Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. 2024/06/23 13:41:41 ignoring optional flag "sandboxArg"="0" 2024/06/23 13:41:41 parsed 1 programs 2024/06/23 13:41:44 executed programs: 0 [ 97.887797][ T5386] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.901291][ T5386] syz-executor (5386) used greatest stack depth: 18608 bytes left [ 97.961328][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.969344][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.977452][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.986086][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.994119][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.001697][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.185987][ T5401] chnl_net:caif_netlink_parms(): no params data found [ 98.268379][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.275713][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.283230][ T5401] bridge_slave_0: entered allmulticast mode [ 98.290519][ T5401] bridge_slave_0: entered promiscuous mode [ 98.299468][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.307051][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.314332][ T5401] bridge_slave_1: entered allmulticast mode [ 98.321713][ T5401] bridge_slave_1: entered promiscuous mode [ 98.357901][ T5401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.370157][ T5401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.409443][ T5401] team0: Port device team_slave_0 added [ 98.418474][ T5401] team0: Port device team_slave_1 added [ 98.451090][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.458592][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.484543][ T5401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.497307][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.504302][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.530348][ T5401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.580480][ T5401] hsr_slave_0: entered promiscuous mode [ 98.587168][ T5401] hsr_slave_1: entered promiscuous mode [ 99.341214][ T5401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.355767][ T5401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.368583][ T5401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.380208][ T5401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.493716][ T5401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.520470][ T5401] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.537411][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.544673][ T5111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.560266][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.567462][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.810144][ T5401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.882268][ T5401] veth0_vlan: entered promiscuous mode [ 99.899512][ T5401] veth1_vlan: entered promiscuous mode [ 99.945540][ T5401] veth0_macvtap: entered promiscuous mode [ 99.957566][ T5401] veth1_macvtap: entered promiscuous mode [ 99.983636][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.003015][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.017888][ T5401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.030077][ T5401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.039673][ T5401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.050629][ T53] Bluetooth: hci0: command tx timeout [ 100.056691][ T5401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.149876][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.173125][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.213456][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.221337][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.314969][ T5458] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 100.321714][ T5458] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.338585][ T5458] vhci_hcd vhci_hcd.0: Device attached [ 100.612110][ T5100] vhci_hcd: vhci_device speed not set [ 100.691971][ T5100] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 102.121656][ T53] Bluetooth: hci0: command tx timeout [ 104.202840][ T53] Bluetooth: hci0: command tx timeout [ 106.291533][ T53] Bluetooth: hci0: command tx timeout [ 132.454080][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.461115][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 2024/06/23 13:42:41 executed programs: 1 [ 156.375235][ T4485] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.383591][ T4485] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.392215][ T4485] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.400487][ T4485] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.408694][ T4485] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.416707][ T4485] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.589216][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 156.672716][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.679907][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.687311][ T5768] bridge_slave_0: entered allmulticast mode [ 156.694792][ T5768] bridge_slave_0: entered promiscuous mode [ 156.703651][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.710780][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.718468][ T5768] bridge_slave_1: entered allmulticast mode [ 156.726209][ T5768] bridge_slave_1: entered promiscuous mode [ 156.763926][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.777278][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.814930][ T5768] team0: Port device team_slave_0 added [ 156.825842][ T5768] team0: Port device team_slave_1 added [ 156.862963][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.869926][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.897222][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.909723][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.917896][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.944692][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.993983][ T5768] hsr_slave_0: entered promiscuous mode [ 157.000481][ T5768] hsr_slave_1: entered promiscuous mode [ 157.008366][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.016805][ T5768] Cannot create hsr debugfs directory [ 157.149227][ T5768] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.216455][ T5768] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.285942][ T5768] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.337674][ T5768] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.457882][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.473044][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 157.483558][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 157.494669][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 157.525289][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.532476][ T5768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.539905][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.547185][ T5768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.563160][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.573211][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.644433][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.671600][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.696292][ T924] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.703467][ T924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.715254][ T924] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.722399][ T924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.917730][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.968933][ T5768] veth0_vlan: entered promiscuous mode [ 157.986791][ T5768] veth1_vlan: entered promiscuous mode [ 158.020504][ T5768] veth0_macvtap: entered promiscuous mode [ 158.033121][ T5768] veth1_macvtap: entered promiscuous mode [ 158.054034][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.064967][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.077603][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.093262][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.104582][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.117401][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.131054][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.140031][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.149640][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.158814][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.233336][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.241202][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.276056][ T2773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.284753][ T2773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.389615][ T5784] vhci_hcd vhci_hcd.0: port 0 already used [ 158.441625][ T4485] Bluetooth: hci1: command tx timeout [ 160.523816][ T4485] Bluetooth: hci1: command tx timeout [ 162.601810][ T4485] Bluetooth: hci1: command tx timeout [ 164.681555][ T4485] Bluetooth: hci1: command tx timeout [ 193.884853][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.891152][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 2024/06/23 13:43:39 executed programs: 2 [ 214.456396][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.467497][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.475407][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.484472][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.492695][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.500391][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.694672][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 214.778682][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.786278][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.794668][ T5788] bridge_slave_0: entered allmulticast mode [ 214.802249][ T5788] bridge_slave_0: entered promiscuous mode [ 214.811001][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.818371][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.825552][ T5788] bridge_slave_1: entered allmulticast mode [ 214.833386][ T5788] bridge_slave_1: entered promiscuous mode [ 214.869944][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.882707][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.923904][ T5788] team0: Port device team_slave_0 added [ 214.932617][ T5788] team0: Port device team_slave_1 added [ 214.967056][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.974043][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.000538][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.014489][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.022659][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.048591][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.100798][ T5788] hsr_slave_0: entered promiscuous mode [ 215.107608][ T5788] hsr_slave_1: entered promiscuous mode [ 215.114570][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.122195][ T5788] Cannot create hsr debugfs directory [ 215.265372][ T5788] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.347531][ T5788] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.435168][ T5788] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.511165][ T5788] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.627587][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.638702][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 215.659062][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.669674][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.767842][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.791908][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.805122][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.812286][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.834440][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.841615][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.889204][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.055386][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.108468][ T5788] veth0_vlan: entered promiscuous mode [ 216.125726][ T5788] veth1_vlan: entered promiscuous mode [ 216.161843][ T5788] veth0_macvtap: entered promiscuous mode [ 216.173442][ T5788] veth1_macvtap: entered promiscuous mode [ 216.194425][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.204918][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.215506][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.226399][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.238101][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.254378][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.264937][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.276788][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.287977][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.300024][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.312425][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.321145][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.331243][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.340216][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.418329][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.427582][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.465372][ T2773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.473425][ T2773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.522758][ T53] Bluetooth: hci2: command tx timeout [ 216.577021][ T5805] vhci_hcd vhci_hcd.0: port 0 already used [ 218.611897][ T53] Bluetooth: hci2: command tx timeout [ 220.691503][ T53] Bluetooth: hci2: command tx timeout [ 221.562192][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 222.761525][ T4485] Bluetooth: hci2: command tx timeout [ 254.041704][ T30] INFO: task kworker/0:3:5100 blocked for more than 143 seconds. [ 254.049670][ T30] Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 254.057399][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.066125][ T30] task:kworker/0:3 state:D stack:23888 pid:5100 tgid:5100 ppid:2 flags:0x00004000 [ 254.076361][ T30] Workqueue: usb_hub_wq hub_event [ 254.081480][ T30] Call Trace: [ 254.084770][ T30] [ 254.087715][ T30] __schedule+0x17e8/0x4a20 [ 254.092284][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.097952][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.103674][ T30] ? __pfx___schedule+0x10/0x10 [ 254.108550][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 254.116351][ T30] ? __pfx_lock_release+0x10/0x10 [ 254.121487][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.127149][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 254.132401][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.138048][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 254.143324][ T30] ? schedule+0x90/0x320 [ 254.147656][ T30] schedule+0x14b/0x320 [ 254.151922][ T30] usb_kill_urb+0x1c9/0x300 [ 254.156469][ T30] ? __pfx_usb_kill_urb+0x10/0x10 [ 254.161608][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 254.167702][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.173400][ T30] usb_start_wait_urb+0x1b0/0x520 [ 254.178480][ T30] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 254.184125][ T30] ? __kmalloc_noprof+0x217/0x400 [ 254.189207][ T30] usb_control_msg+0x2b1/0x4c0 [ 254.194099][ T30] ? __pfx_usb_control_msg+0x10/0x10 [ 254.199436][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 254.204380][ T30] ? hub_port_init+0x178/0x2670 [ 254.209283][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.215624][ T30] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 254.221040][ T30] hub_port_init+0xc21/0x2670 [ 254.225872][ T30] hub_event+0x295f/0x5150 [ 254.230354][ T30] ? __pfx_hub_event+0x10/0x10 [ 254.236196][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 254.241247][ T30] ? __entry_text_end+0xfe0c6/0x1020c9 [ 254.247193][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 254.253278][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 254.259640][ T30] ? process_scheduled_works+0x945/0x1830 [ 254.265408][ T30] process_scheduled_works+0xa2e/0x1830 [ 254.271009][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 254.277060][ T30] ? assign_work+0x364/0x3d0 [ 254.281717][ T30] worker_thread+0x86d/0xd70 [ 254.286331][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 254.292316][ T30] ? __kthread_parkme+0x169/0x1d0 [ 254.297379][ T30] ? __pfx_worker_thread+0x10/0x10 [ 254.302602][ T30] kthread+0x2f2/0x390 [ 254.306702][ T30] ? __pfx_worker_thread+0x10/0x10 [ 254.311898][ T30] ? __pfx_kthread+0x10/0x10 [ 254.317189][ T30] ret_from_fork+0x4d/0x80 [ 254.321705][ T30] ? __pfx_kthread+0x10/0x10 [ 254.326340][ T30] ret_from_fork_asm+0x1a/0x30 [ 254.331137][ T30] [ 254.334263][ T30] INFO: task syz-executor.0:5457 blocked for more than 143 seconds. [ 254.342700][ T30] Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 254.350343][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.359636][ T30] task:syz-executor.0 state:D stack:24672 pid:5457 tgid:5457 ppid:5401 flags:0x00000006 [ 254.370256][ T30] Call Trace: [ 254.373939][ T30] [ 254.376899][ T30] __schedule+0x17e8/0x4a20 [ 254.381530][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.387212][ T30] ? __pfx___schedule+0x10/0x10 [ 254.392152][ T30] ? __pfx_lock_release+0x10/0x10 [ 254.397204][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 254.402751][ T30] ? schedule+0x90/0x320 [ 254.407044][ T30] schedule+0x14b/0x320 [ 254.411206][ T30] schedule_preempt_disabled+0x13/0x30 [ 254.416736][ T30] __mutex_lock+0x6a4/0xd70 [ 254.421947][ T30] ? __mutex_lock+0x527/0xd70 [ 254.426674][ T30] ? usbdev_release+0x7a/0x7a0 [ 254.431535][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 254.436622][ T30] ? __asan_memset+0x23/0x50 [ 254.441261][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.448669][ T30] ? __pfx___fsnotify_parent+0x10/0x10 [ 254.454654][ T30] usbdev_release+0x7a/0x7a0 [ 254.459289][ T30] ? __pfx_lock_release+0x10/0x10 [ 254.464585][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.470526][ T30] ? evm_file_release+0x140/0x1d0 [ 254.475757][ T30] ? __pfx_usbdev_release+0x10/0x10 [ 254.480993][ T30] __fput+0x408/0x8b0 [ 254.485355][ T30] __x64_sys_close+0x7f/0x110 [ 254.490101][ T30] do_syscall_64+0xf3/0x230 [ 254.494885][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.501038][ T30] RIP: 0033:0x7fed23e7b9da [ 254.505527][ T30] RSP: 002b:00007ffe6885bbe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 254.514047][ T30] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fed23e7b9da [ 254.522915][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 254.530957][ T30] RBP: 00007fed23f9d980 R08: 0000001b2d460000 R09: 7fffffffffffffff [ 254.539009][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000018adc [ 254.547072][ T30] R13: ffffffffffffffff R14: 00007fed23a00000 R15: 000000000001879b [ 254.555183][ T30] [ 254.558249][ T30] [ 254.558249][ T30] Showing all locks held in the system: [ 254.566057][ T30] 1 lock held by khungtaskd/30: [ 254.570952][ T30] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 254.580988][ T30] 2 locks held by getty/4850: [ 254.585815][ T30] #0: ffff88802b2220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 254.596029][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 254.606541][ T30] 5 locks held by kworker/0:3/5100: [ 254.611868][ T30] #0: ffff88801c6f1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 254.623948][ T30] #1: ffffc9000302fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 254.635929][ T30] #2: ffff888023fb8190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 254.644920][ T30] #3: ffff888023fd9518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b6/0x5150 [ 254.654919][ T30] #4: ffff8880231cec68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f4/0x5150 [ 254.664701][ T30] 1 lock held by syz-executor.0/5457: [ 254.670101][ T30] #0: ffff888023fb8190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x7a/0x7a0 [ 254.679337][ T30] 1 lock held by syz-executor.0/5783: [ 254.684960][ T30] #0: ffff888023fb8190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x156/0x780 [ 254.694175][ T30] 1 lock held by syz-executor.0/5804: [ 254.699561][ T30] #0: ffff888023fb8190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x156/0x780 [ 254.708694][ T30] [ 254.711029][ T30] ============================================= [ 254.711029][ T30] [ 254.720039][ T30] NMI backtrace for cpu 0 [ 254.724375][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 254.734783][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 254.744828][ T30] Call Trace: [ 254.748356][ T30] [ 254.751275][ T30] dump_stack_lvl+0x241/0x360 [ 254.755960][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.761158][ T30] ? __pfx__printk+0x10/0x10 [ 254.765747][ T30] ? vprintk_emit+0x631/0x770 [ 254.770430][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 254.775465][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 254.780398][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 254.785845][ T30] ? _printk+0xd5/0x120 [ 254.789994][ T30] ? __pfx__printk+0x10/0x10 [ 254.794583][ T30] ? __wake_up_klogd+0xcc/0x110 [ 254.799525][ T30] ? __pfx__printk+0x10/0x10 [ 254.804135][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.809757][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 254.814788][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 254.820763][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 254.826740][ T30] watchdog+0xfde/0x1020 [ 254.831074][ T30] ? watchdog+0x1ea/0x1020 [ 254.835495][ T30] ? __pfx_watchdog+0x10/0x10 [ 254.840166][ T30] kthread+0x2f2/0x390 [ 254.844236][ T30] ? __pfx_watchdog+0x10/0x10 [ 254.848943][ T30] ? __pfx_kthread+0x10/0x10 [ 254.853544][ T30] ret_from_fork+0x4d/0x80 [ 254.858133][ T30] ? __pfx_kthread+0x10/0x10 [ 254.862718][ T30] ret_from_fork_asm+0x1a/0x30 [ 254.867492][ T30] [ 254.871552][ T30] Sending NMI from CPU 0 to CPUs 1: [ 254.877479][ C1] NMI backtrace for cpu 1 [ 254.877491][ C1] CPU: 1 PID: 2773 Comm: kworker/u8:7 Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 254.877515][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 254.877529][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 254.877565][ C1] RIP: 0010:enqueue_timer+0x13b/0x570 [ 254.877596][ C1] Code: 04 2c 84 c0 0f 85 a7 01 00 00 b8 ff ff 3f 00 23 03 41 c1 e6 16 41 09 c6 44 89 33 48 89 5c 24 08 0f 1f 44 00 00 e8 05 fc 12 00 <65> 8b 1d 3a ab 80 7e bf 07 00 00 00 89 de e8 32 00 13 00 83 fb 07 [ 254.877614][ C1] RSP: 0018:ffffc900097f7810 EFLAGS: 00000093 [ 254.877632][ C1] RAX: ffffffff8183298b RBX: ffff8880243d9918 RCX: ffff88802b31bc00 [ 254.877650][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880b952a770 [ 254.877664][ C1] RBP: dffffc0000000000 R08: ffff8880b952a777 R09: 1ffff110172a54ee [ 254.877681][ C1] R10: dffffc0000000000 R11: ffffed10172a54ef R12: 1ffff1100487b323 [ 254.877698][ C1] R13: ffff8880243d98f8 R14: 000000002a000001 R15: 00000000000000a8 [ 254.877717][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 254.877736][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.877752][ C1] CR2: 000056509f41b600 CR3: 000000000e132000 CR4: 0000000000350ef0 [ 254.877774][ C1] Call Trace: [ 254.877783][ C1] [ 254.877791][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 254.877815][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 254.877842][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 254.877865][ C1] ? nmi_handle+0x2a/0x5a0 [ 254.877912][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 254.877939][ C1] ? nmi_handle+0x151/0x5a0 [ 254.877973][ C1] ? nmi_handle+0x2a/0x5a0 [ 254.878009][ C1] ? enqueue_timer+0x13b/0x570 [ 254.878037][ C1] ? default_do_nmi+0x63/0x160 [ 254.878062][ C1] ? exc_nmi+0x123/0x1f0 [ 254.878085][ C1] ? end_repeat_nmi+0xf/0x53 [ 254.878124][ C1] ? enqueue_timer+0x13b/0x570 [ 254.878154][ C1] ? enqueue_timer+0x13b/0x570 [ 254.878183][ C1] ? enqueue_timer+0x13b/0x570 [ 254.878213][ C1] ? enqueue_timer+0x13b/0x570 [ 254.878242][ C1] [ 254.878249][ C1] [ 254.878262][ C1] __mod_timer+0x953/0xeb0 [ 254.878294][ C1] ? __pfx___mod_timer+0x10/0x10 [ 254.878314][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 254.878338][ C1] ? ieee80211_ibss_work+0x303/0x14c0 [ 254.878369][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 254.878394][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.878417][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.878441][ C1] ieee80211_ibss_work+0x4f0/0x14c0 [ 254.878473][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 254.878510][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 254.878541][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.878562][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 254.878599][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 254.878636][ C1] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 254.878665][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 254.878695][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.878719][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.878740][ C1] ? skb_dequeue+0x113/0x150 [ 254.878777][ C1] ? ieee80211_iface_work+0xc04/0xf10 [ 254.878812][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.878833][ C1] ? ieee80211_iface_work+0xe67/0xf10 [ 254.878873][ C1] cfg80211_wiphy_work+0x223/0x260 [ 254.878909][ C1] ? process_scheduled_works+0x945/0x1830 [ 254.878932][ C1] process_scheduled_works+0xa2e/0x1830 [ 254.878977][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 254.879008][ C1] ? assign_work+0x364/0x3d0 [ 254.879034][ C1] worker_thread+0x86d/0xd70 [ 254.879070][ C1] ? __kthread_parkme+0x169/0x1d0 [ 254.879098][ C1] ? __pfx_worker_thread+0x10/0x10 [ 254.879123][ C1] kthread+0x2f2/0x390 [ 254.879150][ C1] ? __pfx_worker_thread+0x10/0x10 [ 254.879174][ C1] ? __pfx_kthread+0x10/0x10 [ 254.879203][ C1] ret_from_fork+0x4d/0x80 [ 254.879232][ C1] ? __pfx_kthread+0x10/0x10 [ 254.879260][ C1] ret_from_fork_asm+0x1a/0x30 [ 254.879305][ C1] [ 254.880343][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 255.282477][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 255.292374][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 255.302425][ T30] Call Trace: [ 255.305710][ T30] [ 255.308638][ T30] dump_stack_lvl+0x241/0x360 [ 255.313342][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.318556][ T30] ? __pfx__printk+0x10/0x10 [ 255.323153][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.329146][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.334779][ T30] ? vscnprintf+0x5d/0x90 [ 255.339116][ T30] panic+0x349/0x860 [ 255.343057][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.348697][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 255.354856][ T30] ? __pfx_panic+0x10/0x10 [ 255.359278][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 255.364663][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.370294][ T30] ? __irq_work_queue_local+0x137/0x410 [ 255.375844][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.381476][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 255.386870][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 255.393038][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 255.399200][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.404834][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 255.410993][ T30] watchdog+0x101d/0x1020 [ 255.415332][ T30] ? watchdog+0x1ea/0x1020 [ 255.419760][ T30] ? __pfx_watchdog+0x10/0x10 [ 255.424448][ T30] kthread+0x2f2/0x390 [ 255.428527][ T30] ? __pfx_watchdog+0x10/0x10 [ 255.433208][ T30] ? __pfx_kthread+0x10/0x10 [ 255.437808][ T30] ret_from_fork+0x4d/0x80 [ 255.442237][ T30] ? __pfx_kthread+0x10/0x10 [ 255.446835][ T30] ret_from_fork_asm+0x1a/0x30 [ 255.451636][ T30] [ 255.454955][ T30] Kernel Offset: disabled [ 255.459270][ T30] Rebooting in 86400 seconds..