Warning: Permanently added '10.128.1.60' (ED25519) to the list of known hosts. 2025/05/23 05:36:44 ignoring optional flag "sandboxArg"="0" 2025/05/23 05:36:44 ignoring optional flag "type"="gce" [ 81.623976][ T1106] cfg80211: failed to load regulatory.db 2025/05/23 05:36:45 parsed 1 programs 2025/05/23 05:36:47 executed programs: 0 [ 84.055470][ T4437] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 84.214480][ T4490] chnl_net:caif_netlink_parms(): no params data found [ 84.259950][ T4490] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.268116][ T4490] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.276259][ T4490] device bridge_slave_0 entered promiscuous mode [ 84.285124][ T4490] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.292679][ T4490] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.301486][ T4490] device bridge_slave_1 entered promiscuous mode [ 84.326047][ T4490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.339350][ T4490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.365725][ T4490] team0: Port device team_slave_0 added [ 84.373937][ T4490] team0: Port device team_slave_1 added [ 84.395481][ T4490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.402793][ T4490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.430664][ T4490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.444794][ T4490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.452400][ T4490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.479907][ T4490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.512344][ T4490] device hsr_slave_0 entered promiscuous mode [ 84.520743][ T4490] device hsr_slave_1 entered promiscuous mode [ 85.122641][ T4490] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.136185][ T4490] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.148076][ T4490] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.158235][ T4490] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.183835][ T4490] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.191330][ T4490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.199152][ T4490] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.206624][ T4490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.218994][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.229379][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.308981][ T4490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.326249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.335217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.348032][ T4490] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.361521][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.372154][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.381759][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.389247][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.408200][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.418237][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.428329][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.435511][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.449574][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.459714][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.480690][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.493038][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.502369][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.514508][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.524694][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.540458][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.554095][ T4490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.566178][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.581382][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.591161][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.602282][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.712416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.721298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.735463][ T4490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.761445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.771913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.795031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.804483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.815543][ T4490] device veth0_vlan entered promiscuous mode [ 85.824073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.832781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.846659][ T4490] device veth1_vlan entered promiscuous mode [ 85.872496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.882534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.891771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.902945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.914657][ T4490] device veth0_macvtap entered promiscuous mode [ 85.925812][ T4490] device veth1_macvtap entered promiscuous mode [ 85.946141][ T4490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.956986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.966331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.976407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.986647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.001785][ T4490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.013675][ T4490] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.024086][ T4490] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.034676][ T4490] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.045203][ T4490] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.056159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.065522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.135482][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.147442][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.161775][ T1155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.185263][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.187851][ T1335] Bluetooth: hci0: command 0x0409 tx timeout [ 86.195061][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.213316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.267253][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 90.338378][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 92.416874][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 132.828679][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.835001][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.268638][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.275166][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.576887][ T1106] Bluetooth: hci0: command 0x0406 tx timeout [ 242.908237][ T27] INFO: task syz-executor.0:4490 blocked for more than 143 seconds. [ 242.916570][ T27] Not tainted 5.15.184-syzkaller #0 [ 242.922449][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 242.931257][ T27] task:syz-executor.0 state:D stack:21824 pid: 4490 ppid: 1 flags:0x00004006 [ 242.940782][ T27] Call Trace: [ 242.944080][ T27] [ 242.947249][ T27] __schedule+0x11b8/0x43b0 [ 242.951952][ T27] ? rcu_lock_acquire+0x30/0x30 [ 242.957278][ T27] ? __mutex_lock_common+0xc6c/0x2390 [ 242.962773][ T27] ? release_firmware_map_entry+0x190/0x190 [ 242.968743][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 242.973825][ T27] ? __mutex_trylock_common+0x80/0x250 [ 242.979350][ T27] ? rcu_lock_release+0x20/0x20 [ 242.984233][ T27] schedule+0x11b/0x1e0 [ 242.988537][ T27] schedule_preempt_disabled+0xf/0x20 [ 242.994018][ T27] __mutex_lock_common+0xc71/0x2390 [ 242.999306][ T27] ? fuse_lock_inode+0xcd/0x120 [ 243.004289][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 243.009645][ T27] ? rcu_lock_release+0x5/0x20 [ 243.014438][ T27] mutex_lock_nested+0x17/0x20 [ 243.019356][ T27] fuse_lock_inode+0xcd/0x120 [ 243.024142][ T27] fuse_lookup+0xd4/0x5a0 [ 243.028740][ T27] ? fuse_perm_getattr+0x50/0x50 [ 243.033857][ T27] ? __init_waitqueue_head+0xa5/0x150 [ 243.039295][ T27] __lookup_slow+0x27d/0x3d0 [ 243.044209][ T27] ? lookup_one_len+0x2c0/0x2c0 [ 243.049222][ T27] ? seqcount_lockdep_reader_access+0x11f/0x1c0 [ 243.055741][ T27] ? preempt_count_add+0x8d/0x190 [ 243.061021][ T27] ? down_read+0x1aa/0x2e0 [ 243.065468][ T27] lookup_slow+0x53/0x70 [ 243.069763][ T27] walk_component+0x319/0x460 [ 243.074561][ T27] link_path_walk+0x662/0xd40 [ 243.079393][ T27] ? handle_lookup_down+0x130/0x130 [ 243.084799][ T27] ? percpu_counter_add_batch+0x13b/0x160 [ 243.090616][ T27] path_openat+0x27d/0x2f30 [ 243.095364][ T27] ? __kasan_slab_alloc+0xb3/0xd0 [ 243.100444][ T27] ? __kasan_slab_alloc+0x9c/0xd0 [ 243.105776][ T27] ? slab_post_alloc_hook+0x4c/0x380 [ 243.111205][ T27] ? verify_lock_unused+0x140/0x140 [ 243.116727][ T27] ? __x64_sys_openat+0x135/0x160 [ 243.121868][ T27] ? do_filp_open+0x3e0/0x3e0 [ 243.126568][ T27] do_filp_open+0x1b3/0x3e0 [ 243.131149][ T27] ? vfs_tmpfile+0x300/0x300 [ 243.135782][ T27] ? _raw_spin_unlock+0x24/0x40 [ 243.140703][ T27] ? alloc_fd+0x598/0x630 [ 243.145145][ T27] do_sys_openat2+0x142/0x4a0 [ 243.149878][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 243.154955][ T27] ? do_sys_open+0xe0/0xe0 [ 243.159552][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 243.165557][ T27] ? lock_chain_count+0x20/0x20 [ 243.170517][ T27] ? vtime_user_exit+0x2dc/0x400 [ 243.175587][ T27] __x64_sys_openat+0x135/0x160 [ 243.180489][ T27] do_syscall_64+0x4c/0xa0 [ 243.185015][ T27] ? clear_bhb_loop+0x30/0x80 [ 243.189916][ T27] ? clear_bhb_loop+0x30/0x80 [ 243.194616][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 243.200663][ T27] RIP: 0033:0x7f0047bea581 [ 243.205150][ T27] RSP: 002b:00007ffc5ad99690 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 243.213737][ T27] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0047bea581 [ 243.222622][ T27] RDX: 0000000000090800 RSI: 00007f0047c3545d RDI: 00000000ffffff9c [ 243.231476][ T27] RBP: 00007ffc5ad9975c R08: 0000000000000000 R09: 000b8dda41a35e9a [ 243.239753][ T27] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 [ 243.247993][ T27] R13: 0000000000015120 R14: 00000000000150c1 R15: 0000000000000006 [ 243.255991][ T27] [ 243.259082][ T27] INFO: task syz-executor.0:4574 blocked for more than 143 seconds. [ 243.267325][ T27] Not tainted 5.15.184-syzkaller #0 [ 243.273379][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 243.282100][ T27] task:syz-executor.0 state:D stack:25520 pid: 4574 ppid: 4490 flags:0x00004006 [ 243.291452][ T27] Call Trace: [ 243.294780][ T27] [ 243.297865][ T27] __schedule+0x11b8/0x43b0 [ 243.302397][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 243.308652][ T27] ? lock_chain_count+0x20/0x20 [ 243.313604][ T27] ? __rwlock_init+0x140/0x140 [ 243.318505][ T27] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 243.323986][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 243.330058][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 243.335283][ T27] ? release_firmware_map_entry+0x190/0x190 [ 243.341354][ T27] ? __might_sleep+0xf0/0xf0 [ 243.345962][ T27] ? do_raw_spin_lock+0x11d/0x280 [ 243.351077][ T27] schedule+0x11b/0x1e0 [ 243.355253][ T27] fuse_simple_request+0x10e7/0x19c0 [ 243.360786][ T27] ? link_path_walk+0x662/0xd40 [ 243.365861][ T27] ? path_openat+0x27d/0x2f30 [ 243.370789][ T27] ? fuse_put_request+0x2d0/0x2d0 [ 243.375838][ T27] ? init_wait_entry+0xd0/0xd0 [ 243.380886][ T27] ? init_wait_entry+0xd0/0xd0 [ 243.385685][ T27] ? init_wait_entry+0xd0/0xd0 [ 243.390548][ T27] fuse_lookup_name+0x279/0x700 [ 243.395435][ T27] ? mark_lock+0x94/0x320 [ 243.399828][ T27] ? fuse_invalid_attr+0x110/0x110 [ 243.405128][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 243.410411][ T27] ? rcu_lock_release+0x5/0x20 [ 243.415306][ T27] ? mutex_lock_nested+0x17/0x20 [ 243.420301][ T27] fuse_lookup+0x13b/0x5a0 [ 243.424737][ T27] ? fuse_perm_getattr+0x50/0x50 [ 243.430124][ T27] ? __init_waitqueue_head+0xa5/0x150 [ 243.435724][ T27] __lookup_slow+0x27d/0x3d0 [ 243.440490][ T27] ? lookup_one_len+0x2c0/0x2c0 [ 243.445380][ T27] ? seqcount_lockdep_reader_access+0x11f/0x1c0 [ 243.451933][ T27] ? preempt_count_add+0x8d/0x190 [ 243.457025][ T27] ? down_read+0x1aa/0x2e0 [ 243.461538][ T27] lookup_slow+0x53/0x70 [ 243.465936][ T27] walk_component+0x319/0x460 [ 243.470850][ T27] link_path_walk+0x662/0xd40 [ 243.475573][ T27] ? handle_lookup_down+0x130/0x130 [ 243.481041][ T27] ? percpu_counter_add_batch+0x13b/0x160 [ 243.487057][ T27] path_openat+0x27d/0x2f30 [ 243.491913][ T27] ? __kasan_slab_alloc+0xb3/0xd0 [ 243.496992][ T27] ? __kasan_slab_alloc+0x9c/0xd0 [ 243.502219][ T27] ? slab_post_alloc_hook+0x4c/0x380 [ 243.507788][ T27] ? verify_lock_unused+0x140/0x140 [ 243.513200][ T27] ? __x64_sys_openat+0x135/0x160 [ 243.518289][ T27] ? do_filp_open+0x3e0/0x3e0 [ 243.523434][ T27] do_filp_open+0x1b3/0x3e0 [ 243.528228][ T27] ? vfs_tmpfile+0x300/0x300 [ 243.533084][ T27] ? _raw_spin_unlock+0x24/0x40 [ 243.538126][ T27] ? alloc_fd+0x598/0x630 [ 243.542571][ T27] do_sys_openat2+0x142/0x4a0 [ 243.547394][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 243.552451][ T27] ? do_sys_open+0xe0/0xe0 [ 243.556926][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 243.563039][ T27] ? lock_chain_count+0x20/0x20 [ 243.568171][ T27] ? vtime_user_exit+0x2dc/0x400 [ 243.573138][ T27] __x64_sys_openat+0x135/0x160 [ 243.578048][ T27] do_syscall_64+0x4c/0xa0 [ 243.582716][ T27] ? clear_bhb_loop+0x30/0x80 [ 243.587460][ T27] ? clear_bhb_loop+0x30/0x80 [ 243.592239][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 243.598185][ T27] RIP: 0033:0x7f0047be9720 [ 243.602632][ T27] RSP: 002b:00007f0046f4ae20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 243.611958][ T27] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0047be9720 [ 243.620376][ T27] RDX: 0000000000000002 RSI: 00007f0046f4af40 RDI: 00000000ffffff9c [ 243.628586][ T27] RBP: 00007f0046f4af40 R08: 0000000000000000 R09: 00000000000004a0 [ 243.637157][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 243.645551][ T27] R13: 00007f0046f4af3c R14: 00007f0046f4af40 R15: 00007f003eb2b000 [ 243.654321][ T27] [ 243.657593][ T27] [ 243.657593][ T27] Showing all locks held in the system: [ 243.665744][ T27] 1 lock held by khungtaskd/27: [ 243.670797][ T27] #0: ffffffff8c11c060 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 243.680514][ T27] 2 locks held by getty/3943: [ 243.685427][ T27] #0: ffff88814c6c1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 243.695361][ T27] #1: ffffc90002ce32e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 243.705836][ T27] 2 locks held by syz-executor.0/4490: [ 243.711333][ T27] #0: ffff888070bc0150 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: lookup_slow+0x46/0x70 [ 243.721460][ T27] #1: ffff888070bc05b8 (&fi->mutex){+.+.}-{3:3}, at: fuse_lock_inode+0xcd/0x120 [ 243.731112][ T27] 2 locks held by syz-executor.0/4574: [ 243.736729][ T27] #0: ffff888070bc0150 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: lookup_slow+0x46/0x70 [ 243.747098][ T27] #1: ffff888070bc05b8 (&fi->mutex){+.+.}-{3:3}, at: fuse_lock_inode+0xcd/0x120 [ 243.756391][ T27] [ 243.758789][ T27] ============================================= [ 243.758789][ T27] [ 243.767612][ T27] NMI backtrace for cpu 0 [ 243.772130][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.184-syzkaller #0 [ 243.780579][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.790803][ T27] Call Trace: [ 243.794078][ T27] [ 243.797109][ T27] dump_stack_lvl+0x168/0x230 [ 243.801906][ T27] ? show_regs_print_info+0x20/0x20 [ 243.807185][ T27] ? load_image+0x3b0/0x3b0 [ 243.812165][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 243.817870][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 243.822999][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 243.827955][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 243.834319][ T27] ? _printk+0xcc/0x110 [ 243.838483][ T27] ? load_image+0x3b0/0x3b0 [ 243.843390][ T27] ? load_image+0x3b0/0x3b0 [ 243.847991][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 243.854063][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 243.860057][ T27] watchdog+0xe0f/0xe50 [ 243.864432][ T27] kthread+0x436/0x520 [ 243.868506][ T27] ? hungtask_pm_notify+0x40/0x40 [ 243.873532][ T27] ? kthread_blkcg+0xd0/0xd0 [ 243.878255][ T27] ret_from_fork+0x1f/0x30 [ 243.882803][ T27] [ 243.886245][ T27] Sending NMI from CPU 0 to CPUs 1: [ 243.891716][ C1] NMI backtrace for cpu 1 [ 243.891727][ C1] CPU: 1 PID: 154 Comm: kworker/u4:2 Not tainted 5.15.184-syzkaller #0 [ 243.891744][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.891759][ C1] Workqueue: phy6 ieee80211_iface_work [ 243.891783][ C1] RIP: 0010:rcu_is_watching+0x0/0xa0 [ 243.891800][ C1] Code: 70 75 1b 48 8d 65 e8 5b 41 5e 41 5f 5d c3 e8 07 91 3d 08 41 f7 c7 00 02 00 00 75 b8 eb b7 e8 e7 90 3d 08 0f 1f 80 00 00 00 00 <41> 57 41 56 53 65 ff 05 ec d3 9e 7e e8 df a0 3d 08 89 c3 83 f8 08 [ 243.891814][ C1] RSP: 0018:ffffc90002007968 EFLAGS: 00000202 [ 243.891827][ C1] RAX: ffffffff8927f297 RBX: ffff88807b964000 RCX: ffff88801d45d940 [ 243.891839][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 243.891848][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000c [ 243.891857][ C1] R10: 000000000000000c R11: 0000000000000000 R12: dffffc0000000000 [ 243.891868][ C1] R13: ffff88807db95b08 R14: ffff88807db94c80 R15: ffff88807b964050 [ 243.891915][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 243.891929][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.891940][ C1] CR2: 00007fff4ffbdfa8 CR3: 000000002a580000 CR4: 00000000003506e0 [ 243.891954][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.891963][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.891972][ C1] Call Trace: [ 243.891978][ C1] [ 243.891982][ C1] sta_info_get+0x140/0x230 [ 243.892003][ C1] ieee80211_ibss_rx_queued_mgmt+0xf05/0x29c0 [ 243.892032][ C1] ? ieee80211_ibss_rx_no_sta+0x730/0x730 [ 243.892048][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 243.892069][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 243.892087][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 243.892105][ C1] ? _raw_spin_unlock+0x40/0x40 [ 243.892121][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 243.892144][ C1] ? kcov_remote_start+0xea/0x4a0 [ 243.892162][ C1] ieee80211_iface_work+0x70e/0xc60 [ 243.892183][ C1] process_one_work+0x863/0x1000 [ 243.892207][ C1] ? worker_detach_from_pool+0x240/0x240 [ 243.892223][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 243.892241][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 243.892258][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 243.892277][ C1] ? wq_worker_running+0x97/0x170 [ 243.892293][ C1] worker_thread+0xaa8/0x12a0 [ 243.892322][ C1] kthread+0x436/0x520 [ 243.892335][ C1] ? rcu_lock_release+0x20/0x20 [ 243.892350][ C1] ? kthread_blkcg+0xd0/0xd0 [ 243.892364][ C1] ret_from_fork+0x1f/0x30 [ 243.892387][ C1] [ 243.892787][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 244.161956][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.184-syzkaller #0 [ 244.169937][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.180114][ T27] Call Trace: [ 244.183567][ T27] [ 244.186511][ T27] dump_stack_lvl+0x168/0x230 [ 244.191285][ T27] ? show_regs_print_info+0x20/0x20 [ 244.196830][ T27] ? load_image+0x3b0/0x3b0 [ 244.201446][ T27] panic+0x2c9/0x7f0 [ 244.205427][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 244.211144][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 244.215732][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 244.222001][ T27] watchdog+0xe4e/0xe50 [ 244.226158][ T27] kthread+0x436/0x520 [ 244.230310][ T27] ? hungtask_pm_notify+0x40/0x40 [ 244.235328][ T27] ? kthread_blkcg+0xd0/0xd0 [ 244.253979][ T27] ret_from_fork+0x1f/0x30 [ 244.258408][ T27] [ 244.262924][ T27] Kernel Offset: disabled [ 244.267354][ T27] Rebooting in 86400 seconds..