[ 86.521803][ T785] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:21077' (ED25519) to the list of known hosts. 2024/10/29 19:07:00 ignoring optional flag "sandboxArg"="0" 2024/10/29 19:07:00 parsed 1 programs [ 266.324467][ T5342] cgroup: Unknown subsys name 'net' [ 266.395156][ T5342] cgroup: Unknown subsys name 'cpuset' [ 266.399374][ T5342] cgroup: Unknown subsys name 'rlimit' [ 267.810975][ T5342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 271.050714][ T5352] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 271.171258][ T5359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.177313][ T5359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.180424][ T5359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.185106][ T5359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.189755][ T5359] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.192407][ T5359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.065488][ T5399] chnl_net:caif_netlink_parms(): no params data found [ 273.105940][ T5399] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.109076][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.112767][ T5399] bridge_slave_0: entered allmulticast mode [ 273.115818][ T5399] bridge_slave_0: entered promiscuous mode [ 273.120795][ T5399] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.124473][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.127696][ T5399] bridge_slave_1: entered allmulticast mode [ 273.131166][ T5399] bridge_slave_1: entered promiscuous mode [ 273.153261][ T5399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.157865][ T5399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.177004][ T5399] team0: Port device team_slave_0 added [ 273.180763][ T5399] team0: Port device team_slave_1 added [ 273.197179][ T5399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.199882][ T5399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.209875][ T5399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.216837][ T5399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.219683][ T5399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.230649][ T5399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.257044][ T5399] hsr_slave_0: entered promiscuous mode [ 273.259725][ T5399] hsr_slave_1: entered promiscuous mode [ 273.343709][ T5399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.353506][ T5399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.358182][ T5399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.364264][ T5399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.385546][ T5399] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.388487][ T5399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.391779][ T5399] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.394421][ T5399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.442987][ T5399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.456109][ T4051] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.460132][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.470169][ T5399] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.479182][ T4051] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.482046][ T4051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.489502][ T4051] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.492546][ T4051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.526454][ T5399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.644893][ T5399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.673988][ T5399] veth0_vlan: entered promiscuous mode [ 273.680271][ T5399] veth1_vlan: entered promiscuous mode [ 273.703768][ T5399] veth0_macvtap: entered promiscuous mode [ 273.708168][ T5399] veth1_macvtap: entered promiscuous mode [ 273.720755][ T5399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.730392][ T5399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.740648][ T5399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.746102][ T5399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.749182][ T5399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.754489][ T5399] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.854269][ T5399] syz-executor (5399) used greatest stack depth: 19536 bytes left [ 273.888943][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.955029][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.018240][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.056016][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.797317][ T4051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.800288][ T4051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.827306][ T4051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.830330][ T4051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/10/29 19:07:11 executed programs: 0 [ 274.948559][ T4668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.954724][ T4668] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.957661][ T4668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.961097][ T4668] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.964771][ T4668] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.968284][ T4668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.097515][ T5435] chnl_net:caif_netlink_parms(): no params data found [ 275.137946][ T5435] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.140660][ T5435] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.145298][ T5435] bridge_slave_0: entered allmulticast mode [ 275.149085][ T5435] bridge_slave_0: entered promiscuous mode [ 275.160556][ T5435] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.164722][ T5435] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.167621][ T5435] bridge_slave_1: entered allmulticast mode [ 275.170742][ T5435] bridge_slave_1: entered promiscuous mode [ 275.190750][ T5435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.197303][ T5435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.214494][ T5435] team0: Port device team_slave_0 added [ 275.219037][ T5435] team0: Port device team_slave_1 added [ 275.234465][ T5435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.237074][ T5435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.247774][ T5435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.255779][ T5435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.258326][ T5435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.268929][ T5435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.293522][ T5435] hsr_slave_0: entered promiscuous mode [ 275.296033][ T5435] hsr_slave_1: entered promiscuous mode [ 275.298530][ T5435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.303418][ T5435] Cannot create hsr debugfs directory [ 276.680776][ T12] bridge_slave_1: left allmulticast mode [ 276.686793][ T12] bridge_slave_1: left promiscuous mode [ 276.688973][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.713856][ T12] bridge_slave_0: left allmulticast mode [ 276.716190][ T12] bridge_slave_0: left promiscuous mode [ 276.718372][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.992725][ T4668] Bluetooth: hci0: command tx timeout [ 277.080929][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.087872][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.092944][ T12] bond0 (unregistering): Released all slaves [ 277.175894][ T12] hsr_slave_0: left promiscuous mode [ 277.185578][ T12] hsr_slave_1: left promiscuous mode [ 277.190353][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.196906][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.203912][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.207205][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.215582][ T12] veth1_macvtap: left promiscuous mode [ 277.218302][ T12] veth0_macvtap: left promiscuous mode [ 277.220274][ T12] veth1_vlan: left promiscuous mode [ 277.224726][ T12] veth0_vlan: left promiscuous mode [ 277.468395][ T12] team0 (unregistering): Port device team_slave_1 removed [ 277.488113][ T12] team0 (unregistering): Port device team_slave_0 removed [ 277.953263][ T5435] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 277.964207][ T5435] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 277.978524][ T5435] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 277.995238][ T5435] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 278.280383][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.391461][ T5435] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.436410][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.439134][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.473979][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.477178][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.782350][ T5435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.816933][ T5435] veth0_vlan: entered promiscuous mode [ 278.836982][ T5435] veth1_vlan: entered promiscuous mode [ 278.872945][ T5435] veth0_macvtap: entered promiscuous mode [ 278.893481][ T5435] veth1_macvtap: entered promiscuous mode [ 278.900992][ T5435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.926303][ T5435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.930516][ T5435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.943430][ T5435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.946723][ T5435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.950007][ T5435] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.001330][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.008257][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.032306][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.035172][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.073498][ T4668] Bluetooth: hci0: command tx timeout [ 281.172859][ T4668] Bluetooth: hci0: command tx timeout 2024/10/29 19:07:18 executed programs: 3 [ 283.317765][ T4668] Bluetooth: hci0: command tx timeout 2024/10/29 19:07:36 executed programs: 4 2024/10/29 19:07:48 executed programs: 5 2024/10/29 19:07:55 executed programs: 6 [ 322.270422][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.297088][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 2024/10/29 19:08:06 executed programs: 7 2024/10/29 19:08:16 executed programs: 8 2024/10/29 19:08:26 executed programs: 9 2024/10/29 19:08:37 executed programs: 10 2024/10/29 19:08:44 executed programs: 11 2024/10/29 19:08:52 executed programs: 12 [ 383.670556][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.678357][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 2024/10/29 19:09:04 executed programs: 13 2024/10/29 19:09:13 executed programs: 14 [ 400.945908][ T5359] Bluetooth: hci0: command 0x0406 tx timeout 2024/10/29 19:09:25 executed programs: 15 2024/10/29 19:09:39 executed programs: 16 [ 445.073094][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.112066][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 2024/10/29 19:10:09 executed programs: 18 2024/10/29 19:10:19 executed programs: 20 2024/10/29 19:10:27 executed programs: 21 2024/10/29 19:10:41 executed programs: 22 2024/10/29 19:10:47 executed programs: 24 [ 491.653518][ T25] INFO: task kworker/u4:9:1065 blocked for more than 143 seconds. [ 491.656700][ T25] Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 491.716037][ T25] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 491.719393][ T25] task:kworker/u4:9 state:D stack:22736 pid:1065 tgid:1065 ppid:2 flags:0x00004000 [ 491.782647][ T25] Workqueue: ipv6_addrconf addrconf_dad_work [ 491.785240][ T25] Call Trace: [ 491.786617][ T25] [ 491.787754][ T25] __schedule+0x18af/0x4bd0 [ 491.789447][ T25] ? __pfx___schedule+0x10/0x10 [ 491.791352][ T25] ? __pfx_lock_release+0x10/0x10 [ 491.884313][ T25] ? __mutex_trylock_common+0x92/0x2e0 [ 491.886005][ T25] ? kthread_data+0x52/0xd0 [ 491.887495][ T25] ? schedule+0x90/0x320 [ 491.889142][ T25] ? wq_worker_sleeping+0x66/0x240 [ 491.891194][ T25] ? schedule+0x90/0x320 [ 491.984276][ T25] schedule+0x14b/0x320 [ 491.985943][ T25] schedule_preempt_disabled+0x13/0x30 [ 491.987969][ T25] __mutex_lock+0x6a7/0xd70 [ 491.989671][ T25] ? mark_lock+0x9a/0x360 [ 491.991289][ T25] ? __mutex_lock+0x52a/0xd70 [ 492.051951][ T25] ? addrconf_dad_work+0xd0/0x16f0 [ 492.054121][ T25] ? __pfx___mutex_lock+0x10/0x10 [ 492.056175][ T25] addrconf_dad_work+0xd0/0x16f0 [ 492.058188][ T25] ? __pfx_addrconf_dad_work+0x10/0x10 [ 492.060386][ T25] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 492.181188][ T25] ? process_scheduled_works+0x976/0x1850 [ 492.195808][ T25] process_scheduled_works+0xa63/0x1850 [ 492.197854][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 492.199806][ T25] ? assign_work+0x364/0x3d0 [ 492.294005][ T25] worker_thread+0x870/0xd30 [ 492.295935][ T25] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 492.298161][ T25] ? __kthread_parkme+0x169/0x1d0 [ 492.300038][ T25] ? __pfx_worker_thread+0x10/0x10 [ 492.445598][ T25] kthread+0x2f0/0x390 [ 492.447193][ T25] ? __pfx_worker_thread+0x10/0x10 [ 492.449137][ T25] ? __pfx_kthread+0x10/0x10 [ 492.450875][ T25] ret_from_fork+0x4b/0x80 [ 492.538761][ T25] ? __pfx_kthread+0x10/0x10 [ 492.563657][ T25] ret_from_fork_asm+0x1a/0x30 [ 492.565575][ T25] [ 492.606297][ T25] INFO: task kworker/0:9:5476 blocked for more than 144 seconds. [ 492.609203][ T25] Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 492.698358][ T25] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.854389][ T25] task:kworker/0:9 state:D stack:25872 pid:5476 tgid:5476 ppid:2 flags:0x00004000 [ 492.858708][ T25] Workqueue: events_power_efficient reg_check_chans_work [ 492.997563][ T25] Call Trace: [ 492.998937][ T25] [ 493.000047][ T25] __schedule+0x18af/0x4bd0 [ 493.030943][ T25] ? do_raw_spin_lock+0x14f/0x370 [ 493.059700][ T25] ? schedule+0x90/0x320 [ 493.061416][ T25] ? __pfx___schedule+0x10/0x10 [ 493.142071][ T25] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 493.144321][ T25] ? __pfx_lock_release+0x10/0x10 [ 493.146033][ T25] ? kick_pool+0x1c9/0x620 [ 493.147652][ T25] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.149521][ T25] ? lockdep_hardirqs_on+0x99/0x150 [ 493.151461][ T25] ? schedule+0x90/0x320 [ 493.236172][ T25] schedule+0x14b/0x320 [ 493.237604][ T25] schedule_preempt_disabled+0x13/0x30 [ 493.239547][ T25] __mutex_lock+0x6a7/0xd70 [ 493.241280][ T25] ? __mutex_lock+0x52a/0xd70 [ 493.332343][ T25] ? reg_check_chans_work+0x164/0xfd0 [ 493.334357][ T25] ? __pfx___mutex_lock+0x10/0x10 [ 493.336248][ T25] ? process_scheduled_works+0x976/0x1850 [ 493.338514][ T25] reg_check_chans_work+0x164/0xfd0 [ 493.340634][ T25] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 493.453706][ T25] ? __pfx_reg_check_chans_work+0x10/0x10 [ 493.455956][ T25] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 493.458242][ T25] ? process_scheduled_works+0x976/0x1850 [ 493.460207][ T25] process_scheduled_works+0xa63/0x1850 [ 493.513580][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 493.515668][ T25] ? assign_work+0x364/0x3d0 [ 493.517226][ T25] worker_thread+0x870/0xd30 [ 493.518906][ T25] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 493.520965][ T25] ? __kthread_parkme+0x169/0x1d0 [ 493.665919][ T25] ? __pfx_worker_thread+0x10/0x10 [ 493.667934][ T25] kthread+0x2f0/0x390 [ 493.669549][ T25] ? __pfx_worker_thread+0x10/0x10 [ 493.795784][ T25] ? __pfx_kthread+0x10/0x10 [ 493.797554][ T25] ret_from_fork+0x4b/0x80 [ 493.799068][ T25] ? __pfx_kthread+0x10/0x10 [ 493.800585][ T25] ret_from_fork_asm+0x1a/0x30 [ 493.886748][ T25] [ 493.916394][ T25] [ 493.916394][ T25] Showing all locks held in the system: [ 493.919829][ T25] 2 locks held by kworker/0:1/9: [ 494.124435][ T25] 3 locks held by kworker/u4:0/11: [ 494.126405][ T25] 3 locks held by kworker/u4:1/12: [ 494.128107][ T25] 1 lock held by khungtaskd/25: [ 494.129773][ T25] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 494.227509][ T25] 3 locks held by kworker/u4:2/30: [ 494.229680][ T25] 2 locks held by kworker/u4:5/1026: [ 494.267433][ T25] 3 locks held by kworker/u4:9/1065: [ 494.269570][ T25] #0: ffff88803ea65948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 494.408065][ T25] #1: ffffc90002487d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 494.444325][ T25] #2: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 494.447424][ T25] 1 lock held by dhcpcd/5025: [ 494.448966][ T25] #0: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 494.491984][ T25] 2 locks held by getty/5108: [ 494.493837][ T25] #0: ffff88801aa310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 494.497481][ T25] #1: ffffc9000039b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 494.501320][ T25] 2 locks held by syz-executor/5435: [ 494.593252][ T25] 4 locks held by kworker/0:9/5476: [ 494.595233][ T25] #0: ffff88801ac75948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 494.599699][ T25] #1: ffffc90002697d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 494.686454][ T25] #2: ffffffff8fcd3248 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 494.690235][ T25] #3: ffff88804e048768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_check_chans_work+0x164/0xfd0 [ 494.743309][ T25] [ 494.782233][ T25] ============================================= [ 494.782233][ T25] [ 494.785087][ T25] NMI backtrace for cpu 0 [ 494.786669][ T25] CPU: 0 UID: 0 PID: 25 Comm: khungtaskd Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 494.790116][ T25] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 494.793793][ T25] Call Trace: [ 494.795067][ T25] [ 494.796181][ T25] dump_stack_lvl+0x241/0x360 [ 494.797848][ T25] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.799604][ T25] ? __pfx__printk+0x10/0x10 [ 494.801144][ T25] nmi_cpu_backtrace+0x49c/0x4d0 [ 494.802787][ T25] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 494.804638][ T25] ? _printk+0xd5/0x120 [ 494.806087][ T25] ? __pfx__printk+0x10/0x10 [ 494.807693][ T25] ? __wake_up_klogd+0xcc/0x110 [ 494.809393][ T25] ? __pfx__printk+0x10/0x10 [ 494.811181][ T25] ? __rcu_read_unlock+0xa1/0x110 [ 494.813118][ T25] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 494.815449][ T25] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 494.817763][ T25] watchdog+0xff4/0x1040 [ 494.819299][ T25] ? watchdog+0x1ea/0x1040 [ 494.820947][ T25] ? __pfx_watchdog+0x10/0x10 [ 494.822760][ T25] kthread+0x2f0/0x390 [ 494.824280][ T25] ? __pfx_watchdog+0x10/0x10 [ 494.826004][ T25] ? __pfx_kthread+0x10/0x10 [ 494.827663][ T25] ret_from_fork+0x4b/0x80 [ 494.829272][ T25] ? __pfx_kthread+0x10/0x10 [ 494.831047][ T25] ret_from_fork_asm+0x1a/0x30 [ 494.832837][ T25] [ 495.344301][ T25] Kernel panic - not syncing: hung_task: blocked tasks [ 495.347356][ T25] CPU: 0 UID: 0 PID: 25 Comm: khungtaskd Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 495.351306][ T25] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 495.355343][ T25] Call Trace: [ 495.356662][ T25] [ 495.357776][ T25] dump_stack_lvl+0x241/0x360 [ 495.359525][ T25] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.361420][ T25] ? __pfx__printk+0x10/0x10 [ 495.363204][ T25] ? nmi_cpu_backtrace+0x42e/0x4d0 [ 495.365042][ T25] ? vscnprintf+0x5d/0x90 [ 495.366724][ T25] panic+0x349/0x880 [ 495.368058][ T25] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 495.370415][ T25] ? __pfx_panic+0x10/0x10 [ 495.372135][ T25] ? tick_nohz_tick_stopped+0x82/0xb0 [ 495.374167][ T25] ? __irq_work_queue_local+0x137/0x410 [ 495.376031][ T25] ? preempt_schedule_thunk+0x1a/0x30 [ 495.377919][ T25] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 495.380073][ T25] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 495.382157][ T25] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 495.384305][ T25] watchdog+0x1033/0x1040 [ 495.385780][ T25] ? watchdog+0x1ea/0x1040 [ 495.387381][ T25] ? __pfx_watchdog+0x10/0x10 [ 495.389116][ T25] kthread+0x2f0/0x390 [ 495.390613][ T25] ? __pfx_watchdog+0x10/0x10 [ 495.392325][ T25] ? __pfx_kthread+0x10/0x10 [ 495.393943][ T25] ret_from_fork+0x4b/0x80 [ 495.395607][ T25] ? __pfx_kthread+0x10/0x10 [ 495.397268][ T25] ret_from_fork_asm+0x1a/0x30 [ 495.398936][ T25] [ 495.400340][ T25] Kernel Offset: disabled [ 495.401958][ T25] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:10:48 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000035 RBX=ffffffff9a716e80 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc900004bf770 R8 =ffffffff854aac2b R9 =1ffff11000077046 R10=dffffc0000000000 R11=ffffffff854aabe0 R12=dffffc0000000000 R13=ffffffff9a411f13 R14=0000000000000035 R15=00000000000003f8 RIP=ffffffff854aac5e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2a77ce1f98 CR3=000000000e734000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a76ff21cb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a76ff21d8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a76ff21d2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a76ff21e6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a76ff226c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a76ff234a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a7710c488 00007f2a7710c480 00007f2a7710c478 00007f2a7710c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a77c6d100 00007f2a7710c440 00007f2a7710c458 0000000500060006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2a7710c498 00007f2a7710c490 00007f2a7710c488 00007f2a7710c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100110000001480 0200040000000079 786f72706e797300 01000d8001001880 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04001c0000000030 7a79730001000900 000000400b000800 0000010401000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000004010a0600 0000440000000030 7a79730001000901 00000040010008eb ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a65324002000880 0400140000000032 7a79730003000900 0000010000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000