[ 33.009653][ T4634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.040295][ T4634] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 55.244503][ T5051] can: request_module (can-proto-0) failed. [ 55.278868][ T5051] can: request_module (can-proto-0) failed. [ 55.311537][ T5051] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.112' (ECDSA) to the list of known hosts. 2023/01/08 15:59:06 parsed 1 programs 2023/01/08 15:59:07 executed programs: 0 [ 75.939316][ T5136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.947437][ T5136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.955416][ T5136] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.964142][ T5136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.972096][ T5136] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.979777][ T5136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.065673][ T5134] chnl_net:caif_netlink_parms(): no params data found [ 76.109697][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.117419][ T5134] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.125479][ T5134] device bridge_slave_0 entered promiscuous mode [ 76.134382][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.141718][ T5134] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.149673][ T5134] device bridge_slave_1 entered promiscuous mode [ 76.170126][ T5134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.181120][ T5134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.204674][ T5134] team0: Port device team_slave_0 added [ 76.211722][ T5134] team0: Port device team_slave_1 added [ 76.229100][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.236052][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.262267][ T5134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.274529][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.281678][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.307890][ T5134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.334676][ T5134] device hsr_slave_0 entered promiscuous mode [ 76.342079][ T5134] device hsr_slave_1 entered promiscuous mode [ 76.409968][ T2165] cfg80211: failed to load regulatory.db [ 76.439088][ T5134] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.450400][ T5134] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.459885][ T5134] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.469143][ T5134] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.490805][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.498193][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.506175][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.513384][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.556921][ T5134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.572625][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.583249][ T897] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.592698][ T897] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.601146][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 76.615016][ T5134] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.626096][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.634926][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.642056][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.655214][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.664001][ T897] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.671383][ T897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.689943][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.704693][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.717439][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.728257][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.746352][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.754278][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.766383][ T5134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.951554][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.967725][ T5134] device veth0_vlan entered promiscuous mode [ 76.975389][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.985222][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.993581][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.005313][ T5134] device veth1_vlan entered promiscuous mode [ 77.024403][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.032926][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.041499][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.054038][ T5134] device veth0_macvtap entered promiscuous mode [ 77.064101][ T5134] device veth1_macvtap entered promiscuous mode [ 77.081331][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.091081][ T2165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.099692][ T2165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.110798][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.118967][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.127603][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.142864][ T5134] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.152211][ T5134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.161085][ T5134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.169956][ T5134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.325857][ T5155] nbd0: detected capacity change from 0 to 2158 [ 78.009280][ T4376] Bluetooth: hci0: command 0x0409 tx timeout [ 78.040680][ T5136] block nbd0: Receive control failed (result -104) [ 80.088184][ T5136] Bluetooth: hci0: command 0x041b tx timeout [ 82.178209][ T4376] Bluetooth: hci0: command 0x040f tx timeout [ 84.248295][ T4376] Bluetooth: hci0: command 0x0419 tx timeout [ 107.769911][ T52] block nbd0: Possible stuck request ffff88801ef60000: control (read@0,4096B). Runtime 30 seconds [ 137.849607][ T52] block nbd0: Possible stuck request ffff88801ef60000: control (read@0,4096B). Runtime 60 seconds [ 138.472413][ T4421] udevd[4421]: worker [5138] /devices/virtual/block/nbd0 is taking a long time [ 167.928825][ T52] block nbd0: Possible stuck request ffff88801ef60000: control (read@0,4096B). Runtime 90 seconds [ 198.008349][ T52] block nbd0: Possible stuck request ffff88801ef60000: control (read@0,4096B). Runtime 120 seconds [ 201.368212][ T4376] Bluetooth: hci0: command 0x0406 tx timeout [ 228.088332][ T52] block nbd0: Possible stuck request ffff88801ef60000: control (read@0,4096B). Runtime 150 seconds [ 258.168291][ T52] block nbd0: Possible stuck request ffff88801ef60000: control (read@0,4096B). Runtime 180 seconds [ 258.718866][ T4421] udevd[4421]: worker [5138] /devices/virtual/block/nbd0 timeout; kill it [ 258.727763][ T4421] udevd[4421]: seq 7898 '/devices/virtual/block/nbd0' killed [ 258.727899][ T5138] ldm_validate_partition_table(): Disk read failed. [ 258.742160][ T5138] Dev nbd0: unable to read RDB block 0 [ 258.747654][ T5138] nbd0: unable to read partition table [ 258.753509][ T5138] nbd0: partition table beyond EOD, truncated 2023/01/08 16:02:11 executed programs: 1 2023/01/08 16:02:11 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe 2023/01/08 16:02:14 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe wrong response packet (errno 16) loop exited with status 67 [ 262.168218][ T4376] Bluetooth: hci0: Opcode 0x c03 failed: -110 2023/01/08 16:02:17 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe wrong response packet (errno 16) loop exited with status 67 2023/01/08 16:02:17 executed programs: 4 [ 265.288301][ T4376] Bluetooth: hci0: Opcode 0x c03 failed: -110 2023/01/08 16:02:20 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe wrong response packet (errno 16) loop exited with status 67 [ 268.408211][ T4376] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 269.452757][ T5136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.461395][ T5136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.469651][ T5136] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.477596][ T5136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.486060][ T5136] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.493874][ T5136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.579994][ T5176] chnl_net:caif_netlink_parms(): no params data found [ 269.620345][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.627477][ T5176] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.635861][ T5176] device bridge_slave_0 entered promiscuous mode [ 269.645090][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.653284][ T5176] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.662174][ T5176] device bridge_slave_1 entered promiscuous mode [ 269.683740][ T5176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.694613][ T5176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.717896][ T5176] team0: Port device team_slave_0 added [ 269.725487][ T5176] team0: Port device team_slave_1 added [ 269.743865][ T5176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.751046][ T5176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.777661][ T5176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.791171][ T5176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.798376][ T5176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.824584][ T5176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.850972][ T5176] device hsr_slave_0 entered promiscuous mode [ 269.858339][ T5176] device hsr_slave_1 entered promiscuous mode [ 269.865374][ T5176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.873577][ T5176] Cannot create hsr debugfs directory [ 269.936231][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.943392][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.950842][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.958486][ T5176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.001069][ T5176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.014125][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.022731][ T5145] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.030720][ T5145] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.039057][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 270.052249][ T5176] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.062513][ T2165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.073713][ T2165] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.080926][ T2165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.099047][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.107539][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.114686][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.126395][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.141310][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.154042][ T5176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.166509][ T5176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.176938][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.193397][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.200987][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.213966][ T5176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.585559][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.595237][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.603993][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.612535][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.622138][ T5176] device veth0_vlan entered promiscuous mode [ 270.634747][ T5176] device veth1_vlan entered promiscuous mode [ 270.655031][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.663904][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.676103][ T5176] device veth0_macvtap entered promiscuous mode [ 270.686510][ T5176] device veth1_macvtap entered promiscuous mode [ 270.703283][ T5176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 270.714823][ T5176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.726586][ T5176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.735811][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 270.744173][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 270.752628][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.761642][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.772660][ T5176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 270.783821][ T5176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.795298][ T5176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.803261][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.813551][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.528267][ T5136] Bluetooth: hci0: command 0x0409 tx timeout [ 273.608158][ T5136] Bluetooth: hci0: command 0x041b tx timeout [ 275.698199][ T5136] Bluetooth: hci0: command 0x040f tx timeout [ 277.768262][ T5136] Bluetooth: hci0: command 0x0419 tx timeout [ 288.264085][ T52] block nbd0: Possible stuck request ffff88801ef60000: control (read@0,4096B). Runtime 210 seconds [ 318.328327][ T52] block nbd0: Possible stuck request ffff88801ef60000: control (read@0,4096B). Runtime 240 seconds [ 348.408776][ T52] block nbd0: Possible stuck request ffff88801ef60000: control (read@0,4096B). Runtime 270 seconds [ 378.528020][ T52] block nbd0: Possible stuck request ffff88801ef60000: control (read@0,4096B). Runtime 300 seconds [ 395.928079][ T5136] Bluetooth: hci0: command 0x0406 tx timeout [ 408.568284][ T52] block nbd0: Possible stuck request ffff88801ef60000: control (read@0,4096B). Runtime 330 seconds [ 429.698174][ T28] INFO: task udevd:5138 blocked for more than 143 seconds. [ 429.705633][ T28] Not tainted 6.2.0-rc2-syzkaller-00320-g93928d485d9d #0 [ 429.715942][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.726060][ T28] task:udevd state:D stack:24032 pid:5138 ppid:4421 flags:0x00004006 [ 429.735632][ T28] Call Trace: [ 429.739252][ T28] [ 429.742237][ T28] __schedule+0x9d1/0xe40 [ 429.746746][ T28] ? release_firmware_map_entry+0x180/0x180 [ 429.753133][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 429.760313][ T28] ? print_irqtrace_events+0x220/0x220 [ 429.765796][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 429.771205][ T28] schedule+0xcb/0x190 [ 429.775301][ T28] io_schedule+0x83/0x100 [ 429.780093][ T28] folio_wait_bit_common+0x8ca/0x1390 [ 429.785495][ T28] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 429.792001][ T28] ? folio_wait_bit+0x20/0x20 [ 429.796779][ T28] ? pfn_swap_entry_to_page+0x370/0x370 [ 429.802780][ T28] __filemap_get_folio+0x566/0x1230 [ 429.808141][ T28] ? page_cache_prev_miss+0x500/0x500 [ 429.813928][ T28] truncate_inode_pages_range+0x5a4/0x1650 [ 429.819852][ T28] ? mapping_evict_folio+0x570/0x570 [ 429.825275][ T28] ? filemap_check_errors+0xcf/0x110 [ 429.830787][ T28] ? invalidate_bh_lrus+0x30/0x30 [ 429.836027][ T28] ? __bread_gfp+0x320/0x320 [ 429.840710][ T28] ? invalidate_bh_lrus+0x30/0x30 [ 429.845854][ T28] blkdev_flush_mapping+0x153/0x2c0 [ 429.851166][ T28] blkdev_put+0x4a5/0x730 [ 429.855602][ T28] blkdev_close+0x55/0x80 [ 429.860107][ T28] ? blkdev_open+0x2e0/0x2e0 [ 429.864813][ T28] __fput+0x3ba/0x880 [ 429.868933][ T28] task_work_run+0x243/0x300 [ 429.873570][ T28] ? task_work_cancel+0x290/0x290 [ 429.879431][ T28] ? switch_task_namespaces+0xaf/0xe0 [ 429.884916][ T28] do_exit+0x644/0x2150 [ 429.889272][ T28] ? trace_lock_release+0x95/0x220 [ 429.894570][ T28] ? mm_update_next_owner+0x6d0/0x6d0 [ 429.900620][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 429.906867][ T28] ? print_irqtrace_events+0x220/0x220 [ 429.912443][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 429.918148][ T28] do_group_exit+0x1fd/0x2b0 [ 429.922845][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 429.928164][ T28] ? lockdep_hardirqs_on+0x95/0x140 [ 429.933492][ T28] get_signal+0x1755/0x1820 [ 429.938176][ T28] ? ptrace_notify+0x340/0x340 [ 429.942960][ T28] ? do_sys_openat2+0x428/0x500 [ 429.947847][ T28] arch_do_signal_or_restart+0x8d/0x5f0 [ 429.953562][ T28] ? get_sigframe_size+0x10/0x10 [ 429.958584][ T28] ? __ia32_sys_open+0x270/0x270 [ 429.963539][ T28] ? exit_to_user_mode_loop+0x42/0x160 [ 429.969112][ T28] exit_to_user_mode_loop+0x74/0x160 [ 429.974421][ T28] exit_to_user_mode_prepare+0xad/0x110 [ 429.980051][ T28] syscall_exit_to_user_mode+0x2e/0x60 [ 429.985531][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 429.991527][ T28] RIP: 0033:0x7f4982325697 [ 429.995956][ T28] RSP: 002b:00007ffee9812250 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 430.004504][ T28] RAX: 0000000000000008 RBX: 00005611a429a1a0 RCX: 00007f4982325697 [ 430.012564][ T28] RDX: 00000000000a0800 RSI: 00005611a428b3c0 RDI: 00000000ffffff9c [ 430.020590][ T28] RBP: 00005611a428b3c0 R08: 0000000000000001 R09: 0000000000000010 [ 430.028689][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 430.036765][ T28] R13: 00005611a427db80 R14: 0000000000000001 R15: 00005611a4274910 [ 430.044815][ T28] [ 430.047949][ T28] INFO: task syz-executor.0:5196 blocked for more than 143 seconds. [ 430.055949][ T28] Not tainted 6.2.0-rc2-syzkaller-00320-g93928d485d9d #0 [ 430.063673][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.072495][ T28] task:syz-executor.0 state:D stack:27336 pid:5196 ppid:5176 flags:0x00004004 [ 430.081891][ T28] Call Trace: [ 430.085276][ T28] [ 430.088387][ T28] __schedule+0x9d1/0xe40 [ 430.092744][ T28] ? release_firmware_map_entry+0x180/0x180 [ 430.098727][ T28] ? __lock_acquire+0x1f60/0x1f60 [ 430.103760][ T28] ? __mutex_trylock_common+0x8e/0x2f0 [ 430.109269][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 430.114493][ T28] schedule+0xcb/0x190 [ 430.118714][ T28] schedule_preempt_disabled+0xf/0x20 [ 430.124096][ T28] __mutex_lock_common+0xecf/0x26c0 [ 430.129376][ T28] ? blkdev_get_by_dev+0xfe/0xa60 [ 430.134409][ T28] ? mutex_lock_io_nested+0x60/0x60 [ 430.140561][ T28] ? kobject_get_unless_zero+0x220/0x310 [ 430.146227][ T28] ? _atomic_dec_and_lock+0x85/0x110 [ 430.151699][ T28] ? iput+0x198/0x760 [ 430.155699][ T28] ? ilookup+0x1c1/0x200 [ 430.160029][ T28] mutex_lock_nested+0x17/0x20 [ 430.164806][ T28] blkdev_get_by_dev+0xfe/0xa60 [ 430.169779][ T28] blkdev_open+0x128/0x2e0 [ 430.174293][ T28] ? blkdev_write_iter+0x750/0x750 [ 430.179727][ T28] do_dentry_open+0x85f/0x11b0 [ 430.184532][ T28] path_openat+0x25cc/0x2de0 [ 430.189423][ T28] ? stack_trace_snprint+0xf0/0xf0 [ 430.194645][ T28] ? mark_lock+0x9a/0x350 [ 430.199039][ T28] ? mark_lock+0x9a/0x350 [ 430.203504][ T28] ? do_filp_open+0x500/0x500 [ 430.208273][ T28] ? alloc_fd+0x5a7/0x640 [ 430.212702][ T28] ? rcu_read_lock_sched_held+0x89/0x130 [ 430.218491][ T28] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 430.224586][ T28] do_filp_open+0x275/0x500 [ 430.229288][ T28] ? vfs_tmpfile+0x490/0x490 [ 430.234028][ T28] ? _raw_spin_unlock+0x24/0x40 [ 430.239024][ T28] ? alloc_fd+0x5a7/0x640 [ 430.243368][ T28] do_sys_openat2+0x13b/0x500 [ 430.248149][ T28] ? do_user_addr_fault+0x96a/0xcb0 [ 430.253369][ T28] ? do_sys_open+0x220/0x220 [ 430.258033][ T28] __x64_sys_openat+0x243/0x290 [ 430.263850][ T28] ? __ia32_sys_open+0x270/0x270 [ 430.268933][ T28] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 430.274939][ T28] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 430.280978][ T28] do_syscall_64+0x2b/0x70 [ 430.285489][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 430.291599][ T28] RIP: 0033:0x418484 [ 430.295600][ T28] RSP: 002b:00007fa349b63cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 430.304090][ T28] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000418484 [ 430.312407][ T28] RDX: 0000000000000000 RSI: 00007fa349b63d60 RDI: 00000000ffffff9c [ 430.320612][ T28] RBP: 00007fa349b63d60 R08: 0000000000000000 R09: 002364626e2f7665 [ 430.328755][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 430.337067][ T28] R13: 00007fffe4ba24af R14: 00007fa349b64300 R15: 0000000000022000 [ 430.345114][ T28] [ 430.348188][ T28] [ 430.348188][ T28] Showing all locks held in the system: [ 430.355906][ T28] 1 lock held by rcu_tasks_kthre/12: [ 430.361281][ T28] #0: ffffffff8d5239d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 [ 430.371842][ T28] 1 lock held by rcu_tasks_trace/13: [ 430.377212][ T28] #0: ffffffff8d5241d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 [ 430.388248][ T28] 1 lock held by khungtaskd/28: [ 430.393100][ T28] #0: ffffffff8d523800 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 430.402517][ T28] 2 locks held by getty/4735: [ 430.407196][ T28] #0: ffff888028c2f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 430.417144][ T28] #1: ffffc900015902f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6e8/0x1e50 [ 430.427440][ T28] 1 lock held by udevd/5138: [ 430.432082][ T28] #0: ffff88801ef104c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x730 [ 430.441740][ T28] 1 lock held by syz-executor.0/5196: [ 430.447397][ T28] #0: ffff88801ef104c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfe/0xa60 [ 430.458676][ T28] [ 430.461099][ T28] ============================================= [ 430.461099][ T28] [ 430.469831][ T28] NMI backtrace for cpu 1 [ 430.474262][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc2-syzkaller-00320-g93928d485d9d #0 [ 430.484314][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 430.494357][ T28] Call Trace: [ 430.497623][ T28] [ 430.500638][ T28] dump_stack_lvl+0x1e3/0x2d0 [ 430.505663][ T28] ? nf_tcp_handle_invalid+0x630/0x630 [ 430.511111][ T28] ? panic+0x770/0x770 [ 430.515168][ T28] ? nmi_cpu_backtrace+0x255/0x560 [ 430.520266][ T28] nmi_cpu_backtrace+0x4e3/0x560 [ 430.525461][ T28] ? vprintk_emit+0x109/0x1e0 [ 430.530238][ T28] ? nmi_trigger_cpumask_backtrace+0x3e0/0x3e0 [ 430.536401][ T28] ? _printk+0xcf/0x110 [ 430.540805][ T28] ? panic+0x770/0x770 [ 430.544950][ T28] ? __wake_up_klogd+0xcd/0x100 [ 430.549797][ T28] ? panic+0x770/0x770 [ 430.553875][ T28] ? nmi_trigger_cpumask_backtrace+0xaa/0x3e0 [ 430.560027][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 430.566091][ T28] nmi_trigger_cpumask_backtrace+0x19b/0x3e0 [ 430.572073][ T28] watchdog+0xcd5/0xd20 [ 430.576235][ T28] kthread+0x266/0x300 [ 430.580307][ T28] ? hungtask_pm_notify+0x50/0x50 [ 430.585520][ T28] ? kthread_blkcg+0xd0/0xd0 [ 430.590144][ T28] ret_from_fork+0x1f/0x30 [ 430.594571][ T28] [ 430.597714][ T28] Sending NMI from CPU 1 to CPUs 0: [ 430.603124][ C0] NMI backtrace for cpu 0 [ 430.603135][ C0] CPU: 0 PID: 3230 Comm: kworker/u4:5 Not tainted 6.2.0-rc2-syzkaller-00320-g93928d485d9d #0 [ 430.603150][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 430.603159][ C0] Workqueue: bat_events batadv_nc_worker [ 430.603182][ C0] RIP: 0010:check_preemption_disabled+0x14/0x120 [ 430.603204][ C0] Code: ff cc cc cc cc cc 48 c7 c7 20 7a 69 8b 48 c7 c6 60 7a 69 8b eb 00 41 57 41 56 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 <48> 89 44 24 08 65 8b 1d 7c 6b 3d 75 65 8b 05 71 6b 3d 75 a9 ff ff [ 430.603215][ C0] RSP: 0018:ffffc9000cfd7928 EFLAGS: 00000286 [ 430.603225][ C0] RAX: 0e37b56dd6b67600 RBX: 1ffff920019faf30 RCX: 0000000080000001 [ 430.603235][ C0] RDX: 0000000000000000 RSI: ffffffff8b697a60 RDI: ffffffff8b697a20 [ 430.603245][ C0] RBP: ffffc9000cfd7a08 R08: dffffc0000000000 R09: fffffbfff1d604b6 [ 430.603254][ C0] R10: fffffbfff1d604b6 R11: 1ffffffff1d604b5 R12: dffffc0000000000 [ 430.603264][ C0] R13: 1ffff920019faf54 R14: dffffc0000000000 R15: 0000000000000000 [ 430.603273][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 430.603284][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.603294][ C0] CR2: 00007f91ae9ed990 CR3: 000000002acd0000 CR4: 00000000003506f0 [ 430.603306][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.603314][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.603322][ C0] Call Trace: [ 430.603327][ C0] [ 430.603342][ C0] rcu_lockdep_current_cpu_online+0x33/0x120 [ 430.603366][ C0] rcu_read_lock_sched_held+0x74/0x130 [ 430.603382][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 430.603398][ C0] ? rcu_lock_release+0x5/0x20 [ 430.603415][ C0] ? rcu_read_lock_sched_held+0x89/0x130 [ 430.603432][ C0] trace_lock_acquire+0x98/0x260 [ 430.603449][ C0] lock_acquire+0xa5/0x400 [ 430.603462][ C0] ? rcu_lock_acquire+0x5/0x30 [ 430.603482][ C0] ? read_lock_is_recursive+0x10/0x10 [ 430.603500][ C0] ? rcu_lock_release+0x5/0x20 [ 430.603517][ C0] ? __lock_acquire+0x1f60/0x1f60 [ 430.603535][ C0] ? rcu_read_lock_sched_held+0x89/0x130 [ 430.603552][ C0] rcu_lock_acquire+0x2a/0x30 [ 430.603569][ C0] ? rcu_lock_acquire+0x5/0x30 [ 430.603585][ C0] batadv_nc_worker+0xc8/0x5b0 [ 430.603606][ C0] process_one_work+0x81c/0xd10 [ 430.603631][ C0] ? worker_detach_from_pool+0x260/0x260 [ 430.603667][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 430.603685][ C0] ? kthread_data+0x4d/0xc0 [ 430.603701][ C0] ? wq_worker_running+0x95/0x190 [ 430.603716][ C0] worker_thread+0xb14/0x1330 [ 430.603739][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 430.603765][ C0] kthread+0x266/0x300 [ 430.603779][ C0] ? rcu_lock_release+0x20/0x20 [ 430.603795][ C0] ? kthread_blkcg+0xd0/0xd0 [ 430.603809][ C0] ret_from_fork+0x1f/0x30 [ 430.603834][ C0] [ 430.604225][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 430.898741][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc2-syzkaller-00320-g93928d485d9d #0 [ 430.908543][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 430.918682][ T28] Call Trace: [ 430.921958][ T28] [ 430.924886][ T28] dump_stack_lvl+0x1e3/0x2d0 [ 430.929657][ T28] ? nf_tcp_handle_invalid+0x630/0x630 [ 430.935113][ T28] ? panic+0x770/0x770 [ 430.939185][ T28] ? vscnprintf+0x59/0x80 [ 430.943525][ T28] panic+0x316/0x770 [ 430.947443][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 430.953113][ T28] ? nmi_trigger_cpumask_backtrace+0x2b0/0x3e0 [ 430.959526][ T28] ? memcpy_page_flushcache+0x100/0x100 [ 430.965164][ T28] ? nmi_trigger_cpumask_backtrace+0x2b0/0x3e0 [ 430.971316][ T28] ? nmi_trigger_cpumask_backtrace+0x32a/0x3e0 [ 430.977470][ T28] ? nmi_trigger_cpumask_backtrace+0x32f/0x3e0 [ 430.983852][ T28] watchdog+0xd15/0xd20 [ 430.988221][ T28] kthread+0x266/0x300 [ 430.992388][ T28] ? hungtask_pm_notify+0x50/0x50 [ 430.997498][ T28] ? kthread_blkcg+0xd0/0xd0 [ 431.002209][ T28] ret_from_fork+0x1f/0x30 [ 431.006645][ T28] [ 431.009948][ T28] Kernel Offset: disabled [ 431.014271][ T28] Rebooting in 86400 seconds..