Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. 2024/06/25 18:16:10 ignoring optional flag "sandboxArg"="0" 2024/06/25 18:16:10 parsed 1 programs 2024/06/25 18:16:13 executed programs: 0 [ 138.037824][ T5389] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 138.146475][ T4484] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.155786][ T4484] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.164395][ T4484] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.173730][ T4484] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.182550][ T4484] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 138.190772][ T4484] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.477739][ T5398] chnl_net:caif_netlink_parms(): no params data found [ 138.609088][ T5398] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.616435][ T5398] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.624494][ T5398] bridge_slave_0: entered allmulticast mode [ 138.632564][ T5398] bridge_slave_0: entered promiscuous mode [ 138.643710][ T5398] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.650889][ T5398] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.658286][ T5398] bridge_slave_1: entered allmulticast mode [ 138.666320][ T5398] bridge_slave_1: entered promiscuous mode [ 138.721534][ T5398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.736810][ T5398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.794127][ T5398] team0: Port device team_slave_0 added [ 138.805644][ T5398] team0: Port device team_slave_1 added [ 138.855379][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.862357][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.889504][ T5398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.903501][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.910456][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.936441][ T5398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.016319][ T5398] hsr_slave_0: entered promiscuous mode [ 139.023550][ T5398] hsr_slave_1: entered promiscuous mode [ 140.112335][ T5398] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.135679][ T5398] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.150138][ T5398] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.166324][ T5398] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.262907][ T4484] Bluetooth: hci0: command tx timeout [ 140.361060][ T5398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.397975][ T5398] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.417379][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.424681][ T5105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.449988][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.457304][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.885901][ T5398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.992409][ T5398] veth0_vlan: entered promiscuous mode [ 141.016216][ T5398] veth1_vlan: entered promiscuous mode [ 141.081213][ T5398] veth0_macvtap: entered promiscuous mode [ 141.100353][ T5398] veth1_macvtap: entered promiscuous mode [ 141.147608][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.178136][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.198985][ T5398] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.211814][ T5398] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.226466][ T5398] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.237908][ T5398] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.400685][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.417343][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.505798][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.517544][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.645539][ T5458] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 141.652429][ T5458] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.675780][ T5458] vhci_hcd vhci_hcd.0: Device attached [ 142.033022][ T780] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 142.354658][ T4484] Bluetooth: hci0: command tx timeout [ 142.830473][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.838359][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.425604][ T4484] Bluetooth: hci0: command tx timeout [ 146.504881][ T4484] Bluetooth: hci0: command tx timeout 2024/06/25 18:17:12 executed programs: 1 [ 197.765224][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.774822][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.782804][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.792547][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.802541][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 197.810299][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.099112][ T5758] chnl_net:caif_netlink_parms(): no params data found [ 198.229348][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.236715][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.245136][ T5758] bridge_slave_0: entered allmulticast mode [ 198.253366][ T5758] bridge_slave_0: entered promiscuous mode [ 198.265494][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.272805][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.280427][ T5758] bridge_slave_1: entered allmulticast mode [ 198.288636][ T5758] bridge_slave_1: entered promiscuous mode [ 198.343576][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.358590][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.425871][ T5758] team0: Port device team_slave_0 added [ 198.436234][ T5758] team0: Port device team_slave_1 added [ 198.489041][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.496155][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.526290][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.540743][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.547787][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.573872][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.655941][ T5758] hsr_slave_0: entered promiscuous mode [ 198.663546][ T5758] hsr_slave_1: entered promiscuous mode [ 198.670228][ T5758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.678970][ T5758] Cannot create hsr debugfs directory [ 198.890135][ T5758] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.021664][ T5758] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.133464][ T5758] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.238247][ T5758] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.419099][ T5758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.432599][ T5758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.445524][ T5758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.459198][ T5758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 199.620092][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.658785][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.685599][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.692983][ T5767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.706762][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.714553][ T5767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.863195][ T53] Bluetooth: hci1: command tx timeout [ 200.047444][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.129281][ T5758] veth0_vlan: entered promiscuous mode [ 200.154282][ T5758] veth1_vlan: entered promiscuous mode [ 200.210559][ T5758] veth0_macvtap: entered promiscuous mode [ 200.224704][ T5758] veth1_macvtap: entered promiscuous mode [ 200.258409][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.270630][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.285271][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.307942][ T5758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.318907][ T5758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.331930][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.350255][ T5758] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.359756][ T5758] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.369452][ T5758] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.378624][ T5758] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.496586][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.515005][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.565932][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.574169][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.697575][ T5775] vhci_hcd vhci_hcd.0: port 0 already used [ 201.943201][ T53] Bluetooth: hci1: command tx timeout [ 204.022814][ T53] Bluetooth: hci1: command tx timeout [ 204.268880][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.276753][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.102865][ T53] Bluetooth: hci1: command tx timeout 2024/06/25 18:18:11 executed programs: 2 [ 256.952067][ T4484] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.963992][ T4484] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.975365][ T4484] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.985157][ T4484] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.994512][ T4484] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 257.002068][ T4484] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.317001][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 257.456844][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.464837][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.472502][ T5779] bridge_slave_0: entered allmulticast mode [ 257.481821][ T5779] bridge_slave_0: entered promiscuous mode [ 257.494039][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.501279][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.508839][ T5779] bridge_slave_1: entered allmulticast mode [ 257.516855][ T5779] bridge_slave_1: entered promiscuous mode [ 257.581596][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.599650][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.659316][ T5779] team0: Port device team_slave_0 added [ 257.676152][ T5779] team0: Port device team_slave_1 added [ 257.728463][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.735553][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.761665][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.776984][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.784192][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.813029][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.887155][ T5779] hsr_slave_0: entered promiscuous mode [ 257.896961][ T5779] hsr_slave_1: entered promiscuous mode [ 257.906114][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.914019][ T5779] Cannot create hsr debugfs directory [ 258.134315][ T5779] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.229502][ T5779] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.321302][ T5779] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.415932][ T5779] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.635649][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.649903][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.666234][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.681785][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 258.848171][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.882188][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.911531][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.918951][ T5105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.930991][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.938211][ T5105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.064198][ T53] Bluetooth: hci2: command tx timeout [ 259.268133][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.351217][ T5779] veth0_vlan: entered promiscuous mode [ 259.374866][ T5779] veth1_vlan: entered promiscuous mode [ 259.431467][ T5779] veth0_macvtap: entered promiscuous mode [ 259.447581][ T5779] veth1_macvtap: entered promiscuous mode [ 259.481909][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.493560][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.505492][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.516074][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.528555][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.552357][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.564608][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.576166][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.587033][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.600219][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.618042][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.627869][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.641884][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.650969][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.770004][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.779012][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.838819][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.847078][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.973515][ T5794] vhci_hcd vhci_hcd.0: port 0 already used [ 261.142984][ T4484] Bluetooth: hci2: command tx timeout [ 262.672918][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 263.232997][ T53] Bluetooth: hci2: command tx timeout [ 265.303377][ T53] Bluetooth: hci2: command tx timeout [ 265.707653][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.718533][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.823315][ T30] INFO: task syz-executor.0:5457 blocked for more than 143 seconds. [ 286.831538][ T30] Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 286.841512][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.850277][ T30] task:syz-executor.0 state:D stack:26480 pid:5457 tgid:5457 ppid:5398 flags:0x00000006 [ 286.860595][ T30] Call Trace: [ 286.863961][ T30] [ 286.866953][ T30] __schedule+0xf15/0x5d00 [ 286.874132][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 286.879419][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 286.884777][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.890485][ T30] ? __pfx___schedule+0x10/0x10 [ 286.895599][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.901284][ T30] ? schedule+0x298/0x350 [ 286.906245][ T30] ? __pfx_lock_release+0x10/0x10 [ 286.911606][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 286.916437][ T30] ? __mutex_trylock_common+0x78/0x250 [ 286.921958][ T30] schedule+0xe7/0x350 [ 286.926140][ T30] schedule_preempt_disabled+0x13/0x30 [ 286.931652][ T30] __mutex_lock+0x5b8/0x9c0 [ 286.936298][ T30] ? usbdev_release+0x87/0x470 [ 286.941199][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 286.947051][ T30] ? __fsnotify_parent+0x27d/0x9d0 [ 286.952406][ T30] ? __pfx___fsnotify_parent+0x10/0x10 [ 286.958149][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.963924][ T30] ? locks_remove_file+0x399/0x5a0 [ 286.969178][ T30] ? __pfx_usbdev_release+0x10/0x10 [ 286.975016][ T30] ? usbdev_release+0x87/0x470 [ 286.980016][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.985931][ T30] usbdev_release+0x87/0x470 [ 286.990598][ T30] ? __pfx_usbdev_release+0x10/0x10 [ 286.995965][ T30] __fput+0x40b/0xbb0 [ 287.000018][ T30] __fput_sync+0x47/0x50 [ 287.004451][ T30] __x64_sys_close+0x86/0x100 [ 287.009221][ T30] do_syscall_64+0xcd/0x250 [ 287.013861][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.019872][ T30] RIP: 0033:0x7f656367b9da [ 287.024475][ T30] RSP: 002b:00007ffe7aadd5b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 287.032968][ T30] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f656367b9da [ 287.040978][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 287.049166][ T30] RBP: 0000000000000032 R08: 0000001b2d160000 R09: 00007f656379bf8c [ 287.057218][ T30] R10: 00007ffe7aadd700 R11: 0000000000000293 R12: 00007f65632000c8 [ 287.065320][ T30] R13: ffffffffffffffff R14: 00007f6563200000 R15: 000000000002290a [ 287.073388][ T30] [ 287.077057][ T30] [ 287.077057][ T30] Showing all locks held in the system: [ 287.084873][ T30] 1 lock held by khungtaskd/30: [ 287.089748][ T30] #0: ffffffff8dbb5be0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 287.099795][ T30] 5 locks held by kworker/1:2/780: [ 287.105077][ T30] #0: ffff888018e8f948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 287.116017][ T30] #1: ffffc90003a8fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 287.127395][ T30] #2: ffff8880246cf190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e20 [ 287.136423][ T30] #3: ffff888024819518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2802/0x4e20 [ 287.146527][ T30] #4: ffff8880244dfb68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x282b/0x4e20 [ 287.156378][ T30] 5 locks held by kworker/u8:6/989: [ 287.161638][ T30] 1 lock held by klogd/4529: [ 287.166304][ T30] 2 locks held by getty/4840: [ 287.171001][ T30] #0: ffff88802abcb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 287.181485][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 287.191780][ T30] 1 lock held by syz-executor.0/5457: [ 287.197219][ T30] #0: ffff8880246cf190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x87/0x470 [ 287.206505][ T30] 1 lock held by syz-executor.0/5774: [ 287.211880][ T30] #0: ffff8880246cf190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x1b8/0x8c0 [ 287.220990][ T30] 1 lock held by syz-executor.0/5793: [ 287.226483][ T30] #0: ffff8880246cf190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x1b8/0x8c0 [ 287.235590][ T30] [ 287.237928][ T30] ============================================= [ 287.237928][ T30] [ 287.246381][ T30] NMI backtrace for cpu 0 [ 287.250721][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 287.260623][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.270678][ T30] Call Trace: [ 287.273959][ T30] [ 287.276908][ T30] dump_stack_lvl+0x116/0x1f0 [ 287.281616][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 287.286607][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.292611][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 287.298638][ T30] watchdog+0xf86/0x1240 [ 287.302921][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.307646][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 287.312884][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.318558][ T30] ? __kthread_parkme+0x148/0x220 [ 287.323720][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.329383][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.334097][ T30] kthread+0x2c4/0x3a0 [ 287.338211][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.343527][ T30] ? __pfx_kthread+0x10/0x10 [ 287.348204][ T30] ret_from_fork+0x48/0x80 [ 287.352692][ T30] ? __pfx_kthread+0x10/0x10 [ 287.357342][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.362182][ T30] [ 287.365658][ T30] Sending NMI from CPU 0 to CPUs 1: [ 287.371424][ C1] NMI backtrace for cpu 1 [ 287.371441][ C1] CPU: 1 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 287.371480][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.371501][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 287.371561][ C1] RIP: 0010:unwind_get_return_address+0x93/0xe0 [ 287.371623][ C1] Code: 48 c1 ea 03 80 3c 02 00 75 56 48 8b 7b 48 e8 94 73 1e 00 31 ff 89 c5 89 c6 e8 79 57 52 00 85 ed 74 b5 e8 70 5c 52 00 4c 89 e2 <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 2c 48 8b [ 287.371656][ C1] RSP: 0018:ffffc900001173f0 EFLAGS: 00000293 [ 287.371683][ C1] RAX: 0000000000000000 RBX: ffffc90000117418 RCX: ffffffff813cd0b7 [ 287.371707][ C1] RDX: ffffc90000117460 RSI: ffffffff813cd0c0 RDI: 0000000000000005 [ 287.371730][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 287.371751][ C1] R10: 0000000000000001 R11: 0000000000000004 R12: ffffc90000117460 [ 287.371774][ C1] R13: ffffffff817acd50 R14: ffffc900001174d8 R15: ffff8880172bda00 [ 287.371805][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 287.371837][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.371862][ C1] CR2: 00005650ded03008 CR3: 000000000d97a000 CR4: 0000000000350ef0 [ 287.371885][ C1] Call Trace: [ 287.371896][ C1] [ 287.371908][ C1] ? show_regs+0x8c/0xa0 [ 287.371961][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 287.372016][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 287.372064][ C1] ? nmi_handle+0x1ac/0x5c0 [ 287.372120][ C1] ? unwind_get_return_address+0x93/0xe0 [ 287.372178][ C1] ? default_do_nmi+0x6a/0x160 [ 287.372236][ C1] ? exc_nmi+0x170/0x1e0 [ 287.372267][ C1] ? end_repeat_nmi+0xf/0x53 [ 287.372300][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 287.372341][ C1] ? unwind_get_return_address+0x87/0xe0 [ 287.372396][ C1] ? unwind_get_return_address+0x90/0xe0 [ 287.372453][ C1] ? unwind_get_return_address+0x93/0xe0 [ 287.372511][ C1] ? unwind_get_return_address+0x93/0xe0 [ 287.372570][ C1] ? unwind_get_return_address+0x93/0xe0 [ 287.372627][ C1] [ 287.372637][ C1] [ 287.372653][ C1] arch_stack_walk+0xc1/0x170 [ 287.372696][ C1] ? ieee80211_iface_work+0xc07/0xf00 [ 287.372755][ C1] ? ieee802_11_parse_elems_full+0xea/0x15d0 [ 287.372814][ C1] stack_trace_save+0x95/0xd0 [ 287.372848][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 287.372883][ C1] ? __read_once_word_nocheck+0x9/0x20 [ 287.372937][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.372973][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.373009][ C1] ? __orc_find+0x104/0x130 [ 287.373063][ C1] kasan_save_stack+0x33/0x60 [ 287.373096][ C1] ? kasan_save_stack+0x33/0x60 [ 287.373127][ C1] ? kasan_save_track+0x14/0x30 [ 287.373158][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 287.373212][ C1] ? __kmalloc_noprof+0x1ec/0x410 [ 287.373250][ C1] ? ieee802_11_parse_elems_full+0xea/0x15d0 [ 287.373302][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xc4f/0x2f40 [ 287.373392][ C1] kasan_save_track+0x14/0x30 [ 287.373425][ C1] __kasan_kmalloc+0xaa/0xb0 [ 287.373483][ C1] __kmalloc_noprof+0x1ec/0x410 [ 287.373522][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.373558][ C1] ? mark_lock+0xb1/0xc60 [ 287.373597][ C1] ieee802_11_parse_elems_full+0xea/0x15d0 [ 287.373653][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.373689][ C1] ? hlock_class+0x4e/0x130 [ 287.373739][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.373775][ C1] ? mark_lock+0xb5/0xc60 [ 287.373819][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.373855][ C1] ? mark_lock+0xb5/0xc60 [ 287.373889][ C1] ? __pfx_debug_object_assert_init+0x10/0x10 [ 287.373941][ C1] ? __pfx_mark_lock+0x10/0x10 [ 287.373978][ C1] ? __pfx_mark_lock+0x10/0x10 [ 287.374014][ C1] ? mark_lock+0xb5/0xc60 [ 287.374049][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.374085][ C1] ? find_held_lock+0x2d/0x110 [ 287.374136][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.374172][ C1] ? hlock_class+0x4e/0x130 [ 287.374223][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 287.374277][ C1] ? hlock_class+0x4e/0x130 [ 287.374327][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.374362][ C1] ? __lock_acquire+0x14f4/0x3b30 [ 287.374402][ C1] ? __pfx_mark_lock+0x10/0x10 [ 287.374442][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.374478][ C1] ? hlock_class+0x4e/0x130 [ 287.374528][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.374564][ C1] ? __lock_acquire+0x14f4/0x3b30 [ 287.374609][ C1] ieee80211_ibss_rx_queued_mgmt+0xc4f/0x2f40 [ 287.374664][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.374700][ C1] ? hlock_class+0x4e/0x130 [ 287.374750][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.374785][ C1] ? mark_lock+0xb5/0xc60 [ 287.374825][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 287.374863][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 287.374904][ C1] ? __pfx_mark_lock+0x10/0x10 [ 287.374943][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 287.374995][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.375031][ C1] ? lock_acquire+0x1b1/0x560 [ 287.375069][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.375105][ C1] ? find_held_lock+0x2d/0x110 [ 287.375154][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.375190][ C1] ? find_held_lock+0x2d/0x110 [ 287.375243][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.375280][ C1] ? kcov_remote_start+0x372/0x6e0 [ 287.375332][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.375368][ C1] ? mark_held_locks+0x9f/0xe0 [ 287.375407][ C1] ? kcov_remote_start+0x3d1/0x6e0 [ 287.375451][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.375490][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.375531][ C1] ieee80211_iface_work+0xc07/0xf00 [ 287.375588][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.375626][ C1] cfg80211_wiphy_work+0x258/0x330 [ 287.375688][ C1] process_one_work+0x9fe/0x1b60 [ 287.375743][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 287.375783][ C1] ? __pfx_process_one_work+0x10/0x10 [ 287.375833][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.375875][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.375911][ C1] ? assign_work+0x1a0/0x250 [ 287.375954][ C1] worker_thread+0x6c8/0xf70 [ 287.376010][ C1] ? __pfx_worker_thread+0x10/0x10 [ 287.376054][ C1] kthread+0x2c4/0x3a0 [ 287.376106][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.376141][ C1] ? __pfx_kthread+0x10/0x10 [ 287.376194][ C1] ret_from_fork+0x48/0x80 [ 287.376246][ C1] ? __pfx_kthread+0x10/0x10 [ 287.376299][ C1] ret_from_fork_asm+0x1a/0x30 [ 287.376364][ C1] [ 287.381750][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 287.381771][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 287.381813][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.381836][ T30] Call Trace: [ 287.381850][ T30] [ 287.381865][ T30] dump_stack_lvl+0x3d/0x1f0 [ 287.381915][ T30] panic+0x6f5/0x7a0 [ 287.381961][ T30] ? __pfx_panic+0x10/0x10 [ 287.382004][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 287.382052][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.382094][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 287.382138][ T30] ? watchdog+0xd3d/0x1240 [ 287.382189][ T30] ? watchdog+0xd30/0x1240 [ 287.382250][ T30] watchdog+0xd4e/0x1240 [ 287.382310][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.382359][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 287.382408][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.382452][ T30] ? __kthread_parkme+0x148/0x220 [ 287.382512][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.382560][ T30] ? __pfx_watchdog+0x10/0x10 [ 287.382612][ T30] kthread+0x2c4/0x3a0 [ 287.382668][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.382708][ T30] ? __pfx_kthread+0x10/0x10 [ 287.382769][ T30] ret_from_fork+0x48/0x80 [ 287.382827][ T30] ? __pfx_kthread+0x10/0x10 [ 287.382887][ T30] ret_from_fork_asm+0x1a/0x30 [ 287.382966][ T30] [ 287.391137][ T30] Kernel Offset: disabled [ 288.161054][ T30] Rebooting in 86400 seconds..