Warning: Permanently added '10.128.10.60' (ECDSA) to the list of known hosts. 2022/06/07 07:21:33 parsed 1 programs [ 63.805779][ T27] audit: type=1400 audit(1654586493.763:188): avc: denied { mounton } for pid=3972 comm="syz-executor" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 2022/06/07 07:21:33 executed programs: 0 [ 63.808670][ T3972] cgroup: Unknown subsys name 'net' [ 63.834494][ T27] audit: type=1400 audit(1654586493.773:189): avc: denied { read } for pid=3975 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1443 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.834520][ T27] audit: type=1400 audit(1654586493.773:190): avc: denied { open } for pid=3975 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1443 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.834537][ T27] audit: type=1400 audit(1654586493.773:191): avc: denied { getattr } for pid=3975 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1443 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.834553][ T27] audit: type=1400 audit(1654586493.773:192): avc: denied { create } for pid=3966 comm="dhcpcd-run-hook" name="resolv.conf.lapb6.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.834570][ T27] audit: type=1400 audit(1654586493.773:193): avc: denied { write } for pid=3966 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb6.ipv4ll" dev="tmpfs" ino=1532 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.834586][ T27] audit: type=1400 audit(1654586493.773:194): avc: denied { append } for pid=3966 comm="dhcpcd-run-hook" name="resolv.conf.lapb6.ipv4ll" dev="tmpfs" ino=1532 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.841528][ T3972] cgroup: Unknown subsys name 'rlimit' [ 63.846423][ T27] audit: type=1400 audit(1654586493.803:195): avc: denied { mounton } for pid=3972 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 63.847559][ T27] audit: type=1400 audit(1654586493.803:196): avc: denied { mount } for pid=3972 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 63.850434][ T27] audit: type=1400 audit(1654586493.803:197): avc: denied { create } for pid=3972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.013224][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.013258][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 67.050992][ T3606] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 71.136585][ T34] cfg80211: failed to load regulatory.db [ 71.210902][ T3606] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 75.371067][ T3606] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 79.531031][ T3606] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 81.618116][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 81.618126][ T27] audit: type=1400 audit(1654586511.573:202): avc: denied { ioctl } for pid=4067 comm="syz-executor.0" path="socket:[29408]" dev="sockfs" ino=29408 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.618830][ T3603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.619586][ T3603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.619922][ T3603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.620532][ T3603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.653223][ T3603] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.653457][ T3603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.665216][ T27] audit: type=1400 audit(1654586511.613:203): avc: denied { read } for pid=4067 comm="syz-executor.0" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.665240][ T27] audit: type=1400 audit(1654586511.613:204): avc: denied { open } for pid=4067 comm="syz-executor.0" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.665256][ T27] audit: type=1400 audit(1654586511.623:205): avc: denied { mounton } for pid=4067 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 81.744458][ T4067] chnl_net:caif_netlink_parms(): no params data found [ 81.794844][ T4067] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.794907][ T4067] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.795400][ T4067] device bridge_slave_0 entered promiscuous mode [ 81.796619][ T4067] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.796673][ T4067] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.797187][ T4067] device bridge_slave_1 entered promiscuous mode [ 81.839686][ T4067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.843502][ T4067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.868280][ T4067] team0: Port device team_slave_0 added [ 81.869499][ T4067] team0: Port device team_slave_1 added [ 81.888318][ T4067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.888323][ T4067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.888327][ T4067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.889359][ T4067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.889363][ T4067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.889367][ T4067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.982599][ T4067] device hsr_slave_0 entered promiscuous mode [ 81.983145][ T4067] device hsr_slave_1 entered promiscuous mode [ 82.041335][ T4067] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.041387][ T4067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.041551][ T4067] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.041610][ T4067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.079842][ T4067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.088478][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.088953][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.089198][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.089644][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 82.110364][ T4067] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.129620][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.129878][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.129905][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.140682][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.141131][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.141174][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.155158][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.155687][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.160063][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.165328][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.169159][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.173565][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.184902][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.184994][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.190695][ T4067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.362364][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.365900][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.366393][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.366813][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.370677][ T4067] device veth0_vlan entered promiscuous mode [ 82.376124][ T4067] device veth1_vlan entered promiscuous mode [ 82.391887][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.392353][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.392907][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.395583][ T4067] device veth0_macvtap entered promiscuous mode [ 82.398440][ T4067] device veth1_macvtap entered promiscuous mode [ 82.413407][ T4067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.413483][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.417065][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.424340][ T4067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.424593][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.512715][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.512724][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.529487][ T143] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.537669][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.537678][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.539610][ T2930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.552417][ T27] audit: type=1400 audit(1654586512.513:206): avc: denied { mounton } for pid=4067 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 82.600919][ T27] audit: type=1400 audit(1654586512.553:207): avc: denied { ioctl } for pid=4085 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=730 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.871017][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.111025][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 83.261089][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 83.431061][ T14] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.85 [ 83.431072][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.431077][ T14] usb 1-1: Product: syz [ 83.431081][ T14] usb 1-1: Manufacturer: syz [ 83.431084][ T14] usb 1-1: SerialNumber: syz [ 83.442102][ T14] usb 1-1: config 0 descriptor?? [ 83.464417][ T4086] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 83.692176][ T2930] Bluetooth: hci0: command 0x0409 tx timeout 2022/06/07 07:21:54 executed programs: 1 [ 85.770977][ T2930] Bluetooth: hci0: command 0x041b tx timeout [ 87.861182][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 89.931580][ T23] Bluetooth: hci0: command 0x0419 tx timeout 2022/06/07 07:22:00 executed programs: 3 2022/06/07 07:22:06 executed programs: 5 2022/06/07 07:22:12 executed programs: 7 2022/06/07 07:22:18 executed programs: 9 2022/06/07 07:22:24 executed programs: 11 2022/06/07 07:22:30 executed programs: 13 2022/06/07 07:22:36 executed programs: 15 [ 127.452743][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.452763][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 2022/06/07 07:22:42 executed programs: 17 2022/06/07 07:22:48 executed programs: 19 2022/06/07 07:22:54 executed programs: 21 2022/06/07 07:23:00 executed programs: 23 2022/06/07 07:23:06 executed programs: 25 2022/06/07 07:23:12 executed programs: 27 2022/06/07 07:23:18 executed programs: 29 2022/06/07 07:23:24 executed programs: 31 2022/06/07 07:23:30 executed programs: 33 2022/06/07 07:23:36 executed programs: 35 [ 188.892215][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.892233][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 2022/06/07 07:23:42 executed programs: 37 2022/06/07 07:23:48 executed programs: 39 2022/06/07 07:23:54 executed programs: 41 [ 206.330914][ T34] Bluetooth: hci0: command 0x0406 tx timeout 2022/06/07 07:24:00 executed programs: 43 2022/06/07 07:24:06 executed programs: 45 2022/06/07 07:24:12 executed programs: 47 2022/06/07 07:24:18 executed programs: 49 2022/06/07 07:24:24 executed programs: 51 2022/06/07 07:24:30 executed programs: 53 2022/06/07 07:24:37 executed programs: 55 [ 247.140963][ T28] INFO: task kworker/0:1:14 blocked for more than 143 seconds. [ 247.148593][ T28] Not tainted 5.18.0-syzkaller #0 [ 247.154215][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.163008][ T28] task:kworker/0:1 state:D stack:24288 pid: 14 ppid: 2 flags:0x00004000 [ 247.172307][ T28] Workqueue: usb_hub_wq hub_event [ 247.177635][ T28] Call Trace: [ 247.181112][ T28] [ 247.184112][ T28] __schedule+0x9cd/0x4af0 [ 247.188764][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 247.194277][ T28] ? io_schedule_timeout+0x140/0x140 [ 247.199957][ T28] schedule+0xd2/0x1f0 [ 247.204238][ T28] schedule_preempt_disabled+0xf/0x20 [ 247.209843][ T28] __mutex_lock+0xa70/0x1350 [ 247.214608][ T28] ? add_early_randomness+0x14/0x120 [ 247.219977][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 247.226007][ T28] ? wait_for_completion_io_timeout+0x20/0x20 [ 247.232206][ T28] ? hwrng_init+0x1e9/0x280 [ 247.236706][ T28] ? hwrng_manage_rngd+0xe0/0xe0 [ 247.241684][ T28] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 247.247480][ T28] add_early_randomness+0x14/0x120 [ 247.252691][ T28] hwrng_register+0x2e1/0x410 [ 247.257359][ T28] chaoskey_probe+0x6f1/0xb40 [ 247.262184][ T28] ? chaoskey_suspend+0x20/0x20 [ 247.267026][ T28] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 247.272895][ T28] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 247.279263][ T28] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 247.285143][ T28] usb_probe_interface+0x274/0x6a0 [ 247.290254][ T28] really_probe+0x1c1/0x9d0 [ 247.294936][ T28] __driver_probe_device+0x2a6/0x460 [ 247.300227][ T28] ? usb_match_id.part.0+0xdd/0x140 [ 247.305491][ T28] driver_probe_device+0x44/0x110 [ 247.310510][ T28] __device_attach_driver+0x185/0x250 [ 247.315972][ T28] ? driver_allows_async_probing+0x120/0x120 [ 247.321958][ T28] bus_for_each_drv+0x11e/0x1a0 [ 247.326795][ T28] ? bus_for_each_dev+0x1a0/0x1a0 [ 247.331863][ T28] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 247.337837][ T28] ? lockdep_hardirqs_on+0x79/0x100 [ 247.343565][ T28] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 247.349377][ T28] __device_attach+0x1db/0x410 [ 247.354176][ T28] ? device_driver_attach+0x1b0/0x1b0 [ 247.359532][ T28] ? kobject_uevent_env+0x225/0x12f0 [ 247.364908][ T28] bus_probe_device+0x19d/0x250 [ 247.370020][ T28] device_add+0x9ca/0x1b10 [ 247.374483][ T28] ? __fw_devlink_link_to_suppliers+0x260/0x260 [ 247.380712][ T28] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 247.386877][ T28] usb_set_configuration+0xc91/0x1840 [ 247.392299][ T28] ? kernfs_create_link+0x167/0x220 [ 247.397642][ T28] ? do_raw_spin_unlock+0x171/0x230 [ 247.403028][ T28] usb_generic_driver_probe+0x74/0xa0 [ 247.408708][ T28] usb_probe_device+0x95/0x240 [ 247.413511][ T28] really_probe+0x1c1/0x9d0 [ 247.418011][ T28] __driver_probe_device+0x2a6/0x460 [ 247.423355][ T28] driver_probe_device+0x44/0x110 [ 247.428395][ T28] __device_attach_driver+0x185/0x250 [ 247.433841][ T28] ? driver_allows_async_probing+0x120/0x120 [ 247.439818][ T28] bus_for_each_drv+0x11e/0x1a0 [ 247.444741][ T28] ? bus_for_each_dev+0x1a0/0x1a0 [ 247.449759][ T28] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 247.455912][ T28] ? lockdep_hardirqs_on+0x79/0x100 [ 247.461216][ T28] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 247.467123][ T28] __device_attach+0x1db/0x410 [ 247.471939][ T28] ? device_driver_attach+0x1b0/0x1b0 [ 247.477308][ T28] ? kobject_uevent_env+0x225/0x12f0 [ 247.483957][ T28] bus_probe_device+0x19d/0x250 [ 247.488804][ T28] device_add+0x9ca/0x1b10 [ 247.493274][ T28] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 247.499070][ T28] ? __fw_devlink_link_to_suppliers+0x260/0x260 [ 247.505369][ T28] usb_new_device.cold+0x5d1/0xeeb [ 247.510495][ T28] ? hub_disconnect+0x470/0x470 [ 247.515418][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 247.520346][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 247.525597][ T28] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 247.531630][ T28] hub_event+0x114d/0x39b0 [ 247.531653][ T28] ? hub_port_debounce+0x2d0/0x2d0 [ 247.541194][ T28] ? __lock_acquire+0x4c41/0x55d0 [ 247.546219][ T28] ? lock_release+0x780/0x780 [ 247.550940][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 247.555776][ T28] ? do_raw_spin_lock+0x120/0x2a0 [ 247.560931][ T28] process_one_work+0x865/0x13d0 [ 247.565936][ T28] ? lock_release+0x780/0x780 [ 247.570598][ T28] ? pwq_dec_nr_in_flight+0x230/0x230 [ 247.576105][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 247.581167][ T28] ? _raw_spin_lock_irq+0x41/0x50 [ 247.586284][ T28] worker_thread+0x598/0xec0 [ 247.590939][ T28] ? __kthread_parkme+0xc1/0x1f0 [ 247.595872][ T28] ? process_one_work+0x13d0/0x13d0 [ 247.601108][ T28] kthread+0x299/0x340 [ 247.605161][ T28] ? kthread_complete_and_exit+0x20/0x20 [ 247.610792][ T28] ret_from_fork+0x1f/0x30 [ 247.615754][ T28] [ 247.618844][ T28] [ 247.618844][ T28] Showing all locks held in the system: [ 247.627107][ T28] 6 locks held by kworker/0:1/14: [ 247.633891][ T28] #0: ffff8881457b5d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x13d0 [ 247.645137][ T28] #1: ffffc9000034fdb8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7b7/0x13d0 [ 247.657269][ T28] #2: ffff888020408190 (&dev->mutex){....}-{3:3}, at: hub_event+0x127/0x39b0 [ 247.666960][ T28] #3: ffff88807609d190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x74/0x410 [ 247.677307][ T28] #4: ffff8880791b2118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x74/0x410 [ 247.686906][ T28] #5: ffffffff8bbde3c8 (reading_mutex){+.+.}-{3:3}, at: add_early_randomness+0x14/0x120 [ 247.697427][ T28] 1 lock held by khungtaskd/28: [ 247.702610][ T28] #0: ffffffff8b17a460 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 247.712733][ T28] 1 lock held by hwrng/755: [ 247.717274][ T28] #0: ffffffff8bbde3c8 (reading_mutex){+.+.}-{3:3}, at: hwrng_fillfn+0xbb/0x250 [ 247.726708][ T28] 2 locks held by getty/3280: [ 247.731593][ T28] #0: ffff88801d0e1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 [ 247.741705][ T28] #1: ffffc90001c082e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x9d7/0xed0 [ 247.752100][ T28] [ 247.754501][ T28] ============================================= [ 247.754501][ T28] [ 247.763749][ T28] NMI backtrace for cpu 0 [ 247.768067][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 5.18.0-syzkaller #0 [ 247.775845][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.785893][ T28] Call Trace: [ 247.789166][ T28] [ 247.792078][ T28] dump_stack_lvl+0x57/0x7d [ 247.796584][ T28] nmi_cpu_backtrace.cold+0x30/0xc0 [ 247.801928][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 247.807248][ T28] nmi_trigger_cpumask_backtrace+0x140/0x170 [ 247.813212][ T28] watchdog+0x891/0xc20 [ 247.817351][ T28] ? proc_dohung_task_timeout_secs+0x30/0x30 [ 247.823303][ T28] kthread+0x299/0x340 [ 247.827364][ T28] ? kthread_complete_and_exit+0x20/0x20 [ 247.833068][ T28] ret_from_fork+0x1f/0x30 [ 247.837472][ T28] [ 247.840795][ T28] Sending NMI from CPU 0 to CPUs 1: [ 247.846081][ C1] NMI backtrace for cpu 1 [ 247.846087][ C1] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted 5.18.0-syzkaller #0 [ 247.846087][ C1] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted 5.18.0-syzkaller #0 [ 247.846093][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.846097][ C1] Workqueue: events_unbound toggle_allocation_gate [ 247.846188][ C1] RIP: 0010:__lock_acquire+0xc87/0x55d0 [ 247.846197][ C1] Code: c2 06 31 ca 41 89 d7 29 d3 01 c2 41 c1 c7 08 41 31 df 44 89 f9 44 29 f8 41 01 d7 c1 c1 10 44 89 fe 31 c8 89 c1 29 c2 44 01 f8 c9 0d 31 ca 01 d0 29 d6 89 d1 48 8b 54 24 38 c1 c1 04 31 f1 48 [ 247.846202][ C1] RSP: 0018:ffffc9000031f788 EFLAGS: 00000013 [ 247.846207][ C1] RAX: 000000004bacb9c2 RBX: 00000000bf03c6e3 RCX: 0000000071a75887 [ 247.846210][ C1] RDX: 00000000aef67b2c RSI: 00000000da05613b RDI: ffffffff8f973da0 [ 247.846214][ C1] RBP: ffff888011e18b4a R08: 0000000000000000 R09: ffffffff8f96c8d7 [ 247.846217][ C1] R10: fffffbfff1f2d91a R11: 0000000000000001 R12: ffff888011e18b28 [ 247.846221][ C1] R13: ffff888011e18000 R14: 0000000000000000 R15: 00000000da05613b [ 247.846224][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 247.846230][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.846233][ C1] CR2: 00007f4683f089e0 CR3: 000000000ae8e000 CR4: 00000000003506e0 [ 247.846237][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.846239][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.846242][ C1] Call Trace: [ 247.846245][ C1] [ 247.846249][ C1] ? lock_chain_count+0x20/0x20 [ 247.846255][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 247.846261][ C1] ? mark_lock.part.0+0xee/0x19a0 [ 247.846267][ C1] lock_acquire+0x1ab/0x570 [ 247.846272][ C1] ? __get_locked_pte+0x105/0x210 [ 247.846297][ C1] ? lock_release+0x780/0x780 [ 247.846302][ C1] ? find_held_lock+0x2d/0x110 [ 247.846307][ C1] ? __text_poke+0x5d2/0x8e0 [ 247.846349][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 247.846354][ C1] _raw_spin_lock+0x2a/0x40 [ 247.846363][ C1] ? __get_locked_pte+0x105/0x210 [ 247.846367][ C1] __get_locked_pte+0x105/0x210 [ 247.846372][ C1] ? kmem_cache_alloc_node_trace+0x124/0x5a0 [ 247.846377][ C1] __text_poke+0x1b3/0x8e0 [ 247.846382][ C1] ? cpumask_weight+0x40/0x40 [ 247.846387][ C1] ? optimize_nops+0x2d0/0x2d0 [ 247.846393][ C1] ? text_poke_memset+0x60/0x60 [ 247.846398][ C1] text_poke_bp_batch+0x44c/0x6d0 [ 247.846404][ C1] ? kmem_cache_alloc_node_trace+0x124/0x5a0 [ 247.846409][ C1] ? mutex_lock_io_nested+0x1190/0x1190 [ 247.846415][ C1] ? do_sync_core+0x20/0x20 [ 247.846420][ C1] ? __jump_label_patch+0x281/0x330 [ 247.846426][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 247.846431][ C1] ? arch_jump_label_transform_queue+0xa0/0x100 [ 247.846437][ C1] text_poke_finish+0x16/0x30 [ 247.846441][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 247.846447][ C1] static_key_enable_cpuslocked+0x15f/0x220 [ 247.846483][ C1] static_key_enable+0x11/0x20 [ 247.846488][ C1] toggle_allocation_gate+0xe3/0x310 [ 247.846494][ C1] ? wake_up_kfence_timer+0x20/0x20 [ 247.846499][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 247.846506][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 247.846512][ C1] process_one_work+0x865/0x13d0 [ 247.846519][ C1] ? lock_release+0x780/0x780 [ 247.846524][ C1] ? pwq_dec_nr_in_flight+0x230/0x230 [ 247.846529][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 247.846533][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 247.846539][ C1] worker_thread+0x598/0xec0 [ 247.846544][ C1] ? process_one_work+0x13d0/0x13d0 [ 247.846549][ C1] kthread+0x299/0x340 [ 247.846553][ C1] ? kthread_complete_and_exit+0x20/0x20 [ 247.846557][ C1] ret_from_fork+0x1f/0x30 [ 247.846564][ C1] [ 247.854380][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 247.854389][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 5.18.0-syzkaller #0 [ 247.854403][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.854407][ T28] Call Trace: [ 247.854412][ T28] [ 247.854416][ T28] dump_stack_lvl+0x57/0x7d [ 247.854428][ T28] panic+0x227/0x466 [ 247.854435][ T28] ? panic_print_sys_info.part.0+0x69/0x69 [ 247.854442][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 247.854450][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 247.854460][ T28] ? printk_prefer_direct_exit+0x11/0x30 [ 247.854470][ T28] watchdog.cold+0x11/0x160 [ 247.854506][ T28] ? proc_dohung_task_timeout_secs+0x30/0x30 [ 247.854515][ T28] kthread+0x299/0x340 [ 247.854522][ T28] ? kthread_complete_and_exit+0x20/0x20 [ 247.854528][ T28] ret_from_fork+0x1f/0x30 [ 247.854536][ T28] [ 247.859776][ T28] Kernel Offset: disabled