Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. 2024/09/03 15:14:42 ignoring optional flag "sandboxArg"="0" 2024/09/03 15:14:42 parsed 1 programs 2024/09/03 15:14:45 executed programs: 0 [ 138.515874][ T5532] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 138.615622][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.628974][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.637386][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.646837][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.655529][ T56] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 138.663192][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.940148][ T5539] chnl_net:caif_netlink_parms(): no params data found [ 139.070668][ T5539] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.078023][ T5539] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.086298][ T5539] bridge_slave_0: entered allmulticast mode [ 139.094378][ T5539] bridge_slave_0: entered promiscuous mode [ 139.104785][ T5539] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.112039][ T5539] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.120737][ T5539] bridge_slave_1: entered allmulticast mode [ 139.129597][ T5539] bridge_slave_1: entered promiscuous mode [ 139.184407][ T5539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.199065][ T5539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.257938][ T5539] team0: Port device team_slave_0 added [ 139.270242][ T5539] team0: Port device team_slave_1 added [ 139.319637][ T5539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.326672][ T5539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.353079][ T5539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.369560][ T5539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.376933][ T5539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.403640][ T5539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.480722][ T5539] hsr_slave_0: entered promiscuous mode [ 139.489038][ T5539] hsr_slave_1: entered promiscuous mode [ 140.588178][ T5539] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.607261][ T5539] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.624029][ T5539] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.639467][ T5539] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.731526][ T56] Bluetooth: hci0: command tx timeout [ 140.841749][ T5539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.878456][ T5539] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.900516][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.907956][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.930845][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.938205][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.388524][ T5539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.492581][ T5539] veth0_vlan: entered promiscuous mode [ 141.520598][ T5539] veth1_vlan: entered promiscuous mode [ 141.580217][ T5539] veth0_macvtap: entered promiscuous mode [ 141.596401][ T5539] veth1_macvtap: entered promiscuous mode [ 141.641384][ T5539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.668318][ T5539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.690686][ T5539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.700184][ T5539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.711215][ T5539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.720474][ T5539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.888059][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.907399][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.971201][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.979962][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.162307][ T5600] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 142.169247][ T5600] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 142.192013][ T5600] vhci_hcd vhci_hcd.0: Device attached [ 142.469617][ T5564] vhci_hcd: vhci_device speed not set [ 142.555002][ T5564] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 142.810026][ T56] Bluetooth: hci0: command tx timeout [ 142.816693][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.824361][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.884705][ T56] Bluetooth: hci0: command tx timeout [ 146.965889][ T56] Bluetooth: hci0: command tx timeout 2024/09/03 15:15:44 executed programs: 1 [ 198.260601][ T4618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.271443][ T4618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.281168][ T4618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.291995][ T4618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.300719][ T4618] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 198.309421][ T4618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.608443][ T5904] chnl_net:caif_netlink_parms(): no params data found [ 198.748806][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.756990][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.764289][ T5904] bridge_slave_0: entered allmulticast mode [ 198.773343][ T5904] bridge_slave_0: entered promiscuous mode [ 198.784669][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.791915][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.799778][ T5904] bridge_slave_1: entered allmulticast mode [ 198.810209][ T5904] bridge_slave_1: entered promiscuous mode [ 198.862592][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.880059][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.941383][ T5904] team0: Port device team_slave_0 added [ 198.952597][ T5904] team0: Port device team_slave_1 added [ 199.005044][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.012023][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.038154][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.054097][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.062712][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.088730][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.169505][ T5904] hsr_slave_0: entered promiscuous mode [ 199.177823][ T5904] hsr_slave_1: entered promiscuous mode [ 199.184824][ T5904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.193113][ T5904] Cannot create hsr debugfs directory [ 199.426710][ T5904] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.521133][ T5904] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.613595][ T5904] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.712071][ T5904] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.921265][ T5904] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.934165][ T5904] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.947881][ T5904] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.961012][ T5904] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.118179][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.153286][ T5904] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.173330][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.180652][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.203120][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.210499][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.407035][ T56] Bluetooth: hci1: command tx timeout [ 200.554315][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.634445][ T5904] veth0_vlan: entered promiscuous mode [ 200.653777][ T5904] veth1_vlan: entered promiscuous mode [ 200.711177][ T5904] veth0_macvtap: entered promiscuous mode [ 200.725682][ T5904] veth1_macvtap: entered promiscuous mode [ 200.760478][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.771679][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.786584][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.811585][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.822405][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.837527][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.854547][ T5904] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.864206][ T5904] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.873490][ T5904] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.882996][ T5904] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.017726][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.026903][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.090509][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.099209][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.221837][ T5919] vhci_hcd vhci_hcd.0: port 0 already used [ 202.486039][ T56] Bluetooth: hci1: command tx timeout [ 204.252523][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.259274][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.564868][ T56] Bluetooth: hci1: command tx timeout [ 206.644763][ T56] Bluetooth: hci1: command tx timeout 2024/09/03 15:16:43 executed programs: 2 [ 257.449516][ T4618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.464052][ T4618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.474231][ T4618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.483802][ T4618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.492718][ T4618] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 257.500410][ T4618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.831912][ T5923] chnl_net:caif_netlink_parms(): no params data found [ 257.979408][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.987002][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.994247][ T5923] bridge_slave_0: entered allmulticast mode [ 258.002843][ T5923] bridge_slave_0: entered promiscuous mode [ 258.018519][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.026438][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.033681][ T5923] bridge_slave_1: entered allmulticast mode [ 258.042371][ T5923] bridge_slave_1: entered promiscuous mode [ 258.105280][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.120388][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.182644][ T5923] team0: Port device team_slave_0 added [ 258.196641][ T5923] team0: Port device team_slave_1 added [ 258.249715][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.256764][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.284735][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.302070][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.309198][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.335239][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.419154][ T5923] hsr_slave_0: entered promiscuous mode [ 258.427134][ T5923] hsr_slave_1: entered promiscuous mode [ 258.433814][ T5923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.441840][ T5923] Cannot create hsr debugfs directory [ 258.678063][ T5923] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.784262][ T5923] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.885852][ T5923] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.998068][ T5923] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.209121][ T5923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 259.222579][ T5923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 259.236546][ T5923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 259.249886][ T5923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.421586][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.459043][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.481904][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.489211][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.513103][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.520502][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.605812][ T4618] Bluetooth: hci2: command tx timeout [ 259.867648][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.959085][ T5923] veth0_vlan: entered promiscuous mode [ 259.977729][ T5923] veth1_vlan: entered promiscuous mode [ 260.039372][ T5923] veth0_macvtap: entered promiscuous mode [ 260.059780][ T5923] veth1_macvtap: entered promiscuous mode [ 260.092881][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.103622][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.114406][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.129412][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.142475][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.163018][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.175409][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.185578][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.196175][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.210374][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.232331][ T5923] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.241188][ T5923] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.252225][ T5923] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.261692][ T5923] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.386690][ T1071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.394663][ T1071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.454453][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.463927][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.593106][ T5938] vhci_hcd vhci_hcd.0: port 0 already used [ 261.684915][ T4618] Bluetooth: hci2: command tx timeout [ 262.645034][ T4618] Bluetooth: hci0: command 0x0406 tx timeout [ 263.765219][ T56] Bluetooth: hci2: command tx timeout [ 265.702520][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.709113][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.844890][ T56] Bluetooth: hci2: command tx timeout [ 288.728329][ T30] INFO: task syz-executor.0:5599 blocked for more than 143 seconds. [ 288.737054][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 288.744759][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.753453][ T30] task:syz-executor.0 state:D stack:26480 pid:5599 tgid:5599 ppid:5539 flags:0x00000006 [ 288.763727][ T30] Call Trace: [ 288.767076][ T30] [ 288.770039][ T30] __schedule+0xe37/0x5490 [ 288.774672][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 288.779940][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 288.785253][ T30] ? __pfx___schedule+0x10/0x10 [ 288.790202][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.798061][ T30] ? schedule+0x298/0x350 [ 288.802457][ T30] ? __pfx_lock_release+0x10/0x10 [ 288.809914][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 288.814779][ T30] ? __mutex_trylock_common+0x78/0x250 [ 288.820333][ T30] schedule+0xe7/0x350 [ 288.824479][ T30] schedule_preempt_disabled+0x13/0x30 [ 288.830039][ T30] __mutex_lock+0x5b8/0x9c0 [ 288.834635][ T30] ? usbdev_release+0x87/0x470 [ 288.839543][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 288.844835][ T30] ? __pfx___fsnotify_parent+0x10/0x10 [ 288.850354][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.856073][ T30] ? locks_remove_file+0x399/0x5a0 [ 288.861234][ T30] ? __pfx_usbdev_release+0x10/0x10 [ 288.866522][ T30] ? usbdev_release+0x87/0x470 [ 288.871322][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 288.877047][ T30] usbdev_release+0x87/0x470 [ 288.881691][ T30] ? __pfx_usbdev_release+0x10/0x10 [ 288.887147][ T30] __fput+0x40b/0xbb0 [ 288.891305][ T30] __fput_sync+0x47/0x50 [ 288.897867][ T30] __x64_sys_close+0x86/0x100 [ 288.902613][ T30] do_syscall_64+0xcd/0x250 [ 288.907216][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.913153][ T30] RIP: 0033:0x7f8d9867b9da [ 288.918527][ T30] RSP: 002b:00007ffca5a8f260 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 288.927459][ T30] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f8d9867b9da [ 288.935724][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 288.943726][ T30] RBP: 00007f8d9879d980 R08: 0000001b2de60000 R09: 00007f8d99344080 [ 288.951769][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000022e54 [ 288.960823][ T30] R13: ffffffffffffffff R14: 00007f8d98200000 R15: 0000000000022b13 [ 288.968921][ T30] [ 288.972077][ T30] [ 288.972077][ T30] Showing all locks held in the system: [ 288.979897][ T30] 1 lock held by khungtaskd/30: [ 288.984903][ T30] #0: ffffffff8ddb9fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 288.995061][ T30] 2 locks held by getty/4982: [ 289.001670][ T30] #0: ffff8880350c90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 289.011684][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 289.022031][ T30] 5 locks held by kworker/0:3/5564: [ 289.027457][ T30] #0: ffff88801e2a3948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 289.038732][ T30] #1: ffffc90003c27d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 289.050496][ T30] #2: ffff88823bcbc190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10 [ 289.060098][ T30] #3: ffff88802940f518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27ec/0x4e10 [ 289.070407][ T30] #4: ffff888028b25768 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2815/0x4e10 [ 289.080403][ T30] 1 lock held by syz-executor.0/5599: [ 289.085891][ T30] #0: ffff88823bcbc190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x87/0x470 [ 289.095203][ T30] 1 lock held by syz-executor.0/5918: [ 289.101696][ T30] #0: ffff88823bcbc190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x1b8/0x8c0 [ 289.110908][ T30] 1 lock held by syz-executor.0/5937: [ 289.116354][ T30] #0: ffff88823bcbc190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x1b8/0x8c0 [ 289.125515][ T30] [ 289.127880][ T30] ============================================= [ 289.127880][ T30] [ 289.136427][ T30] NMI backtrace for cpu 1 [ 289.140814][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 289.151332][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 289.161420][ T30] Call Trace: [ 289.164705][ T30] [ 289.167638][ T30] dump_stack_lvl+0x116/0x1f0 [ 289.172335][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 289.177305][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 289.183406][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 289.189424][ T30] watchdog+0xf0c/0x1240 [ 289.193862][ T30] ? __pfx_watchdog+0x10/0x10 [ 289.198560][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.203819][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.209501][ T30] ? __kthread_parkme+0x148/0x220 [ 289.214591][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.220269][ T30] ? __pfx_watchdog+0x10/0x10 [ 289.224959][ T30] kthread+0x2c4/0x3a0 [ 289.229045][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.234265][ T30] ? __pfx_kthread+0x10/0x10 [ 289.239022][ T30] ret_from_fork+0x48/0x80 [ 289.243479][ T30] ? __pfx_kthread+0x10/0x10 [ 289.248098][ T30] ret_from_fork_asm+0x1a/0x30 [ 289.252930][ T30] [ 289.257528][ T30] Sending NMI from CPU 1 to CPUs 0: [ 289.262781][ C0] NMI backtrace for cpu 0 [ 289.262797][ C0] CPU: 0 UID: 0 PID: 1071 Comm: kworker/u8:8 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 289.262838][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 289.262859][ C0] Workqueue: events_unbound toggle_allocation_gate [ 289.262909][ C0] RIP: 0010:__lock_acquire+0xfb8/0x3cb0 [ 289.262964][ C0] Code: 85 f2 27 00 00 44 8b 2d 8a 1f ab 0e 45 85 ed 0f 84 6e 19 00 00 90 31 d2 e9 f1 fd ff ff 41 be 02 00 00 00 e9 03 f6 ff ff 31 d2 a6 f5 ff ff 49 8d 5d 22 85 ed 0f 85 92 f8 ff ff e9 28 f9 ff ff [ 289.262997][ C0] RSP: 0018:ffffc90003ec7620 EFLAGS: 00000046 [ 289.263022][ C0] RAX: 0000000000000005 RBX: 0000000000000001 RCX: 0000000000000000 [ 289.263043][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 289.263063][ C0] RBP: 0000000000000000 R08: ffff888027a5a8e0 R09: fffffbfff2d240e0 [ 289.263086][ C0] R10: ffffffff96920707 R11: 0000000000000002 R12: ffff888027a5a8d9 [ 289.263108][ C0] R13: ffff888027a5a9a8 R14: dffffc0000000000 R15: ffff888027a59e00 [ 289.263133][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 289.263164][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.263188][ C0] CR2: 00005571fbe6f008 CR3: 000000000db7c000 CR4: 0000000000350ef0 [ 289.263211][ C0] Call Trace: [ 289.263222][ C0] [ 289.263233][ C0] ? show_regs+0x8c/0xa0 [ 289.263287][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 289.263343][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 289.263394][ C0] ? nmi_handle+0x1ac/0x5c0 [ 289.263428][ C0] ? __lock_acquire+0xfb8/0x3cb0 [ 289.263479][ C0] ? default_do_nmi+0x6a/0x160 [ 289.263521][ C0] ? exc_nmi+0x170/0x1e0 [ 289.263561][ C0] ? end_repeat_nmi+0xf/0x53 [ 289.263616][ C0] ? __lock_acquire+0xfb8/0x3cb0 [ 289.263668][ C0] ? __lock_acquire+0xfb8/0x3cb0 [ 289.263721][ C0] ? __lock_acquire+0xfb8/0x3cb0 [ 289.263772][ C0] [ 289.263782][ C0] [ 289.263811][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 289.263864][ C0] ? mark_lock+0xb5/0xc60 [ 289.263911][ C0] ? mark_lock+0xb5/0xc60 [ 289.263959][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 289.264009][ C0] ? hlock_class+0x4e/0x130 [ 289.264052][ C0] lock_acquire+0x1b1/0x560 [ 289.264103][ C0] ? __pte_offset_map+0x42/0x540 [ 289.264154][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 289.264207][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.264252][ C0] ? hlock_class+0x4e/0x130 [ 289.264289][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.264334][ C0] ? mark_lock+0xb5/0xc60 [ 289.264381][ C0] ? __kmalloc_node_track_caller_noprof+0xf3/0x430 [ 289.264435][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.264480][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 289.264519][ C0] __pte_offset_map+0x48/0x540 [ 289.264570][ C0] ? __pte_offset_map+0x42/0x540 [ 289.264625][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.264674][ C0] __pte_offset_map_lock+0x8e/0x300 [ 289.264726][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.264772][ C0] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 289.264829][ C0] __get_locked_pte+0x79/0xc0 [ 289.264880][ C0] ? kmem_cache_alloc_noprof+0x87/0x2f0 [ 289.264930][ C0] __text_poke+0x224/0xca0 [ 289.264968][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 289.265006][ C0] ? kmem_cache_alloc_lru_noprof+0x8a/0x2f0 [ 289.265061][ C0] ? __pfx___text_poke+0x10/0x10 [ 289.265101][ C0] ? kmem_cache_alloc_noprof+0x87/0x2f0 [ 289.265154][ C0] text_poke_bp_batch+0x3e0/0x760 [ 289.265200][ C0] ? kmem_cache_alloc_noprof+0x87/0x2f0 [ 289.265250][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 289.265293][ C0] ? __jump_label_patch+0x1db/0x400 [ 289.265352][ C0] ? srso_alias_return_thunk+0xc1/0xfbef5 [ 289.265402][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 289.265458][ C0] text_poke_finish+0x30/0x40 [ 289.265501][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 289.265551][ C0] jump_label_update+0x1d7/0x400 [ 289.265611][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 289.265663][ C0] static_key_enable+0x1a/0x20 [ 289.265710][ C0] toggle_allocation_gate+0xf8/0x250 [ 289.265759][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 289.265815][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.265862][ C0] process_one_work+0x9c8/0x1b40 [ 289.265927][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 289.265978][ C0] ? __pfx_process_one_work+0x10/0x10 [ 289.266034][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.266084][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.266129][ C0] ? assign_work+0x1a0/0x250 [ 289.266181][ C0] worker_thread+0x6c8/0xed0 [ 289.266243][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.266288][ C0] ? __kthread_parkme+0x148/0x220 [ 289.266328][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.266375][ C0] ? __pfx_worker_thread+0x10/0x10 [ 289.266430][ C0] kthread+0x2c4/0x3a0 [ 289.266469][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.266517][ C0] ? __pfx_kthread+0x10/0x10 [ 289.266558][ C0] ret_from_fork+0x48/0x80 [ 289.266615][ C0] ? __pfx_kthread+0x10/0x10 [ 289.266655][ C0] ret_from_fork_asm+0x1a/0x30 [ 289.266718][ C0] [ 289.266781][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 289.266800][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 289.266848][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 289.266871][ T30] Call Trace: [ 289.266884][ T30] [ 289.266897][ T30] dump_stack_lvl+0x3d/0x1f0 [ 289.266948][ T30] panic+0x6dc/0x7c0 [ 289.267005][ T30] ? __pfx_panic+0x10/0x10 [ 289.267066][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.267118][ T30] ? __irq_work_queue_local+0x136/0x440 [ 289.267182][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 289.267239][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.267290][ T30] ? irq_work_queue+0x2a/0x80 [ 289.267348][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.267406][ T30] ? watchdog+0xd76/0x1240 [ 289.267443][ T30] ? watchdog+0xd69/0x1240 [ 289.267488][ T30] watchdog+0xd87/0x1240 [ 289.267535][ T30] ? __pfx_watchdog+0x10/0x10 [ 289.267572][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.267630][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.267684][ T30] ? __kthread_parkme+0x148/0x220 [ 289.267731][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.267786][ T30] ? __pfx_watchdog+0x10/0x10 [ 289.267825][ T30] kthread+0x2c4/0x3a0 [ 289.267869][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.267924][ T30] ? __pfx_kthread+0x10/0x10 [ 289.267973][ T30] ret_from_fork+0x48/0x80 [ 289.268033][ T30] ? __pfx_kthread+0x10/0x10 [ 289.268081][ T30] ret_from_fork_asm+0x1a/0x30 [ 289.268160][ T30] [ 289.271426][ T30] Kernel Offset: disabled [ 289.924036][ T30] Rebooting in 86400 seconds..