Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. 2023/11/03 14:38:54 ignoring optional flag "sandboxArg"="0" 2023/11/03 14:38:54 parsed 1 programs 2023/11/03 14:38:54 executed programs: 0 [ 80.584200][ T4452] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.591987][ T4452] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.600237][ T4452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.609135][ T4452] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.617685][ T4452] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.624988][ T4452] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.742104][ T5410] chnl_net:caif_netlink_parms(): no params data found [ 80.795056][ T5410] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.802197][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.809704][ T5410] bridge_slave_0: entered allmulticast mode [ 80.816648][ T5410] bridge_slave_0: entered promiscuous mode [ 80.825452][ T5410] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.832624][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.840177][ T5410] bridge_slave_1: entered allmulticast mode [ 80.848171][ T5410] bridge_slave_1: entered promiscuous mode [ 80.877711][ T5410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.889359][ T5410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.916621][ T5410] team0: Port device team_slave_0 added [ 80.925306][ T5410] team0: Port device team_slave_1 added [ 80.947359][ T5410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.954389][ T5410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.980900][ T5410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.994115][ T5410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.001072][ T5410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.027527][ T5410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.067275][ T5410] hsr_slave_0: entered promiscuous mode [ 81.075216][ T5410] hsr_slave_1: entered promiscuous mode [ 81.838686][ T5410] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.850024][ T5410] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.862960][ T5410] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.874466][ T5410] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.895118][ T55] cfg80211: failed to load regulatory.db [ 81.982970][ T5410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.009352][ T5410] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.026798][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.034004][ T5069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.054376][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.061724][ T5449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.277038][ T5410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.337606][ T5410] veth0_vlan: entered promiscuous mode [ 82.358660][ T5410] veth1_vlan: entered promiscuous mode [ 82.396410][ T5410] veth0_macvtap: entered promiscuous mode [ 82.409202][ T5410] veth1_macvtap: entered promiscuous mode [ 82.435795][ T5410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.453007][ T5410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.470128][ T5410] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.481746][ T5410] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.492314][ T5410] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.502376][ T5410] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.589865][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.607021][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.638110][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.651107][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.687601][ T4452] Bluetooth: hci0: command 0x0409 tx timeout [ 82.747791][ T5479] nbd0: detected capacity change from 0 to 8 [ 83.547920][ T4452] block nbd0: Receive control failed (result -104) [ 84.763570][ T4452] Bluetooth: hci0: command 0x041b tx timeout [ 86.853934][ T4452] Bluetooth: hci0: command 0x040f tx timeout [ 88.923906][ T4452] Bluetooth: hci0: command 0x0419 tx timeout [ 113.250126][ T24] block nbd0: Possible stuck request ffff88801d298000: control (read@0,4096B). Runtime 30 seconds [ 133.085920][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.092585][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 2023/11/03 14:39:51 executed programs: 1 [ 138.753127][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.763245][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.771211][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.779855][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.788025][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.795490][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.909769][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 138.961174][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.968439][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.976050][ T5772] bridge_slave_0: entered allmulticast mode [ 138.982821][ T5772] bridge_slave_0: entered promiscuous mode [ 138.990897][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.998447][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.005755][ T5772] bridge_slave_1: entered allmulticast mode [ 139.012466][ T5772] bridge_slave_1: entered promiscuous mode [ 139.037894][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.048934][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.076872][ T5772] team0: Port device team_slave_0 added [ 139.087170][ T5772] team0: Port device team_slave_1 added [ 139.110413][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.117801][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.143966][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.156896][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.163996][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.190933][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.226843][ T5772] hsr_slave_0: entered promiscuous mode [ 139.234585][ T5772] hsr_slave_1: entered promiscuous mode [ 139.240880][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.253401][ T5772] Cannot create hsr debugfs directory [ 139.341631][ T5772] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.396599][ T5772] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.464469][ T5772] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.573625][ T5772] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.694142][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.709877][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.719386][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.728502][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.747956][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.755842][ T5772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.763270][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.770395][ T5772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.824339][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.840079][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.848614][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.856617][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.877639][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.884885][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.893035][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.900182][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.031959][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.072959][ T5772] veth0_vlan: entered promiscuous mode [ 140.084988][ T5772] veth1_vlan: entered promiscuous mode [ 140.111065][ T5772] veth0_macvtap: entered promiscuous mode [ 140.121103][ T5772] veth1_macvtap: entered promiscuous mode [ 140.136135][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.149066][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.160665][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.176038][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.187127][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.199911][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.218822][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.228624][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.237568][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.246415][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.312127][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.324403][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.349017][ T5065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.357329][ T5065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.843438][ T50] Bluetooth: hci1: command 0x0409 tx timeout [ 142.923293][ T50] Bluetooth: hci1: command 0x041b tx timeout [ 143.324969][ T24] block nbd0: Possible stuck request ffff88801d298000: control (read@0,4096B). Runtime 60 seconds [ 143.403833][ T4509] udevd[4509]: worker [5404] /devices/virtual/block/nbd0 is taking a long time [ 145.003812][ T50] Bluetooth: hci1: command 0x040f tx timeout [ 147.083318][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 173.404416][ T24] block nbd0: Possible stuck request ffff88801d298000: control (read@0,4096B). Runtime 90 seconds [ 194.526085][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.532512][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 2023/11/03 14:40:49 executed programs: 2 [ 196.427175][ T4452] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.436035][ T4452] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.446731][ T4452] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.455792][ T4452] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.463385][ T4452] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 196.470835][ T4452] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 196.596426][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 196.652473][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.660242][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.667709][ T5788] bridge_slave_0: entered allmulticast mode [ 196.674909][ T5788] bridge_slave_0: entered promiscuous mode [ 196.683826][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.691143][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.698657][ T5788] bridge_slave_1: entered allmulticast mode [ 196.705539][ T5788] bridge_slave_1: entered promiscuous mode [ 196.733916][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.745353][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.775596][ T5788] team0: Port device team_slave_0 added [ 196.783064][ T5788] team0: Port device team_slave_1 added [ 196.805894][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.812963][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.840021][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.853330][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.860394][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.887330][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.924537][ T5788] hsr_slave_0: entered promiscuous mode [ 196.931529][ T5788] hsr_slave_1: entered promiscuous mode [ 196.938149][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.945814][ T5788] Cannot create hsr debugfs directory [ 197.032727][ T5788] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.108609][ T5788] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.202375][ T5788] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.291736][ T5788] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.412922][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 197.422485][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 197.433767][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 197.444020][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 197.465544][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.472720][ T5788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.480847][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.487975][ T5788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.545539][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.561308][ T5067] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.569690][ T5067] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.585034][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.600243][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.607697][ T5069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.624756][ T5067] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.632144][ T5067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.669361][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.777884][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.814428][ T5788] veth0_vlan: entered promiscuous mode [ 197.825576][ T5788] veth1_vlan: entered promiscuous mode [ 197.851404][ T5788] veth0_macvtap: entered promiscuous mode [ 197.860638][ T5788] veth1_macvtap: entered promiscuous mode [ 197.878620][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.890380][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.901594][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.912654][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.928309][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.942667][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.955362][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.965410][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.975948][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.986927][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.999294][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.008815][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.018181][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.028247][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.087734][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.095774][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.126091][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.134350][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.523505][ T4452] Bluetooth: hci2: command 0x0409 tx timeout [ 200.603309][ T4452] Bluetooth: hci2: command 0x041b tx timeout [ 202.683706][ T4452] Bluetooth: hci2: command 0x040f tx timeout [ 203.485722][ T24] block nbd0: Possible stuck request ffff88801d298000: control (read@0,4096B). Runtime 120 seconds [ 204.769360][ T50] Bluetooth: hci2: command 0x0419 tx timeout [ 206.843536][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 233.563613][ T24] block nbd0: Possible stuck request ffff88801d298000: control (read@0,4096B). Runtime 150 seconds [ 238.043493][ T29] INFO: task syz-executor.0:5479 blocked for more than 143 seconds. [ 238.051865][ T29] Not tainted 6.6.0-syzkaller-12401-g8f6f76a6a29f #0 [ 238.064509][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.074700][ T29] task:syz-executor.0 state:D stack:25416 pid:5479 tgid:5478 ppid:5410 flags:0x00004006 [ 238.085751][ T29] Call Trace: [ 238.089151][ T29] [ 238.092101][ T29] __schedule+0x1960/0x4a80 [ 238.097105][ T29] ? release_firmware_map_entry+0x190/0x190 [ 238.103233][ T29] ? __lock_acquire+0x7f70/0x7f70 [ 238.108584][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 238.114104][ T29] ? schedule+0x8e/0x260 [ 238.118367][ T29] schedule+0x149/0x260 [ 238.122636][ T29] schedule_preempt_disabled+0x13/0x20 [ 238.128328][ T29] __mutex_lock+0x6a3/0xd60 [ 238.133009][ T29] ? __mutex_lock+0x526/0xd60 [ 238.137730][ T29] ? blkdev_put+0xff/0x770 [ 238.142290][ T29] ? mutex_lock_nested+0x20/0x20 [ 238.147390][ T29] ? __fsnotify_parent+0x4da/0x730 [ 238.152970][ T29] blkdev_put+0xff/0x770 [ 238.157407][ T29] ? __rwlock_init+0x150/0x150 [ 238.162202][ T29] bdev_release+0x57/0x70 [ 238.166615][ T29] blkdev_release+0x3b/0x40 [ 238.171184][ T29] ? blkdev_open+0x3c0/0x3c0 [ 238.175862][ T29] __fput+0x3cc/0xa10 [ 238.179902][ T29] task_work_run+0x24a/0x300 [ 238.184680][ T29] ? task_work_cancel+0x2b0/0x2b0 [ 238.189991][ T29] ? blkdev_ioctl+0x5cf/0x730 [ 238.195025][ T29] ? exit_to_user_mode_loop+0x39/0x100 [ 238.201015][ T29] exit_to_user_mode_loop+0xde/0x100 [ 238.206405][ T29] exit_to_user_mode_prepare+0xb1/0x140 [ 238.212279][ T29] syscall_exit_to_user_mode+0x64/0x280 [ 238.218471][ T29] do_syscall_64+0x50/0x110 [ 238.223321][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 238.229673][ T29] RIP: 0033:0x7f2ff927c899 [ 238.235502][ T29] RSP: 002b:00007f2ff85fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.244375][ T29] RAX: 0000000000000000 RBX: 00007f2ff939bf80 RCX: 00007f2ff927c899 [ 238.252522][ T29] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 238.260660][ T29] RBP: 00007f2ff92d8ad0 R08: 0000000000000000 R09: 0000000000000000 [ 238.269373][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.277747][ T29] R13: 000000000000000b R14: 00007f2ff939bf80 R15: 00007ffc91e61848 [ 238.285818][ T29] [ 238.288844][ T29] [ 238.288844][ T29] Showing all locks held in the system: [ 238.296919][ T29] 1 lock held by khungtaskd/29: [ 238.302511][ T29] #0: ffffffff8d92d1e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 238.312913][ T29] 5 locks held by kworker/u4:2/42: [ 238.318327][ T29] 2 locks held by getty/4812: [ 238.323099][ T29] #0: ffff8880269df0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 238.334091][ T29] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b1/0x1dc0 [ 238.344435][ T29] 1 lock held by udevd/5404: [ 238.349219][ T29] #0: ffff8881417504c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x137/0x620 [ 238.359319][ T29] 1 lock held by syz-executor.0/5479: [ 238.364741][ T29] #0: ffff8881417504c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xff/0x770 [ 238.374206][ T29] 1 lock held by syz-executor.0/5785: [ 238.379784][ T29] #0: ffff8881417504c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x137/0x620 [ 238.389905][ T29] 1 lock held by syz-executor.0/5802: [ 238.395507][ T29] #0: ffff8881417504c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x137/0x620 [ 238.406190][ T29] [ 238.408665][ T29] ============================================= [ 238.408665][ T29] [ 238.417235][ T29] NMI backtrace for cpu 1 [ 238.421579][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.0-syzkaller-12401-g8f6f76a6a29f #0 [ 238.431116][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 238.441170][ T29] Call Trace: [ 238.444447][ T29] [ 238.447388][ T29] dump_stack_lvl+0x1e7/0x2d0 [ 238.452160][ T29] ? nf_tcp_handle_invalid+0x650/0x650 [ 238.457724][ T29] ? panic+0x850/0x850 [ 238.461789][ T29] ? vprintk_emit+0x607/0x720 [ 238.466649][ T29] ? printk_sprint+0x480/0x480 [ 238.471529][ T29] nmi_cpu_backtrace+0x498/0x4d0 [ 238.476556][ T29] ? nmi_trigger_cpumask_backtrace+0x310/0x310 [ 238.482790][ T29] ? _printk+0xd5/0x120 [ 238.486941][ T29] ? panic+0x850/0x850 [ 238.491094][ T29] ? __wake_up_klogd+0xcc/0x100 [ 238.495943][ T29] ? panic+0x850/0x850 [ 238.500010][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 238.506196][ T29] nmi_trigger_cpumask_backtrace+0x198/0x310 [ 238.512268][ T29] watchdog+0xfa9/0xff0 [ 238.516796][ T29] ? watchdog+0x1e9/0xff0 [ 238.521131][ T29] kthread+0x2d3/0x370 [ 238.525300][ T29] ? hungtask_pm_notify+0x90/0x90 [ 238.530322][ T29] ? kthread_blkcg+0xd0/0xd0 [ 238.535283][ T29] ret_from_fork+0x48/0x80 [ 238.539744][ T29] ? kthread_blkcg+0xd0/0xd0 [ 238.544526][ T29] ret_from_fork_asm+0x11/0x20 [ 238.549427][ T29] [ 238.553316][ T29] Sending NMI from CPU 1 to CPUs 0: [ 238.558557][ C0] NMI backtrace for cpu 0 [ 238.558568][ C0] CPU: 0 PID: 5070 Comm: kworker/0:4 Not tainted 6.6.0-syzkaller-12401-g8f6f76a6a29f #0 [ 238.558584][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 238.558592][ C0] Workqueue: events nsim_dev_trap_report_work [ 238.558659][ C0] RIP: 0010:__lock_acquire+0x765/0x7f70 [ 238.558679][ C0] Code: 8b 4c 24 38 4c 8d 74 c1 20 4c 89 f0 48 c1 e8 03 42 0f b6 04 00 84 c0 75 1f 45 8b 36 48 8b 44 24 18 42 0f b6 04 00 84 c0 75 2f <45> 33 37 41 f7 c6 00 60 00 00 74 b2 eb 60 44 89 f1 80 e1 07 80 c1 [ 238.558691][ C0] RSP: 0018:ffffc900042b7540 EFLAGS: 00000046 [ 238.558702][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffff888026a7c640 [ 238.558712][ C0] RDX: 0000000000000014 RSI: 0000000000000008 RDI: ffffffff90dc2360 [ 238.558721][ C0] RBP: ffffc900042b7808 R08: dffffc0000000000 R09: 1ffffffff21b846c [ 238.558731][ C0] R10: dffffc0000000000 R11: fffffbfff21b846d R12: ffff888026a7c638 [ 238.558742][ C0] R13: 0000000000000003 R14: 00000000000488fa R15: ffff888026a7c700 [ 238.558752][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 238.558764][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.558773][ C0] CR2: 0000556301716600 CR3: 000000000d730000 CR4: 00000000003506f0 [ 238.558786][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.558794][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.558803][ C0] Call Trace: [ 238.558808][ C0] [ 238.558813][ C0] ? nmi_cpu_backtrace+0x3be/0x4d0 [ 238.558829][ C0] ? read_lock_is_recursive+0x20/0x20 [ 238.558847][ C0] ? nmi_trigger_cpumask_backtrace+0x310/0x310 [ 238.558868][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 238.558887][ C0] ? nmi_handle+0x14c/0x570 [ 238.558904][ C0] ? nmi_handle+0x2a/0x570 [ 238.558921][ C0] ? __lock_acquire+0x765/0x7f70 [ 238.558936][ C0] ? default_do_nmi+0x62/0x150 [ 238.558958][ C0] ? exc_nmi+0x121/0x200 [ 238.558971][ C0] ? end_repeat_nmi+0xf/0x2a [ 238.559039][ C0] ? __lock_acquire+0x765/0x7f70 [ 238.559055][ C0] ? __lock_acquire+0x765/0x7f70 [ 238.559071][ C0] ? __lock_acquire+0x765/0x7f70 [ 238.559086][ C0] [ 238.559090][ C0] [ 238.559096][ C0] ? ret_from_fork_asm+0x10/0x20 [ 238.559117][ C0] ? ret_from_fork_asm+0x11/0x20 [ 238.559134][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 238.559153][ C0] ? arch_stack_walk+0x170/0x1a0 [ 238.559170][ C0] ? verify_lock_unused+0x140/0x140 [ 238.559186][ C0] ? stack_trace_save+0x117/0x1c0 [ 238.559204][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 238.559223][ C0] ? __stack_depot_save+0x20/0x650 [ 238.559249][ C0] ? skb_release_data+0x660/0x850 [ 238.559284][ C0] ? kasan_set_track+0x61/0x70 [ 238.559301][ C0] ? kasan_set_track+0x4f/0x70 [ 238.559312][ C0] ? kasan_save_free_info+0x28/0x40 [ 238.559327][ C0] ? ____kasan_slab_free+0xd6/0x120 [ 238.559340][ C0] ? __kmem_cache_free+0x263/0x3a0 [ 238.559356][ C0] ? skb_release_data+0x660/0x850 [ 238.559372][ C0] ? consume_skb+0xb3/0x150 [ 238.559387][ C0] ? process_scheduled_works+0x90f/0x1400 [ 238.559404][ C0] ? worker_thread+0xa5f/0xff0 [ 238.559419][ C0] ? kthread+0x2d3/0x370 [ 238.559433][ C0] lock_acquire+0x1e3/0x520 [ 238.559449][ C0] ? debug_check_no_obj_freed+0xcc/0x420 [ 238.559471][ C0] ? read_lock_is_recursive+0x20/0x20 [ 238.559487][ C0] ? mark_lock+0x9a/0x340 [ 238.559505][ C0] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 238.559522][ C0] ? print_irqtrace_events+0x220/0x220 [ 238.559540][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 238.559556][ C0] ? debug_check_no_obj_freed+0xcc/0x420 [ 238.559575][ C0] ? _raw_spin_lock+0x40/0x40 [ 238.559594][ C0] debug_check_no_obj_freed+0xcc/0x420 [ 238.559614][ C0] ? skb_release_data+0x660/0x850 [ 238.559633][ C0] kmem_cache_free+0x246/0x500 [ 238.559650][ C0] ? nsim_dev_trap_report_work+0x761/0xa90 [ 238.559670][ C0] nsim_dev_trap_report_work+0x761/0xa90 [ 238.559695][ C0] ? process_scheduled_works+0x825/0x1400 [ 238.559711][ C0] process_scheduled_works+0x90f/0x1400 [ 238.559738][ C0] ? assign_work+0x3d0/0x3d0 [ 238.559756][ C0] ? assign_work+0x364/0x3d0 [ 238.559774][ C0] worker_thread+0xa5f/0xff0 [ 238.559792][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 238.559814][ C0] kthread+0x2d3/0x370 [ 238.559826][ C0] ? pr_cont_work+0x5e0/0x5e0 [ 238.559841][ C0] ? kthread_blkcg+0xd0/0xd0 [ 238.559854][ C0] ret_from_fork+0x48/0x80 [ 238.559869][ C0] ? kthread_blkcg+0xd0/0xd0 [ 238.559882][ C0] ret_from_fork_asm+0x11/0x20 [ 238.559905][ C0] [ 238.561276][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 239.021274][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.0-syzkaller-12401-g8f6f76a6a29f #0 [ 239.030907][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 239.041061][ T29] Call Trace: [ 239.044341][ T29] [ 239.047391][ T29] dump_stack_lvl+0x1e7/0x2d0 [ 239.052334][ T29] ? nf_tcp_handle_invalid+0x650/0x650 [ 239.057925][ T29] ? panic+0x850/0x850 [ 239.062194][ T29] ? vscnprintf+0x5d/0x80 [ 239.066815][ T29] panic+0x349/0x850 [ 239.071010][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x310 [ 239.077262][ T29] ? __memcpy_flushcache+0x2b0/0x2b0 [ 239.082641][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 239.088752][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 239.094156][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x310 [ 239.100424][ T29] ? nmi_trigger_cpumask_backtrace+0x2c5/0x310 [ 239.106675][ T29] ? nmi_trigger_cpumask_backtrace+0x2ca/0x310 [ 239.112913][ T29] watchdog+0xfe8/0xff0 [ 239.117168][ T29] ? watchdog+0x1e9/0xff0 [ 239.121625][ T29] kthread+0x2d3/0x370 [ 239.125692][ T29] ? hungtask_pm_notify+0x90/0x90 [ 239.130842][ T29] ? kthread_blkcg+0xd0/0xd0 [ 239.135533][ T29] ret_from_fork+0x48/0x80 [ 239.140048][ T29] ? kthread_blkcg+0xd0/0xd0 [ 239.144976][ T29] ret_from_fork_asm+0x11/0x20 [ 239.149943][ T29] [ 239.153584][ T29] Kernel Offset: disabled [ 239.159237][ T29] Rebooting in 86400 seconds..