Warning: Permanently added '10.128.10.54' (ED25519) to the list of known hosts. 2025/03/19 11:30:46 ignoring optional flag "sandboxArg"="0" 2025/03/19 11:30:46 ignoring optional flag "type"="gce" 2025/03/19 11:30:46 parsed 1 programs 2025/03/19 11:30:46 executed programs: 0 [ 56.590628][ T1990] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.688030][ T1999] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.695975][ T1999] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.703580][ T1999] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.712366][ T1999] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.729337][ T2004] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.738452][ T2004] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.747622][ T2000] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.757889][ T2000] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.766078][ T2004] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.781161][ T2015] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.792134][ T2000] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.805260][ T2007] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.823051][ T2004] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.830720][ T2015] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.839244][ T2016] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.847331][ T2000] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.868282][ T2007] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.876055][ T2015] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.884722][ T2016] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.899492][ T2007] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.914665][ T2015] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.922746][ T2016] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.930591][ T2007] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.950409][ T2016] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.445306][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.453199][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.460835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.484254][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.492131][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.499551][ T2019] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/03/19 11:30:55 executed programs: 6 [ 65.604077][ C0] hrtimer: interrupt took 43087 ns [ 65.685599][ T2021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.693491][ T2021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.708615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.862952][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.874399][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.876587][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.889603][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.892950][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.910890][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.934691][ T2044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.942663][ T2044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.971196][ T4475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.979043][ T4475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.998329][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.006301][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.048145][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.055662][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.063100][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.180446][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.192318][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.203807][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.262066][ T4475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.273836][ T4475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.285343][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.680006][ T2021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.692010][ T2021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.713662][ T2021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.725864][ T2021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.738285][ T2021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.750079][ T2021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/03/19 11:31:02 executed programs: 22 2025/03/19 11:31:10 executed programs: 26 2025/03/19 11:31:27 executed programs: 32 2025/03/19 11:31:59 executed programs: 38 2025/03/19 11:32:55 executed programs: 44 [ 285.317615][ T25] INFO: task syz-executor.2:4685 blocked for more than 143 seconds. [ 285.325647][ T25] Not tainted 5.15.179-syzkaller #0 [ 285.331628][ T25] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.340335][ T25] task:syz-executor.2 state:D stack:14344 pid: 4685 ppid: 2000 flags:0x00000006 [ 285.349656][ T25] Call Trace: [ 285.353029][ T25] [ 285.355986][ T25] __schedule+0x2c8/0x7d0 [ 285.360474][ T25] schedule+0x53/0x90 [ 285.364472][ T25] synchronize_rcu_expedited+0x370/0x390 [ 285.370210][ T25] ? do_wait_intr_irq+0xa0/0xa0 [ 285.375166][ T25] ? packet_release+0x337/0x580 [ 285.380054][ T25] ? __mutex_unlock_slowpath+0x37/0x1e0 [ 285.385645][ T25] synchronize_net+0x34/0x40 [ 285.390287][ T25] packet_release+0x33c/0x580 [ 285.394978][ T25] ? __sock_release+0x3d/0xd0 [ 285.399667][ T25] __sock_release+0x47/0xd0 [ 285.404183][ T25] ? __sock_release+0xd0/0xd0 [ 285.408879][ T25] sock_close+0x18/0x20 [ 285.413146][ T25] __fput+0xf9/0x420 [ 285.417060][ T25] task_work_run+0x73/0xb0 [ 285.664699][ T25] exit_to_user_mode_prepare+0x196/0x1a0 [ 285.670382][ T25] syscall_exit_to_user_mode+0x12/0x30 [ 285.675866][ T25] do_syscall_64+0x40/0xb0 [ 285.680298][ T25] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.686202][ T25] RIP: 0033:0x7fd568a54a1a [ 285.690632][ T25] RSP: 002b:00007fff900a19c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 285.699066][ T25] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fd568a54a1a [ 285.707039][ T25] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 285.715014][ T25] RBP: 0000000000000032 R08: 0000001b30760000 R09: 00007fd568b74f8c [ 285.722992][ T25] R10: 00007fff900a1b10 R11: 0000000000000293 R12: 00007fd5685da0f0 [ 285.731255][ T25] R13: ffffffffffffffff R14: 00007fd5685d9000 R15: 000000000001fd1f [ 285.739235][ T25] [ 285.745238][ T25] INFO: task syz-executor.0:4686 blocked for more than 143 seconds. [ 285.753316][ T25] Not tainted 5.15.179-syzkaller #0 [ 285.759037][ T25] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.018237][ T25] task:syz-executor.0 state:D stack:14152 pid: 4686 ppid: 2007 flags:0x00000006 [ 286.027570][ T25] Call Trace: [ 286.030848][ T25] [ 286.033778][ T25] __schedule+0x2c8/0x7d0 [ 286.038128][ T25] schedule+0x53/0x90 [ 286.042124][ T25] synchronize_rcu_expedited+0x370/0x390 [ 286.047862][ T25] ? do_wait_intr_irq+0xa0/0xa0 [ 286.052734][ T25] ? packet_release+0x337/0x580 [ 286.057598][ T25] ? __mutex_unlock_slowpath+0x37/0x1e0 [ 286.063157][ T25] synchronize_net+0x34/0x40 [ 286.067781][ T25] packet_release+0x33c/0x580 [ 286.072475][ T25] ? __sock_release+0x3d/0xd0 [ 286.077441][ T25] __sock_release+0x47/0xd0 [ 286.082002][ T25] ? __sock_release+0xd0/0xd0 [ 286.086692][ T25] sock_close+0x18/0x20 [ 286.090984][ T25] __fput+0xf9/0x420 [ 286.094899][ T25] task_work_run+0x73/0xb0 [ 286.099326][ T25] exit_to_user_mode_prepare+0x196/0x1a0 [ 286.104972][ T25] syscall_exit_to_user_mode+0x12/0x30 [ 286.110451][ T25] do_syscall_64+0x40/0xb0 [ 286.114883][ T25] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.373274][ T25] RIP: 0033:0x7f1ed1ce9a1a [ 286.377728][ T25] RSP: 002b:00007ffd57ba0490 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 286.386149][ T25] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f1ed1ce9a1a [ 286.394126][ T25] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 286.402101][ T25] RBP: 0000000000000032 R08: 0000001b30860000 R09: 00007f1ed1e09f8c [ 286.410078][ T25] R10: 00007ffd57ba05e0 R11: 0000000000000293 R12: 00007f1ed186f0f0 [ 286.418055][ T25] R13: ffffffffffffffff R14: 00007f1ed186e000 R15: 000000000001fc56 [ 286.426034][ T25] [ 286.431588][ T25] INFO: task syz-executor.4:4695 blocked for more than 144 seconds. [ 286.439577][ T25] Not tainted 5.15.179-syzkaller #0 [ 286.445289][ T25] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.453953][ T25] task:syz-executor.4 state:D stack:14344 pid: 4695 ppid: 2015 flags:0x00000006 [ 286.463163][ T25] Call Trace: [ 286.466439][ T25] [ 286.469374][ T25] __schedule+0x2c8/0x7d0 [ 286.722362][ T25] schedule+0x53/0x90 [ 286.726407][ T25] synchronize_rcu_expedited+0x370/0x390 [ 286.732070][ T25] ? do_wait_intr_irq+0xa0/0xa0 [ 286.736938][ T25] ? packet_release+0x337/0x580 [ 286.741808][ T25] ? __mutex_unlock_slowpath+0x37/0x1e0 [ 286.747376][ T25] synchronize_net+0x34/0x40 [ 286.751987][ T25] packet_release+0x33c/0x580 [ 286.756681][ T25] ? __sock_release+0x3d/0xd0 [ 286.761457][ T25] __sock_release+0x47/0xd0 [ 286.766056][ T25] ? __sock_release+0xd0/0xd0 [ 286.770750][ T25] sock_close+0x18/0x20 [ 286.774920][ T25] __fput+0xf9/0x420 [ 286.778972][ T25] task_work_run+0x73/0xb0 [ 286.783503][ T25] exit_to_user_mode_prepare+0x196/0x1a0 [ 286.789165][ T25] syscall_exit_to_user_mode+0x12/0x30 [ 286.794651][ T25] do_syscall_64+0x40/0xb0 [ 286.799080][ T25] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.805002][ T25] RIP: 0033:0x7f22bb6dca1a [ 286.809443][ T25] RSP: 002b:00007ffc2ca8bb10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 286.817951][ T25] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f22bb6dca1a [ 287.078896][ T25] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 287.086922][ T25] RBP: 0000000000000032 R08: 0000001b31160000 R09: 00007f22bb7fcf8c [ 287.094990][ T25] R10: 00007ffc2ca8bc60 R11: 0000000000000293 R12: 00007f22bb2620f0 [ 287.103061][ T25] R13: ffffffffffffffff R14: 00007f22bb261000 R15: 000000000001fd3e [ 287.111078][ T25] [ 287.116549][ T25] [ 287.116549][ T25] Showing all locks held in the system: [ 287.124271][ T25] 4 locks held by kworker/u4:0/9: [ 287.129399][ T25] #0: ffff888101faf538 ((wq_completion)phy6){....}-{0:0}, at: process_one_work+0x26e/0x660 [ 287.139630][ T25] #1: ffffc90000053e68 ((work_completion)(&sdata->work)){....}-{0:0}, at: process_one_work+0x26e/0x660 [ 287.150918][ T25] #2: ffff888113c6cc40 (&wdev->mtx){....}-{3:3}, at: ieee80211_ibss_rx_queued_mgmt+0x4e/0x12a0 [ 287.161399][ T25] #3: ffff888113e19710 (&local->sta_mtx){....}-{3:3}, at: sta_info_destroy_addr+0x26/0x120 [ 287.171608][ T25] 4 locks held by kworker/1:0/19: [ 287.176636][ T25] 1 lock held by khungtaskd/25: [ 287.434537][ T25] #0: ffffffff837a2400 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x15/0xf2 [ 287.444433][ T25] 4 locks held by kworker/u4:1/54: [ 287.449635][ T25] #0: ffff888113e73938 ((wq_completion)phy13){....}-{0:0}, at: process_one_work+0x26e/0x660 [ 287.459991][ T25] #1: ffffc9000010fe68 ((work_completion)(&sdata->work)){....}-{0:0}, at: process_one_work+0x26e/0x660 [ 287.471355][ T25] #2: ffff888113e78c40 (&wdev->mtx){....}-{3:3}, at: ieee80211_ibss_rx_queued_mgmt+0x4e/0x12a0 [ 287.481833][ T25] #3: ffff888113f49710 (&local->sta_mtx){....}-{3:3}, at: sta_info_destroy_addr+0x26/0x120 [ 287.492066][ T25] 4 locks held by kworker/u4:2/66: [ 287.497205][ T25] #0: ffff888113c54d38 ((wq_completion)phy11){....}-{0:0}, at: process_one_work+0x26e/0x660 [ 287.507641][ T25] #1: ffffc900008afe68 ((work_completion)(&sdata->work)){....}-{0:0}, at: process_one_work+0x26e/0x660 [ 287.519158][ T25] #2: ffff888113e5cc40 (&wdev->mtx){....}-{3:3}, at: ieee80211_ibss_rx_queued_mgmt+0x4e/0x12a0 [ 287.529651][ T25] #3: ffff888113ec1710 (&local->sta_mtx){....}-{3:3}, at: sta_info_destroy_addr+0x26/0x120 [ 287.797108][ T25] 4 locks held by kworker/u4:3/71: [ 287.802252][ T25] #0: ffff888113c44d38 ((wq_completion)phy12){....}-{0:0}, at: process_one_work+0x26e/0x660 [ 287.812546][ T25] #1: ffffc900008bfe68 ((work_completion)(&sdata->work)){....}-{0:0}, at: process_one_work+0x26e/0x660 [ 287.823794][ T25] #2: ffff888113e74c40 (&wdev->mtx){....}-{3:3}, at: ieee80211_ibss_work+0x3a/0x5a0 [ 287.833377][ T25] #3: ffff888113ee9710 (&local->sta_mtx){....}-{3:3}, at: ieee80211_ibss_work+0x1fa/0x5a0 [ 287.843688][ T25] 4 locks held by kworker/u4:4/756: [ 287.848894][ T25] #0: ffff8881011f2138 ((wq_completion)phy7){....}-{0:0}, at: process_one_work+0x26e/0x660 [ 287.859009][ T25] #1: ffffc90002393e68 ((work_completion)(&sdata->work)){....}-{0:0}, at: process_one_work+0x26e/0x660 [ 287.870165][ T25] #2: ffff888101994c40 (&wdev->mtx){....}-{3:3}, at: ieee80211_ibss_work+0x3a/0x5a0 [ 287.879674][ T25] #3: ffff8881132d1710 (&local->sta_mtx){....}-{3:3}, at: ieee80211_ibss_work+0x1fa/0x5a0 [ 287.889721][ T25] 2 locks held by getty/1218: [ 287.894587][ T25] #0: ffff88810aeea898 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x60 [ 288.166944][ T25] #1: ffffc900028272e8 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x899/0xa20 [ 288.177019][ T25] 4 locks held by syz-execprog/1985: [ 288.182316][ T25] #0: ffff888114b0b6f0 (&f->f_pos_lock){....}-{3:3}, at: __fdget_pos+0x90/0xd0 [ 288.191397][ T25] #1: ffff88810daf83f0 (&type->i_mutex_dir_key#3){....}-{3:3}, at: iterate_dir+0x6c/0x2f0 [ 288.201687][ T25] #2: ffff88810afa7438 (sb_writers#4){....}-{0:0}, at: iterate_dir+0x1d9/0x2f0 [ 288.210862][ T25] #3: ffff88810afa3990 (jbd2_handle){....}-{0:0}, at: start_this_handle+0x1d8/0x700 [ 288.220934][ T25] 4 locks held by syz-execprog/1993: [ 288.226246][ T25] #0: ffff888114b0baf0 (&f->f_pos_lock){....}-{3:3}, at: __fdget_pos+0x90/0xd0 [ 288.235334][ T25] #1: ffff88810da6a950 (&type->i_mutex_dir_key#3){....}-{3:3}, at: iterate_dir+0x6c/0x2f0 [ 288.245456][ T25] #2: ffff88810afa7438 (sb_writers#4){....}-{0:0}, at: iterate_dir+0x1d9/0x2f0 [ 288.254537][ T25] #3: ffff88810afa3990 (jbd2_handle){....}-{0:0}, at: start_this_handle+0x1d8/0x700 [ 288.264126][ T25] 4 locks held by syz-execprog/2002: [ 288.526348][ T25] #0: ffff888114b0b2f0 (&f->f_pos_lock){....}-{3:3}, at: __fdget_pos+0x90/0xd0 [ 288.535463][ T25] #1: ffff88810da69ff8 (&type->i_mutex_dir_key#3){....}-{3:3}, at: iterate_dir+0x6c/0x2f0 [ 288.545508][ T25] #2: ffff88810afa7438 (sb_writers#4){....}-{0:0}, at: iterate_dir+0x1d9/0x2f0 [ 288.554723][ T25] #3: ffff88810afa3990 (jbd2_handle){....}-{0:0}, at: start_this_handle+0x1d8/0x700 [ 288.564666][ T25] 4 locks held by syz-execprog/2008: [ 288.569949][ T25] #0: ffff888114b0b8f0 (&f->f_pos_lock){....}-{3:3}, at: __fdget_pos+0x90/0xd0 [ 288.579026][ T25] #1: ffff88810da696a0 (&type->i_mutex_dir_key#3){....}-{3:3}, at: iterate_dir+0x6c/0x2f0 [ 288.589141][ T25] #2: ffff88810afa7438 (sb_writers#4){....}-{0:0}, at: iterate_dir+0x1d9/0x2f0 [ 288.598215][ T25] #3: ffff88810afa3990 (jbd2_handle){....}-{0:0}, at: start_this_handle+0x1d8/0x700 [ 288.607719][ T25] 4 locks held by syz-execprog/4697: [ 288.613001][ T25] #0: ffff888114b0b4f0 (&f->f_pos_lock){....}-{3:3}, at: __fdget_pos+0x90/0xd0 [ 288.622074][ T25] #1: ffff88810da6eab8 (&type->i_mutex_dir_key#3){....}-{3:3}, at: iterate_dir+0x6c/0x2f0 [ 288.890720][ T25] #2: ffff88810afa7438 (sb_writers#4){....}-{0:0}, at: iterate_dir+0x1d9/0x2f0 [ 288.899822][ T25] #3: ffff88810afa3990 (jbd2_handle){....}-{0:0}, at: start_this_handle+0x1d8/0x700 [ 288.909502][ T25] 1 lock held by syz-executor.1/1999: [ 288.915159][ T25] #0: ffffffff837a2e68 (rcu_state.exp_mutex){....}-{3:3}, at: synchronize_rcu_expedited+0xe6/0x390 [ 288.926012][ T25] 4 locks held by kworker/u4:6/2021: [ 288.931306][ T25] #0: ffff888113c70d38 ((wq_completion)phy8){....}-{0:0}, at: process_one_work+0x26e/0x660 [ 288.941417][ T25] #1: ffffc900014fbe68 ((work_completion)(&sdata->work)){....}-{0:0}, at: process_one_work+0x26e/0x660 [ 288.952652][ T25] #2: ffff888113e50c40 (&wdev->mtx){....}-{3:3}, at: ieee80211_ibss_work+0x3a/0x5a0 [ 288.962246][ T25] #3: ffff888113e29710 (&local->sta_mtx){....}-{3:3}, at: ieee80211_ibss_work+0x1fa/0x5a0 [ 288.972285][ T25] 4 locks held by kworker/u4:7/2044: [ 288.977573][ T25] #0: ffff888113c72538 ((wq_completion)phy9){....}-{0:0}, at: process_one_work+0x26e/0x660 [ 288.987683][ T25] #1: ffffc900014dbe68 ((work_completion)(&sdata->work)){....}-{0:0}, at: process_one_work+0x26e/0x660 [ 289.260248][ T25] #2: ffff888110508c40 (&wdev->mtx){....}-{3:3}, at: ieee80211_ibss_rx_queued_mgmt+0x4e/0x12a0 [ 289.271106][ T25] #3: ffff888113e49710 (&local->sta_mtx){....}-{3:3}, at: sta_info_destroy_addr+0x26/0x120 [ 289.281307][ T25] 4 locks held by kworker/u4:9/4475: [ 289.286588][ T25] #0: ffff888113c72d38 ((wq_completion)phy10){....}-{0:0}, at: process_one_work+0x26e/0x660 [ 289.296956][ T25] #1: ffffc900015a3e68 ((work_completion)(&sdata->work)){....}-{0:0}, at: process_one_work+0x26e/0x660 [ 289.308141][ T25] #2: ffff888113e58c40 (&wdev->mtx){....}-{3:3}, at: ieee80211_ibss_work+0x3a/0x5a0 [ 289.317736][ T25] #3: ffff888113e91710 (&local->sta_mtx){....}-{3:3}, at: ieee80211_ibss_work+0x1fa/0x5a0 [ 289.327936][ T25] 1 lock held by syz-executor.2/4685: [ 289.333308][ T25] #0: ffff88810da22e10 (&sb->s_type->i_mutex_key#10){....}-{3:3}, at: __sock_release+0x3d/0xd0 [ 289.343972][ T25] 1 lock held by syz-executor.0/4686: [ 289.349441][ T25] #0: ffff88810da20d10 (&sb->s_type->i_mutex_key#10){....}-{3:3}, at: __sock_release+0x3d/0xd0 [ 289.359916][ T25] 2 locks held by syz-executor.3/4688: [ 289.624123][ T25] #0: ffff888114100d10 (&sb->s_type->i_mutex_key#10){....}-{3:3}, at: __sock_release+0x3d/0xd0 [ 289.634619][ T25] #1: ffffffff837a2e68 (rcu_state.exp_mutex){....}-{3:3}, at: synchronize_rcu_expedited+0xe6/0x390 [ 289.645436][ T25] 1 lock held by syz-executor.4/4695: [ 289.650807][ T25] #0: ffff88810db25a10 (&sb->s_type->i_mutex_key#10){....}-{3:3}, at: __sock_release+0x3d/0xd0 [ 289.661277][ T25] 1 lock held by syz-executor.0/4701: [ 289.666648][ T25] #0: ffffffff838bfd68 (rtnl_mutex){....}-{3:3}, at: __rtnl_newlink+0x52b/0xe60 [ 289.675886][ T25] 1 lock held by syz-executor.3/4705: [ 289.681255][ T25] #0: ffffffff838bfd68 (rtnl_mutex){....}-{3:3}, at: rtnetlink_rcv_msg+0x1f6/0x5f0 [ 289.690766][ T25] 1 lock held by syz-executor.4/4707: [ 289.696137][ T25] #0: ffffffff838bfd68 (rtnl_mutex){....}-{3:3}, at: rtnetlink_rcv_msg+0x1f6/0x5f0 [ 289.705645][ T25] 1 lock held by syz-executor.2/4708: [ 289.711017][ T25] #0: ffffffff838bfd68 (rtnl_mutex){....}-{3:3}, at: rtnetlink_rcv_msg+0x1f6/0x5f0 [ 289.720439][ T25] 1 lock held by syz-executor.5/4722: [ 289.978089][ T25] #0: ffffffff838bfd68 (rtnl_mutex){....}-{3:3}, at: rtnetlink_rcv_msg+0x1f6/0x5f0 [ 289.987556][ T25] 1 lock held by dhcpcd/4878: [ 289.992242][ T25] #0: ffff8881149f0120 (sk_lock-AF_PACKET){....}-{0:0}, at: packet_do_bind+0x32/0x550 [ 290.002126][ T25] 1 lock held by dhcpcd/4879: [ 290.006803][ T25] #0: ffff8881149f1120 (sk_lock-AF_PACKET){....}-{0:0}, at: packet_do_bind+0x32/0x550 [ 290.016494][ T25] 1 lock held by dhcpcd/4880: [ 290.021168][ T25] #0: ffff8881149f2120 (sk_lock-AF_PACKET){....}-{0:0}, at: packet_do_bind+0x32/0x550 [ 290.030933][ T25] [ 290.033251][ T25] ============================================= [ 290.033251][ T25] [ 290.041672][ T25] NMI backtrace for cpu 0 [ 290.045997][ T25] CPU: 0 PID: 25 Comm: khungtaskd Not tainted 5.15.179-syzkaller #0 [ 290.054145][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 290.064203][ T25] Call Trace: [ 290.067488][ T25] [ 290.070419][ T25] dump_stack_lvl+0x8e/0xdd [ 290.074932][ T25] nmi_cpu_backtrace.cold+0x46/0xde [ 290.080145][ T25] ? lapic_can_unplug_cpu+0x80/0x80 [ 290.085364][ T25] nmi_trigger_cpumask_backtrace+0x11b/0x150 [ 290.091359][ T25] watchdog+0x78d/0x7d0 [ 290.095530][ T25] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 290.101698][ T25] kthread+0x13a/0x160 [ 290.105784][ T25] ? set_kthread_struct+0x60/0x60 [ 290.110836][ T25] ret_from_fork+0x1f/0x30 [ 290.115267][ T25] [ 290.414492][ T25] Sending NMI from CPU 0 to CPUs 1: [ 290.419852][ C1] NMI backtrace for cpu 1 [ 290.419862][ C1] CPU: 1 PID: 19 Comm: kworker/1:0 Not tainted 5.15.179-syzkaller #0 [ 290.419882][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 290.419894][ C1] Workqueue: events_power_efficient gc_worker [ 290.419914][ C1] RIP: 0010:__hrtimer_run_queues+0x11c/0x4a0 [ 290.419938][ C1] Code: 0f a3 05 97 d4 78 02 41 0f 92 c4 31 ff 44 89 e6 e8 79 ed 06 00 45 84 e4 0f 85 f5 02 00 00 e8 8b f5 06 00 49 89 ad c8 00 00 00 <83> 43 10 01 83 43 10 01 31 ff 0f b6 45 38 4d 8b a5 80 00 00 00 c6 [ 290.419956][ C1] RSP: 0018:ffffc900000b8f10 EFLAGS: 00000046 [ 290.419970][ C1] RAX: 0000000000010000 RBX: ffff888237d1de80 RCX: ffffffff81224147 [ 290.419983][ C1] RDX: ffff8881002951c0 RSI: ffffffff81224155 RDI: 0000000000000001 [ 290.419996][ C1] RBP: ffff888113c51b40 R08: 0000000000080000 R09: 0000000000000000 [ 290.420008][ C1] R10: 0000000000000000 R11: 000000000000332c R12: 0000000000000001 [ 290.420019][ C1] R13: ffff888237d1de00 R14: ffff888237d1dd80 R15: 182e310bad309609 [ 290.420038][ C1] FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 290.420054][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.420068][ C1] CR2: 0000555592100818 CR3: 000000010e46a000 CR4: 00000000003506e0 [ 290.420083][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 290.420095][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 290.420107][ C1] Call Trace: [ 290.420111][ C1] [ 290.420116][ C1] ? nmi_cpu_backtrace.cold+0x26/0xde [ 290.420137][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 290.420162][ C1] ? nmi_handle+0xac/0x140 [ 290.420180][ C1] ? default_do_nmi+0x42/0x240 [ 290.420202][ C1] ? exc_nmi+0xe6/0x110 [ 290.420222][ C1] ? end_repeat_nmi+0x16/0x31 [ 290.420241][ C1] ? __hrtimer_run_queues+0x107/0x4a0 [ 290.420260][ C1] ? __hrtimer_run_queues+0x115/0x4a0 [ 290.420279][ C1] ? __hrtimer_run_queues+0x11c/0x4a0 [ 290.420298][ C1] ? __hrtimer_run_queues+0x11c/0x4a0 [ 290.420317][ C1] ? __hrtimer_run_queues+0x11c/0x4a0 [ 290.420336][ C1] [ 290.420341][ C1] [ 290.420345][ C1] hrtimer_interrupt+0x124/0x2a0 [ 290.420365][ C1] __sysvec_apic_timer_interrupt+0x63/0x100 [ 290.420387][ C1] sysvec_apic_timer_interrupt+0x6d/0x90 [ 290.420412][ C1] [ 290.420416][ C1] [ 290.420420][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 290.420442][ C1] RIP: 0010:lock_release+0x20/0x220 [ 290.420466][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 41 56 41 55 49 89 f5 41 54 55 48 89 fd 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 <31> c0 0f 1f 44 00 00 65 8b 05 a2 4a e3 7e 89 c0 48 0f a3 05 f8 0a [ 290.420483][ C1] RSP: 0018:ffffc900000abda8 EFLAGS: 00000282 [ 290.420496][ C1] RAX: d0c240d7d72dcb00 RBX: 000000000006d3e1 RCX: ffffffff8227aa84 [ 290.420509][ C1] RDX: ffff8881002951c0 RSI: ffffffff8227af0a RDI: ffffffff837a2400 [ 290.420521][ C1] RBP: ffffffff837a2400 R08: 00000000000a0355 R09: 0000000000000000 [ 290.420533][ C1] R10: 0000000000000000 R11: 000000000000005a R12: 0000000000000000 [ 290.420545][ C1] R13: ffffffff8227af0a R14: 0000000000000000 R15: 0000000000001770 [ 290.420557][ C1] ? gc_worker+0x66a/0xa10 [ 290.420574][ C1] ? gc_worker+0x1e4/0xa10 [ 290.420590][ C1] ? gc_worker+0x66a/0xa10 [ 290.420608][ C1] gc_worker+0x68c/0xa10 [ 290.420625][ C1] process_one_work+0x32a/0x660 [ 290.420644][ C1] ? lock_acquire+0x93/0x130 [ 290.420666][ C1] worker_thread+0x5b/0x520 [ 290.420683][ C1] ? rescuer_thread+0x510/0x510 [ 290.420701][ C1] kthread+0x13a/0x160 [ 290.420722][ C1] ? set_kthread_struct+0x60/0x60 [ 290.420745][ C1] ret_from_fork+0x1f/0x30 [ 290.420765][ C1] [ 290.420860][ T25] Kernel panic - not syncing: hung_task: blocked tasks [ 291.849701][ T25] Shutting down cpus with NMI [ 291.854598][ T25] Kernel Offset: disabled [ 291.858934][ T25] Rebooting in 86400 seconds..