Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. 2024/01/09 16:25:32 ignoring optional flag "sandboxArg"="0" 2024/01/09 16:25:32 parsed 1 programs 2024/01/09 16:25:34 executed programs: 0 [ 105.787799][ T5419] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.851094][ T4469] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.859384][ T4469] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.868499][ T4469] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.877792][ T4469] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.885779][ T4469] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 105.893497][ T4469] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.059208][ T5425] chnl_net:caif_netlink_parms(): no params data found [ 106.136915][ T5425] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.144358][ T5425] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.151761][ T5425] bridge_slave_0: entered allmulticast mode [ 106.159287][ T5425] bridge_slave_0: entered promiscuous mode [ 106.168487][ T5425] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.175801][ T5425] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.182997][ T5425] bridge_slave_1: entered allmulticast mode [ 106.190526][ T5425] bridge_slave_1: entered promiscuous mode [ 106.225691][ T5425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.238141][ T5425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.276770][ T5425] team0: Port device team_slave_0 added [ 106.286647][ T5425] team0: Port device team_slave_1 added [ 106.319466][ T5425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.326542][ T5425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.353416][ T5425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.367139][ T5425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.374538][ T5425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.401300][ T5425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.448840][ T5425] hsr_slave_0: entered promiscuous mode [ 106.455870][ T5425] hsr_slave_1: entered promiscuous mode [ 107.323606][ T5425] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.342517][ T5425] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.355942][ T5425] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.370472][ T5425] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.525013][ T5425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.558304][ T5425] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.576567][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.584048][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.607079][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.614601][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.683199][ T5425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.698920][ T5425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.915490][ T5425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.935606][ T5072] Bluetooth: hci0: command 0x0409 tx timeout [ 108.001418][ T5425] veth0_vlan: entered promiscuous mode [ 108.022858][ T5425] veth1_vlan: entered promiscuous mode [ 108.070578][ T5425] veth0_macvtap: entered promiscuous mode [ 108.085310][ T5425] veth1_macvtap: entered promiscuous mode [ 108.115735][ T5425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.138970][ T5425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.160035][ T5425] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.170648][ T5425] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.182583][ T5425] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.193528][ T5425] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.315564][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.323430][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.380005][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.389366][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.466353][ T5488] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 108.473525][ T5488] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.490320][ T5488] vhci_hcd vhci_hcd.0: Device attached [ 108.854674][ T27] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 110.014969][ T5072] Bluetooth: hci0: command 0x041b tx timeout [ 112.094723][ T5072] Bluetooth: hci0: command 0x040f tx timeout [ 114.175783][ T5072] Bluetooth: hci0: command 0x0419 tx timeout [ 133.458053][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.465099][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 2024/01/09 16:26:32 executed programs: 1 [ 164.533075][ T4469] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.542681][ T4469] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.553855][ T4469] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.561823][ T4469] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.570052][ T4469] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.577623][ T4469] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.739874][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 164.823316][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.831158][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.838439][ T5790] bridge_slave_0: entered allmulticast mode [ 164.846301][ T5790] bridge_slave_0: entered promiscuous mode [ 164.855024][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.862527][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.870414][ T5790] bridge_slave_1: entered allmulticast mode [ 164.878354][ T5790] bridge_slave_1: entered promiscuous mode [ 164.918160][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.930565][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.966308][ T5790] team0: Port device team_slave_0 added [ 164.978112][ T5790] team0: Port device team_slave_1 added [ 165.008746][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.016146][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.042690][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.056020][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.062982][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.089455][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.136898][ T5790] hsr_slave_0: entered promiscuous mode [ 165.146553][ T5790] hsr_slave_1: entered promiscuous mode [ 165.152831][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.161533][ T5790] Cannot create hsr debugfs directory [ 165.282081][ T5790] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.387449][ T5790] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.481837][ T5790] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.573776][ T5790] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.747032][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.758109][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 165.769236][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.780900][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.877744][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.901288][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.919397][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.926807][ T5082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.942696][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.949877][ T5084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.131586][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.181417][ T5790] veth0_vlan: entered promiscuous mode [ 166.196880][ T5790] veth1_vlan: entered promiscuous mode [ 166.233058][ T5790] veth0_macvtap: entered promiscuous mode [ 166.249388][ T5790] veth1_macvtap: entered promiscuous mode [ 166.271704][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.283147][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.296287][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.312871][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.324622][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.336545][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.355577][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.364577][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.373628][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.383186][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.459885][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.474905][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.511041][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.519359][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.615277][ T5805] vhci_hcd vhci_hcd.0: port 0 already used [ 166.654348][ T5072] Bluetooth: hci1: command 0x0409 tx timeout [ 168.744229][ T5072] Bluetooth: hci1: command 0x041b tx timeout [ 170.814309][ T5072] Bluetooth: hci1: command 0x040f tx timeout [ 172.894271][ T5072] Bluetooth: hci1: command 0x0419 tx timeout [ 194.898162][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.904636][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 2024/01/09 16:27:30 executed programs: 2 [ 222.709146][ T4469] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.718967][ T4469] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.727259][ T4469] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.735887][ T4469] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.743883][ T4469] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 222.751869][ T4469] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.927785][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 223.020328][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.027986][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.036194][ T5810] bridge_slave_0: entered allmulticast mode [ 223.043640][ T5810] bridge_slave_0: entered promiscuous mode [ 223.054683][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.061964][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.070132][ T5810] bridge_slave_1: entered allmulticast mode [ 223.077820][ T5810] bridge_slave_1: entered promiscuous mode [ 223.115551][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.129291][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.170059][ T5810] team0: Port device team_slave_0 added [ 223.178912][ T5810] team0: Port device team_slave_1 added [ 223.214032][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.221168][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.248085][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.261727][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.270243][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.297114][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.350194][ T5810] hsr_slave_0: entered promiscuous mode [ 223.357225][ T5810] hsr_slave_1: entered promiscuous mode [ 223.363449][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.371127][ T5810] Cannot create hsr debugfs directory [ 223.499365][ T5810] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.573919][ T5810] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.655919][ T5810] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.774052][ T5810] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.956736][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.967676][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.980490][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.993256][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 224.092323][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.116867][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.137924][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.145153][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.158642][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.165830][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.225096][ T5810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.236298][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.378271][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.433131][ T5810] veth0_vlan: entered promiscuous mode [ 224.449473][ T5810] veth1_vlan: entered promiscuous mode [ 224.488699][ T5810] veth0_macvtap: entered promiscuous mode [ 224.499555][ T5810] veth1_macvtap: entered promiscuous mode [ 224.523186][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.537307][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.548898][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.560349][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.572082][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.591205][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.602318][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.612752][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.623418][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.635899][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.651249][ T5810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.660683][ T5810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.670124][ T5810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.680561][ T5810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.766463][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.779011][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.810694][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.820081][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.822308][ T4469] Bluetooth: hci2: command 0x0409 tx timeout [ 224.930909][ T5825] vhci_hcd vhci_hcd.0: port 0 already used [ 226.895097][ T4469] Bluetooth: hci2: command 0x041b tx timeout [ 228.974277][ T4469] Bluetooth: hci2: command 0x040f tx timeout [ 231.054820][ T5072] Bluetooth: hci2: command 0x0419 tx timeout [ 232.817032][ T5072] Bluetooth: hci0: command 0x0406 tx timeout [ 256.339963][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.340400][ T29] INFO: task syz-executor.0:5487 blocked for more than 143 seconds. [ 256.346479][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.373507][ T29] Not tainted 6.7.0-syzkaller-g9f8413c4a66f #0 [ 256.383312][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.392083][ T29] task:syz-executor.0 state:D stack:26480 pid:5487 tgid:5487 ppid:5425 flags:0x00000006 [ 256.402448][ T29] Call Trace: [ 256.405961][ T29] [ 256.408921][ T29] __schedule+0xf12/0x5c00 [ 256.413368][ T29] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 256.419873][ T29] ? io_schedule_timeout+0x150/0x150 [ 256.425257][ T29] ? schedule+0x1fc/0x270 [ 256.429619][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 256.435196][ T29] ? __mutex_lock+0x5b4/0x9d0 [ 256.439909][ T29] ? __mutex_trylock_common+0x78/0x250 [ 256.445551][ T29] schedule+0xe9/0x270 [ 256.449646][ T29] schedule_preempt_disabled+0x13/0x20 [ 256.455183][ T29] __mutex_lock+0x5b9/0x9d0 [ 256.459716][ T29] ? locks_remove_posix+0x28e/0x440 [ 256.464991][ T29] ? usbdev_release+0x87/0x470 [ 256.469798][ T29] ? mutex_trylock+0x130/0x130 [ 256.474800][ T29] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 256.482318][ T29] ? locks_remove_file+0x399/0x5a0 [ 256.487986][ T29] ? free_async+0x4e0/0x4e0 [ 256.492674][ T29] ? usbdev_release+0x87/0x470 [ 256.498120][ T29] usbdev_release+0x87/0x470 [ 256.502848][ T29] ? free_async+0x4e0/0x4e0 [ 256.507873][ T29] __fput+0x270/0xb70 [ 256.512205][ T29] __fput_sync+0x47/0x50 [ 256.516993][ T29] __x64_sys_close+0x87/0xf0 [ 256.521674][ T29] do_syscall_64+0xd3/0x250 [ 256.526454][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 256.532678][ T29] RIP: 0033:0x7f0cfd67b9da [ 256.538014][ T29] RSP: 002b:00007ffc2c341df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 256.546591][ T29] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f0cfd67b9da [ 256.555448][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 256.564992][ T29] RBP: 0000000000000032 R08: 0000001b2ec60000 R09: 00007f0cfd79bf8c [ 256.573006][ T29] R10: 00007ffc2c341f40 R11: 0000000000000293 R12: 00007f0cfd2000c8 [ 256.583194][ T29] R13: ffffffffffffffff R14: 00007f0cfd200000 R15: 000000000001a775 [ 256.591740][ T29] [ 256.596534][ T29] [ 256.596534][ T29] Showing all locks held in the system: [ 256.604418][ T29] 5 locks held by kworker/1:1/27: [ 256.609646][ T29] #0: ffff888015ee5d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x789/0x15d0 [ 256.621140][ T29] #1: ffffc90000a2fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7eb/0x15d0 [ 256.632766][ T29] #2: ffff888142729190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10 [ 256.641782][ T29] #3: ffff88814272c510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27fe/0x4e10 [ 256.651896][ T29] #4: ffff888140b9c268 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2827/0x4e10 [ 256.662216][ T29] 1 lock held by khungtaskd/29: [ 256.667496][ T29] #0: ffffffff8cfadae0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 256.677729][ T29] 2 locks held by getty/4822: [ 256.682887][ T29] #0: ffff888026ad20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 256.692840][ T29] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc6/0x1490 [ 256.703223][ T29] 1 lock held by syz-executor.0/5487: [ 256.709124][ T29] #0: ffff888142729190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x87/0x470 [ 256.720823][ T29] 1 lock held by syz-executor.0/5804: [ 256.726328][ T29] #0: ffff888142729190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x1b4/0x8c0 [ 256.735470][ T29] 1 lock held by syz-executor.0/5824: [ 256.740851][ T29] #0: ffff888142729190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x1b4/0x8c0 [ 256.749987][ T29] [ 256.752333][ T29] ============================================= [ 256.752333][ T29] [ 256.760907][ T29] NMI backtrace for cpu 1 [ 256.765356][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.7.0-syzkaller-g9f8413c4a66f #0 [ 256.774305][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 256.784938][ T29] Call Trace: [ 256.788320][ T29] [ 256.791251][ T29] dump_stack_lvl+0xd9/0x1b0 [ 256.795950][ T29] nmi_cpu_backtrace+0x277/0x390 [ 256.800909][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 256.806108][ T29] nmi_trigger_cpumask_backtrace+0x299/0x300 [ 256.812100][ T29] watchdog+0xf87/0x1210 [ 256.816362][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 256.822480][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 256.827701][ T29] ? __kthread_parkme+0x14b/0x220 [ 256.832734][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 256.838720][ T29] kthread+0x2c6/0x3a0 [ 256.842787][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.848090][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 256.853825][ T29] ret_from_fork+0x45/0x80 [ 256.858437][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 256.864094][ T29] ret_from_fork_asm+0x11/0x20 [ 256.868900][ T29] [ 256.872614][ T29] Sending NMI from CPU 1 to CPUs 0: [ 256.878036][ C0] NMI backtrace for cpu 0 [ 256.878048][ C0] CPU: 0 PID: 4507 Comm: syslogd Not tainted 6.7.0-syzkaller-g9f8413c4a66f #0 [ 256.878070][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 256.878082][ C0] RIP: 0010:__lock_acquire+0xcef/0x3b30 [ 256.878121][ C0] Code: c1 c2 06 31 ca 01 d8 29 d3 89 d9 89 d3 01 c2 c1 c3 08 31 cb 89 d9 29 d8 01 d3 c1 c1 10 89 de 31 c8 89 c1 29 c2 01 d8 c1 c9 0d <31> d1 89 ca 29 ce 01 c8 c1 c2 04 89 c0 31 f2 48 c1 e2 20 48 09 c2 [ 256.878140][ C0] RSP: 0018:ffffc9000314f2e8 EFLAGS: 00000096 [ 256.878157][ C0] RAX: 00000000dd8b0190 RBX: 0000000099ac9ded RCX: 000000001d1a1ef3 [ 256.878171][ C0] RDX: 0000000042b11d7a RSI: 0000000099ac9ded RDI: ffffffff91f23c60 [ 256.878184][ C0] RBP: ffffffff91f63b90 R08: 0000000000000000 R09: fffffbfff23e43e0 [ 256.878198][ C0] R10: ffffffff91f21f07 R11: 0000000000000001 R12: ffff888079a46428 [ 256.878211][ C0] R13: ffffed100f348c7f R14: 0000000000000020 R15: 0000000000000003 [ 256.878224][ C0] FS: 00007f7faf329380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 256.878245][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.878260][ C0] CR2: 00007f7b18bff580 CR3: 000000001c99b000 CR4: 00000000003506f0 [ 256.878272][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 256.878284][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 256.878297][ C0] Call Trace: [ 256.878303][ C0] [ 256.878309][ C0] ? show_regs+0x8f/0xa0 [ 256.878336][ C0] ? nmi_cpu_backtrace+0x1d4/0x390 [ 256.878367][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 256.878397][ C0] ? nmi_handle+0x1a6/0x570 [ 256.878423][ C0] ? __lock_acquire+0xcef/0x3b30 [ 256.878453][ C0] ? default_do_nmi+0x6a/0x160 [ 256.878485][ C0] ? exc_nmi+0x186/0x200 [ 256.878513][ C0] ? end_repeat_nmi+0xf/0x2a [ 256.878544][ C0] ? __lock_acquire+0xcef/0x3b30 [ 256.878574][ C0] ? __lock_acquire+0xcef/0x3b30 [ 256.878605][ C0] ? __lock_acquire+0xcef/0x3b30 [ 256.878635][ C0] [ 256.878640][ C0] [ 256.878652][ C0] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 256.878689][ C0] ? find_held_lock+0x2d/0x110 [ 256.878755][ C0] lock_acquire+0x1ae/0x520 [ 256.878773][ C0] ? is_bpf_text_address+0x30/0x1a0 [ 256.878805][ C0] ? lock_sync+0x190/0x190 [ 256.878821][ C0] ? __orc_find+0x104/0x130 [ 256.878839][ C0] ? stack_access_ok+0xf9/0x270 [ 256.878859][ C0] ? __read_once_word_nocheck+0x9/0x10 [ 256.878878][ C0] ? unwind_next_frame+0x51/0x2390 [ 256.878897][ C0] ? __orc_find+0x104/0x130 [ 256.878914][ C0] ? stack_access_ok+0xf9/0x270 [ 256.878932][ C0] ? __module_address+0x55/0x3b0 [ 256.878964][ C0] ? write_profile+0x450/0x450 [ 256.878985][ C0] is_bpf_text_address+0x36/0x1a0 [ 256.879013][ C0] ? is_bpf_text_address+0x30/0x1a0 [ 256.879039][ C0] kernel_text_address+0x85/0xf0 [ 256.879061][ C0] __kernel_text_address+0xd/0x30 [ 256.879081][ C0] unwind_get_return_address+0x78/0xe0 [ 256.879103][ C0] arch_stack_walk+0xbe/0x170 [ 256.879130][ C0] ? kmem_cache_free+0xf8/0x350 [ 256.879159][ C0] stack_trace_save+0x96/0xd0 [ 256.879180][ C0] ? filter_irq_stacks+0x90/0x90 [ 256.879201][ C0] ? kasan_set_track+0x25/0x30 [ 256.879230][ C0] ? print_usage_bug.part.0+0x550/0x550 [ 256.879260][ C0] ? skb_release_data+0x5ba/0x870 [ 256.879282][ C0] kasan_save_stack+0x33/0x50 [ 256.879310][ C0] ? kasan_save_stack+0x33/0x50 [ 256.879338][ C0] ? kasan_set_track+0x25/0x30 [ 256.879365][ C0] ? kasan_save_free_info+0x2b/0x40 [ 256.879387][ C0] ? ____kasan_slab_free+0x15b/0x1b0 [ 256.879415][ C0] ? slab_free_freelist_hook+0x114/0x1e0 [ 256.879441][ C0] ? kmem_cache_free+0xf8/0x350 [ 256.879468][ C0] ? kfree_skbmem+0xef/0x1b0 [ 256.879497][ C0] ? consume_skb+0xdf/0x170 [ 256.879517][ C0] ? __unix_dgram_recvmsg+0x814/0xee0 [ 256.879542][ C0] ? unix_dgram_recvmsg+0xc3/0xf0 [ 256.879564][ C0] ? sock_recvmsg+0xe2/0x170 [ 256.879591][ C0] ? sock_read_iter+0x2c3/0x3c0 [ 256.879617][ C0] ? vfs_read+0x7c5/0x8f0 [ 256.879637][ C0] ? ksys_read+0x1f0/0x250 [ 256.879656][ C0] ? do_syscall_64+0xd3/0x250 [ 256.879688][ C0] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 256.879728][ C0] kasan_set_track+0x25/0x30 [ 256.879756][ C0] kasan_save_free_info+0x2b/0x40 [ 256.879777][ C0] ____kasan_slab_free+0x15b/0x1b0 [ 256.879808][ C0] slab_free_freelist_hook+0x114/0x1e0 [ 256.879837][ C0] ? kfree_skbmem+0xef/0x1b0 [ 256.879865][ C0] kmem_cache_free+0xf8/0x350 [ 256.879896][ C0] kfree_skbmem+0xef/0x1b0 [ 256.879925][ C0] consume_skb+0xdf/0x170 [ 256.879945][ C0] __unix_dgram_recvmsg+0x814/0xee0 [ 256.879974][ C0] ? unix_stream_connect+0x1780/0x1780 [ 256.879997][ C0] ? preempt_count_sub+0x160/0x160 [ 256.880019][ C0] ? reacquire_held_locks+0x4c0/0x4c0 [ 256.880052][ C0] ? aa_sk_perm+0x2f8/0xb40 [ 256.880085][ C0] unix_dgram_recvmsg+0xc3/0xf0 [ 256.880109][ C0] ? __unix_dgram_recvmsg+0xee0/0xee0 [ 256.880133][ C0] sock_recvmsg+0xe2/0x170 [ 256.880162][ C0] sock_read_iter+0x2c3/0x3c0 [ 256.880190][ C0] ? sock_recvmsg+0x170/0x170 [ 256.880223][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 256.880246][ C0] ? security_file_permission+0x8e/0xb0 [ 256.880277][ C0] vfs_read+0x7c5/0x8f0 [ 256.880298][ C0] ? kernel_read+0x70/0x70 [ 256.880321][ C0] ? rcu_is_watching+0x12/0xb0 [ 256.880347][ C0] ? xfd_validate_state+0x5d/0x180 [ 256.880379][ C0] ? __fget_light+0x173/0x200 [ 256.880402][ C0] ksys_read+0x1f0/0x250 [ 256.880422][ C0] ? vfs_write+0xdf0/0xdf0 [ 256.880447][ C0] do_syscall_64+0xd3/0x250 [ 256.880475][ C0] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 256.880498][ C0] RIP: 0033:0x7f7faf47db6a [ 256.880514][ C0] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 256.880533][ C0] RSP: 002b:00007ffe562d0718 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 256.880551][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7faf47db6a [ 256.880565][ C0] RDX: 00000000000000ff RSI: 00005637ba690950 RDI: 0000000000000000 [ 256.880577][ C0] RBP: 00005637ba690910 R08: 0000000000000001 R09: 0000000000000000 [ 256.880589][ C0] R10: 00007f7faf61c3a3 R11: 0000000000000246 R12: 00005637ba690999 [ 256.880602][ C0] R13: 00005637ba690950 R14: 0000000000000000 R15: 00007f7faf65aa80 [ 256.880622][ C0] [ 257.520851][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 257.527747][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.7.0-syzkaller-g9f8413c4a66f #0 [ 257.536803][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 257.546885][ T29] Call Trace: [ 257.550211][ T29] [ 257.553160][ T29] dump_stack_lvl+0xd9/0x1b0 [ 257.557865][ T29] panic+0x6dc/0x790 [ 257.561866][ T29] ? panic_smp_self_stop+0xa0/0xa0 [ 257.566986][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 257.572461][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 257.577675][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 257.583194][ T29] ? watchdog+0xd3e/0x1210 [ 257.587614][ T29] ? watchdog+0xd31/0x1210 [ 257.592058][ T29] watchdog+0xd4f/0x1210 [ 257.596459][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 257.602573][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 257.607787][ T29] ? __kthread_parkme+0x14b/0x220 [ 257.612914][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 257.619110][ T29] kthread+0x2c6/0x3a0 [ 257.623458][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.628669][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 257.634307][ T29] ret_from_fork+0x45/0x80 [ 257.638913][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 257.644636][ T29] ret_from_fork_asm+0x11/0x20 [ 257.649683][ T29] [ 257.653002][ T29] Kernel Offset: disabled [ 257.657500][ T29] Rebooting in 86400 seconds..