Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. 2025/07/13 02:35:31 ignoring optional flag "sandboxArg"="0" 2025/07/13 02:35:31 ignoring optional flag "type"="gce" 2025/07/13 02:35:31 parsed 1 programs 2025/07/13 02:35:31 executed programs: 0 [ 107.832762][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.840991][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.849046][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.858075][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.866558][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.061507][ T6167] chnl_net:caif_netlink_parms(): no params data found [ 108.154311][ T6167] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.161581][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.169014][ T6167] bridge_slave_0: entered allmulticast mode [ 108.177237][ T6167] bridge_slave_0: entered promiscuous mode [ 108.185702][ T6167] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.192904][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.200257][ T6167] bridge_slave_1: entered allmulticast mode [ 108.207841][ T6167] bridge_slave_1: entered promiscuous mode [ 108.246083][ T6167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.260277][ T6167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.300027][ T6167] team0: Port device team_slave_0 added [ 108.308785][ T6167] team0: Port device team_slave_1 added [ 108.344886][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.351912][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.378961][ T6167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.391370][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.398395][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.424392][ T6167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.477555][ T6167] hsr_slave_0: entered promiscuous mode [ 108.485724][ T6167] hsr_slave_1: entered promiscuous mode [ 109.189689][ T6167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.202764][ T6167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.214679][ T6167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.232675][ T6167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.351410][ T6167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.377438][ T6167] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.391331][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.398529][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.417518][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.424667][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.717958][ T6167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.784857][ T6167] veth0_vlan: entered promiscuous mode [ 109.802458][ T6167] veth1_vlan: entered promiscuous mode [ 109.844942][ T6167] veth0_macvtap: entered promiscuous mode [ 109.858694][ T6167] veth1_macvtap: entered promiscuous mode [ 109.888107][ T6167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.906927][ T6167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.922762][ T6167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.933225][ T6167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.943204][ T6167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.953751][ T6167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.956562][ T5161] Bluetooth: hci0: command tx timeout [ 110.049126][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.066449][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.104533][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.113183][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.307321][ T6227] nbd0: detected capacity change from 0 to 485291868 [ 111.003000][ T5161] block nbd0: Receive control failed (result -104) [ 111.005492][ T6225] block nbd0: shutting down sockets [ 111.021729][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.031010][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 111.039041][ T6155] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.049334][ T6155] Buffer I/O error on dev nbd0, logical block 0, async page read [ 111.057586][ T6155] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.067505][ T6155] Buffer I/O error on dev nbd0, logical block 0, async page read [ 111.080342][ T6155] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.089946][ T6155] Buffer I/O error on dev nbd0, logical block 0, async page read [ 111.101378][ T6155] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.110909][ T6155] Buffer I/O error on dev nbd0, logical block 0, async page read [ 111.120832][ T6155] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.130683][ T6155] Buffer I/O error on dev nbd0, logical block 0, async page read [ 111.139904][ T6155] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.149564][ T6155] Buffer I/O error on dev nbd0, logical block 0, async page read [ 111.162133][ T6155] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.175089][ T6155] Buffer I/O error on dev nbd0, logical block 0, async page read [ 111.184498][ T6155] ldm_validate_partition_table(): Disk read failed. [ 111.192167][ T6155] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.202914][ T6155] Buffer I/O error on dev nbd0, logical block 0, async page read [ 111.212891][ T6155] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.223100][ T6155] Buffer I/O error on dev nbd0, logical block 0, async page read [ 111.232816][ T6155] Dev nbd0: unable to read RDB block 0 [ 111.243628][ T6155] nbd0: unable to read partition table [ 111.278820][ T6155] ldm_validate_partition_table(): Disk read failed. [ 111.306798][ T6155] Dev nbd0: unable to read RDB block 0 [ 111.312944][ T6155] nbd0: unable to read partition table [ 111.488237][ T6261] nbd0: detected capacity change from 0 to 485291868 [ 112.035719][ T51] Bluetooth: hci0: command tx timeout [ 112.164522][ T5161] block nbd0: Receive control failed (result -104) [ 114.115755][ T5161] Bluetooth: hci0: command tx timeout [ 116.198152][ T5161] Bluetooth: hci0: command tx timeout [ 132.120120][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.126723][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.717924][ T55] block nbd0: Possible stuck request ffff888024f28c00: control (read@0,4096B). Runtime 30 seconds 2025/07/13 02:36:30 executed programs: 2 [ 167.341878][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.349899][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.357519][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.366474][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.374394][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.569999][ T6538] chnl_net:caif_netlink_parms(): no params data found [ 167.656533][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.663715][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.671066][ T6538] bridge_slave_0: entered allmulticast mode [ 167.679000][ T6538] bridge_slave_0: entered promiscuous mode [ 167.687525][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.694620][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.702202][ T6538] bridge_slave_1: entered allmulticast mode [ 167.711011][ T6538] bridge_slave_1: entered promiscuous mode [ 167.752026][ T6538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.764530][ T6538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.807571][ T6538] team0: Port device team_slave_0 added [ 167.816943][ T6538] team0: Port device team_slave_1 added [ 167.855553][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.862542][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.889172][ T6538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.901606][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.908617][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.934576][ T6538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.990002][ T6538] hsr_slave_0: entered promiscuous mode [ 167.997117][ T6538] hsr_slave_1: entered promiscuous mode [ 168.003307][ T6538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.011189][ T6538] Cannot create hsr debugfs directory [ 168.149543][ T6538] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.239296][ T6538] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.348347][ T6538] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.441910][ T6538] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.581854][ T6538] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 168.592321][ T6538] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.603588][ T6538] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.613996][ T6538] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.697711][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.718978][ T6538] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.732079][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.739263][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.754525][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.761785][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.980691][ T6538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.029000][ T6538] veth0_vlan: entered promiscuous mode [ 169.041683][ T6538] veth1_vlan: entered promiscuous mode [ 169.072626][ T6538] veth0_macvtap: entered promiscuous mode [ 169.082775][ T6538] veth1_macvtap: entered promiscuous mode [ 169.103686][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.119593][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.131497][ T6538] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.141238][ T6538] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.150557][ T6538] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.161157][ T6538] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.223812][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.237060][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.268167][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.276953][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.395449][ T5161] Bluetooth: hci1: command tx timeout [ 171.475556][ T5161] Bluetooth: hci1: command tx timeout [ 171.796820][ T55] block nbd0: Possible stuck request ffff888024f28c00: control (read@0,4096B). Runtime 60 seconds [ 172.332000][ T5211] udevd[5211]: worker [6155] /devices/virtual/block/nbd0 is taking a long time [ 173.565877][ T5161] Bluetooth: hci1: command tx timeout [ 175.636629][ T5161] Bluetooth: hci1: command tx timeout [ 193.559807][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.566274][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.876869][ T55] block nbd0: Possible stuck request ffff888024f28c00: control (read@0,4096B). Runtime 90 seconds 2025/07/13 02:37:28 executed programs: 3 [ 225.384922][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 225.392597][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.400434][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.409070][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.418655][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.629735][ T6567] chnl_net:caif_netlink_parms(): no params data found [ 225.727886][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.735138][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.742889][ T6567] bridge_slave_0: entered allmulticast mode [ 225.751840][ T6567] bridge_slave_0: entered promiscuous mode [ 225.761297][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.769548][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.777411][ T6567] bridge_slave_1: entered allmulticast mode [ 225.785186][ T6567] bridge_slave_1: entered promiscuous mode [ 225.825570][ T6567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.838022][ T6567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.881933][ T6567] team0: Port device team_slave_0 added [ 225.891624][ T6567] team0: Port device team_slave_1 added [ 225.930881][ T6567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.937920][ T6567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.964443][ T6567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.978034][ T6567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.985012][ T6567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.011177][ T6567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.067219][ T6567] hsr_slave_0: entered promiscuous mode [ 226.074149][ T6567] hsr_slave_1: entered promiscuous mode [ 226.081127][ T6567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.088757][ T6567] Cannot create hsr debugfs directory [ 226.231670][ T6567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.340352][ T6567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.391972][ T6567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.471396][ T6567] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.607681][ T6567] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.618368][ T6567] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.629232][ T6567] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.639701][ T6567] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.729975][ T6567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.752621][ T6567] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.766191][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.773362][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.790270][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.797452][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.023704][ T6567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.070726][ T6567] veth0_vlan: entered promiscuous mode [ 227.085777][ T6567] veth1_vlan: entered promiscuous mode [ 227.122084][ T6567] veth0_macvtap: entered promiscuous mode [ 227.131943][ T6567] veth1_macvtap: entered promiscuous mode [ 227.153086][ T6567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.169086][ T6567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.182688][ T6567] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.192249][ T6567] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.201761][ T6567] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.212652][ T6567] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.281524][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.296525][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.325074][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.333179][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.476585][ T5161] Bluetooth: hci2: command tx timeout [ 229.565441][ T5161] Bluetooth: hci2: command tx timeout [ 231.476290][ T5161] Bluetooth: hci0: command 0x0406 tx timeout [ 231.635526][ T51] Bluetooth: hci2: command tx timeout [ 231.966798][ T55] block nbd0: Possible stuck request ffff888024f28c00: control (read@0,4096B). Runtime 120 seconds [ 233.715684][ T51] Bluetooth: hci2: command tx timeout [ 255.000294][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.007323][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.040439][ T55] block nbd0: Possible stuck request ffff888024f28c00: control (read@0,4096B). Runtime 150 seconds [ 267.155533][ T31] INFO: task syz-executor.0:6257 blocked for more than 143 seconds. [ 267.163575][ T31] Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 [ 267.171302][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 267.180020][ T31] task:syz-executor.0 state:D stack:27960 pid:6257 tgid:6256 ppid:6167 task_flags:0x400140 flags:0x00004006 [ 267.192014][ T31] Call Trace: [ 267.195336][ T31] [ 267.198269][ T31] __schedule+0x16f5/0x4d00 [ 267.202807][ T31] ? __lock_acquire+0xab9/0xd20 [ 267.207726][ T31] ? schedule+0x165/0x360 [ 267.212111][ T31] ? __pfx___schedule+0x10/0x10 [ 267.217056][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.222739][ T31] ? schedule+0x91/0x360 [ 267.227159][ T31] schedule+0x165/0x360 [ 267.231363][ T31] schedule_preempt_disabled+0x13/0x30 [ 267.240148][ T31] __mutex_lock+0x724/0xe80 [ 267.244689][ T31] ? __mutex_lock+0x51b/0xe80 [ 267.249658][ T31] ? bdev_release+0x1a9/0x650 [ 267.254376][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 267.259455][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.265111][ T31] ? __asan_memset+0x22/0x50 [ 267.269765][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 267.275283][ T31] ? do_raw_spin_lock+0x121/0x290 [ 267.280595][ T31] bdev_release+0x1a9/0x650 [ 267.285102][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 267.290363][ T31] blkdev_release+0x15/0x20 [ 267.294905][ T31] __fput+0x44c/0xa70 [ 267.298957][ T31] task_work_run+0x1d4/0x260 [ 267.303580][ T31] ? __pfx_task_work_run+0x10/0x10 [ 267.308764][ T31] get_signal+0x11ed/0x1340 [ 267.313310][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 267.319020][ T31] ? __pfx_task_work_add+0x10/0x10 [ 267.324223][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 267.330452][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 267.335582][ T31] ? __fget_files+0x2a/0x420 [ 267.341185][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 267.346785][ T31] exit_to_user_mode_loop+0x75/0x110 [ 267.352103][ T31] do_syscall_64+0x2bd/0x3b0 [ 267.356753][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.362166][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.368280][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.373929][ T31] ? exc_page_fault+0x9f/0xf0 [ 267.378650][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.384554][ T31] RIP: 0033:0x7f7d57c7c859 [ 267.389055][ T31] RSP: 002b:00007f7d589650c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.397550][ T31] RAX: 0000000000000000 RBX: 00007f7d57d9bf80 RCX: 00007f7d57c7c859 [ 267.405582][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 267.413562][ T31] RBP: 00007f7d57cd8ad0 R08: 0000000000000000 R09: 0000000000000000 [ 267.421576][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.429619][ T31] R13: 000000000000000b R14: 00007f7d57d9bf80 R15: 00007ffe0babd618 [ 267.437660][ T31] [ 267.441842][ T31] [ 267.441842][ T31] Showing all locks held in the system: [ 267.449995][ T31] 1 lock held by khungtaskd/31: [ 267.454861][ T31] #0: ffffffff8e13f0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 267.464887][ T31] 2 locks held by klogd/5200: [ 267.469626][ T31] 2 locks held by getty/5601: [ 267.474313][ T31] #0: ffff8880342900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 267.484160][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 267.494395][ T31] 1 lock held by udevd/6155: [ 267.499020][ T31] #0: ffff888143f19358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 267.508341][ T31] 1 lock held by syz-executor.0/6257: [ 267.513715][ T31] #0: ffff888143f19358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 267.523361][ T31] 1 lock held by syz-executor.0/6558: [ 267.528763][ T31] #0: ffff888143f19358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 267.538065][ T31] 1 lock held by syz-executor.0/6587: [ 267.544552][ T31] #0: ffff888143f19358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 267.553937][ T31] [ 267.556698][ T31] ============================================= [ 267.556698][ T31] [ 267.565108][ T31] NMI backtrace for cpu 1 [ 267.565120][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 267.565141][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.565152][ T31] Call Trace: [ 267.565159][ T31] [ 267.565166][ T31] dump_stack_lvl+0x189/0x250 [ 267.565191][ T31] ? __wake_up_klogd+0xd9/0x110 [ 267.565225][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.565258][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.565289][ T31] ? __pfx__printk+0x10/0x10 [ 267.565340][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 267.565379][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 267.565410][ T31] ? _printk+0xcf/0x120 [ 267.565450][ T31] ? __pfx__printk+0x10/0x10 [ 267.565487][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 267.565515][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 267.565553][ T31] watchdog+0xfee/0x1030 [ 267.565579][ T31] ? watchdog+0x1de/0x1030 [ 267.565609][ T31] kthread+0x711/0x8a0 [ 267.565646][ T31] ? __pfx_watchdog+0x10/0x10 [ 267.565668][ T31] ? __pfx_kthread+0x10/0x10 [ 267.565701][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.565734][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.565771][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.565799][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.565836][ T31] ? __pfx_kthread+0x10/0x10 [ 267.565882][ T31] ret_from_fork+0x3fc/0x770 [ 267.565912][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 267.565946][ T31] ? __switch_to_asm+0x39/0x70 [ 267.565979][ T31] ? __switch_to_asm+0x33/0x70 [ 267.566011][ T31] ? __pfx_kthread+0x10/0x10 [ 267.566049][ T31] ret_from_fork_asm+0x1a/0x30 [ 267.566101][ T31] [ 267.734434][ T31] Sending NMI from CPU 1 to CPUs 0: [ 267.740272][ C0] NMI backtrace for cpu 0 [ 267.740289][ C0] CPU: 0 UID: 0 PID: 1163 Comm: kworker/u8:7 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 267.740315][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.740329][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 267.740375][ C0] RIP: 0010:kasan_check_range+0x1da/0x2c0 [ 267.740407][ C0] Code: 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 b8 00 00 00 49 ff c3 49 ff cc 75 ee 5b 41 5c 41 5d 41 5e <41> 5f 5d e9 19 a4 ec fe cc 45 84 ff 75 63 41 f7 c7 00 ff 00 00 75 [ 267.740424][ C0] RSP: 0018:ffffc90003e4e7a8 EFLAGS: 00000256 [ 267.740442][ C0] RAX: 0000000000000001 RBX: 0000000000000020 RCX: ffffffff8af32cc5 [ 267.740457][ C0] RDX: 0000000000000001 RSI: 0000000000000020 RDI: ffffc90003e4eb40 [ 267.740471][ C0] RBP: 0000000000000000 R08: ffffc90003e4eb5f R09: 1ffff920007c9d6b [ 267.740486][ C0] R10: dffffc0000000000 R11: fffff520007c9d6c R12: dffffc0000000000 [ 267.740502][ C0] R13: ffffc90003e4eb40 R14: ffffc90003e4eb40 R15: 1ffff920007c9d68 [ 267.740521][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 267.740539][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.740554][ C0] CR2: 00005603020c1168 CR3: 000000000df38000 CR4: 0000000000350ef0 [ 267.740570][ C0] Call Trace: [ 267.740578][ C0] [ 267.740588][ C0] __asan_memset+0x22/0x50 [ 267.740617][ C0] _ieee802_11_parse_elems_full+0x115/0x4550 [ 267.740641][ C0] ? arch_stack_walk+0x11c/0x150 [ 267.740678][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.740707][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.740732][ C0] ? stack_depot_save_flags+0x40/0x900 [ 267.740768][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.740793][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 267.740823][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.740848][ C0] ? kasan_save_track+0x4f/0x80 [ 267.740870][ C0] ? kasan_save_track+0x3e/0x80 [ 267.740892][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 267.740916][ C0] ? __kmalloc_noprof+0x27a/0x4f0 [ 267.740941][ C0] ? ieee802_11_parse_elems_full+0x152/0x2aa0 [ 267.740963][ C0] ? ieee80211_inform_bss+0x10c/0x10a0 [ 267.740995][ C0] ? cfg80211_inform_single_bss_data+0xd05/0x1ac0 [ 267.741030][ C0] ? cfg80211_inform_bss_data+0x1fb/0x3b20 [ 267.741064][ C0] ? cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 267.741098][ C0] ? ieee80211_bss_info_update+0x746/0x9e0 [ 267.741131][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 267.741164][ C0] ? ieee80211_iface_work+0x806/0xfe0 [ 267.741183][ C0] ? cfg80211_wiphy_work+0x2df/0x460 [ 267.741207][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 267.741231][ C0] ? worker_thread+0x8a0/0xda0 [ 267.741256][ C0] ? kthread+0x711/0x8a0 [ 267.741286][ C0] ? ret_from_fork+0x3fc/0x770 [ 267.741308][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 267.741365][ C0] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 267.741388][ C0] ? ieee802_11_parse_elems_full+0x152/0x2aa0 [ 267.741415][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.741440][ C0] ? cfg80211_find_elem_match+0x1bf/0x200 [ 267.741478][ C0] ieee802_11_parse_elems_full+0x124e/0x2aa0 [ 267.741500][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.741538][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.741563][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 267.741615][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 267.741638][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.741663][ C0] ? cfg80211_update_known_bss+0x803/0x1330 [ 267.741698][ C0] ? cmp_bss+0x8b3/0xe80 [ 267.741737][ C0] ieee80211_inform_bss+0x10c/0x10a0 [ 267.741771][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.741796][ C0] ? __cfg80211_bss_update+0x101a/0x2120 [ 267.741833][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 267.741865][ C0] ? do_raw_spin_lock+0x121/0x290 [ 267.741902][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.741927][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.741955][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 267.741990][ C0] cfg80211_inform_single_bss_data+0xd05/0x1ac0 [ 267.742033][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 267.742083][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.742108][ C0] ? _ieee802_11_parse_elems_full+0x44aa/0x4550 [ 267.742130][ C0] ? arch_stack_walk+0x11c/0x150 [ 267.742161][ C0] ? cfg80211_inform_bss_data+0x1e8/0x3b20 [ 267.742200][ C0] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 267.742256][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 267.742315][ C0] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 267.742338][ C0] ? __kmalloc_noprof+0xe7/0x4f0 [ 267.742381][ C0] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 267.742421][ C0] ? ieee80211_bss_info_update+0x2dc/0x9e0 [ 267.742458][ C0] ieee80211_bss_info_update+0x746/0x9e0 [ 267.742497][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 267.742529][ C0] ? sta_info_get+0x4f/0x2a0 [ 267.742556][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.742584][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 267.742624][ C0] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 267.742658][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.742697][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 267.742732][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 267.742771][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.742796][ C0] ? __lock_acquire+0xab9/0xd20 [ 267.742826][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.742865][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.742896][ C0] ieee80211_iface_work+0x806/0xfe0 [ 267.742918][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.742949][ C0] cfg80211_wiphy_work+0x2df/0x460 [ 267.742975][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 267.743002][ C0] process_scheduled_works+0xae1/0x17b0 [ 267.743048][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.743079][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.743111][ C0] worker_thread+0x8a0/0xda0 [ 267.743139][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 267.743179][ C0] ? __kthread_parkme+0x7b/0x200 [ 267.743214][ C0] kthread+0x711/0x8a0 [ 267.743248][ C0] ? __pfx_worker_thread+0x10/0x10 [ 267.743274][ C0] ? __pfx_kthread+0x10/0x10 [ 267.743304][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.743332][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.743363][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.743388][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.743422][ C0] ? __pfx_kthread+0x10/0x10 [ 267.743455][ C0] ret_from_fork+0x3fc/0x770 [ 267.743480][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 267.743508][ C0] ? __switch_to_asm+0x39/0x70 [ 267.743537][ C0] ? __switch_to_asm+0x33/0x70 [ 267.743566][ C0] ? __pfx_kthread+0x10/0x10 [ 267.743602][ C0] ret_from_fork_asm+0x1a/0x30 [ 267.743644][ C0] [ 267.744332][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 268.411706][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 268.423514][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.433569][ T31] Call Trace: [ 268.436856][ T31] [ 268.439785][ T31] dump_stack_lvl+0x99/0x250 [ 268.444387][ T31] ? __asan_memcpy+0x40/0x70 [ 268.448980][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.454189][ T31] ? __pfx__printk+0x10/0x10 [ 268.458800][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.464447][ T31] panic+0x2db/0x790 [ 268.468352][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.473998][ T31] ? __pfx_panic+0x10/0x10 [ 268.478421][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.484063][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 268.489884][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.495524][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 268.500900][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 268.507079][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.512724][ T31] watchdog+0x102d/0x1030 [ 268.517090][ T31] ? watchdog+0x1de/0x1030 [ 268.521603][ T31] kthread+0x711/0x8a0 [ 268.525691][ T31] ? __pfx_watchdog+0x10/0x10 [ 268.530367][ T31] ? __pfx_kthread+0x10/0x10 [ 268.534967][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.540608][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.545825][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 268.551467][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.556711][ T31] ? __pfx_kthread+0x10/0x10 [ 268.561313][ T31] ret_from_fork+0x3fc/0x770 [ 268.565913][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 268.571038][ T31] ? __switch_to_asm+0x39/0x70 [ 268.575817][ T31] ? __switch_to_asm+0x33/0x70 [ 268.580593][ T31] ? __pfx_kthread+0x10/0x10 [ 268.585197][ T31] ret_from_fork_asm+0x1a/0x30 [ 268.589996][ T31] [ 268.593257][ T31] Kernel Offset: disabled [ 268.597583][ T31] Rebooting in 86400 seconds..