8 49 29 ee 74 0f 90 41 80 3f 00 75 78 49 ff c7 49 ff ce 75 f2 5b <41> 5e 41 5f 5d c3 45 84 db 75 67 41 f7 c3 00 ff 00 00 0f 85 a2 00 [ 430.529748][ C0] RSP: 0018:ffffc900015d7908 EFLAGS: 00000056 [ 430.529759][ C0] RAX: 0000000000000001 RBX: 0000000000000028 RCX: ffffffff816962c6 [ 430.529768][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ffa3040 [ 430.529777][ C0] RBP: 000000000001ffff R08: dffffc0000000000 R09: fffffbfff1ff4609 [ 430.529786][ C0] R10: fffffbfff1ff4609 R11: 1ffffffff1ff4608 R12: 1ffff1100323d14d [ 430.529796][ C0] R13: 7b17a640ce69cc9d R14: 0000000000000001 R15: 0000000000004000 [ 430.5