[ 58.559253][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.571793][ T8] veth1_macvtap: left promiscuous mode [ 58.577855][ T8] veth0_macvtap: left promiscuous mode [ 58.583607][ T8] veth1_vlan: left promiscuous mode [ 58.589109][ T8] veth0_vlan: left promiscuous mode [ 58.740346][ T8] team0 (unregistering): Port device team_slave_1 removed [ 58.753545][ T8] team0 (unregistering): Port device team_slave_0 removed [ 58.787287][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.805063][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.854397][ T8] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.245' (ECDSA) to the list of known hosts. 2023/03/03 05:15:06 ignoring optional flag "sandboxArg"="0" 2023/03/03 05:15:06 parsed 1 programs [ 71.591840][ T26] audit: type=1400 audit(1677820506.848:188): avc: denied { mounton } for pid=5465 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 71.617064][ T26] audit: type=1400 audit(1677820506.848:189): avc: denied { mount } for pid=5465 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2023/03/03 05:15:06 executed programs: 0 [ 71.642685][ T26] audit: type=1400 audit(1677820506.848:190): avc: denied { create } for pid=5465 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.664528][ T26] audit: type=1400 audit(1677820506.848:191): avc: denied { write } for pid=5465 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.690145][ T4390] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.690632][ T26] audit: type=1400 audit(1677820506.848:192): avc: denied { read } for pid=5465 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.698754][ T4390] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.719747][ T26] audit: type=1400 audit(1677820506.878:193): avc: denied { read } for pid=4645 comm="dhcpcd" name="n79" dev="tmpfs" ino=1549 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.727678][ T4390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.747781][ T26] audit: type=1400 audit(1677820506.878:194): avc: denied { open } for pid=4645 comm="dhcpcd" path="/run/udev/data/n79" dev="tmpfs" ino=1549 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.764340][ T4390] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.786630][ T4390] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.787016][ T26] audit: type=1400 audit(1677820506.878:195): avc: denied { getattr } for pid=4645 comm="dhcpcd" path="/run/udev/data/n79" dev="tmpfs" ino=1549 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.825056][ T26] audit: type=1400 audit(1677820506.938:196): avc: denied { create } for pid=5472 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.848647][ T26] audit: type=1400 audit(1677820506.948:197): avc: denied { ioctl } for pid=5472 comm="syz-executor.0" path="socket:[30565]" dev="sockfs" ino=30565 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.989181][ T5472] chnl_net:caif_netlink_parms(): no params data found [ 72.052792][ T5472] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.060844][ T5472] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.068936][ T5472] bridge_slave_0: entered allmulticast mode [ 72.076057][ T5472] bridge_slave_0: entered promiscuous mode [ 72.084996][ T5472] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.093143][ T5472] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.100837][ T5472] bridge_slave_1: entered allmulticast mode [ 72.109917][ T5472] bridge_slave_1: entered promiscuous mode [ 72.143876][ T5472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.156150][ T5472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.190735][ T5472] team0: Port device team_slave_0 added [ 72.203903][ T5472] team0: Port device team_slave_1 added [ 72.252645][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.272410][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.323582][ T5472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.356633][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.372338][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.433699][ T5472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.488092][ T5472] hsr_slave_0: entered promiscuous mode [ 72.496564][ T5472] hsr_slave_1: entered promiscuous mode [ 73.056616][ T5472] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.069638][ T5472] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.081554][ T5472] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.094291][ T5472] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.177303][ T5472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.196070][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.206250][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.219207][ T5472] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.231247][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.241266][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.250086][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.257329][ T5089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.281378][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.290309][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.300763][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.310064][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.317245][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.326456][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.336041][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.348162][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.357707][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.367831][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.376815][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.394251][ T5472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.408846][ T5472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.421445][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.430487][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.439342][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.448818][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.457590][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.469924][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.605587][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.614747][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.624652][ T5472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.649534][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.660435][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.685286][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.695808][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.707137][ T5472] veth0_vlan: entered promiscuous mode [ 73.716140][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.724933][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.736822][ T5472] veth1_vlan: entered promiscuous mode [ 73.759747][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.769110][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.778792][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.787909][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.799235][ T5472] veth0_macvtap: entered promiscuous mode [ 73.811437][ T5472] veth1_macvtap: entered promiscuous mode [ 73.823718][ T4390] Bluetooth: hci0: command 0x0409 tx timeout [ 73.830177][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.839699][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.849528][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.860747][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.870504][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.883012][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.895750][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.905562][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.917572][ T5472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.928010][ T5472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.937374][ T5472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.947001][ T5472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.038371][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.052710][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.061882][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.087337][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.095658][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.105955][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.903064][ T4390] Bluetooth: hci0: command 0x041b tx timeout [ 76.864715][ T2217] cfg80211: failed to load regulatory.db [ 77.992408][ T4390] Bluetooth: hci0: command 0x040f tx timeout [ 80.062874][ T4390] Bluetooth: hci0: command 0x0419 tx timeout [ 128.063771][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.070251][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.504482][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.510832][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.702488][ T5077] Bluetooth: hci0: command 0x0406 tx timeout [ 233.662545][ T27] INFO: task syz-executor.0:5472 blocked for more than 143 seconds. [ 233.670769][ T27] Not tainted 6.2.0-syzkaller #0 [ 233.676426][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.685283][ T27] task:syz-executor.0 state:D stack:24048 pid:5472 ppid:1 flags:0x00000004 [ 233.694575][ T27] Call Trace: [ 233.697923][ T27] [ 233.700875][ T27] __schedule+0xc3e/0x5a70 [ 233.705531][ T27] ? io_schedule_timeout+0x150/0x150 [ 233.710835][ T27] ? __down_read_common+0x308/0xf30 [ 233.716106][ T27] schedule+0xde/0x1a0 [ 233.720300][ T27] schedule_preempt_disabled+0x13/0x20 [ 233.727061][ T27] __down_read_common+0x7df/0xf30 [ 233.732233][ T27] ? down_write_nested+0x200/0x200 [ 233.737409][ T27] ? lock_release+0x780/0x780 [ 233.742133][ T27] ? _raw_spin_unlock+0x28/0x40 [ 233.747042][ T27] walk_component+0x296/0x4e0 [ 233.751842][ T27] link_path_walk.part.0+0x568/0xac0 [ 233.757311][ T27] ? walk_component+0x4e0/0x4e0 [ 233.762452][ T27] ? lockdep_hardirqs_on+0x7d/0x100 [ 233.767693][ T27] path_openat+0x1f8/0x2280 [ 233.772187][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 233.778242][ T27] ? path_lookupat+0x750/0x750 [ 233.783283][ T27] do_filp_open+0x1a9/0x3e0 [ 233.787812][ T27] ? may_open_dev+0xd0/0xd0 [ 233.792403][ T27] ? find_held_lock+0x2d/0x110 [ 233.797262][ T27] ? do_raw_spin_lock+0x124/0x2b0 [ 233.802359][ T27] ? spin_bug+0x1c0/0x1c0 [ 233.806731][ T27] ? _raw_spin_unlock+0x28/0x40 [ 233.811752][ T27] ? alloc_fd+0x1e4/0x640 [ 233.816217][ T27] ? getname_flags.part.0+0x89/0x440 [ 233.821514][ T27] do_sys_openat2+0x11e/0x3f0 [ 233.826507][ T27] ? hrtimer_init_sleeper_on_stack+0x90/0x90 [ 233.833451][ T27] ? build_open_flags+0x490/0x490 [ 233.838492][ T27] ? put_timespec64+0x100/0x100 [ 233.843494][ T27] ? xfd_validate_state+0x23/0x120 [ 233.848664][ T27] __x64_sys_openat+0x11f/0x1d0 [ 233.853591][ T27] ? __ia32_sys_open+0x1a0/0x1a0 [ 233.858738][ T27] ? syscall_enter_from_user_mode+0x26/0xb0 [ 233.864943][ T27] ? lockdep_hardirqs_on+0x7d/0x100 [ 233.870160][ T27] do_syscall_64+0x39/0xb0 [ 233.874624][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 233.880626][ T27] RIP: 0033:0x7feba148bc48 [ 233.885134][ T27] RSP: 002b:00007ffdd3798440 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 233.893609][ T27] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007feba148bc48 [ 233.901586][ T27] RDX: 0000000000090800 RSI: 00007feba14e6bc8 RDI: 00000000ffffff9c [ 233.909785][ T27] RBP: 00007ffdd379850c R08: 0000000000090800 R09: 00007feba14e6bc8 [ 233.917807][ T27] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 [ 233.926057][ T27] R13: 0000000000011c99 R14: 0000000000000009 R15: 00007ffdd3798570 [ 233.934073][ T27] [ 233.937147][ T27] INFO: task syz-executor.0:5564 blocked for more than 143 seconds. [ 233.945610][ T27] Not tainted 6.2.0-syzkaller #0 [ 233.951209][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.960172][ T27] task:syz-executor.0 state:D stack:26016 pid:5564 ppid:5472 flags:0x00004004 [ 233.969577][ T27] Call Trace: [ 233.972973][ T27] [ 233.976000][ T27] __schedule+0xc3e/0x5a70 [ 233.980412][ T27] ? find_held_lock+0x2d/0x110 [ 233.985328][ T27] ? io_schedule_timeout+0x150/0x150 [ 233.990614][ T27] ? mark_held_locks+0x9f/0xe0 [ 233.995522][ T27] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 234.001334][ T27] ? lockdep_hardirqs_on+0x7d/0x100 [ 234.006595][ T27] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 234.012498][ T27] schedule+0xde/0x1a0 [ 234.016558][ T27] request_wait_answer+0x371/0x6b0 [ 234.021761][ T27] ? queue_interrupt+0x470/0x470 [ 234.026879][ T27] ? preempt_schedule_thunk+0x1a/0x20 [ 234.032373][ T27] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 234.038294][ T27] ? preempt_schedule_thunk+0x1a/0x20 [ 234.043966][ T27] fuse_simple_request+0x480/0xba0 [ 234.049181][ T27] ? kasan_set_track+0x25/0x30 [ 234.054013][ T27] fuse_lookup_name+0x259/0x5e0 [ 234.058973][ T27] ? fuse_create+0x20/0x20 [ 234.063728][ T27] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 234.069464][ T27] ? __d_lookup_rcu+0x2cd/0x3d0 [ 234.074590][ T27] fuse_lookup.part.0+0xd6/0x2c0 [ 234.079556][ T27] ? fuse_lookup_name+0x5e0/0x5e0 [ 234.084694][ T27] __lookup_slow+0x200/0x3f0 [ 234.089336][ T27] ? __lookup_hash+0x140/0x140 [ 234.094289][ T27] ? lock_release+0x780/0x780 [ 234.099031][ T27] ? _raw_spin_unlock+0x28/0x40 [ 234.103982][ T27] walk_component+0x2a3/0x4e0 [ 234.109036][ T27] link_path_walk.part.0+0x568/0xac0 [ 234.114388][ T27] ? walk_component+0x4e0/0x4e0 [ 234.119241][ T27] ? lockdep_hardirqs_on+0x7d/0x100 [ 234.124659][ T27] path_openat+0x1f8/0x2280 [ 234.129341][ T27] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 234.135413][ T27] ? path_lookupat+0x750/0x750 [ 234.140279][ T27] do_filp_open+0x1a9/0x3e0 [ 234.145152][ T27] ? may_open_dev+0xd0/0xd0 [ 234.149667][ T27] ? find_held_lock+0x2d/0x110 [ 234.154735][ T27] ? do_raw_spin_lock+0x124/0x2b0 [ 234.159858][ T27] ? spin_bug+0x1c0/0x1c0 [ 234.164262][ T27] ? _raw_spin_unlock+0x28/0x40 [ 234.169124][ T27] ? alloc_fd+0x1e4/0x640 [ 234.173626][ T27] ? getname_flags.part.0+0x89/0x440 [ 234.178952][ T27] do_sys_openat2+0x11e/0x3f0 [ 234.183722][ T27] ? build_open_flags+0x490/0x490 [ 234.188762][ T27] ? xfd_validate_state+0x23/0x120 [ 234.193920][ T27] __x64_sys_openat+0x11f/0x1d0 [ 234.198770][ T27] ? __ia32_sys_open+0x1a0/0x1a0 [ 234.203799][ T27] ? syscall_enter_from_user_mode+0x26/0xb0 [ 234.209823][ T27] ? lockdep_hardirqs_on+0x7d/0x100 [ 234.215172][ T27] do_syscall_64+0x39/0xb0 [ 234.219608][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 234.225779][ T27] RIP: 0033:0x7feba148c0d9 [ 234.230197][ T27] RSP: 002b:00007feba22d6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.238661][ T27] RAX: ffffffffffffffda RBX: 00007feba15abf80 RCX: 00007feba148c0d9 [ 234.246862][ T27] RDX: 0000000000000042 RSI: 0000000020002080 RDI: ffffffffffffff9c [ 234.254910][ T27] RBP: 00007feba14e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 234.262980][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.270976][ T27] R13: 00007ffdd379824f R14: 00007feba22d6300 R15: 0000000000022000 [ 234.279223][ T27] [ 234.282544][ T27] INFO: task syz-executor.0:5568 blocked for more than 143 seconds. [ 234.290548][ T27] Not tainted 6.2.0-syzkaller #0 [ 234.296094][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 234.304852][ T27] task:syz-executor.0 state:D stack:28736 pid:5568 ppid:5472 flags:0x00000004 [ 234.314126][ T27] Call Trace: [ 234.317525][ T27] [ 234.320513][ T27] __schedule+0xc3e/0x5a70 [ 234.325249][ T27] ? io_schedule_timeout+0x150/0x150 [ 234.330549][ T27] ? rwsem_down_write_slowpath+0x3b8/0x1220 [ 234.336497][ T27] schedule+0xde/0x1a0 [ 234.340912][ T27] schedule_preempt_disabled+0x13/0x20 [ 234.346540][ T27] rwsem_down_write_slowpath+0x3e2/0x1220 [ 234.352511][ T27] ? lock_acquire+0x1e3/0x670 [ 234.357282][ T27] ? down_timeout+0x90/0x90 [ 234.361874][ T27] ? lock_release+0x780/0x780 [ 234.366633][ T27] ? fuse_init_file_inode+0x1e0/0x1e0 [ 234.372115][ T27] down_write_nested+0x1d6/0x200 [ 234.377294][ T27] ? _down_write_nest_lock+0x200/0x200 [ 234.382860][ T27] fuse_reverse_inval_entry+0x42/0x4a0 [ 234.388334][ T27] fuse_dev_do_write+0x1dde/0x2580 [ 234.393631][ T27] ? print_usage_bug.part.0+0x660/0x660 [ 234.399447][ T27] ? get_futex_key+0x417/0x14a0 [ 234.404373][ T27] ? fuse_dev_splice_read+0x580/0x580 [ 234.409793][ T27] ? io_schedule_timeout+0x150/0x150 [ 234.415222][ T27] ? futex_wait_queue+0x7d/0x1d0 [ 234.420168][ T27] fuse_dev_write+0x133/0x1c0 [ 234.424994][ T27] ? fuse_dev_splice_write+0xa60/0xa60 [ 234.430466][ T27] vfs_write+0x823/0xd80 [ 234.434952][ T27] ? kernel_write+0x5d0/0x5d0 [ 234.439672][ T27] ? __fget_files+0x1bf/0x3c0 [ 234.444523][ T27] ? __fget_light+0xb9/0x210 [ 234.449309][ T27] ? __x64_sys_futex+0x180/0x3f0 [ 234.454303][ T27] ksys_write+0xf2/0x1c0 [ 234.458544][ T27] ? __ia32_sys_read+0xa0/0xa0 [ 234.463387][ T27] ? syscall_enter_from_user_mode+0x26/0xb0 [ 234.469278][ T27] do_syscall_64+0x39/0xb0 [ 234.473771][ T27] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 234.479796][ T27] RIP: 0033:0x7feba148c0d9 [ 234.484291][ T27] RSP: 002b:00007feba22b5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.492857][ T27] RAX: ffffffffffffffda RBX: 00007feba15ac050 RCX: 00007feba148c0d9 [ 234.500929][ T27] RDX: 000000000000002c RSI: 00000000200000c0 RDI: 0000000000000003 [ 234.509084][ T27] RBP: 00007feba14e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 234.517120][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.525146][ T27] R13: 00007ffdd379824f R14: 00007feba22b5300 R15: 0000000000022000 [ 234.533176][ T27] [ 234.536197][ T27] [ 234.536197][ T27] Showing all locks held in the system: [ 234.544236][ T27] 1 lock held by rcu_tasks_kthre/11: [ 234.552228][ T27] #0: ffffffff8b789830 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 234.562956][ T27] 1 lock held by rcu_tasks_trace/12: [ 234.568235][ T27] #0: ffffffff8b789530 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 234.579382][ T27] 1 lock held by khungtaskd/27: [ 234.584394][ T27] #0: ffffffff8b78a380 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 [ 234.594337][ T27] 2 locks held by getty/4741: [ 234.599021][ T27] #0: ffff88814a8ae098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x23/0x80 [ 234.608898][ T27] #1: ffffc900020182f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xb73/0x1040 [ 234.619095][ T27] 1 lock held by syz-executor.0/5472: [ 234.625209][ T27] #0: ffff88806e13e850 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: walk_component+0x296/0x4e0 [ 234.635638][ T27] 2 locks held by syz-executor.0/5564: [ 234.641104][ T27] #0: ffff88806e13e850 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: walk_component+0x296/0x4e0 [ 234.652037][ T27] #1: ffff88806e13ecb8 (&fi->mutex){+.+.}-{3:3}, at: fuse_lock_inode+0xaf/0xe0 [ 234.661241][ T27] 2 locks held by syz-executor.0/5568: [ 234.666741][ T27] #0: ffff88801fe01338 (&fc->killsb){.+.+}-{3:3}, at: fuse_dev_do_write+0x1dbb/0x2580 [ 234.676437][ T27] #1: ffff88806e13e850 (&type->i_mutex_dir_key#8/1){+.+.}-{3:3}, at: fuse_reverse_inval_entry+0x42/0x4a0 [ 234.688112][ T27] [ 234.690610][ T27] ============================================= [ 234.690610][ T27] [ 234.699420][ T27] NMI backtrace for cpu 0 [ 234.703741][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.2.0-syzkaller #0 [ 234.711459][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 234.721814][ T27] Call Trace: [ 234.725089][ T27] [ 234.728008][ T27] dump_stack_lvl+0x64/0xb0 [ 234.732693][ T27] nmi_cpu_backtrace+0x1db/0x290 [ 234.737639][ T27] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 234.742849][ T27] nmi_trigger_cpumask_backtrace+0x25d/0x340 [ 234.748811][ T27] watchdog+0xa5c/0xe20 [ 234.753046][ T27] ? proc_dohung_task_timeout_secs+0x30/0x30 [ 234.759150][ T27] kthread+0x298/0x340 [ 234.763296][ T27] ? kthread_complete_and_exit+0x20/0x20 [ 234.769044][ T27] ret_from_fork+0x1f/0x30 [ 234.773678][ T27] [ 234.776968][ T27] Sending NMI from CPU 0 to CPUs 1: [ 234.782425][ C1] NMI backtrace for cpu 1 [ 234.782430][ C1] CPU: 1 PID: 56 Comm: kworker/u4:4 Not tainted 6.2.0-syzkaller #0 [ 234.782437][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 234.782441][ C1] Workqueue: events_unbound toggle_allocation_gate [ 234.782457][ C1] RIP: 0010:lock_is_held_type+0x97/0x140 [ 234.782467][ C1] Code: 00 00 4d 8d ac 24 38 0a 00 00 65 ff 05 52 12 ca 76 85 c0 7f 12 e9 8a 00 00 00 83 c3 01 41 3b 9c 24 30 0a 00 00 7d 7d 48 63 c3 <48> 89 ee 48 8d 04 80 4d 8d 7c c5 00 4c 89 ff e8 95 fe ff ff 85 c0 [ 234.782472][ C1] RSP: 0018:ffffc9000202fa60 EFLAGS: 00000097 [ 234.782477][ C1] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 0000000000000001 [ 234.782480][ C1] RDX: 0000000000000000 RSI: ffffffff8b78a320 RDI: ffff888017ac4c88 [ 234.782483][ C1] RBP: ffffffff8b78a320 R08: ffffffff812980b2 R09: ffffc9000202fb17 [ 234.782486][ C1] R10: fffff52000405f62 R11: 0000000000000000 R12: ffff888017ac4200 [ 234.782489][ C1] R13: ffff888017ac4c38 R14: 00000000ffffffff R15: ffff888017ac4c88 [ 234.782493][ C1] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 234.782500][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.782503][ C1] CR2: 000055bca2ba2600 CR3: 000000000b56c000 CR4: 00000000003506e0 [ 234.782506][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 234.782508][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.782511][ C1] Call Trace: [ 234.782514][ C1] [ 234.782516][ C1] __might_resched+0x414/0x580 [ 234.782526][ C1] __mutex_lock+0x9f/0x1350 [ 234.782533][ C1] ? wait_for_completion_io_timeout+0x20/0x20 [ 234.782538][ C1] ? arch_jump_label_transform_apply+0x12/0x30 [ 234.782545][ C1] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 234.782549][ C1] ? __kmem_cache_alloc_node+0xae/0x3f0 [ 234.782554][ C1] ? __jump_label_patch+0x173/0x340 [ 234.782557][ C1] ? lock_release+0x780/0x780 [ 234.782564][ C1] ? arch_jump_label_transform_queue+0xa4/0x100 [ 234.782568][ C1] ? __jump_label_update+0xea/0x330 [ 234.782574][ C1] arch_jump_label_transform_apply+0x12/0x30 [ 234.782579][ C1] static_key_disable_cpuslocked+0x104/0x160 [ 234.782584][ C1] static_key_disable+0x15/0x20 [ 234.782587][ C1] toggle_allocation_gate+0x118/0x1e0 [ 234.782592][ C1] ? wake_up_kfence_timer+0x20/0x20 [ 234.782598][ C1] process_one_work+0x8ba/0x15a0 [ 234.782606][ C1] ? pwq_dec_nr_in_flight+0x230/0x230 [ 234.782611][ C1] ? spin_bug+0x1c0/0x1c0 [ 234.782616][ C1] worker_thread+0x59c/0xec0 [ 234.782621][ C1] ? __kthread_parkme+0xc1/0x1f0 [ 234.782626][ C1] ? process_one_work+0x15a0/0x15a0 [ 234.782630][ C1] kthread+0x298/0x340 [ 234.782634][ C1] ? kthread_complete_and_exit+0x20/0x20 [ 234.782639][ C1] ret_from_fork+0x1f/0x30 [ 234.782648][ C1] [ 234.783420][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 235.066581][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.2.0-syzkaller #0 [ 235.074993][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 235.085119][ T27] Call Trace: [ 235.088492][ T27] [ 235.091416][ T27] dump_stack_lvl+0x64/0xb0 [ 235.096079][ T27] panic+0x476/0x520 [ 235.100043][ T27] ? panic_smp_self_stop+0x70/0x70 [ 235.105152][ T27] ? irq_work_claim+0x16/0x60 [ 235.109815][ T27] watchdog+0x64c/0xe20 [ 235.113983][ T27] ? proc_dohung_task_timeout_secs+0x30/0x30 [ 235.119942][ T27] kthread+0x298/0x340 [ 235.123992][ T27] ? kthread_complete_and_exit+0x20/0x20 [ 235.129727][ T27] ret_from_fork+0x1f/0x30 [ 235.134243][ T27] [ 235.137654][ T27] Kernel Offset: disabled [ 235.142231][ T27] Rebooting in 86400 seconds..