syzkaller login: [ 91.783832][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:28670' (ED25519) to the list of known hosts. 2025/06/05 14:21:31 ignoring optional flag "sandboxArg"="0" 2025/06/05 14:21:33 parsed 1 programs [ 240.384708][ T5351] cgroup: Unknown subsys name 'net' [ 240.457614][ T5351] cgroup: Unknown subsys name 'cpuset' [ 240.463280][ T5351] cgroup: Unknown subsys name 'rlimit' [ 242.248146][ T5351] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 246.106759][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.110250][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.174966][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.184263][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.301466][ T5360] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 248.552331][ T5386] chnl_net:caif_netlink_parms(): no params data found [ 248.677683][ T5386] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.684128][ T5386] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.687292][ T5386] bridge_slave_0: entered allmulticast mode [ 248.700327][ T5386] bridge_slave_0: entered promiscuous mode [ 248.716732][ T5386] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.719960][ T5386] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.723214][ T5386] bridge_slave_1: entered allmulticast mode [ 248.735461][ T5386] bridge_slave_1: entered promiscuous mode [ 248.786848][ T5386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.793260][ T5386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.855418][ T5386] team0: Port device team_slave_0 added [ 248.860537][ T5386] team0: Port device team_slave_1 added [ 248.901608][ T5386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.914010][ T5386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.934295][ T5386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.944777][ T5386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.948312][ T5386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.984265][ T5386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.049038][ T5386] hsr_slave_0: entered promiscuous mode [ 249.052320][ T5386] hsr_slave_1: entered promiscuous mode [ 249.339618][ T5386] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.358343][ T5386] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.376768][ T5386] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.395452][ T5386] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.503016][ T5386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.520367][ T5386] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.530354][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.533764][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.554144][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.556833][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.591546][ T5386] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.604976][ T5386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.869811][ T5386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.937235][ T5386] veth0_vlan: entered promiscuous mode [ 249.951990][ T5386] veth1_vlan: entered promiscuous mode [ 249.977834][ T5386] veth0_macvtap: entered promiscuous mode [ 249.982768][ T5386] veth1_macvtap: entered promiscuous mode [ 249.997057][ T5386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.008980][ T5386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.019593][ T5386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.023233][ T5386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.029857][ T5386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.034911][ T5386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.210032][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.257045][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.299846][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.345878][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.018212][ T5427] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.022535][ T5427] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.034855][ T5427] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.038524][ T5427] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.042005][ T5427] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.534983][ T43] bridge_slave_1: left allmulticast mode [ 252.537662][ T43] bridge_slave_1: left promiscuous mode [ 252.541379][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.570506][ T43] bridge_slave_0: left allmulticast mode [ 252.573055][ T43] bridge_slave_0: left promiscuous mode [ 252.576400][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.791160][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.796858][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.801513][ T43] bond0 (unregistering): Released all slaves [ 252.907490][ T43] hsr_slave_0: left promiscuous mode [ 252.915485][ T43] hsr_slave_1: left promiscuous mode [ 252.918546][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.921878][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.934875][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.938005][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.962942][ T43] veth1_macvtap: left promiscuous mode [ 252.973361][ T43] veth0_macvtap: left promiscuous mode [ 252.984748][ T43] veth1_vlan: left promiscuous mode [ 252.987266][ T43] veth0_vlan: left promiscuous mode [ 253.379866][ T43] team0 (unregistering): Port device team_slave_1 removed [ 253.399378][ T43] team0 (unregistering): Port device team_slave_0 removed 2025/06/05 14:21:50 executed programs: 0 [ 255.977022][ T4676] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.981018][ T4676] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.986588][ T4676] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.990250][ T4676] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.993968][ T4676] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.351314][ T5474] chnl_net:caif_netlink_parms(): no params data found [ 256.480319][ T5474] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.494876][ T5474] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.498709][ T5474] bridge_slave_0: entered allmulticast mode [ 256.517215][ T5474] bridge_slave_0: entered promiscuous mode [ 256.521719][ T5474] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.535261][ T5474] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.538412][ T5474] bridge_slave_1: entered allmulticast mode [ 256.542185][ T5474] bridge_slave_1: entered promiscuous mode [ 256.597665][ T5474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.605326][ T5474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.660621][ T5474] team0: Port device team_slave_0 added [ 256.668992][ T5474] team0: Port device team_slave_1 added [ 256.706596][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.709934][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.739181][ T5474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.756814][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.760026][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.788216][ T5474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.865353][ T5474] hsr_slave_0: entered promiscuous mode [ 256.868539][ T5474] hsr_slave_1: entered promiscuous mode [ 257.551146][ T5474] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 257.561368][ T5474] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 257.571576][ T5474] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 257.587688][ T5474] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 257.712759][ T5474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.743273][ T5474] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.760696][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.763979][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.780938][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.784154][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.015592][ T4676] Bluetooth: hci0: command tx timeout [ 258.110229][ T5474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.171787][ T5474] veth0_vlan: entered promiscuous mode [ 258.204130][ T5474] veth1_vlan: entered promiscuous mode [ 258.246779][ T5474] veth0_macvtap: entered promiscuous mode [ 258.264290][ T5474] veth1_macvtap: entered promiscuous mode [ 258.285792][ T5474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.311883][ T5474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.328535][ T5474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.332554][ T5474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.356484][ T5474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.361095][ T5474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.480611][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.486765][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.546308][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.550730][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.116157][ T4676] Bluetooth: hci0: command tx timeout [ 261.169934][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.210366][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 2025/06/05 14:21:56 executed programs: 3 [ 262.554722][ T4676] Bluetooth: hci0: command tx timeout [ 264.664502][ T4676] Bluetooth: hci0: command tx timeout [ 282.400620][ T5427] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.549796][ T5427] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.627254][ T5427] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.797169][ T5427] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.912410][ T5427] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.708792][ T5427] Bluetooth: hci0: command tx timeout [ 287.824074][ T5427] Bluetooth: hci0: command tx timeout [ 289.981224][ T5427] Bluetooth: hci0: command tx timeout [ 292.147647][ T5427] Bluetooth: hci0: command tx timeout [ 322.460758][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.478615][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.762628][ T4676] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.871257][ T4676] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.040779][ T4676] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.224880][ T4676] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.369523][ T4676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.932263][ T4676] Bluetooth: hci1: command tx timeout [ 348.107173][ T4676] Bluetooth: hci1: command tx timeout [ 350.224404][ T4676] Bluetooth: hci1: command tx timeout [ 352.353468][ T4676] Bluetooth: hci1: command tx timeout [ 383.922895][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.939815][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.252395][ T4676] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 404.331104][ T4676] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 404.394260][ T4676] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 404.525076][ T4676] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 404.657535][ T4676] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 407.245656][ T4676] Bluetooth: hci0: command tx timeout [ 409.370430][ T4676] Bluetooth: hci0: command tx timeout [ 411.532119][ T4676] Bluetooth: hci0: command tx timeout [ 413.693968][ T4676] Bluetooth: hci0: command tx timeout [ 445.365071][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.392232][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.561521][ T5427] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 465.741493][ T45] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 465.869985][ T5592] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 465.997547][ T5592] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 466.134409][ T5592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 467.820629][ T5592] Bluetooth: hci1: command 0x0406 tx timeout [ 468.661531][ T5427] Bluetooth: hci2: command tx timeout [ 470.810972][ T5427] Bluetooth: hci2: command tx timeout [ 472.990428][ T5427] Bluetooth: hci2: command tx timeout [ 475.093239][ T5427] Bluetooth: hci2: command tx timeout [ 506.528414][ T26] INFO: task syz-executor:5556 blocked for more than 143 seconds. [ 506.531657][ T26] Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 [ 506.880047][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.954587][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.040505][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 507.374657][ T26] task:syz-executor state:D stack:26600 pid:5556 tgid:5556 ppid:1 task_flags:0x400140 flags:0x00004006 [ 507.379808][ T26] Call Trace: [ 507.381329][ T26] [ 507.382669][ T26] __schedule+0x16f5/0x4d00 [ 507.842767][ T26] ? __lock_acquire+0xab9/0xd20 [ 508.008496][ T26] ? schedule+0x165/0x360 [ 508.090213][ T26] ? __pfx___schedule+0x10/0x10 [ 508.130826][ T26] ? schedule+0x91/0x360 [ 508.132830][ T26] schedule+0x165/0x360 [ 508.219899][ T26] schedule_preempt_disabled+0x13/0x30 [ 508.222217][ T26] __mutex_lock+0x724/0xe80 [ 508.318607][ T26] ? __mutex_lock+0x51b/0xe80 [ 508.320830][ T26] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 508.323116][ T26] ? __pfx___mutex_lock+0x10/0x10 [ 508.507869][ T26] ? __nla_parse+0x40/0x60 [ 508.509976][ T26] inet_rtm_newaddr+0x3b0/0x18b0 [ 508.511963][ T26] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 508.685295][ T26] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 508.687568][ T26] rtnetlink_rcv_msg+0x7cc/0xb70 [ 508.689399][ T26] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 508.691518][ T26] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 508.976614][ T26] netlink_rcv_skb+0x208/0x470 [ 509.054541][ T26] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 509.057044][ T26] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 509.195033][ T26] ? netlink_deliver_tap+0x2e/0x1b0 [ 509.398023][ T26] ? netlink_deliver_tap+0x2e/0x1b0 [ 509.400446][ T26] netlink_unicast+0x75b/0x8d0 [ 509.402578][ T26] netlink_sendmsg+0x805/0xb30 [ 509.606158][ T26] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.608605][ T26] ? aa_sock_msg_perm+0x94/0x160 [ 509.610906][ T26] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 509.613299][ T26] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.932143][ T26] __sock_sendmsg+0x21c/0x270 [ 510.117405][ T26] __sys_sendto+0x3bd/0x520 [ 510.119572][ T26] ? __pfx___sys_sendto+0x10/0x10 [ 510.121877][ T26] ? count_memcg_event_mm+0x21/0x260 [ 510.370382][ T26] ? exc_page_fault+0x76/0xf0 [ 510.372534][ T26] ? do_user_addr_fault+0xc8a/0x1390 [ 510.609985][ T26] __x64_sys_sendto+0xde/0x100 [ 510.612152][ T26] do_syscall_64+0xfa/0x3b0 [ 510.834164][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.836552][ T26] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.839169][ T26] ? clear_bhb_loop+0x60/0xb0 [ 510.841286][ T26] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.152215][ T26] RIP: 0033:0x7fbf92f907bc [ 511.243728][ T26] RSP: 002b:00007fffab4b1900 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 511.247624][ T26] RAX: ffffffffffffffda RBX: 00007fbf93ce4620 RCX: 00007fbf92f907bc [ 511.251337][ T26] RDX: 0000000000000028 RSI: 00007fbf93ce4670 RDI: 0000000000000003 [ 511.508224][ T26] RBP: 0000000000000000 R08: 00007fffab4b1954 R09: 000000000000000c [ 511.620504][ T26] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 511.687613][ T26] R13: 0000000000000000 R14: 00007fbf93ce4670 R15: 0000000000000000 [ 511.750948][ T26] [ 511.790408][ T26] [ 511.790408][ T26] Showing all locks held in the system: [ 511.827174][ T26] 3 locks held by kworker/0:1/10: [ 511.829442][ T26] 3 locks held by kworker/u4:0/12: [ 511.927604][ T26] 1 lock held by khungtaskd/26: [ 511.929777][ T26] #0: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 512.212739][ T26] 2 locks held by kworker/u4:3/43: [ 512.350815][ T26] 4 locks held by kworker/0:2/54: [ 512.352843][ T26] #0: ffff88801a475d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 512.504951][ T26] #1: ffffc9000100fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 512.659746][ T26] #2: ffffffff8f50f5c8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00 [ 512.860882][ T26] #3: ffff88804dd68768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x164/0xf00 [ 513.073737][ T26] 3 locks held by kworker/u4:7/1039: [ 513.076222][ T26] 4 locks held by kworker/u4:8/1043: [ 513.078838][ T26] #0: ffff88803042b948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 513.354117][ T26] #1: ffffc90002667bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 513.358976][ T26] #2: ffffffff8f5029d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 513.362928][ T26] #3: ffffffff8f50f5c8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 513.656116][ T26] 3 locks held by kworker/u4:9/3007: [ 513.658533][ T26] #0: ffff88803eade148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 513.925558][ T26] #1: ffffc9000d84fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 513.931299][ T26] #2: ffffffff8f50f5c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 514.216346][ T26] 1 lock held by dhcpcd/5022: [ 514.218837][ T26] #0: ffffffff8f50f5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 514.222389][ T26] 2 locks held by getty/5115: [ 514.525249][ T26] #0: ffff888000b290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 514.529568][ T26] #1: ffffc9000242e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 514.794419][ T26] 4 locks held by kworker/0:3/5395: [ 514.796679][ T26] 3 locks held by kworker/0:4/5400: [ 514.798844][ T26] 4 locks held by kworker/0:5/5526: [ 514.801296][ T26] 3 locks held by kworker/0:9/5532: [ 515.103068][ T26] 2 locks held by kworker/u4:11/5535: [ 515.270524][ T26] 1 lock held by syz-executor/5556: [ 515.272913][ T26] #0: ffffffff8f50f5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 515.491148][ T26] 1 lock held by syz-executor/5578: [ 515.610977][ T26] #0: ffffffff8f50f5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 515.818524][ T26] 3 locks held by kworker/u4:12/5588: [ 515.820910][ T26] 1 lock held by syz-executor/5590: [ 515.823188][ T26] #0: ffffffff8f50f5c8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 515.981665][ T26] [ 515.982784][ T26] ============================================= [ 515.982784][ T26] [ 516.182121][ T26] NMI backtrace for cpu 0 [ 516.182135][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 516.182145][ T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 516.182149][ T26] Call Trace: [ 516.182152][ T26] [ 516.182155][ T26] dump_stack_lvl+0x189/0x250 [ 516.182171][ T26] ? __wake_up_klogd+0xd9/0x110 [ 516.182184][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.182198][ T26] ? __pfx__printk+0x10/0x10 [ 516.182217][ T26] nmi_cpu_backtrace+0x39e/0x3d0 [ 516.182233][ T26] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 516.182242][ T26] ? _printk+0xcf/0x120 [ 516.182255][ T26] ? __pfx__printk+0x10/0x10 [ 516.182266][ T26] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 516.182282][ T26] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 516.182294][ T26] watchdog+0xfee/0x1030 [ 516.182309][ T26] ? watchdog+0x1de/0x1030 [ 516.182326][ T26] kthread+0x70e/0x8a0 [ 516.182339][ T26] ? __pfx_watchdog+0x10/0x10 [ 516.182351][ T26] ? __pfx_kthread+0x10/0x10 [ 516.182362][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.182376][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.182388][ T26] ? __pfx_kthread+0x10/0x10 [ 516.182398][ T26] ret_from_fork+0x3f9/0x770 [ 516.182414][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 516.182431][ T26] ? __pfx_kthread+0x10/0x10 [ 516.182443][ T26] ret_from_fork_asm+0x1a/0x30 [ 516.182461][ T26] [ 516.182467][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 516.249953][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 516.254996][ T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 516.259784][ T26] Call Trace: [ 516.261367][ T26] [ 516.262738][ T26] dump_stack_lvl+0x99/0x250 [ 516.264924][ T26] ? __asan_memcpy+0x40/0x70 [ 516.266899][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.269171][ T26] ? __pfx__printk+0x10/0x10 [ 516.271151][ T26] panic+0x2db/0x790 [ 516.272791][ T26] ? __pfx_panic+0x10/0x10 [ 516.274756][ T26] ? nmi_backtrace_stall_check+0x433/0x440 [ 516.277156][ T26] ? irq_work_queue+0xc3/0x140 [ 516.279204][ T26] watchdog+0x102d/0x1030 [ 516.281026][ T26] ? watchdog+0x1de/0x1030 [ 516.282953][ T26] kthread+0x70e/0x8a0 [ 516.284797][ T26] ? __pfx_watchdog+0x10/0x10 [ 516.286848][ T26] ? __pfx_kthread+0x10/0x10 [ 516.288857][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.291112][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.293317][ T26] ? __pfx_kthread+0x10/0x10 [ 516.295326][ T26] ret_from_fork+0x3f9/0x770 [ 516.297318][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 516.299420][ T26] ? __pfx_kthread+0x10/0x10 [ 516.301350][ T26] ret_from_fork_asm+0x1a/0x30 [ 516.303180][ T26] [ 516.304735][ T26] Kernel Offset: disabled [ 516.306274][ T26] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:26:01 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900004d76d0 R8 =ffff8880337a0237 R9 =1ffff110066f4046 R10=dffffc0000000000 R11=ffffffff85472470 R12=dffffc0000000000 R13=ffffffff99ac08f0 R14=ffffffff99dc5760 R15=0000000000000000 RIP=ffffffff854724ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808d255000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00343f530 CR3=0000000043dea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d945f66fce9bdb3c 04a3237b045fa5cd ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c2d6af365c45619 885c68398398a118 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e5de2f25f5ffec07 01a437f63b1fe4f8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 25d4d47458f4f8f7 e5a6ee8242c5c6c0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000040 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 66c51a08f39e07ba 819d5c972581e79e ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 32d58a4520c883c9 1c69bfcd3cc22309 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b7e89322659ce10e 666c9c2ddb431269 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9fae25d9573cf562 8e9f894b61b31122 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856b08e647 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 34ba35de34ba35de 34ba35de34ba35de ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 985ff53d985ff53d 985ff53d985ff53d ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000