[ 53.993214][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.004360][ T32] veth1_macvtap: left promiscuous mode [ 54.010108][ T32] veth0_macvtap: left promiscuous mode [ 54.015723][ T32] veth1_vlan: left promiscuous mode [ 54.021118][ T32] veth0_vlan: left promiscuous mode [ 54.133335][ T32] team0 (unregistering): Port device team_slave_1 removed [ 54.149860][ T32] team0 (unregistering): Port device team_slave_0 removed [ 54.160483][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.172521][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.216592][ T32] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.24' (ECDSA) to the list of known hosts. 2023/04/02 09:43:06 ignoring optional flag "sandboxArg"="0" 2023/04/02 09:43:06 parsed 1 programs 2023/04/02 09:43:06 executed programs: 0 [ 68.133424][ T26] audit: type=1400 audit(1680428586.238:188): avc: denied { mounton } for pid=5499 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 68.177466][ T26] audit: type=1400 audit(1680428586.238:189): avc: denied { mount } for pid=5499 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 68.193180][ T4389] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.206082][ T26] audit: type=1400 audit(1680428586.248:190): avc: denied { create } for pid=5499 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.225271][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.232513][ T26] audit: type=1400 audit(1680428586.248:191): avc: denied { write } for pid=5499 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.259251][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.267039][ T26] audit: type=1400 audit(1680428586.248:192): avc: denied { read } for pid=5499 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.267308][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.287907][ T26] audit: type=1400 audit(1680428586.278:193): avc: denied { read } for pid=4645 comm="dhcpcd" name="n79" dev="tmpfs" ino=1556 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.295460][ T4389] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.316340][ T26] audit: type=1400 audit(1680428586.278:194): avc: denied { open } for pid=4645 comm="dhcpcd" path="/run/udev/data/n79" dev="tmpfs" ino=1556 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.353268][ T26] audit: type=1400 audit(1680428586.278:195): avc: denied { getattr } for pid=4645 comm="dhcpcd" path="/run/udev/data/n79" dev="tmpfs" ino=1556 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.378295][ T26] audit: type=1400 audit(1680428586.288:196): avc: denied { create } for pid=5505 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.398980][ T26] audit: type=1400 audit(1680428586.288:197): avc: denied { ioctl } for pid=5505 comm="syz-executor.0" path="socket:[30289]" dev="sockfs" ino=30289 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.435870][ T5505] chnl_net:caif_netlink_parms(): no params data found [ 68.469607][ T5505] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.476789][ T5505] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.484221][ T5505] bridge_slave_0: entered allmulticast mode [ 68.491230][ T5505] bridge_slave_0: entered promiscuous mode [ 68.499269][ T5505] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.506996][ T5505] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.514320][ T5505] bridge_slave_1: entered allmulticast mode [ 68.521605][ T5505] bridge_slave_1: entered promiscuous mode [ 68.538891][ T5505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.549440][ T5505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.570497][ T5505] team0: Port device team_slave_0 added [ 68.577444][ T5505] team0: Port device team_slave_1 added [ 68.592266][ T5505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.599378][ T5505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.626649][ T5505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.639428][ T5505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.646476][ T5505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.672473][ T5505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.698103][ T5505] hsr_slave_0: entered promiscuous mode [ 68.704142][ T5505] hsr_slave_1: entered promiscuous mode [ 69.285592][ T5505] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.295036][ T5505] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.306792][ T5505] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.316407][ T5505] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.337727][ T5505] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.344838][ T5505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.352239][ T5505] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.359369][ T5505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.409578][ T5505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.423704][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.435747][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.443486][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.454201][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 69.468768][ T5505] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.492785][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.502106][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.513254][ T4394] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.520452][ T4394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.536811][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.548064][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.556952][ T4394] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.564033][ T4394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.572582][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.585333][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.604409][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.613424][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.623483][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.632614][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.642830][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.651865][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.664058][ T5505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.676598][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.684532][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.694172][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.703291][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.840219][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.848524][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.861310][ T5505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.880087][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.891275][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.909977][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.919867][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.930274][ T5505] veth0_vlan: entered promiscuous mode [ 69.942349][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.951006][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.965351][ T5505] veth1_vlan: entered promiscuous mode [ 69.986558][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.997120][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.006362][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.015025][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.026546][ T5505] veth0_macvtap: entered promiscuous mode [ 70.034865][ T5505] veth1_macvtap: entered promiscuous mode [ 70.060204][ T5505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.067823][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.078045][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.086591][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.095414][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.108185][ T5505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.116380][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.126912][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.138061][ T5505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.149019][ T5505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.158444][ T5505] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.168963][ T5505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.237807][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.255378][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.267939][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.278137][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.290475][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.302532][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.366094][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 71.318307][ T6] cfg80211: failed to load regulatory.db [ 72.435269][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 74.515181][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 76.595292][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 127.636310][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.642815][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.076903][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.083266][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.155157][ T5070] Bluetooth: hci0: command 0x0406 tx timeout [ 230.035197][ T27] INFO: task syz-executor.0:5505 blocked for more than 143 seconds. [ 230.043358][ T27] Not tainted 6.3.0-rc4-syzkaller #0 [ 230.056088][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 230.065199][ T27] task:syz-executor.0 state:D stack:23920 pid:5505 ppid:1 flags:0x00000004 [ 230.074412][ T27] Call Trace: [ 230.078823][ T27] [ 230.081762][ T27] __schedule+0xc01/0x56c0 [ 230.086218][ T27] ? io_schedule_timeout+0x150/0x150 [ 230.091481][ T27] ? __down_read_common+0x308/0xf30 [ 230.096989][ T27] schedule+0xde/0x1a0 [ 230.101062][ T27] schedule_preempt_disabled+0x13/0x20 [ 230.106941][ T27] __down_read_common+0x7df/0xf30 [ 230.112002][ T27] ? _down_write_nest_lock+0x200/0x200 [ 230.118558][ T27] ? lock_release+0x670/0x670 [ 230.123443][ T27] ? _raw_spin_unlock+0x28/0x40 [ 230.128549][ T27] walk_component+0x296/0x4e0 [ 230.133227][ T27] link_path_walk.part.0+0x568/0xac0 [ 230.139653][ T27] ? walk_component+0x4e0/0x4e0 [ 230.144596][ T27] ? lockdep_hardirqs_on+0x7d/0x100 [ 230.150036][ T27] path_openat+0x1f8/0x2280 [ 230.154524][ T27] ? path_lookupat+0x750/0x750 [ 230.160035][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 230.166281][ T27] ? find_held_lock+0x2d/0x110 [ 230.171074][ T27] do_filp_open+0x1a9/0x3e0 [ 230.175904][ T27] ? may_open_dev+0xd0/0xd0 [ 230.180400][ T27] ? find_held_lock+0x2d/0x110 [ 230.185349][ T27] ? do_raw_spin_lock+0x124/0x2b0 [ 230.190354][ T27] ? spin_bug+0x1c0/0x1c0 [ 230.194655][ T27] ? _raw_spin_unlock+0x28/0x40 [ 230.199745][ T27] ? alloc_fd+0x1e4/0x640 [ 230.204145][ T27] ? getname_flags.part.0+0x89/0x440 [ 230.209873][ T27] do_sys_openat2+0x11e/0x3f0 [ 230.214712][ T27] ? hrtimer_init_sleeper_on_stack+0x90/0x90 [ 230.220960][ T27] ? build_open_flags+0x490/0x490 [ 230.226226][ T27] ? xfd_validate_state+0x23/0x120 [ 230.231335][ T27] __x64_sys_openat+0x11f/0x1d0 [ 230.236496][ T27] ? __ia32_sys_open+0x1a0/0x1a0 [ 230.241414][ T27] ? syscall_enter_from_user_mode+0x26/0x80 [ 230.247485][ T27] ? lockdep_hardirqs_on+0x7d/0x100 [ 230.252751][ T27] do_syscall_64+0x39/0xb0 [ 230.258147][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 230.264024][ T27] RIP: 0033:0x7f8267a8bc48 [ 230.268713][ T27] RSP: 002b:00007ffe0fe3f2c0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 230.277337][ T27] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8267a8bc48 [ 230.285506][ T27] RDX: 0000000000090800 RSI: 00007f8267ae6bc8 RDI: 00000000ffffff9c [ 230.293583][ T27] RBP: 00007ffe0fe3f38c R08: 0000000000090800 R09: 00007f8267ae6bc8 [ 230.301806][ T27] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 [ 230.309954][ T27] R13: 0000000000010f59 R14: 0000000000000009 R15: 00007ffe0fe3f3f0 [ 230.318177][ T27] [ 230.321213][ T27] INFO: task syz-executor.0:5595 blocked for more than 143 seconds. [ 230.329531][ T27] Not tainted 6.3.0-rc4-syzkaller #0 [ 230.335886][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 230.344553][ T27] task:syz-executor.0 state:D stack:26656 pid:5595 ppid:5505 flags:0x00004004 [ 230.354023][ T27] Call Trace: [ 230.357533][ T27] [ 230.360460][ T27] __schedule+0xc01/0x56c0 [ 230.364875][ T27] ? io_schedule_timeout+0x150/0x150 [ 230.370333][ T27] ? mark_held_locks+0x9f/0xe0 [ 230.375259][ T27] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 230.381134][ T27] ? lockdep_hardirqs_on+0x7d/0x100 [ 230.386340][ T27] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 230.392325][ T27] schedule+0xde/0x1a0 [ 230.396500][ T27] request_wait_answer+0x371/0x6b0 [ 230.401665][ T27] ? queue_interrupt+0x470/0x470 [ 230.406615][ T27] ? lock_downgrade+0x690/0x690 [ 230.411457][ T27] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 230.417290][ T27] ? spin_bug+0x1c0/0x1c0 [ 230.421702][ T27] fuse_simple_request+0x480/0xba0 [ 230.426829][ T27] ? kasan_set_track+0x25/0x30 [ 230.431588][ T27] fuse_lookup_name+0x259/0x5e0 [ 230.436520][ T27] ? fuse_create+0x20/0x20 [ 230.440928][ T27] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 230.446498][ T27] ? __d_lookup_rcu+0x2cd/0x3d0 [ 230.451339][ T27] fuse_lookup.part.0+0xd6/0x2c0 [ 230.456418][ T27] ? fuse_lookup_name+0x5e0/0x5e0 [ 230.461445][ T27] __lookup_slow+0x200/0x3f0 [ 230.466136][ T27] ? __lookup_hash+0x140/0x140 [ 230.471165][ T27] ? lock_release+0x670/0x670 [ 230.476008][ T27] ? _raw_spin_unlock+0x28/0x40 [ 230.480848][ T27] walk_component+0x2a3/0x4e0 [ 230.485564][ T27] link_path_walk.part.0+0x568/0xac0 [ 230.490846][ T27] ? walk_component+0x4e0/0x4e0 [ 230.495723][ T27] ? lockdep_hardirqs_on+0x7d/0x100 [ 230.500915][ T27] path_openat+0x1f8/0x2280 [ 230.505449][ T27] ? path_lookupat+0x750/0x750 [ 230.510296][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 230.516380][ T27] ? find_held_lock+0x2d/0x110 [ 230.521174][ T27] do_filp_open+0x1a9/0x3e0 [ 230.525686][ T27] ? may_open_dev+0xd0/0xd0 [ 230.530348][ T27] ? find_held_lock+0x2d/0x110 [ 230.535149][ T27] ? do_raw_spin_lock+0x124/0x2b0 [ 230.540174][ T27] ? spin_bug+0x1c0/0x1c0 [ 230.544560][ T27] ? _raw_spin_unlock+0x28/0x40 [ 230.549513][ T27] ? alloc_fd+0x1e4/0x640 [ 230.553835][ T27] ? getname_flags.part.0+0x89/0x440 [ 230.559140][ T27] do_sys_openat2+0x11e/0x3f0 [ 230.563804][ T27] ? build_open_flags+0x490/0x490 [ 230.568860][ T27] ? xfd_validate_state+0x23/0x120 [ 230.573965][ T27] __x64_sys_openat+0x11f/0x1d0 [ 230.578968][ T27] ? do_futex+0x230/0x230 [ 230.583316][ T27] ? __ia32_sys_open+0x1a0/0x1a0 [ 230.588277][ T27] ? syscall_enter_from_user_mode+0x26/0x80 [ 230.594174][ T27] ? lockdep_hardirqs_on+0x7d/0x100 [ 230.599843][ T27] do_syscall_64+0x39/0xb0 [ 230.604256][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 230.610702][ T27] RIP: 0033:0x7f8267a8c0d9 [ 230.615135][ T27] RSP: 002b:00007f8268832168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 230.623531][ T27] RAX: ffffffffffffffda RBX: 00007f8267babf80 RCX: 00007f8267a8c0d9 [ 230.631571][ T27] RDX: 0000000000000042 RSI: 0000000020002080 RDI: ffffffffffffff9c [ 230.639559][ T27] RBP: 00007f8267ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 230.647586][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.655683][ T27] R13: 00007ffe0fe3f0cf R14: 00007f8268832300 R15: 0000000000022000 [ 230.663773][ T27] [ 230.666856][ T27] INFO: task syz-executor.0:5602 blocked for more than 143 seconds. [ 230.675340][ T27] Not tainted 6.3.0-rc4-syzkaller #0 [ 230.681246][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 230.690163][ T27] task:syz-executor.0 state:D stack:28408 pid:5602 ppid:5505 flags:0x00000004 [ 230.699433][ T27] Call Trace: [ 230.702788][ T27] [ 230.705749][ T27] __schedule+0xc01/0x56c0 [ 230.710292][ T27] ? io_schedule_timeout+0x150/0x150 [ 230.715718][ T27] ? rwsem_down_write_slowpath+0x3b8/0x1220 [ 230.721697][ T27] schedule+0xde/0x1a0 [ 230.725906][ T27] schedule_preempt_disabled+0x13/0x20 [ 230.731365][ T27] rwsem_down_write_slowpath+0x3e2/0x1220 [ 230.737345][ T27] ? down_timeout+0x90/0x90 [ 230.741928][ T27] ? lock_release+0x670/0x670 [ 230.746634][ T27] ? fuse_init_file_inode+0x1e0/0x1e0 [ 230.752360][ T27] down_write_nested+0x1d6/0x200 [ 230.757436][ T27] ? up_read+0x20/0x20 [ 230.761491][ T27] fuse_reverse_inval_entry+0x42/0x4a0 [ 230.766974][ T27] fuse_dev_do_write+0x1dde/0x2580 [ 230.772072][ T27] ? print_usage_bug.part.0+0x660/0x660 [ 230.777763][ T27] ? io_schedule_timeout+0x150/0x150 [ 230.783146][ T27] ? fuse_dev_splice_read+0x580/0x580 [ 230.788691][ T27] ? try_to_wake_up+0xceb/0x1c40 [ 230.793706][ T27] ? preempt_schedule_thunk+0x1a/0x20 [ 230.799114][ T27] ? __lock_acquire+0xbc5/0x5d40 [ 230.804215][ T27] ? sched_core_balance+0xee0/0xee0 [ 230.809449][ T27] fuse_dev_write+0x133/0x1c0 [ 230.814119][ T27] ? fuse_dev_splice_write+0xa60/0xa60 [ 230.819607][ T27] vfs_write+0x823/0xd80 [ 230.823848][ T27] ? kernel_write+0x5d0/0x5d0 [ 230.828553][ T27] ? __fget_files+0x1bf/0x3c0 [ 230.833218][ T27] ? __fget_light+0xb9/0x210 [ 230.838134][ T27] ksys_write+0xf2/0x1c0 [ 230.842376][ T27] ? __ia32_sys_read+0xa0/0xa0 [ 230.847985][ T27] ? syscall_enter_from_user_mode+0x26/0x80 [ 230.853868][ T27] do_syscall_64+0x39/0xb0 [ 230.858533][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 230.864433][ T27] RIP: 0033:0x7f8267a8c0d9 [ 230.868882][ T27] RSP: 002b:00007f8268811168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.877445][ T27] RAX: ffffffffffffffda RBX: 00007f8267bac050 RCX: 00007f8267a8c0d9 [ 230.885573][ T27] RDX: 000000000000002c RSI: 00000000200000c0 RDI: 0000000000000003 [ 230.893564][ T27] RBP: 00007f8267ae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 230.901595][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.909600][ T27] R13: 00007ffe0fe3f0cf R14: 00007f8268811300 R15: 0000000000022000 [ 230.917666][ T27] [ 230.920697][ T27] [ 230.920697][ T27] Showing all locks held in the system: [ 230.928441][ T27] 1 lock held by rcu_tasks_kthre/11: [ 230.933725][ T27] #0: ffffffff8b7893f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 230.944267][ T27] 1 lock held by rcu_tasks_trace/12: [ 230.949578][ T27] #0: ffffffff8b7890f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 230.960659][ T27] 1 lock held by khungtaskd/27: [ 230.965548][ T27] #0: ffffffff8b789f40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 [ 230.975928][ T27] 3 locks held by kworker/u4:4/952: [ 230.981117][ T27] #0: ffff8880b9b3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2f/0x120 [ 230.991632][ T27] #1: ffffc900045bfdb8 ((work_completion)(&sdata->work)){+.+.}-{0:0}, at: process_one_work+0x7b7/0x1400 [ 231.003006][ T27] #2: ffff8880b9b29698 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x49/0x1a0 [ 231.012285][ T27] 2 locks held by getty/4739: [ 231.016994][ T27] #0: ffff88814aefd098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x23/0x80 [ 231.026848][ T27] #1: ffffc900020282f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xb73/0x1040 [ 231.036976][ T27] 1 lock held by syz-executor.0/5505: [ 231.042318][ T27] #0: ffff88806c91c850 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: walk_component+0x296/0x4e0 [ 231.052769][ T27] 2 locks held by syz-executor.0/5595: [ 231.058253][ T27] #0: ffff88806c91c850 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: walk_component+0x296/0x4e0 [ 231.068700][ T27] #1: ffff88806c91ccb8 (&fi->mutex){+.+.}-{3:3}, at: fuse_lock_inode+0xaf/0xe0 [ 231.077787][ T27] 2 locks held by syz-executor.0/5602: [ 231.083320][ T27] #0: ffff888020d2ab38 (&fc->killsb){.+.+}-{3:3}, at: fuse_dev_do_write+0x1dbb/0x2580 [ 231.093270][ T27] #1: ffff88806c91c850 (&type->i_mutex_dir_key#8/1){+.+.}-{3:3}, at: fuse_reverse_inval_entry+0x42/0x4a0 [ 231.104703][ T27] [ 231.107050][ T27] ============================================= [ 231.107050][ T27] [ 231.115512][ T27] NMI backtrace for cpu 0 [ 231.119908][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.3.0-rc4-syzkaller #0 [ 231.128064][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 231.138194][ T27] Call Trace: [ 231.141463][ T27] [ 231.144461][ T27] dump_stack_lvl+0x64/0xb0 [ 231.148944][ T27] nmi_cpu_backtrace+0x175/0x200 [ 231.153876][ T27] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 231.159048][ T27] nmi_trigger_cpumask_backtrace+0x1bc/0x200 [ 231.165005][ T27] watchdog+0x9f9/0xcf0 [ 231.169232][ T27] ? proc_dohung_task_timeout_secs+0x30/0x30 [ 231.175448][ T27] kthread+0x298/0x340 [ 231.179489][ T27] ? kthread_complete_and_exit+0x20/0x20 [ 231.185128][ T27] ret_from_fork+0x1f/0x30 [ 231.189525][ T27] [ 231.192691][ T27] Sending NMI from CPU 0 to CPUs 1: [ 231.198050][ C1] NMI backtrace for cpu 1 [ 231.198054][ C1] CPU: 1 PID: 30 Comm: kcompactd0 Not tainted 6.3.0-rc4-syzkaller #0 [ 231.198060][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 231.198063][ C1] RIP: 0010:__schedule+0xc1a/0x56c0 [ 231.198072][ C1] Code: bd 30 ff ff ff 4d 89 67 10 4c 89 e6 e8 6f 71 d7 f7 48 89 c7 e8 07 8e 25 f8 48 b8 00 00 00 00 00 fc ff df 48 03 85 b8 fe ff ff <48> c7 00 00 00 00 00 48 c7 40 08 00 00 00 00 48 8b 45 d0 65 48 2b [ 231.198077][ C1] RSP: 0018:ffffc90000c7fb40 EFLAGS: 00000286 [ 231.198082][ C1] RAX: fffff5200018ff7e RBX: ffff88807e4c4440 RCX: 1ffffffff1ac8711 [ 231.198086][ C1] RDX: 0000000000000000 RSI: ffffffff896b8880 RDI: ffff8880168c3708 [ 231.198089][ C1] RBP: ffffc90000c7fcb8 R08: 0000000000000001 R09: 0000000000000001 [ 231.198092][ C1] R10: fffffbfff1ac8d1a R11: 0000000000000000 R12: ffff8880168b80c0 [ 231.198095][ C1] R13: ffff8880168c26b0 R14: 0000000000000000 R15: ffff8880b9a3c240 [ 231.198098][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 231.198105][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.198108][ C1] CR2: 0000555f2e2b8680 CR3: 000000000b56c000 CR4: 00000000003506e0 [ 231.198111][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 231.198113][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 231.198116][ C1] Call Trace: [ 231.198119][ C1] [ 231.198122][ C1] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 231.198129][ C1] ? lockdep_hardirqs_on+0x7d/0x100 [ 231.198134][ C1] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 231.198139][ C1] ? io_schedule_timeout+0x150/0x150 [ 231.198143][ C1] ? timer_shutdown_sync+0x10/0x10 [ 231.198151][ C1] ? debug_object_free+0x360/0x360 [ 231.198156][ C1] schedule+0xde/0x1a0 [ 231.198160][ C1] schedule_timeout+0x121/0x270 [ 231.198165][ C1] ? usleep_range_state+0x190/0x190 [ 231.198169][ C1] ? collect_expired_timers+0x1c0/0x1c0 [ 231.198174][ C1] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 231.198179][ C1] ? prepare_to_wait_event+0xd0/0x6a0 [ 231.198184][ C1] kcompactd+0x574/0xa30 [ 231.198192][ C1] ? kcompactd_do_work+0x550/0x550 [ 231.198197][ C1] ? kthread+0x1f9/0x340 [ 231.198201][ C1] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 231.198205][ C1] ? __kthread_parkme+0xc1/0x1f0 [ 231.198210][ C1] ? kcompactd_do_work+0x550/0x550 [ 231.198215][ C1] kthread+0x298/0x340 [ 231.198219][ C1] ? kthread_complete_and_exit+0x20/0x20 [ 231.198223][ C1] ret_from_fork+0x1f/0x30 [ 231.198231][ C1] [ 231.199057][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 231.455563][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.3.0-rc4-syzkaller #0 [ 231.463603][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 231.473644][ T27] Call Trace: [ 231.476956][ T27] [ 231.479872][ T27] dump_stack_lvl+0x64/0xb0 [ 231.484352][ T27] panic+0x4af/0x550 [ 231.488324][ T27] ? panic_smp_self_stop+0x70/0x70 [ 231.493425][ T27] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 231.498614][ T27] ? preempt_schedule_thunk+0x1a/0x20 [ 231.504072][ T27] watchdog+0x64c/0xcf0 [ 231.508219][ T27] ? proc_dohung_task_timeout_secs+0x30/0x30 [ 231.514265][ T27] kthread+0x298/0x340 [ 231.518306][ T27] ? kthread_complete_and_exit+0x20/0x20 [ 231.523932][ T27] ret_from_fork+0x1f/0x30 [ 231.528325][ T27] [ 231.531466][ T27] Kernel Offset: disabled [ 231.535779][ T27] Rebooting in 86400 seconds..