[ 56.627782][ T1024] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.645368][ T1024] device veth1_macvtap left promiscuous mode [ 56.652943][ T1024] device veth0_macvtap left promiscuous mode [ 56.659071][ T1024] device veth1_vlan left promiscuous mode [ 56.665530][ T1024] device veth0_vlan left promiscuous mode [ 56.855529][ T1024] team0 (unregistering): Port device team_slave_1 removed [ 56.868712][ T1024] team0 (unregistering): Port device team_slave_0 removed [ 56.884322][ T1024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.899747][ T1024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.942503][ T1024] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.51' (ECDSA) to the list of known hosts. 2023/02/04 03:02:54 ignoring optional flag "sandboxArg"="0" 2023/02/04 03:02:54 parsed 1 programs 2023/02/04 03:02:55 executed programs: 0 [ 72.631907][ T4388] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.640006][ T4388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.648060][ T4388] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.656275][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.663826][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.757281][ T5537] chnl_net:caif_netlink_parms(): no params data found [ 72.793142][ T5537] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.800304][ T5537] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.808369][ T5537] device bridge_slave_0 entered promiscuous mode [ 72.816762][ T5537] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.824107][ T5537] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.832297][ T5537] device bridge_slave_1 entered promiscuous mode [ 72.851528][ T5537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.862302][ T5537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.883339][ T5537] team0: Port device team_slave_0 added [ 72.890342][ T5537] team0: Port device team_slave_1 added [ 72.906700][ T5537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.913813][ T5537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.940193][ T5537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.952726][ T5537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.959665][ T5537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.985872][ T5537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.012439][ T5537] device hsr_slave_0 entered promiscuous mode [ 73.019326][ T5537] device hsr_slave_1 entered promiscuous mode [ 73.675809][ T5537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.686056][ T5537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.696191][ T5537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.706460][ T5537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.729277][ T5537] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.736444][ T5537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.743878][ T5537] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.751080][ T5537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.762848][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.770775][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.818762][ T5537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.834589][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.844416][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.855570][ T5537] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.866970][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.878256][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.887262][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.894508][ T5087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.912635][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.922830][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.931670][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.938766][ T5087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.948061][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.963448][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.972368][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.982701][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.999734][ T5537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.012065][ T5537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.025352][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.035962][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.045118][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.055865][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.065664][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.075861][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.261777][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.269284][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.284013][ T5537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.308694][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.319466][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.343098][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.354570][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.365999][ T5537] device veth0_vlan entered promiscuous mode [ 74.374512][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.383056][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.394792][ T5537] device veth1_vlan entered promiscuous mode [ 74.416205][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.424956][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.433144][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.442802][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.453667][ T5537] device veth0_macvtap entered promiscuous mode [ 74.464757][ T5537] device veth1_macvtap entered promiscuous mode [ 74.481998][ T5537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.489330][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.499594][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.508674][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.517650][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.529120][ T5537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.541332][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.549928][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.563021][ T5537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.574920][ T5537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.584470][ T5537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.593818][ T5537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.656823][ T1024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.671815][ T1024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.682933][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.690876][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.693378][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.705495][ T5078] Bluetooth: hci0: command 0x0409 tx timeout [ 74.717708][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.079154][ T5604] loop0: detected capacity change from 0 to 32768 [ 75.097299][ T5604] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 75.105956][ T5604] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 75.124419][ T5604] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 75.135441][ T898] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 75.142847][ T898] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 75.207364][ T898] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 64ms [ 75.217445][ T898] gfs2: fsid=syz:syz.0: jid=0: Done [ 75.223583][ T5604] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 75.390746][ T5604] gfs2: fsid=syz:syz.0: found 1 quota changes [ 75.424492][ T5537] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 75.424492][ T5537] inode = 11 2340 [ 75.424492][ T5537] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 460 [ 75.445494][ T5537] gfs2: fsid=syz:syz.0: G: s:EX n:2/924 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 75.458859][ T5537] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5537 [syz-executor.0] gfs2_quota_sync+0x37d/0x820 [ 75.470287][ T5537] gfs2: fsid=syz:syz.0: I: n:11/2340 t:8 f:0x00 d:0x00000201 s:176 p:0 [ 75.479500][ T5537] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 75.497739][ T5537] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 75.506750][ T5537] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 75.515330][ T5537] gfs2: fsid=syz:syz.0: File system withdrawn [ 75.524965][ T5537] CPU: 0 PID: 5537 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0 [ 75.534107][ T5537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 75.544189][ T5537] Call Trace: [ 75.547505][ T5537] [ 75.550457][ T5537] dump_stack_lvl+0x1b5/0x2a0 [ 75.555333][ T5537] ? nf_tcp_handle_invalid+0x640/0x640 [ 75.560817][ T5537] ? panic+0x720/0x720 [ 75.564907][ T5537] ? kobject_uevent_env+0x54e/0x8e0 [ 75.570122][ T5537] ? lockref_put_or_lock+0x75/0xc0 [ 75.575263][ T5537] gfs2_withdraw+0xf56/0x1550 [ 75.579981][ T5537] ? gfs2_lm+0x220/0x220 [ 75.584244][ T5537] ? make_kgid+0x1f5/0x6f0 [ 75.588689][ T5537] ? gfs2_consist_inode_i+0xf5/0x110 [ 75.594000][ T5537] gfs2_inode_refresh+0xb32/0xfa0 [ 75.599142][ T5537] ? gfs2_inode_metasync+0xf0/0xf0 [ 75.604283][ T5537] ? _raw_spin_unlock+0x28/0x40 [ 75.609155][ T5537] ? gfs2_glock_nq+0xcbf/0x16c0 [ 75.614206][ T5537] gfs2_instantiate+0x18c/0x250 [ 75.619175][ T5537] gfs2_glock_wait+0x1df/0x2b0 [ 75.624047][ T5537] do_sync+0x482/0xc70 [ 75.628137][ T5537] ? gfs2_quota_sync+0x37d/0x820 [ 75.633400][ T5537] ? slot_put+0x210/0x210 [ 75.637757][ T5537] ? gfs2_quota_sync+0x256/0x820 [ 75.642807][ T5537] ? __lock_acquire+0x1f80/0x1f80 [ 75.647856][ T5537] ? gfs2_quota_sync+0x37d/0x820 [ 75.652814][ T5537] ? do_raw_spin_unlock+0x13b/0x8b0 [ 75.658032][ T5537] ? qd_check_sync+0xba/0x3f0 [ 75.662735][ T5537] gfs2_quota_sync+0x37d/0x820 [ 75.667554][ T5537] gfs2_sync_fs+0x4d/0xb0 [ 75.671904][ T5537] sync_filesystem+0xec/0x220 [ 75.676603][ T5537] generic_shutdown_super+0x6f/0x310 [ 75.681919][ T5537] kill_block_super+0x7e/0xe0 [ 75.686615][ T5537] deactivate_locked_super+0xa4/0x110 [ 75.692011][ T5537] cleanup_mnt+0x490/0x520 [ 75.696445][ T5537] ? lockdep_hardirqs_on+0x90/0x130 [ 75.701678][ T5537] task_work_run+0x24a/0x300 [ 75.706298][ T5537] ? task_work_cancel+0x2b0/0x2b0 [ 75.711348][ T5537] ? exit_to_user_mode_loop+0x39/0xf0 [ 75.716742][ T5537] exit_to_user_mode_loop+0xd1/0xf0 [ 75.721963][ T5537] exit_to_user_mode_prepare+0xb1/0x140 [ 75.727531][ T5537] syscall_exit_to_user_mode+0x54/0x2d0 [ 75.733123][ T5537] do_syscall_64+0x4d/0xc0 [ 75.737562][ T5537] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.743468][ T5537] RIP: 0033:0x7f2ca328d517 [ 75.747901][ T5537] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.767536][ T5537] RSP: 002b:00007fffbdbebda8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 75.776067][ T5537] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2ca328d517 [ 75.784062][ T5537] RDX: 00007fffbdbebe79 RSI: 000000000000000a RDI: 00007fffbdbebe70 [ 75.792049][ T5537] RBP: 00007fffbdbebe70 R08: 00000000ffffffff R09: 00007fffbdbebc40 [ 75.800042][ T5537] R10: 0000555555f358b3 R11: 0000000000000246 R12: 00007f2ca32e6b24 [ 75.808122][ T5537] R13: 00007fffbdbecf30 R14: 0000555555f35810 R15: 00007fffbdbecf70 [ 75.816143][ T5537] [ 76.222831][ T2486] cfg80211: failed to load regulatory.db [ 76.771725][ T5078] Bluetooth: hci0: command 0x041b tx timeout [ 78.851483][ T5078] Bluetooth: hci0: command 0x040f tx timeout [ 80.931786][ T5078] Bluetooth: hci0: command 0x0419 tx timeout [ 132.532640][ T1207] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.539105][ T1207] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.984619][ T1207] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.991064][ T1207] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.051265][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 232.371229][ T28] INFO: task syz-executor.0:5537 blocked for more than 143 seconds. [ 232.379318][ T28] Not tainted 6.2.0-rc1-syzkaller-dirty #0 [ 232.385680][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 232.395866][ T28] task:syz-executor.0 state:D stack:20536 pid:5537 ppid:1 flags:0x00004006 [ 232.405147][ T28] Call Trace: [ 232.408431][ T28] [ 232.411969][ T28] __schedule+0x13ca/0x43c0 [ 232.416494][ T28] ? _raw_spin_unlock+0x40/0x40 [ 232.421397][ T28] ? __mod_timer+0xab2/0xf10 [ 232.425994][ T28] ? release_firmware_map_entry+0x190/0x190 [ 232.431977][ T28] ? memset+0x23/0x40 [ 232.435966][ T28] ? lockdep_init_map_type+0xa1/0x890 [ 232.441377][ T28] ? mod_timer_pending+0x30/0x30 [ 232.446319][ T28] ? lockdep_softirqs_off+0x440/0x440 [ 232.451814][ T28] ? print_irqtrace_events+0x220/0x220 [ 232.457275][ T28] ? do_raw_spin_unlock+0x13b/0x8b0 [ 232.462506][ T28] schedule+0xc3/0x190 [ 232.466578][ T28] schedule_timeout+0x1ae/0x300 [ 232.471557][ T28] ? console_conditional_schedule+0x40/0x40 [ 232.477456][ T28] ? update_process_times+0x1b0/0x1b0 [ 232.482855][ T28] ? prepare_to_wait_event+0x3b2/0x3f0 [ 232.488320][ T28] gfs2_gl_hash_clear+0x192/0x300 [ 232.493419][ T28] ? gfs2_jindex_free+0x446/0x4d0 [ 232.498450][ T28] ? withdraw_dq+0x250/0x250 [ 232.503079][ T28] ? gfs2_jindex_free+0x473/0x4d0 [ 232.508191][ T28] ? wake_bit_function+0x220/0x220 [ 232.513393][ T28] ? gfs2_setbit+0x630/0x630 [ 232.518167][ T28] ? gfs2_clear_rgrpd+0x6a0/0x6c0 [ 232.523256][ T28] gfs2_put_super+0x827/0x890 [ 232.527949][ T28] ? gfs2_evict_inode+0x14e0/0x14e0 [ 232.533357][ T28] generic_shutdown_super+0x134/0x310 [ 232.538752][ T28] kill_block_super+0x7e/0xe0 [ 232.543771][ T28] deactivate_locked_super+0xa4/0x110 [ 232.549156][ T28] cleanup_mnt+0x490/0x520 [ 232.553934][ T28] ? lockdep_hardirqs_on+0x90/0x130 [ 232.559154][ T28] task_work_run+0x24a/0x300 [ 232.563909][ T28] ? task_work_cancel+0x2b0/0x2b0 [ 232.568940][ T28] ? exit_to_user_mode_loop+0x39/0xf0 [ 232.574496][ T28] exit_to_user_mode_loop+0xd1/0xf0 [ 232.579693][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 232.585443][ T28] syscall_exit_to_user_mode+0x54/0x2d0 [ 232.590980][ T28] do_syscall_64+0x4d/0xc0 [ 232.595576][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 232.601656][ T28] RIP: 0033:0x7f2ca328d517 [ 232.606093][ T28] RSP: 002b:00007fffbdbebda8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 232.614745][ T28] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2ca328d517 [ 232.623048][ T28] RDX: 00007fffbdbebe79 RSI: 000000000000000a RDI: 00007fffbdbebe70 [ 232.631171][ T28] RBP: 00007fffbdbebe70 R08: 00000000ffffffff R09: 00007fffbdbebc40 [ 232.639152][ T28] R10: 0000555555f358b3 R11: 0000000000000246 R12: 00007f2ca32e6b24 [ 232.647269][ T28] R13: 00007fffbdbecf30 R14: 0000555555f35810 R15: 00007fffbdbecf70 [ 232.655305][ T28] [ 232.658383][ T28] [ 232.658383][ T28] Showing all locks held in the system: [ 232.666121][ T28] 1 lock held by rcu_tasks_kthre/12: [ 232.671436][ T28] #0: ffffffff8cd26dd0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xce0 [ 232.681928][ T28] 1 lock held by rcu_tasks_trace/13: [ 232.687210][ T28] #0: ffffffff8cd275d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xce0 [ 232.698349][ T28] 1 lock held by khungtaskd/28: [ 232.703373][ T28] #0: ffffffff8cd26c00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 232.712819][ T28] 2 locks held by getty/4747: [ 232.717491][ T28] #0: ffff88814b7d0098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 232.727303][ T28] #1: ffffc900015902f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x53b/0x1630 [ 232.737487][ T28] 1 lock held by syz-executor.0/5537: [ 232.742888][ T28] #0: ffff888078e920e0 (&type->s_umount_key#50){+.+.}-{3:3}, at: deactivate_super+0xad/0xf0 [ 232.753174][ T28] [ 232.755480][ T28] ============================================= [ 232.755480][ T28] [ 232.764126][ T28] NMI backtrace for cpu 1 [ 232.768458][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc1-syzkaller-dirty #0 [ 232.777214][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 232.787261][ T28] Call Trace: [ 232.790614][ T28] [ 232.793539][ T28] dump_stack_lvl+0x1b5/0x2a0 [ 232.798231][ T28] ? nf_tcp_handle_invalid+0x640/0x640 [ 232.803694][ T28] ? panic+0x720/0x720 [ 232.807762][ T28] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 232.813129][ T28] ? nmi_cpu_backtrace+0x210/0x500 [ 232.818234][ T28] nmi_cpu_backtrace+0x47b/0x500 [ 232.823174][ T28] ? vprintk_emit+0x10d/0x1f0 [ 232.827844][ T28] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 232.833993][ T28] ? _printk+0xc4/0x110 [ 232.838141][ T28] ? panic+0x720/0x720 [ 232.842202][ T28] ? __wake_up_klogd+0xcc/0x100 [ 232.847046][ T28] ? panic+0x720/0x720 [ 232.851113][ T28] ? nmi_trigger_cpumask_backtrace+0x105/0x430 [ 232.857279][ T28] nmi_trigger_cpumask_backtrace+0x1d3/0x430 [ 232.863250][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 232.869313][ T28] watchdog+0xf70/0xfb0 [ 232.873469][ T28] kthread+0x270/0x300 [ 232.877626][ T28] ? hungtask_pm_notify+0x90/0x90 [ 232.882640][ T28] ? kthread_blkcg+0xd0/0xd0 [ 232.887225][ T28] ret_from_fork+0x1f/0x30 [ 232.891645][ T28] [ 232.894867][ T28] Sending NMI from CPU 1 to CPUs 0: [ 232.900086][ C0] NMI backtrace for cpu 0 [ 232.900094][ C0] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.2.0-rc1-syzkaller-dirty #0 [ 232.900107][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 232.900113][ C0] Workqueue: events_unbound toggle_allocation_gate [ 232.900132][ C0] RIP: 0010:cpus_read_lock+0x0/0x130 [ 232.900148][ C0] Code: 09 66 0f 1f 84 00 00 00 00 00 66 0f 1f 00 e8 87 fe 37 00 48 c7 c7 a0 36 bc 8c e9 2b 51 49 09 66 2e 0f 1f 84 00 00 00 00 00 90 0f 1e fa 53 e8 66 fe 37 00 48 c7 c7 20 6e c9 8a be 31 00 00 00 [ 232.900157][ C0] RSP: 0018:ffffc90000107b68 EFLAGS: 00000293 [ 232.900166][ C0] RAX: ffffffff81b6e94d RBX: ffffffff91869260 RCX: ffff88801237ba80 [ 232.900175][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff91869260 [ 232.900182][ C0] RBP: ffffc90000107c50 R08: ffffffff81dfd0bb R09: 0000000000000003 [ 232.900190][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 232.900198][ C0] R13: 1ffff1100243a983 R14: ffffffff918c86e0 R15: 1ffff92000020f70 [ 232.900206][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 232.900215][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.900223][ C0] CR2: 000055816f4e6600 CR3: 000000000ca8e000 CR4: 00000000003506f0 [ 232.900234][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 232.900241][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 232.900247][ C0] Call Trace: [ 232.900251][ C0] [ 232.900254][ C0] static_key_disable+0x12/0x20 [ 232.900269][ C0] toggle_allocation_gate+0x1a9/0x240 [ 232.900284][ C0] ? virt_to_slab+0x2b0/0x2b0 [ 232.900298][ C0] ? rcu_read_lock_sched_held+0x8b/0x110 [ 232.900314][ C0] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 232.900329][ C0] ? do_raw_spin_unlock+0x13b/0x8b0 [ 232.900344][ C0] process_one_work+0x96c/0x13e0 [ 232.900364][ C0] ? worker_detach_from_pool+0x260/0x260 [ 232.900378][ C0] ? _raw_spin_lock_irq+0xbe/0xf0 [ 232.900392][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 232.900409][ C0] worker_thread+0xa63/0x1210 [ 232.900431][ C0] kthread+0x270/0x300 [ 232.900441][ C0] ? rcu_lock_release+0x30/0x30 [ 232.900453][ C0] ? kthread_blkcg+0xd0/0xd0 [ 232.900464][ C0] ret_from_fork+0x1f/0x30 [ 232.900483][ C0] [ 232.905048][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 232.905059][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc1-syzkaller-dirty #0 [ 232.905074][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 232.905081][ T28] Call Trace: [ 232.905085][ T28] [ 232.905090][ T28] dump_stack_lvl+0x1b5/0x2a0 [ 232.905112][ T28] ? nf_tcp_handle_invalid+0x640/0x640 [ 232.905129][ T28] ? panic+0x720/0x720 [ 232.905154][ T28] ? vscnprintf+0x5d/0x80 [ 232.905169][ T28] panic+0x2dc/0x720 [ 232.905187][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 232.905202][ T28] ? nmi_trigger_cpumask_backtrace+0x2e4/0x430 [ 232.905221][ T28] ? memcpy_page_flushcache+0x100/0x100 [ 232.905244][ T28] ? nmi_trigger_cpumask_backtrace+0x2e4/0x430 [ 232.905260][ T28] ? nmi_trigger_cpumask_backtrace+0x361/0x430 [ 232.905279][ T28] ? nmi_trigger_cpumask_backtrace+0x366/0x430 [ 232.905295][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 232.905312][ T28] watchdog+0xfae/0xfb0 [ 232.905338][ T28] kthread+0x270/0x300 [ 232.905351][ T28] ? hungtask_pm_notify+0x90/0x90 [ 232.905363][ T28] ? kthread_blkcg+0xd0/0xd0 [ 232.905378][ T28] ret_from_fork+0x1f/0x30 [ 232.905407][ T28] [ 232.905714][ T28] Kernel Offset: disabled [ 233.252636][ T28] Rebooting in 86400 seconds..