syzkaller login: [ 96.990917][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:57649' (ED25519) to the list of known hosts. 2024/10/10 19:16:07 ignoring optional flag "sandboxArg"="0" 2024/10/10 19:16:09 parsed 1 programs [ 401.005103][ T5137] cgroup: Unknown subsys name 'net' [ 401.060227][ T5137] cgroup: Unknown subsys name 'cpuset' [ 401.077105][ T5137] cgroup: Unknown subsys name 'rlimit' [ 404.028221][ T5137] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 407.420296][ T5147] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 408.420589][ T5161] chnl_net:caif_netlink_parms(): no params data found [ 408.500329][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.513399][ T5161] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.516754][ T5161] bridge_slave_0: entered allmulticast mode [ 408.533221][ T5161] bridge_slave_0: entered promiscuous mode [ 408.545823][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.548642][ T5161] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.551370][ T5161] bridge_slave_1: entered allmulticast mode [ 408.565349][ T5161] bridge_slave_1: entered promiscuous mode [ 408.605377][ T5161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.610800][ T5161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.648284][ T5161] team0: Port device team_slave_0 added [ 408.663835][ T5161] team0: Port device team_slave_1 added [ 408.684804][ T5161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.687238][ T5161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.713941][ T5161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.719865][ T5161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.722432][ T5161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.743774][ T5161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.797156][ T5161] hsr_slave_0: entered promiscuous mode [ 408.800204][ T5161] hsr_slave_1: entered promiscuous mode [ 408.998433][ T5161] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 409.015487][ T5161] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 409.026754][ T5161] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 409.048081][ T5161] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 409.100193][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.103605][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.107393][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.110244][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.205750][ T5161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.229045][ T5161] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.245242][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.249804][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.281134][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.285753][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.306498][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.309200][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.598116][ T5161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.648628][ T5161] veth0_vlan: entered promiscuous mode [ 409.670102][ T5161] veth1_vlan: entered promiscuous mode [ 409.709828][ T5161] veth0_macvtap: entered promiscuous mode [ 409.725650][ T5161] veth1_macvtap: entered promiscuous mode [ 409.755474][ T5161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.768757][ T5161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.788966][ T5161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.792781][ T5161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.814969][ T5161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.833361][ T5161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.086135][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.164348][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.256445][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.332906][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.343019][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.374865][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.378893][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.426681][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.924039][ T13] bridge_slave_1: left allmulticast mode [ 412.926531][ T13] bridge_slave_1: left promiscuous mode [ 412.929795][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.975265][ T13] bridge_slave_0: left allmulticast mode [ 412.977439][ T13] bridge_slave_0: left promiscuous mode [ 412.979685][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.208727][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.212941][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.220370][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.235839][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.239283][ T5221] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 413.243871][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 413.693880][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.706851][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.715545][ T13] bond0 (unregistering): Released all slaves [ 413.824939][ T13] hsr_slave_0: left promiscuous mode [ 413.848451][ T13] hsr_slave_1: left promiscuous mode [ 413.851288][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.863757][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.869975][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.884556][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.896698][ T13] veth1_macvtap: left promiscuous mode [ 413.899257][ T13] veth0_macvtap: left promiscuous mode [ 413.901602][ T13] veth1_vlan: left promiscuous mode [ 413.923612][ T13] veth0_vlan: left promiscuous mode [ 414.434925][ T13] team0 (unregistering): Port device team_slave_1 removed [ 414.485598][ T13] team0 (unregistering): Port device team_slave_0 removed 2024/10/10 19:16:30 executed programs: 0 [ 416.768746][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 416.784190][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 416.788145][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 416.809170][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 416.812382][ T5221] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 416.816329][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 417.409479][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 417.657487][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.660411][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.681011][ T5244] bridge_slave_0: entered allmulticast mode [ 417.704190][ T5244] bridge_slave_0: entered promiscuous mode [ 417.714495][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.717484][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.721010][ T5244] bridge_slave_1: entered allmulticast mode [ 417.763959][ T5244] bridge_slave_1: entered promiscuous mode [ 417.802623][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.827995][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.916479][ T5244] team0: Port device team_slave_0 added [ 417.925672][ T5244] team0: Port device team_slave_1 added [ 417.983947][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.986362][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.004762][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.024455][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.027050][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.054767][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.125987][ T5244] hsr_slave_0: entered promiscuous mode [ 418.130961][ T5244] hsr_slave_1: entered promiscuous mode [ 418.809907][ T5244] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 418.839994][ T5244] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 418.845019][ T5244] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 418.875703][ T5244] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 418.910023][ T5221] Bluetooth: hci0: command tx timeout [ 419.015359][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.037881][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.058706][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.061473][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.077648][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.080397][ T5238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.133696][ T5244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 419.137206][ T5244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 419.409820][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.482709][ T5244] veth0_vlan: entered promiscuous mode [ 419.508877][ T5244] veth1_vlan: entered promiscuous mode [ 419.564603][ T5244] veth0_macvtap: entered promiscuous mode [ 419.586238][ T5244] veth1_macvtap: entered promiscuous mode [ 419.620107][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.655850][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.673660][ T5244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.677179][ T5244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.680528][ T5244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.713809][ T5244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.878192][ T5170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.881283][ T5170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.968801][ T5238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.974524][ T5238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.018835][ T5221] Bluetooth: hci0: command tx timeout [ 423.254712][ T5221] Bluetooth: hci0: command tx timeout 2024/10/10 19:16:37 executed programs: 3 [ 425.405477][ T5221] Bluetooth: hci0: command tx timeout [ 440.947898][ T4535] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 441.628562][ T4535] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 441.772270][ T4535] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 441.981434][ T4535] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 442.091161][ T4535] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 442.146657][ T4535] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 445.249462][ T4535] Bluetooth: hci1: command tx timeout [ 445.583706][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.612380][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.407554][ T4535] Bluetooth: hci1: command tx timeout [ 449.556823][ T4535] Bluetooth: hci1: command tx timeout [ 451.722331][ T4535] Bluetooth: hci1: command tx timeout [ 506.992312][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.037238][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 520.768209][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 521.030367][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 521.108050][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 521.151935][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 521.269566][ T5221] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 521.311298][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 523.844016][ T5221] Bluetooth: hci0: command tx timeout [ 525.950101][ T5221] Bluetooth: hci0: command tx timeout [ 528.230926][ T5221] Bluetooth: hci0: command tx timeout [ 530.344617][ T5221] Bluetooth: hci0: command tx timeout [ 568.390253][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.414355][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.406723][ T4535] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 570.471427][ T4535] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 570.534884][ T4535] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 570.753734][ T4535] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 570.858479][ T4535] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 570.900331][ T4535] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 573.658712][ T4535] Bluetooth: hci1: command tx timeout [ 575.804038][ T4535] Bluetooth: hci1: command tx timeout [ 577.972469][ T4535] Bluetooth: hci1: command tx timeout [ 580.050463][ T4535] Bluetooth: hci1: command tx timeout [ 629.864764][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.892079][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.709696][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 634.868551][ T5221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 635.012451][ T5221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 635.106777][ T5221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 635.167243][ T5221] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 635.199027][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 637.713702][ T5221] Bluetooth: hci2: command tx timeout [ 639.849430][ T5221] Bluetooth: hci2: command tx timeout [ 641.998479][ T5221] Bluetooth: hci2: command tx timeout [ 644.098248][ T5221] Bluetooth: hci2: command tx timeout [ 647.076129][ T4535] Bluetooth: hci0: command 0x0406 tx timeout [ 667.268537][ T25] INFO: task syz-executor:5318 blocked for more than 143 seconds. [ 667.272099][ T25] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 667.505190][ T25] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 667.509469][ T25] task:syz-executor state:D stack:23808 pid:5318 tgid:5318 ppid:1 flags:0x00004006 [ 667.689162][ T25] Call Trace: [ 667.690633][ T25] [ 667.691826][ T25] __schedule+0x1895/0x4b30 [ 667.945063][ T25] ? __pfx___schedule+0x10/0x10 [ 667.947037][ T25] ? __pfx_lock_release+0x10/0x10 [ 667.948975][ T25] ? __mutex_trylock_common+0x92/0x2e0 [ 667.951537][ T25] ? schedule+0x90/0x320 [ 668.220645][ T25] schedule+0x14b/0x320 [ 668.222660][ T25] schedule_preempt_disabled+0x13/0x30 [ 668.396681][ T25] __mutex_lock+0x6a7/0xd70 [ 668.488695][ T25] ? __mutex_lock+0x52a/0xd70 [ 668.490975][ T25] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 668.720911][ T25] ? __pfx___mutex_lock+0x10/0x10 [ 668.900314][ T25] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 668.902379][ T25] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 669.023578][ T25] ? __lock_acquire+0x1384/0x2050 [ 669.025464][ T25] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.027637][ T25] netlink_rcv_skb+0x1e3/0x430 [ 669.029443][ T25] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.031659][ T25] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 669.295461][ T25] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.397865][ T25] netlink_unicast+0x7f6/0x990 [ 669.400378][ T25] ? __pfx_netlink_unicast+0x10/0x10 [ 669.402806][ T25] ? __virt_addr_valid+0x183/0x530 [ 669.598930][ T25] ? __check_object_size+0x48e/0x900 [ 669.600825][ T25] netlink_sendmsg+0x8e4/0xcb0 [ 669.602502][ T25] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.812733][ T25] ? aa_sock_msg_perm+0x91/0x160 [ 669.953485][ T25] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.956511][ T25] __sock_sendmsg+0x221/0x270 [ 669.958712][ T25] __sys_sendto+0x39b/0x4f0 [ 669.960546][ T25] ? __pfx___sys_sendto+0x10/0x10 [ 669.962286][ T25] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 670.104956][ T25] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 670.107729][ T25] ? exc_page_fault+0x590/0x8c0 [ 670.109521][ T25] __x64_sys_sendto+0xde/0x100 [ 670.111375][ T25] do_syscall_64+0xf3/0x230 [ 670.263873][ T25] ? clear_bhb_loop+0x35/0x90 [ 670.266281][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.269075][ T25] RIP: 0033:0x7f6b3d97fe8c [ 670.271207][ T25] RSP: 002b:00007ffcad7abb90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 670.493043][ T25] RAX: ffffffffffffffda RBX: 00007f6b3e664620 RCX: 00007f6b3d97fe8c [ 670.617150][ T25] RDX: 0000000000000028 RSI: 00007f6b3e664670 RDI: 0000000000000003 [ 670.620255][ T25] RBP: 0000000000000000 R08: 00007ffcad7abbe4 R09: 000000000000000c [ 670.848504][ T25] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 671.024022][ T25] R13: 0000000000000000 R14: 00007f6b3e664670 R15: 0000000000000000 [ 671.143629][ T25] [ 671.169693][ T25] [ 671.169693][ T25] Showing all locks held in the system: [ 671.371163][ T25] 3 locks held by kworker/u4:1/13: [ 671.372823][ T25] 1 lock held by khungtaskd/25: [ 671.588834][ T25] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 671.592506][ T25] 1 lock held by kswapd0/79: [ 671.710487][ T25] 3 locks held by kworker/u4:10/1084: [ 671.712440][ T25] 1 lock held by dhcpcd/4813: [ 671.932555][ T25] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 672.037525][ T25] 2 locks held by getty/4901: [ 672.039909][ T25] #0: ffff88801fa990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 672.204027][ T25] #1: ffffc9000039b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 672.378541][ T25] 4 locks held by kworker/u4:0/5170: [ 672.381642][ T25] #0: ffff88801be8b148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 672.531365][ T25] #1: ffffc90002f1fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 672.721264][ T25] #2: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 672.856538][ T25] #3: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 672.947998][ T25] 2 locks held by kworker/u4:4/5238: [ 672.949698][ T25] 3 locks held by kworker/u4:5/5292: [ 672.951456][ T25] #0: ffff88803c2d9148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 673.069223][ T25] #1: ffffc900025cfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 673.267615][ T25] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 673.271961][ T25] 4 locks held by kworker/0:6/5296: [ 673.482884][ T25] #0: ffff88801ac75948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 673.595122][ T25] #1: ffffc900025ffd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 673.710133][ T25] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 673.894332][ T25] #3: ffff888057ed0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_check_chans_work+0x164/0xfd0 [ 673.898615][ T25] 3 locks held by kworker/0:8/5298: [ 673.900754][ T25] 2 locks held by kworker/0:12/5304: [ 673.902923][ T25] 1 lock held by syz-executor/5318: [ 674.161602][ T25] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 674.279696][ T25] 1 lock held by syz-executor/5333: [ 674.281979][ T25] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 674.478844][ T25] 1 lock held by syz-executor/5348: [ 674.480986][ T25] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 674.640661][ T25] [ 674.642141][ T25] ============================================= [ 674.642141][ T25] [ 674.859655][ T25] NMI backtrace for cpu 0 [ 674.861358][ T25] CPU: 0 UID: 0 PID: 25 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 674.865198][ T25] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 674.869404][ T25] Call Trace: [ 674.870780][ T25] [ 674.871927][ T25] dump_stack_lvl+0x241/0x360 [ 674.873625][ T25] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.875557][ T25] ? __pfx__printk+0x10/0x10 [ 674.877293][ T25] nmi_cpu_backtrace+0x49c/0x4d0 [ 674.879099][ T25] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 674.881031][ T25] ? _printk+0xd5/0x120 [ 674.882609][ T25] ? __pfx__printk+0x10/0x10 [ 674.884393][ T25] ? __wake_up_klogd+0xcc/0x110 [ 674.886286][ T25] ? __pfx__printk+0x10/0x10 [ 674.888053][ T25] ? __rcu_read_unlock+0xa1/0x110 [ 674.889846][ T25] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 674.892114][ T25] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 674.894407][ T25] watchdog+0xff4/0x1040 [ 674.896090][ T25] ? watchdog+0x1ea/0x1040 [ 674.897701][ T25] ? __pfx_watchdog+0x10/0x10 [ 674.899447][ T25] kthread+0x2f0/0x390 [ 674.900887][ T25] ? __pfx_watchdog+0x10/0x10 [ 674.902478][ T25] ? __pfx_kthread+0x10/0x10 [ 674.904207][ T25] ret_from_fork+0x4b/0x80 [ 674.905907][ T25] ? __pfx_kthread+0x10/0x10 [ 674.907556][ T25] ret_from_fork_asm+0x1a/0x30 [ 674.909474][ T25] [ 675.541998][ T25] Kernel panic - not syncing: hung_task: blocked tasks [ 675.544809][ T25] CPU: 0 UID: 0 PID: 25 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 675.549481][ T25] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 675.554968][ T25] Call Trace: [ 675.556292][ T25] [ 675.557437][ T25] dump_stack_lvl+0x241/0x360 [ 675.559299][ T25] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.561314][ T25] ? __pfx__printk+0x10/0x10 [ 675.563213][ T25] ? nmi_cpu_backtrace+0x42e/0x4d0 [ 675.565353][ T25] ? vscnprintf+0x5d/0x90 [ 675.567552][ T25] panic+0x349/0x880 [ 675.569651][ T25] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 675.572613][ T25] ? __pfx_panic+0x10/0x10 [ 675.574732][ T25] ? tick_nohz_tick_stopped+0x82/0xb0 [ 675.577096][ T25] ? __irq_work_queue_local+0x137/0x410 [ 675.579528][ T25] ? preempt_schedule_thunk+0x1a/0x30 [ 675.582129][ T25] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 675.585035][ T25] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 675.588161][ T25] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 675.591346][ T25] watchdog+0x1033/0x1040 [ 675.593248][ T25] ? watchdog+0x1ea/0x1040 [ 675.595121][ T25] ? __pfx_watchdog+0x10/0x10 [ 675.597005][ T25] kthread+0x2f0/0x390 [ 675.598477][ T25] ? __pfx_watchdog+0x10/0x10 [ 675.600446][ T25] ? __pfx_kthread+0x10/0x10 [ 675.602664][ T25] ret_from_fork+0x4b/0x80 [ 675.604955][ T25] ? __pfx_kthread+0x10/0x10 [ 675.607052][ T25] ret_from_fork_asm+0x1a/0x30 [ 675.608876][ T25] [ 675.610368][ T25] Kernel Offset: disabled [ 675.611991][ T25] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:20:41 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002d RBX=ffffffff9a711e40 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc900004bf770 R8 =ffffffff8549937b R9 =1ffff11006763046 R10=dffffc0000000000 R11=ffffffff85499330 R12=dffffc0000000000 R13=ffffffff9a40cf14 R14=000000000000002d R15=00000000000003f8 RIP=ffffffff854993ae RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000003252020 CR3=000000000e734000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4007ed4960ad90cb ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 83abab5283abab52 83abab5283abab52 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3923986930681d29 79598a82cd4543e8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 564f43e3f8c9d0aa aaed7a4cfe3f92f5 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 52f90c2d4edd0b43 406ae819e1e49b28 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d91270d9463b3be2 635239d1fc9e72c2 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 43ac2bd8d7ac14dd 1a115563f6e223c2 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 03ce0ed686b5d44c 8fdd8aa491a96bd2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d2438d733ea19129 45737f512c2bc6aa ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fbc3b1c5bc4c8e84 18c5caa3cf6fa2c4 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a724460ba724460b a724460ba724460b ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 606f1b56606f1b56 606f1b56606f1b56 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 918cc015918cc015 918cc015918cc015 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000