Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. 2024/04/23 19:53:06 ignoring optional flag "sandboxArg"="0" 2024/04/23 19:53:07 parsed 1 programs 2024/04/23 19:53:07 executed programs: 0 [ 88.758142][ T5071] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.766879][ T5071] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.776046][ T5071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.785125][ T5071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.794165][ T5071] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.802004][ T5071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.934151][ T5422] chnl_net:caif_netlink_parms(): no params data found [ 88.993685][ T5422] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.001153][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.009144][ T5422] bridge_slave_0: entered allmulticast mode [ 89.016049][ T5422] bridge_slave_0: entered promiscuous mode [ 89.024886][ T5422] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.032655][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.040988][ T5422] bridge_slave_1: entered allmulticast mode [ 89.048247][ T5422] bridge_slave_1: entered promiscuous mode [ 89.073675][ T5422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.085565][ T5422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.116505][ T5422] team0: Port device team_slave_0 added [ 89.125956][ T5422] team0: Port device team_slave_1 added [ 89.151373][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.158788][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.186064][ T5422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.199590][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.206868][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.233526][ T5422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.273932][ T5422] hsr_slave_0: entered promiscuous mode [ 89.281676][ T5422] hsr_slave_1: entered promiscuous mode [ 89.880738][ T5422] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.892173][ T5422] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.904614][ T5422] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.916789][ T5422] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.034970][ T5422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.076750][ T5422] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.093799][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.106213][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.125075][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.133125][ T5083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.189670][ T5422] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.201248][ T5422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.386906][ T5422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.445486][ T5422] veth0_vlan: entered promiscuous mode [ 90.463427][ T5422] veth1_vlan: entered promiscuous mode [ 90.506851][ T5422] veth0_macvtap: entered promiscuous mode [ 90.521487][ T5422] veth1_macvtap: entered promiscuous mode [ 90.553338][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.574581][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.595003][ T5422] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.605373][ T5422] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.615464][ T5422] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.630056][ T5422] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.721923][ T5083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.740534][ T5083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.784130][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.792832][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.889423][ T4470] Bluetooth: hci0: command tx timeout [ 90.969932][ T5490] nbd0: detected capacity change from 0 to 126 [ 91.697523][ T5071] block nbd0: Receive control failed (result -104) [ 92.967753][ T5071] Bluetooth: hci0: command tx timeout [ 95.058095][ T5071] Bluetooth: hci0: command tx timeout [ 97.128567][ T5071] Bluetooth: hci0: command tx timeout [ 121.534056][ T25] block nbd0: Possible stuck request ffff8880202f8000: control (read@0,4096B). Runtime 30 seconds [ 133.689526][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.696147][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 2024/04/23 19:54:04 executed programs: 1 [ 146.880887][ T4470] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.889841][ T4470] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.898821][ T4470] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.907023][ T4470] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.915065][ T4470] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.923154][ T4470] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.044374][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 147.098927][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.106490][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.113970][ T5784] bridge_slave_0: entered allmulticast mode [ 147.120785][ T5784] bridge_slave_0: entered promiscuous mode [ 147.129259][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.136771][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.144543][ T5784] bridge_slave_1: entered allmulticast mode [ 147.152051][ T5784] bridge_slave_1: entered promiscuous mode [ 147.181954][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.193645][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.225147][ T5784] team0: Port device team_slave_0 added [ 147.233428][ T5784] team0: Port device team_slave_1 added [ 147.258923][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.266003][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.292632][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.306594][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.314096][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.342598][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.380190][ T5784] hsr_slave_0: entered promiscuous mode [ 147.386920][ T5784] hsr_slave_1: entered promiscuous mode [ 147.393805][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.402014][ T5784] Cannot create hsr debugfs directory [ 147.494876][ T5784] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.571273][ T5784] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.664662][ T5784] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.728863][ T5784] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.893980][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 147.904126][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 147.913903][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 147.924100][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 147.950024][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.957638][ T5784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.965393][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.972784][ T5784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.027639][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.043620][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.051538][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.068362][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.082995][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.090138][ T5082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.103274][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.110522][ T5458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.252674][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.293822][ T5784] veth0_vlan: entered promiscuous mode [ 148.306457][ T5784] veth1_vlan: entered promiscuous mode [ 148.334776][ T5784] veth0_macvtap: entered promiscuous mode [ 148.345576][ T5784] veth1_macvtap: entered promiscuous mode [ 148.361383][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.372643][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.384629][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.398499][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.412346][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.423854][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.436294][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.445957][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.455317][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.464636][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.531131][ T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.540297][ T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.564156][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.573183][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.973471][ T4470] Bluetooth: hci1: command tx timeout [ 151.047890][ T4470] Bluetooth: hci1: command tx timeout [ 151.611380][ T25] block nbd0: Possible stuck request ffff8880202f8000: control (read@0,4096B). Runtime 60 seconds [ 151.628056][ T4525] udevd[4525]: worker [5408] /devices/virtual/block/nbd0 is taking a long time [ 153.137832][ T4470] Bluetooth: hci1: command tx timeout [ 155.207918][ T4470] Bluetooth: hci1: command tx timeout [ 181.688908][ T25] block nbd0: Possible stuck request ffff8880202f8000: control (read@0,4096B). Runtime 90 seconds [ 195.130374][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.136994][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 2024/04/23 19:55:02 executed programs: 2 [ 204.653648][ T5071] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.661927][ T5071] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.670309][ T5071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.680392][ T5071] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.688904][ T5071] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 204.696431][ T5071] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.837446][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 204.895946][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.903639][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.911215][ T5801] bridge_slave_0: entered allmulticast mode [ 204.919494][ T5801] bridge_slave_0: entered promiscuous mode [ 204.929083][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.936423][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.943878][ T5801] bridge_slave_1: entered allmulticast mode [ 204.951144][ T5801] bridge_slave_1: entered promiscuous mode [ 204.978467][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.990132][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.020738][ T5801] team0: Port device team_slave_0 added [ 205.030040][ T5801] team0: Port device team_slave_1 added [ 205.054910][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.062307][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.089530][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.101817][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.109196][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.138801][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.177817][ T5801] hsr_slave_0: entered promiscuous mode [ 205.186109][ T5801] hsr_slave_1: entered promiscuous mode [ 205.193674][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.201792][ T5801] Cannot create hsr debugfs directory [ 205.301160][ T5801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.391967][ T5801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.468379][ T5801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.540924][ T5801] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.657973][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.668991][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.679752][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.691455][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.718859][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.726100][ T5801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.734297][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.742195][ T5801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.802406][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.820368][ T5083] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.829636][ T5083] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.845847][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.866430][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.873823][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.884412][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.891733][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.934040][ T5801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.060370][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.099240][ T5801] veth0_vlan: entered promiscuous mode [ 206.116504][ T5801] veth1_vlan: entered promiscuous mode [ 206.146559][ T5801] veth0_macvtap: entered promiscuous mode [ 206.157397][ T5801] veth1_macvtap: entered promiscuous mode [ 206.177364][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.188731][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.200779][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.211536][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.224051][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.240020][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.252881][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.263303][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.274612][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.286232][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.302142][ T5801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.311223][ T5801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.320376][ T5801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.329334][ T5801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.392899][ T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.403576][ T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.427487][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.436167][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.727988][ T4470] Bluetooth: hci2: command tx timeout [ 208.807754][ T4470] Bluetooth: hci2: command tx timeout [ 210.887732][ T4470] Bluetooth: hci2: command tx timeout [ 211.769941][ T25] block nbd0: Possible stuck request ffff8880202f8000: control (read@0,4096B). Runtime 120 seconds [ 212.568393][ T4470] Bluetooth: hci0: command 0x0406 tx timeout [ 212.967997][ T5071] Bluetooth: hci2: command tx timeout [ 241.850666][ T25] block nbd0: Possible stuck request ffff8880202f8000: control (read@0,4096B). Runtime 150 seconds [ 243.767967][ T30] INFO: task syz-executor.0:5486 blocked for more than 143 seconds. [ 243.776874][ T30] Not tainted 6.9.0-rc5-syzkaller-00036-g9d1ddab261f3 #0 [ 243.784663][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 243.793781][ T30] task:syz-executor.0 state:D stack:24664 pid:5486 tgid:5486 ppid:5422 flags:0x00000006 [ 243.804305][ T30] Call Trace: [ 243.807668][ T30] [ 243.810598][ T30] __schedule+0x1796/0x4a00 [ 243.815264][ T30] ? __pfx___schedule+0x10/0x10 [ 243.820399][ T30] ? __pfx_lock_release+0x10/0x10 [ 243.826536][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 243.832641][ T30] ? schedule+0x90/0x320 [ 243.837602][ T30] schedule+0x14b/0x320 [ 243.841817][ T30] schedule_preempt_disabled+0x13/0x30 [ 243.848679][ T30] __mutex_lock+0x6a4/0xd70 [ 243.853609][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 243.859067][ T30] ? __mutex_lock+0x527/0xd70 [ 243.863798][ T30] ? bdev_release+0x1c8/0x720 [ 243.869123][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 243.874198][ T30] ? __fsnotify_parent+0x20c/0x5e0 [ 243.879674][ T30] bdev_release+0x1c8/0x720 [ 243.884407][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 243.889767][ T30] blkdev_release+0x15/0x20 [ 243.894379][ T30] __fput+0x429/0x8a0 [ 243.898495][ T30] __x64_sys_close+0x7f/0x110 [ 243.903205][ T30] do_syscall_64+0xf5/0x240 [ 243.907990][ T30] ? clear_bhb_loop+0x35/0x90 [ 243.912745][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.919362][ T30] RIP: 0033:0x7fe3b927b89a [ 243.924032][ T30] RSP: 002b:00007fff186dc100 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 243.933821][ T30] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fe3b927b89a [ 243.942062][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 243.950452][ T30] RBP: 00007fe3b939d980 R08: 0000001b2e960000 R09: 00007fe3b9f400b0 [ 243.958665][ T30] R10: 00007fe3b9f40080 R11: 0000000000000293 R12: 0000000000016603 [ 243.966725][ T30] R13: ffffffffffffffff R14: 00007fe3b8e00000 R15: 00000000000162c2 [ 243.974872][ T30] [ 243.978019][ T30] INFO: task syz-executor.0:5488 blocked for more than 143 seconds. [ 243.986009][ T30] Not tainted 6.9.0-rc5-syzkaller-00036-g9d1ddab261f3 #0 [ 243.993888][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.002732][ T30] task:syz-executor.0 state:D stack:25584 pid:5488 tgid:5486 ppid:5422 flags:0x00004006 [ 244.014614][ T30] Call Trace: [ 244.018299][ T30] [ 244.021352][ T30] __schedule+0x1796/0x4a00 [ 244.026111][ T30] ? __pfx___schedule+0x10/0x10 [ 244.031919][ T30] ? __pfx_lock_release+0x10/0x10 [ 244.036977][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 244.043077][ T30] ? schedule+0x90/0x320 [ 244.047359][ T30] schedule+0x14b/0x320 [ 244.051670][ T30] schedule_preempt_disabled+0x13/0x30 [ 244.057254][ T30] __mutex_lock+0x6a4/0xd70 [ 244.061917][ T30] ? __mutex_lock+0x527/0xd70 [ 244.066780][ T30] ? bdev_release+0x1c8/0x720 [ 244.071510][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 244.076751][ T30] ? __fsnotify_parent+0x20c/0x5e0 [ 244.082156][ T30] ? __pfx___fsnotify_parent+0x10/0x10 [ 244.087838][ T30] bdev_release+0x1c8/0x720 [ 244.092639][ T30] ? __pfx_blkdev_release+0x10/0x10 [ 244.098451][ T30] blkdev_release+0x15/0x20 [ 244.103336][ T30] __fput+0x429/0x8a0 [ 244.108307][ T30] task_work_run+0x24f/0x310 [ 244.113315][ T30] ? __pfx_task_work_run+0x10/0x10 [ 244.119054][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 244.125285][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 244.131563][ T30] do_syscall_64+0x102/0x240 [ 244.137143][ T30] ? clear_bhb_loop+0x35/0x90 [ 244.142209][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.148471][ T30] RIP: 0033:0x7fe3b927c899 [ 244.152929][ T30] RSP: 002b:00007fe3b9f3f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.161631][ T30] RAX: 0000000000000000 RBX: 00007fe3b939bf80 RCX: 00007fe3b927c899 [ 244.170084][ T30] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 244.178764][ T30] RBP: 00007fe3b92d8ad0 R08: 0000000000000000 R09: 0000000000000000 [ 244.187349][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.195739][ T30] R13: 000000000000000b R14: 00007fe3b939bf80 R15: 00007fff186dc038 [ 244.203870][ T30] [ 244.218588][ T30] [ 244.218588][ T30] Showing all locks held in the system: [ 244.226800][ T30] 1 lock held by khungtaskd/30: [ 244.232212][ T30] #0: ffffffff8e334d20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 244.242855][ T30] 5 locks held by kworker/u8:3/50: [ 244.248273][ T30] #0: ffff8880b953e658 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 244.258827][ T30] #1: ffff8880b9528948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 244.270648][ T30] #2: ffff888072138768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260 [ 244.280937][ T30] #3: ffffffff8e334d20 (rcu_read_lock){....}-{1:2}, at: ieee80211_sta_active_ibss+0xc7/0x330 [ 244.291877][ T30] #4: ffffffff949be418 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x234/0x580 [ 244.302947][ T30] 2 locks held by getty/4821: [ 244.308278][ T30] #0: ffff88802ac3b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 244.319716][ T30] #1: ffffc900031432f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 244.330065][ T30] 1 lock held by udevd/5408: [ 244.334704][ T30] #0: ffff8880202114c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xdd/0xcb0 [ 244.345108][ T30] 1 lock held by syz-executor.0/5486: [ 244.350902][ T30] #0: ffff8880202114c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x1c8/0x720 [ 244.361018][ T30] 1 lock held by syz-executor.0/5488: [ 244.366677][ T30] #0: ffff8880202114c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x1c8/0x720 [ 244.377021][ T30] 1 lock held by syz-executor.0/5797: [ 244.382749][ T30] #0: ffff8880202114c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xdd/0xcb0 [ 244.392491][ T30] 1 lock held by syz-executor.0/5798: [ 244.398106][ T30] #0: ffff8880202114c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xdd/0xcb0 [ 244.407868][ T30] 1 lock held by syz-executor.0/5814: [ 244.413433][ T30] #0: ffff8880202114c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xdd/0xcb0 [ 244.423533][ T30] 1 lock held by syz-executor.0/5815: [ 244.429118][ T30] #0: ffff8880202114c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xdd/0xcb0 [ 244.438798][ T30] [ 244.441897][ T30] ============================================= [ 244.441897][ T30] [ 244.450676][ T30] NMI backtrace for cpu 0 [ 244.455651][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.9.0-rc5-syzkaller-00036-g9d1ddab261f3 #0 [ 244.465485][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 244.475931][ T30] Call Trace: [ 244.479392][ T30] [ 244.482411][ T30] dump_stack_lvl+0x241/0x360 [ 244.487192][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.492408][ T30] ? __pfx__printk+0x10/0x10 [ 244.497411][ T30] ? vprintk_emit+0x631/0x770 [ 244.502219][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 244.507559][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 244.512685][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 244.518253][ T30] ? _printk+0xd5/0x120 [ 244.522477][ T30] ? __pfx__printk+0x10/0x10 [ 244.527636][ T30] ? __wake_up_klogd+0xcc/0x110 [ 244.532656][ T30] ? __pfx__printk+0x10/0x10 [ 244.537542][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 244.542781][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 244.549718][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 244.555916][ T30] watchdog+0xfde/0x1020 [ 244.560424][ T30] ? watchdog+0x1ea/0x1020 [ 244.565172][ T30] ? __pfx_watchdog+0x10/0x10 [ 244.570383][ T30] kthread+0x2f0/0x390 [ 244.574606][ T30] ? __pfx_watchdog+0x10/0x10 [ 244.579574][ T30] ? __pfx_kthread+0x10/0x10 [ 244.584433][ T30] ret_from_fork+0x4b/0x80 [ 244.589123][ T30] ? __pfx_kthread+0x10/0x10 [ 244.593841][ T30] ret_from_fork_asm+0x1a/0x30 [ 244.598819][ T30] [ 244.602852][ T30] Sending NMI from CPU 0 to CPUs 1: [ 244.609103][ C1] NMI backtrace for cpu 1 [ 244.609120][ C1] CPU: 1 PID: 50 Comm: kworker/u8:3 Not tainted 6.9.0-rc5-syzkaller-00036-g9d1ddab261f3 #0 [ 244.609138][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 244.609148][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 244.609174][ C1] RIP: 0010:unwind_next_frame+0x502/0x2a00 [ 244.609201][ C1] Code: e8 3f 48 01 c8 48 83 e0 fe 49 8d 5c 45 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 34 48 63 2b <48> 01 dd 48 89 ef 4c 89 f6 e8 50 be 54 00 48 8d 43 04 4c 39 f5 4c [ 244.609213][ C1] RSP: 0018:ffffc90000ba66a8 EFLAGS: 00000246 [ 244.609226][ C1] RAX: 0000000000000000 RBX: ffffffff8fb4bf04 RCX: dffffc0000000000 [ 244.609238][ C1] RDX: 0000000000000000 RSI: ffffffff810056f9 RDI: ffffffff8100567a [ 244.609248][ C1] RBP: fffffffff14b97c4 R08: ffffffff81414480 R09: ffffc90000ba6870 [ 244.609260][ C1] R10: 0000000000000003 R11: ffffffff8181dfb0 R12: ffffffff8fb4bf28 [ 244.609293][ C1] R13: ffffffff8fb4bee4 R14: ffffffff810056f9 R15: ffffffff8fb4bee0 [ 244.609305][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 244.609318][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.609329][ C1] CR2: 00007f1877c8d580 CR3: 000000007b2e8000 CR4: 00000000003506f0 [ 244.609344][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.609353][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.609363][ C1] Call Trace: [ 244.609369][ C1] [ 244.609376][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 244.609394][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 244.609413][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 244.609429][ C1] ? nmi_handle+0x2a/0x5a0 [ 244.609479][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 244.609498][ C1] ? nmi_handle+0x14f/0x5a0 [ 244.609513][ C1] ? nmi_handle+0x2a/0x5a0 [ 244.609529][ C1] ? unwind_next_frame+0x502/0x2a00 [ 244.609549][ C1] ? default_do_nmi+0x63/0x160 [ 244.609567][ C1] ? exc_nmi+0x123/0x1f0 [ 244.609583][ C1] ? end_repeat_nmi+0xf/0x53 [ 244.609601][ C1] ? ret_from_fork_asm+0x19/0x30 [ 244.609623][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 244.609651][ C1] ? unwind_next_frame+0x510/0x2a00 [ 244.609671][ C1] ? ret_from_fork_asm+0x19/0x30 [ 244.609689][ C1] ? __switch_to_asm+0xa/0x70 [ 244.609708][ C1] ? unwind_next_frame+0x502/0x2a00 [ 244.609737][ C1] ? unwind_next_frame+0x502/0x2a00 [ 244.609758][ C1] ? unwind_next_frame+0x502/0x2a00 [ 244.609779][ C1] [ 244.609784][ C1] [ 244.609792][ C1] ? ret_from_fork_asm+0x19/0x30 [ 244.609812][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 244.609830][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 244.609849][ C1] ? __kernel_text_address+0xd/0x40 [ 244.609869][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 244.609893][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 244.609914][ C1] arch_stack_walk+0x151/0x1b0 [ 244.609937][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 244.609959][ C1] stack_trace_save+0x118/0x1d0 [ 244.609978][ C1] ? mark_lock+0x9a/0x350 [ 244.609995][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 244.610020][ C1] ? ieee802_11_parse_elems_full+0xd5/0x2870 [ 244.610091][ C1] kasan_save_track+0x3f/0x80 [ 244.610109][ C1] ? kasan_save_track+0x3f/0x80 [ 244.610124][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 244.610140][ C1] ? __kmalloc+0x233/0x4a0 [ 244.610169][ C1] ? ieee802_11_parse_elems_full+0xd5/0x2870 [ 244.610183][ C1] ? ieee80211_inform_bss+0x15f/0x1080 [ 244.610236][ C1] ? cfg80211_inform_single_bss_data+0x1005/0x22e0 [ 244.610318][ C1] ? cfg80211_inform_bss_data+0x3e3/0x57d0 [ 244.610336][ C1] ? cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 244.610354][ C1] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 244.610373][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 244.610394][ C1] ? ieee80211_iface_work+0x8a3/0xf10 [ 244.610407][ C1] ? cfg80211_wiphy_work+0x221/0x260 [ 244.610420][ C1] ? process_scheduled_works+0xa10/0x17c0 [ 244.610435][ C1] ? worker_thread+0x86d/0xd70 [ 244.610449][ C1] ? kthread+0x2f0/0x390 [ 244.610466][ C1] ? ret_from_fork+0x4b/0x80 [ 244.610486][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 244.610525][ C1] __kasan_kmalloc+0x98/0xb0 [ 244.610544][ C1] __kmalloc+0x233/0x4a0 [ 244.610564][ C1] ? ieee802_11_parse_elems_full+0xd5/0x2870 [ 244.610581][ C1] ieee802_11_parse_elems_full+0xd5/0x2870 [ 244.610598][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.610617][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 244.610639][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 244.610658][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 244.610678][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 244.610703][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 244.610717][ C1] ? kvfree_call_rcu+0x48c/0x790 [ 244.610737][ C1] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 244.610759][ C1] ? cfg80211_update_known_bss+0xb95/0x1500 [ 244.610788][ C1] ieee80211_inform_bss+0x15f/0x1080 [ 244.610810][ C1] ? __cfg80211_bss_update+0x1a8f/0x20c0 [ 244.610830][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 244.610855][ C1] ? cfg80211_inform_single_bss_data+0xeb2/0x22e0 [ 244.610873][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 244.610894][ C1] cfg80211_inform_single_bss_data+0x1005/0x22e0 [ 244.610920][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 244.610948][ C1] ? arch_stack_walk+0x17b/0x1b0 [ 244.610964][ C1] ? cfg80211_inform_bss_data+0x3cb/0x57d0 [ 244.610985][ C1] cfg80211_inform_bss_data+0x3e3/0x57d0 [ 244.611014][ C1] ? __pfx_validate_chain+0x10/0x10 [ 244.611045][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 244.611068][ C1] ? mark_lock+0x9a/0x350 [ 244.611086][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 244.611118][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 244.611134][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 244.611156][ C1] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 244.611180][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 244.611202][ C1] ieee80211_bss_info_update+0x8a7/0xbc0 [ 244.611225][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 244.611245][ C1] ? __pfx_lock_release+0x10/0x10 [ 244.611277][ C1] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 244.611306][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 244.611326][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 244.611351][ C1] ? mark_lock+0x9a/0x350 [ 244.611369][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 244.611386][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.611402][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 244.611430][ C1] ieee80211_iface_work+0x8a3/0xf10 [ 244.611449][ C1] cfg80211_wiphy_work+0x221/0x260 [ 244.611464][ C1] ? process_scheduled_works+0x91b/0x17c0 [ 244.611480][ C1] process_scheduled_works+0xa10/0x17c0 [ 244.611510][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 244.611530][ C1] ? assign_work+0x364/0x3d0 [ 244.611548][ C1] worker_thread+0x86d/0xd70 [ 244.611571][ C1] ? __kthread_parkme+0x169/0x1d0 [ 244.611589][ C1] ? __pfx_worker_thread+0x10/0x10 [ 244.611605][ C1] kthread+0x2f0/0x390 [ 244.611621][ C1] ? __pfx_worker_thread+0x10/0x10 [ 244.611647][ C1] ? __pfx_kthread+0x10/0x10 [ 244.611664][ C1] ret_from_fork+0x4b/0x80 [ 244.611865][ C1] ? __pfx_kthread+0x10/0x10 [ 244.611894][ C1] ret_from_fork_asm+0x1a/0x30 [ 244.611922][ C1] [ 244.612114][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 245.366107][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.9.0-rc5-syzkaller-00036-g9d1ddab261f3 #0 [ 245.376554][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 245.387944][ T30] Call Trace: [ 245.391677][ T30] [ 245.394886][ T30] dump_stack_lvl+0x241/0x360 [ 245.399769][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.405239][ T30] ? __pfx__printk+0x10/0x10 [ 245.410222][ T30] ? vscnprintf+0x5d/0x90 [ 245.415623][ T30] panic+0x349/0x860 [ 245.421410][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 245.428261][ T30] ? __pfx_panic+0x10/0x10 [ 245.433549][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 245.439733][ T30] ? __irq_work_queue_local+0x137/0x410 [ 245.445312][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 245.450775][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 245.457025][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 245.463273][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 245.469790][ T30] watchdog+0x101d/0x1020 [ 245.474322][ T30] ? watchdog+0x1ea/0x1020 [ 245.479280][ T30] ? __pfx_watchdog+0x10/0x10 [ 245.484335][ T30] kthread+0x2f0/0x390 [ 245.488692][ T30] ? __pfx_watchdog+0x10/0x10 [ 245.493575][ T30] ? __pfx_kthread+0x10/0x10 [ 245.498168][ T30] ret_from_fork+0x4b/0x80 [ 245.502587][ T30] ? __pfx_kthread+0x10/0x10 [ 245.507515][ T30] ret_from_fork_asm+0x1a/0x30 [ 245.513311][ T30] [ 245.517395][ T30] Kernel Offset: disabled [ 245.521942][ T30] Rebooting in 86400 seconds..