Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. 2024/01/15 11:07:11 ignoring optional flag "sandboxArg"="0" 2024/01/15 11:07:11 parsed 1 programs 2024/01/15 11:07:11 executed programs: 0 [ 43.518269][ T1425] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.527037][ T1425] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.535275][ T1425] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.543853][ T1425] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.551698][ T1425] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 43.559558][ T1425] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.614409][ T1940] chnl_net:caif_netlink_parms(): no params data found [ 44.047746][ T1940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.339826][ T1940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.642553][ T1276] Bluetooth: hci0: command 0x0409 tx timeout [ 47.732484][ T1276] Bluetooth: hci0: command 0x041b tx timeout [ 49.802565][ T1276] Bluetooth: hci0: command 0x040f tx timeout [ 51.882517][ T1276] Bluetooth: hci0: command 0x0419 tx timeout 2024/01/15 11:08:07 executed programs: 2 [ 100.901317][ T1425] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.908654][ T1425] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.916415][ T1425] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.923902][ T1425] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.930941][ T1425] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 100.938610][ T1425] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.016088][ T2347] chnl_net:caif_netlink_parms(): no params data found [ 101.677395][ T2347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.121741][ T2347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.002555][ T1425] Bluetooth: hci1: command 0x0409 tx timeout [ 105.082471][ T1425] Bluetooth: hci1: command 0x041b tx timeout [ 107.162542][ T1425] Bluetooth: hci1: command 0x040f tx timeout [ 109.242484][ T1425] Bluetooth: hci1: command 0x0419 tx timeout 2024/01/15 11:09:05 executed programs: 3 [ 158.913875][ T1276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.922492][ T1276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.929839][ T1276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.937186][ T1276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.944604][ T1276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.952068][ T1276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.032332][ T2751] chnl_net:caif_netlink_parms(): no params data found [ 159.679236][ T2751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.126925][ T2751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.002456][ T1425] Bluetooth: hci2: command 0x0409 tx timeout [ 163.082452][ T1425] Bluetooth: hci2: command 0x041b tx timeout [ 165.162457][ T1425] Bluetooth: hci2: command 0x040f tx timeout [ 167.243339][ T1425] Bluetooth: hci2: command 0x0419 tx timeout [ 169.882475][ T1276] Bluetooth: hci0: command 0x0406 tx timeout [ 207.482472][ T29] INFO: task syz-executor.0:2345 blocked for more than 143 seconds. [ 207.490856][ T29] Not tainted 6.7.0-syzkaller #0 [ 207.496413][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 207.505805][ T29] task:syz-executor.0 state:D stack:14504 pid:2345 tgid:2343 ppid:1940 flags:0x00004006 [ 207.517661][ T29] Call Trace: [ 207.521135][ T29] [ 207.524255][ T29] __schedule+0x607/0x990 [ 207.528589][ T29] ? schedule+0x20/0x100 [ 207.533110][ T29] schedule+0xab/0x100 [ 207.538038][ T29] schedule_preempt_disabled+0x32/0x50 [ 207.543867][ T29] rwsem_down_write_slowpath+0x31b/0x720 [ 207.549684][ T29] down_write+0x60/0x80 [ 207.554016][ T29] blkdev_fallocate+0xc6/0x210 [ 207.558856][ T29] vfs_fallocate+0x181/0x1c0 [ 207.563665][ T29] do_madvise+0xaa4/0x1560 [ 207.568404][ T29] ? __se_sys_rt_sigprocmask+0xea/0x140 [ 207.574117][ T29] ? do_raw_spin_unlock+0x67/0x2b0 [ 207.579666][ T29] __x64_sys_madvise+0x23/0x30 [ 207.584429][ T29] do_syscall_64+0x8c/0x1a0 [ 207.589360][ T29] ? fpregs_restore_userregs+0x79/0xd0 [ 207.595091][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 207.601064][ T29] RIP: 0033:0x7f45bb67c859 [ 207.605621][ T29] RSP: 002b:00007f45bc3be0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 207.615084][ T29] RAX: ffffffffffffffda RBX: 00007f45bb79c050 RCX: 00007f45bb67c859 [ 207.623232][ T29] RDX: 0000000000000009 RSI: 0000000000600003 RDI: 0000000020000000 [ 207.631363][ T29] RBP: 00007f45bb6d8ad0 R08: 0000000000000000 R09: 0000000000000000 [ 207.639807][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.647969][ T29] R13: 000000000000006e R14: 00007f45bb79c050 R15: 00007ffe9df93f28 [ 207.656239][ T29] [ 207.659822][ T29] [ 207.659822][ T29] Showing all locks held in the system: [ 207.667746][ T29] 1 lock held by khungtaskd/29: [ 207.673044][ T29] #0: ffffffff8357cc80 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x30/0x100 [ 207.685224][ T29] 2 locks held by getty/1377: [ 207.690647][ T29] #0: ffff888101b968a0 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x20/0x40 [ 207.701721][ T29] #1: ffffc90002af72f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x242/0x910 [ 207.713312][ T29] 2 locks held by syz-executor.0/2344: [ 207.719104][ T29] 1 lock held by syz-executor.0/2345: [ 207.724844][ T29] #0: ffff8881106bc040 (mapping.invalidate_lock#2){....}-{3:3}, at: blkdev_fallocate+0xc6/0x210 [ 207.736324][ T29] 1 lock held by syz-executor.0/2748: [ 207.742034][ T29] #0: ffff8881106bc040 (mapping.invalidate_lock#2){....}-{3:3}, at: page_cache_ra_unbounded+0x5d/0x240 [ 207.753840][ T29] 1 lock held by syz-executor.0/2749: [ 207.759635][ T29] #0: ffff8881106bc040 (mapping.invalidate_lock#2){....}-{3:3}, at: blkdev_fallocate+0xc6/0x210 [ 207.770433][ T29] 1 lock held by syz-executor.0/3152: [ 207.775798][ T29] #0: ffff8881106bc040 (mapping.invalidate_lock#2){....}-{3:3}, at: page_cache_ra_unbounded+0x5d/0x240 [ 207.787090][ T29] 1 lock held by syz-executor.0/3153: [ 207.792730][ T29] #0: ffff8881106bc040 (mapping.invalidate_lock#2){....}-{3:3}, at: blkdev_fallocate+0xc6/0x210 [ 207.805162][ T29] [ 207.807663][ T29] ============================================= [ 207.807663][ T29] [ 207.817634][ T29] NMI backtrace for cpu 0 [ 207.821942][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.7.0-syzkaller #0 [ 207.829705][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 207.839918][ T29] Call Trace: [ 207.843175][ T29] [ 207.846095][ T29] dump_stack_lvl+0x83/0xd0 [ 207.850830][ T29] nmi_cpu_backtrace+0x142/0x160 [ 207.856084][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 207.862126][ T29] nmi_trigger_cpumask_backtrace+0x8e/0x140 [ 207.868083][ T29] watchdog+0x5da/0x600 [ 207.872313][ T29] ? watchdog+0xcd/0x600 [ 207.876532][ T29] ? hungtask_pm_notify+0x30/0x30 [ 207.881573][ T29] kthread+0xe5/0x100 [ 207.885618][ T29] ? kthread_blkcg+0x30/0x30 [ 207.890185][ T29] ret_from_fork+0x2e/0x40 [ 207.894753][ T29] ? kthread_blkcg+0x30/0x30 [ 207.899442][ T29] ret_from_fork_asm+0x11/0x20 [ 207.904178][ T29] [ 207.907425][ T29] Sending NMI from CPU 0 to CPUs 1: [ 207.912711][ C1] NMI backtrace for cpu 1 [ 207.912714][ C1] CPU: 1 PID: 2344 Comm: syz-executor.0 Not tainted 6.7.0-syzkaller #0 [ 207.912718][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 207.912720][ C1] RIP: 0010:__lock_acquire+0x9/0x4c0 [ 207.912726][ C1] Code: 45 db e5 7e 48 89 dd 0f 85 5d fe ff ff 0f 1f 44 00 00 e9 53 fe ff ff e8 75 a4 54 01 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 <53> 48 83 ec 18 65 4c 8b 35 0a db e5 7e 83 3d 0f 09 66 02 00 0f 84 [ 207.912729][ C1] RSP: 0018:ffffc900026a3430 EFLAGS: 00000006 [ 207.912732][ C1] RAX: 0000000000000001 RBX: 0000000000000246 RCX: 0000000000000000 [ 207.912734][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888237d2ae10 [ 207.912736][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.912737][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 207.912738][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888237d2ae10 [ 207.912739][ C1] FS: 00007f45bc3df6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 207.912742][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.912744][ C1] CR2: 00007f91c479f095 CR3: 000000010b312000 CR4: 00000000003506f0 [ 207.912749][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 207.912750][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 207.912752][ C1] Call Trace: [ 207.912754][ C1] [ 207.912755][ C1] ? nmi_cpu_backtrace+0x10c/0x160 [ 207.912762][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 207.912766][ C1] ? nmi_handle+0x96/0x1b0 [ 207.912772][ C1] ? nmi_handle+0x25/0x1b0 [ 207.912775][ C1] ? __lock_acquire+0x9/0x4c0 [ 207.912778][ C1] ? default_do_nmi+0x63/0x150 [ 207.912783][ C1] ? exc_nmi+0xf6/0x180 [ 207.912787][ C1] ? end_repeat_nmi+0xf/0x2a [ 207.912792][ C1] ? __lock_acquire+0x9/0x4c0 [ 207.912795][ C1] ? __lock_acquire+0x9/0x4c0 [ 207.912797][ C1] ? __lock_acquire+0x9/0x4c0 [ 207.912800][ C1] [ 207.912801][ C1] [ 207.912802][ C1] lock_acquire+0xd8/0x1f0 [ 207.912805][ C1] ? lru_add_drain+0x35/0xf0 [ 207.912810][ C1] ? lru_add_drain+0x35/0xf0 [ 207.912813][ C1] lru_add_drain+0x4e/0xf0 [ 207.912815][ C1] ? lru_add_drain+0x35/0xf0 [ 207.912818][ C1] shrink_lruvec+0x7b6/0xdb0 [ 207.912827][ C1] shrink_node+0x464/0x8d0 [ 207.912832][ C1] do_try_to_free_pages+0x200/0x580 [ 207.912837][ C1] try_to_free_mem_cgroup_pages+0x17e/0x2c0 [ 207.912843][ C1] reclaim_high+0x86/0xb0 [ 207.912846][ C1] mem_cgroup_handle_over_high+0x6b/0x160 [ 207.912852][ C1] try_charge_memcg+0x855/0x9b0 [ 207.912857][ C1] ? get_mem_cgroup_from_mm+0x2a/0x190 [ 207.912861][ C1] charge_memcg+0x39/0x90 [ 207.912864][ C1] __mem_cgroup_charge+0x27/0xb0 [ 207.912867][ C1] __filemap_add_folio+0xf9/0x730 [ 207.912871][ C1] ? workingset_activation+0x290/0x290 [ 207.912875][ C1] filemap_add_folio+0x47/0x1a0 [ 207.912878][ C1] page_cache_ra_unbounded+0xf8/0x240 [ 207.912882][ C1] do_sync_mmap_readahead+0x11f/0x1d0 [ 207.912887][ C1] ? handle_mm_fault+0x8b7/0x1a80 [ 207.912891][ C1] filemap_fault+0x1a8/0x660 [ 207.912893][ C1] ? filemap_map_pages+0xa6/0x710 [ 207.912897][ C1] ? handle_mm_fault+0x8b7/0x1a80 [ 207.912900][ C1] __do_fault+0x38/0xf0 [ 207.912905][ C1] handle_mm_fault+0x950/0x1a80 [ 207.912908][ C1] ? mt_find+0xad/0x530 [ 207.912912][ C1] ? mt_find+0x384/0x530 [ 207.912917][ C1] __get_user_pages+0x3c2/0x7f0 [ 207.912922][ C1] populate_vma_page_range+0xda/0x130 [ 207.912926][ C1] __mm_populate+0xea/0x190 [ 207.912929][ C1] vm_mmap_pgoff+0x134/0x1c0 [ 207.912934][ C1] ksys_mmap_pgoff+0x194/0x1f0 [ 207.912938][ C1] do_syscall_64+0x8c/0x1a0 [ 207.912941][ C1] ? fpregs_restore_userregs+0x79/0xd0 [ 207.912946][ C1] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 207.912951][ C1] RIP: 0033:0x7f45bb67c859 [ 207.912954][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 207.912956][ C1] RSP: 002b:00007f45bc3df0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 207.912959][ C1] RAX: ffffffffffffffda RBX: 00007f45bb79bf80 RCX: 00007f45bb67c859 [ 207.912961][ C1] RDX: 000000000000000a RSI: 0000000000b36000 RDI: 0000000020000000 [ 207.912962][ C1] RBP: 00007f45bb6d8ad0 R08: 0000000000000004 R09: 0000000000000000 [ 207.912964][ C1] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 207.912965][ C1] R13: 0000000000000006 R14: 00007f45bb79bf80 R15: 00007ffe9df93f28 [ 207.912969][ C1] [ 207.913707][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 208.389660][ T29] Kernel Offset: disabled [ 208.394060][ T29] Rebooting in 86400 seconds..