no interfaces have a carrier [ 60.921815][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.948020][ T5242] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. syzkaller login: [ 91.730228][ T10] cfg80211: failed to load regulatory.db 2026/08/17 18:18:52 parsed 1 programs 2026/08/17 18:18:52 serving rpc on tcp://34541 [ 96.669074][ T5597] cgroup: Unknown subsys name 'net' [ 96.889243][ T5597] cgroup: Unknown subsys name 'cpuset' [ 96.933415][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 98.834920][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.304198][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.307527][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.308599][ T5615] bridge_slave_0: entered allmulticast mode [ 104.311889][ T5615] bridge_slave_0: entered promiscuous mode [ 104.363148][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.363232][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.363712][ T5615] bridge_slave_1: entered allmulticast mode [ 104.367471][ T5615] bridge_slave_1: entered promiscuous mode [ 104.781328][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.874685][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.026542][ T5615] team0: Port device team_slave_0 added [ 105.112533][ T5615] team0: Port device team_slave_1 added [ 105.229536][ T4896] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.257358][ T4896] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.262770][ T4896] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.284459][ T4896] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.285215][ T4896] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.527897][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.527914][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.527940][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.582007][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.582033][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.637930][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.637945][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.637968][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.054426][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.054446][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.127713][ T5615] hsr_slave_0: entered promiscuous mode [ 106.129719][ T5615] hsr_slave_1: entered promiscuous mode [ 108.166521][ T5615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.259444][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.267704][ T5615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.319849][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.322296][ T5615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.356300][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.357590][ T5615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.414045][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.705834][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.766015][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.782507][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.799473][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.842866][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.843115][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.329659][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.837921][ T5615] veth0_vlan: entered promiscuous mode [ 109.856738][ T5615] veth1_vlan: entered promiscuous mode [ 110.199488][ T5615] veth0_macvtap: entered promiscuous mode [ 110.212325][ T5615] veth1_macvtap: entered promiscuous mode [ 110.238900][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.259938][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.599538][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.888338][ T1170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.893595][ T109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.893730][ T109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 2026/08/17 18:19:10 executed programs: 0 [ 111.135971][ T4896] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.177347][ T4896] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.179638][ T4896] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.185668][ T4896] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.192194][ T4896] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.289279][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.322965][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.346076][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.363982][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.391191][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.694006][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.717204][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.718921][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.765391][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.772461][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.904537][ T5736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.931956][ T5736] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.968867][ T5736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.971238][ T5665] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.971731][ T5736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.987804][ T5665] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.989788][ T5665] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.996042][ T5665] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.038400][ T4896] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.076374][ T5665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.928272][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.234266][ T59] Bluetooth: hci0: command tx timeout [ 113.285939][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.474998][ T59] Bluetooth: hci1: command tx timeout [ 113.566721][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.865864][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.884815][ T59] Bluetooth: hci2: command tx timeout [ 114.122994][ T59] Bluetooth: hci4: command tx timeout [ 114.199577][ T59] Bluetooth: hci3: command tx timeout [ 115.043583][ T67] bridge_slave_1: left allmulticast mode [ 115.043695][ T67] bridge_slave_1: left promiscuous mode [ 115.047421][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.174148][ T67] bridge_slave_0: left allmulticast mode [ 115.174175][ T67] bridge_slave_0: left promiscuous mode [ 115.177915][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.312989][ T59] Bluetooth: hci0: command tx timeout [ 115.553054][ T59] Bluetooth: hci1: command tx timeout [ 115.943551][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.953925][ T59] Bluetooth: hci2: command tx timeout [ 116.023760][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.048824][ T67] bond0 (unregistering): Released all slaves [ 116.203029][ T59] Bluetooth: hci4: command tx timeout [ 116.253262][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.253378][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.253535][ T5741] bridge_slave_0: entered allmulticast mode [ 116.256330][ T5741] bridge_slave_0: entered promiscuous mode [ 116.296288][ T59] Bluetooth: hci3: command tx timeout [ 116.388510][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.388640][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.388805][ T5741] bridge_slave_1: entered allmulticast mode [ 116.392595][ T5741] bridge_slave_1: entered promiscuous mode [ 116.623528][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.624473][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.624569][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.624699][ T5735] bridge_slave_0: entered allmulticast mode [ 116.627006][ T5735] bridge_slave_0: entered promiscuous mode [ 116.688332][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.688460][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.688605][ T5744] bridge_slave_0: entered allmulticast mode [ 116.690432][ T5744] bridge_slave_0: entered promiscuous mode [ 116.724732][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.724985][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.725104][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.725209][ T5735] bridge_slave_1: entered allmulticast mode [ 116.726945][ T5735] bridge_slave_1: entered promiscuous mode [ 116.778301][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.778446][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.778612][ T5744] bridge_slave_1: entered allmulticast mode [ 116.780976][ T5744] bridge_slave_1: entered promiscuous mode [ 116.842712][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.843551][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.845642][ T5743] bridge_slave_0: entered allmulticast mode [ 116.852677][ T5743] bridge_slave_0: entered promiscuous mode [ 116.953906][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.954044][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.954190][ T5743] bridge_slave_1: entered allmulticast mode [ 116.956022][ T5743] bridge_slave_1: entered promiscuous mode [ 117.038038][ T5741] team0: Port device team_slave_0 added [ 117.042296][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.076364][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.079854][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.080016][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.080483][ T5730] bridge_slave_0: entered allmulticast mode [ 117.082754][ T5730] bridge_slave_0: entered promiscuous mode [ 117.130310][ T5741] team0: Port device team_slave_1 added [ 117.135355][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.162265][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.200463][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.200775][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.200946][ T5730] bridge_slave_1: entered allmulticast mode [ 117.206797][ T5730] bridge_slave_1: entered promiscuous mode [ 117.217311][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.339604][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.367501][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.367516][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.367559][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.372179][ T5735] team0: Port device team_slave_0 added [ 117.392906][ T59] Bluetooth: hci0: command tx timeout [ 117.633049][ T59] Bluetooth: hci1: command tx timeout [ 117.822053][ T5744] team0: Port device team_slave_0 added [ 117.822864][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.822877][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.826355][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.847643][ T5735] team0: Port device team_slave_1 added [ 117.881885][ T5242] 8021q: adding VLAN 0 to HW filter on device eth1 [ 117.897725][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.940183][ T5744] team0: Port device team_slave_1 added [ 117.950168][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.952170][ T5743] team0: Port device team_slave_0 added [ 118.021955][ T5743] team0: Port device team_slave_1 added [ 118.026890][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.026933][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.027007][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.033036][ T59] Bluetooth: hci2: command tx timeout [ 118.126951][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.126963][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.126982][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.128005][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.128015][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.128035][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.130878][ T5730] team0: Port device team_slave_0 added [ 118.245759][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.245771][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.245789][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.249689][ T5730] team0: Port device team_slave_1 added [ 118.250334][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.250343][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.250359][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.273021][ T59] Bluetooth: hci4: command tx timeout [ 118.278014][ T5741] hsr_slave_0: entered promiscuous mode [ 118.281322][ T5741] hsr_slave_1: entered promiscuous mode [ 118.289731][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 118.289958][ T5741] Cannot create hsr debugfs directory [ 118.352931][ T59] Bluetooth: hci3: command tx timeout [ 118.388952][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.388964][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.388984][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.590284][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.590296][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.590313][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.763573][ T67] hsr_slave_0: left promiscuous mode [ 118.782960][ T67] hsr_slave_1: left promiscuous mode [ 118.783723][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.783775][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.844315][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.844361][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.914221][ T67] veth1_macvtap: left promiscuous mode [ 118.917214][ T67] veth0_macvtap: left promiscuous mode [ 118.917424][ T67] veth1_vlan: left promiscuous mode [ 118.917666][ T67] veth0_vlan: left promiscuous mode [ 119.472944][ T59] Bluetooth: hci0: command tx timeout [ 119.643508][ T67] team0 (unregistering): Port device team_slave_1 removed [ 119.683513][ T67] team0 (unregistering): Port device team_slave_0 removed [ 119.713002][ T59] Bluetooth: hci1: command tx timeout [ 119.925170][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.925187][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.925211][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.019529][ T5735] hsr_slave_0: entered promiscuous mode [ 120.020314][ T5735] hsr_slave_1: entered promiscuous mode [ 120.082246][ T5744] hsr_slave_0: entered promiscuous mode [ 120.089369][ T5744] hsr_slave_1: entered promiscuous mode [ 120.089987][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 120.090003][ T5744] Cannot create hsr debugfs directory [ 120.123129][ T59] Bluetooth: hci2: command tx timeout [ 120.168080][ T5743] hsr_slave_0: entered promiscuous mode [ 120.169486][ T5743] hsr_slave_1: entered promiscuous mode [ 120.170418][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 120.170457][ T5743] Cannot create hsr debugfs directory [ 120.360490][ T5730] hsr_slave_0: entered promiscuous mode [ 120.361691][ T5730] hsr_slave_1: entered promiscuous mode [ 120.362457][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 120.362478][ T5730] Cannot create hsr debugfs directory [ 120.362938][ T59] Bluetooth: hci4: command tx timeout [ 120.432910][ T59] Bluetooth: hci3: command tx timeout [ 120.894658][ T5242] 8021q: adding VLAN 0 to HW filter on device eth2 [ 121.462216][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.521917][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.542710][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.592508][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.624458][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.668304][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.756269][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.797682][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.069045][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.327075][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.346934][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.347173][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.396867][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.396996][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.305647][ T5735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.353313][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.362449][ T5735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.427073][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.461773][ T5735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.501913][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.579941][ T5735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.617120][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.717103][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.882697][ T5744] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.937205][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.965457][ T5744] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.998790][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.015359][ T5744] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.058591][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.130298][ T5744] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 124.158484][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.441888][ T5743] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 124.488286][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.524920][ T5743] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 124.553535][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.586943][ T5741] veth0_vlan: entered promiscuous mode [ 124.588044][ T5743] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 124.635803][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.690691][ T5743] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 124.744987][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.830371][ T5741] veth1_vlan: entered promiscuous mode [ 124.952771][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.987293][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.991630][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.028810][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.049144][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.078193][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.092021][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.116384][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.134088][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.225448][ T5741] veth0_macvtap: entered promiscuous mode [ 125.236155][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.269913][ T5741] veth1_macvtap: entered promiscuous mode [ 125.296749][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.296892][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.361021][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.361119][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.388805][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.427585][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.468214][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.516736][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.555451][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.555641][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.586417][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.648676][ T109] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.648773][ T109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.953642][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.100415][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.100610][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.141352][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.203962][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.204131][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.230565][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.230598][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.328139][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.333296][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.333315][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.470907][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.471042][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.547569][ T109] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.547705][ T109] bridge0: port 2(bridge_slave_1) entered forwarding state 2026/08/17 18:19:26 executed programs: 10 [ 127.014854][ T1017] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.015406][ T1017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.015583][ T1017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.076677][ T1017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.290623][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.677989][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.712794][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 127.712892][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 127.722174][ T5735] veth0_vlan: entered promiscuous mode [ 132.879037][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.881242][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 179.063371][ T4896] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.221819][ T4896] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.893142][ T4896] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.345876][ T4896] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.661327][ T4896] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.557085][ T4896] Bluetooth: hci5: command tx timeout [ 185.638064][ T4896] Bluetooth: hci5: command tx timeout [ 187.730297][ T4896] Bluetooth: hci5: command tx timeout [ 189.802269][ T4896] Bluetooth: hci5: command tx timeout [ 194.366572][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.425640][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 214.759119][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.851282][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.009464][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.512116][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.765179][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 221.718712][ T4896] Bluetooth: hci6: command tx timeout [ 223.798261][ T4896] Bluetooth: hci6: command tx timeout [ 225.878230][ T4896] Bluetooth: hci6: command tx timeout [ 227.961939][ T4896] Bluetooth: hci6: command tx timeout [ 231.562387][ T4896] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 232.581836][ T6021] Bluetooth: hci7: Opcode 0x0c03 failed: -4 [ 237.649298][ T6029] Bluetooth: hci3: command 0x0406 tx timeout [ 237.649703][ T6029] Bluetooth: hci4: command 0x0406 tx timeout [ 238.356538][ T6028] Bluetooth: hci2: command 0x0406 tx timeout [ 238.357286][ T6028] Bluetooth: hci0: command 0x0406 tx timeout [ 238.357684][ T6028] Bluetooth: hci1: command 0x0406 tx timeout [ 244.220428][ T6028] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 244.341912][ T6028] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 244.550928][ T6028] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 244.946224][ T6028] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 245.528198][ T6028] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 255.834916][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.842497][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.429878][ T6036] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 257.691519][ T6036] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 257.917597][ T6036] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 258.670507][ T6036] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 259.110326][ T6036] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 277.121943][ T6045] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 277.363862][ T6045] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 277.587421][ T6045] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 278.085912][ T6045] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 278.332731][ T6045] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 280.533600][ T38] INFO: task kworker/u8:8:1017 blocked for more than 143 seconds. [ 280.533689][ T38] Not tainted syzkaller #0 [ 280.533751][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.533813][ T38] task:kworker/u8:8 state:D stack:23512 pid:1017 tgid:1017 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 280.534041][ T38] Workqueue: ipv6_addrconf addrconf_dad_work [ 280.534316][ T38] Call Trace: [ 280.534393][ T38] [ 280.535142][ T38] __schedule+0x16dc/0x5500 [ 280.621905][ T38] ? irqentry_exit+0x218/0x910 [ 280.622161][ T38] ? irqentry_exit+0x218/0x910 [ 280.622268][ T38] ? trace_irq_disable+0x3b/0x140 [ 280.701530][ T38] ? __pfx___schedule+0x10/0x10 [ 280.800336][ T38] rt_mutex_schedule+0x76/0xf0 [ 280.800643][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 280.801782][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 280.802182][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 280.802418][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 280.892647][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 280.972367][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 281.019464][ T38] ? addrconf_dad_work+0x123/0x16e0 [ 281.019613][ T38] mutex_lock_nested+0x168/0x1d0 [ 281.019700][ T38] ? addrconf_dad_work+0x123/0x16e0 [ 281.020390][ T38] addrconf_dad_work+0x123/0x16e0 [ 281.020707][ T38] ? __pfx_addrconf_dad_work+0x10/0x10 [ 281.021097][ T38] ? __pfx_trace_event_raw_event_workqueue_execute_start+0x10/0x10 [ 281.021589][ T38] ? __pfx_addrconf_dad_work+0x10/0x10 [ 281.021982][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 281.022445][ T38] ? rcu_is_watching+0x15/0xb0 [ 281.025984][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 281.062253][ T38] process_scheduled_works+0xa8e/0x14e0 [ 281.178603][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 281.308366][ T38] ? assign_work+0x3cf/0x5d0 [ 281.309358][ T38] worker_thread+0xa47/0xfb0 [ 281.422514][ T38] kthread+0x388/0x470 [ 281.428116][ T38] ? __pfx_worker_thread+0x10/0x10 [ 281.428407][ T38] ? __pfx_kthread+0x10/0x10 [ 281.429148][ T38] ret_from_fork+0x514/0xb70 [ 281.429897][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 281.430180][ T38] ? __switch_to+0xc89/0x1420 [ 281.430993][ T38] ? __pfx_kthread+0x10/0x10 [ 281.431579][ T38] ret_from_fork_asm+0x1a/0x30 [ 281.540095][ T38] [ 281.540273][ T38] INFO: task kworker/0:3:5313 blocked for more than 144 seconds. [ 281.540320][ T38] Not tainted syzkaller #0 [ 281.540361][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 281.540403][ T38] task:kworker/0:3 state:D stack:22152 pid:5313 tgid:5313 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 281.540559][ T38] Workqueue: events reg_todo [ 281.540730][ T38] Call Trace: [ 281.540785][ T38] [ 281.625132][ T38] __schedule+0x16dc/0x5500 [ 281.626274][ T38] ? trace_event_raw_event_lock+0x1c6/0x280 [ 281.697874][ T38] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 281.776228][ T38] ? __pfx___schedule+0x10/0x10 [ 281.776347][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 281.866150][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 281.867140][ T38] rt_mutex_schedule+0x76/0xf0 [ 281.867332][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 281.868373][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 281.869003][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 281.869625][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 281.869812][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 281.871025][ T38] ? reg_process_self_managed_hints+0x8d/0x160 [ 281.872123][ T38] ? reg_process_self_managed_hints+0x8d/0x160 [ 281.872245][ T38] mutex_lock_nested+0x168/0x1d0 [ 281.872639][ T38] reg_process_self_managed_hints+0x8d/0x160 [ 281.989842][ T38] reg_todo+0x90e/0xa70 [ 281.990044][ T38] ? rcu_is_watching+0x15/0xb0 [ 281.990146][ T38] ? reg_todo+0x477/0xa70 [ 281.990576][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 281.990892][ T38] process_scheduled_works+0xa8e/0x14e0 [ 282.064065][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 282.064618][ T38] ? assign_work+0x3cf/0x5d0 [ 282.065424][ T38] worker_thread+0xa47/0xfb0 [ 282.067719][ T38] kthread+0x388/0x470 [ 282.067941][ T38] ? __pfx_worker_thread+0x10/0x10 [ 282.068002][ T38] ? __pfx_kthread+0x10/0x10 [ 282.068281][ T38] ret_from_fork+0x514/0xb70 [ 282.068934][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 282.069342][ T38] ? __switch_to+0xc89/0x1420 [ 282.069648][ T38] ? __pfx_kthread+0x10/0x10 [ 282.070023][ T38] ret_from_fork_asm+0x1a/0x30 [ 282.071286][ T38] [ 282.071488][ T38] INFO: task syz-executor:5730 blocked for more than 144 seconds. [ 282.071567][ T38] Not tainted syzkaller #0 [ 282.071636][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.071706][ T38] task:syz-executor state:D stack:21232 pid:5730 tgid:5730 ppid:1 task_flags:0x400140 flags:0x00080002 [ 282.071894][ T38] Call Trace: [ 282.071909][ T38] [ 282.072081][ T38] __schedule+0x16dc/0x5500 [ 282.324736][ T38] ? trace_event_raw_event_lock+0x1c6/0x280 [ 282.325228][ T38] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 282.332580][ T38] ? __pfx___schedule+0x10/0x10 [ 282.336094][ T38] ? rt_mutex_slowlock_block+0x2c6/0x680 [ 282.386244][ T38] rt_mutex_schedule+0x76/0xf0 [ 282.386503][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 282.387664][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 282.417272][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 282.417469][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 282.418600][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 282.452615][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 282.480827][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 282.483775][ T38] mutex_lock_nested+0x168/0x1d0 [ 282.484446][ T38] inet_rtm_newaddr+0x464/0x19e0 [ 282.484978][ T38] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 282.485515][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 282.492450][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 282.492575][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 282.550754][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 282.551347][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.551480][ T38] ? trace_event_buffer_commit+0x258/0x7a0 [ 282.591533][ T38] netlink_rcv_skb+0x226/0x4a0 [ 282.592029][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.592219][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.623721][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 282.624063][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 282.624641][ T38] netlink_unicast+0x7f5/0x990 [ 282.625908][ T38] netlink_sendmsg+0x813/0xb40 [ 282.626207][ T38] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 282.627059][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.627389][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 282.628414][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.628520][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 282.628955][ T38] __sys_sendto+0x41e/0x5d0 [ 282.629845][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 282.629907][ T38] ? trace_event_buffer_reserve+0x249/0x2d0 [ 282.632104][ T38] ? rcu_is_watching+0x15/0xb0 [ 282.751304][ T38] __x64_sys_sendto+0xde/0x100 [ 282.751498][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.751726][ T38] do_syscall_64+0x174/0x580 [ 282.752057][ T38] ? clear_bhb_loop+0x70/0xc0 [ 282.752493][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.752596][ T38] RIP: 0033:0x7fa3c26ee90e [ 282.823052][ T38] RSP: 002b:00007ffff2807f58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 282.823147][ T38] RAX: ffffffffffffffda RBX: 000055555776a500 RCX: 00007fa3c26ee90e [ 282.823199][ T38] RDX: 0000000000000028 RSI: 00007fa3c34e4670 RDI: 0000000000000003 [ 282.823250][ T38] RBP: 0000000000000001 R08: 00007ffff2807fd4 R09: 000000000000000c [ 282.823303][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 282.823358][ T38] R13: 0000000000000000 R14: 00007fa3c34e4670 R15: 0000000000000000 [ 282.824922][ T38] [ 282.825148][ T38] INFO: task syz-executor:5735 blocked for more than 145 seconds. [ 282.825232][ T38] Not tainted syzkaller #0 [ 282.825313][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.825394][ T38] task:syz-executor state:D stack:22440 pid:5735 tgid:5735 ppid:1 task_flags:0x400140 flags:0x00080002 [ 282.825524][ T38] Call Trace: [ 282.825542][ T38] [ 282.825744][ T38] __schedule+0x16dc/0x5500 [ 282.827003][ T38] ? trace_event_raw_event_lock+0x1c6/0x280 [ 282.827393][ T38] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 282.828181][ T38] ? __pfx___schedule+0x10/0x10 [ 282.828450][ T38] ? rt_mutex_slowlock_block+0x2c6/0x680 [ 282.829618][ T38] rt_mutex_schedule+0x76/0xf0 [ 282.829775][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 282.830913][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 282.831313][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 282.831760][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 282.831936][ T38] ? rb_commit+0x784/0x7e0 [ 282.832644][ T38] ? inet6_rtm_newaddr+0x65e/0xdf0 [ 283.136733][ T38] ? inet6_rtm_newaddr+0x65e/0xdf0 [ 283.137590][ T38] ? inet6_rtm_newaddr+0x65e/0xdf0 [ 283.137673][ T38] mutex_lock_nested+0x168/0x1d0 [ 283.138686][ T38] inet6_rtm_newaddr+0x65e/0xdf0 [ 283.139438][ T38] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 283.140306][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 283.141691][ T38] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 283.141874][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 283.142665][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 283.227901][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 283.232351][ T38] netlink_rcv_skb+0x226/0x4a0 [ 283.285875][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 283.286351][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 283.391600][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 283.437782][ T38] netlink_unicast+0x7f5/0x990 [ 283.507737][ T38] netlink_sendmsg+0x813/0xb40 [ 283.507984][ T38] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 283.508822][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.509240][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 283.510132][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.510253][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 283.510828][ T38] __sys_sendto+0x41e/0x5d0 [ 283.511580][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 283.511672][ T38] ? trace_event_buffer_reserve+0x249/0x2d0 [ 283.671750][ T38] ? rcu_is_watching+0x15/0xb0 [ 283.717366][ T38] __x64_sys_sendto+0xde/0x100 [ 283.717699][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.718085][ T38] do_syscall_64+0x174/0x580 [ 283.718543][ T38] ? clear_bhb_loop+0x70/0xc0 [ 283.718791][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.718930][ T38] RIP: 0033:0x7fd81356e90e [ 283.818735][ T38] RSP: 002b:00007ffddb25d778 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 283.818826][ T38] RAX: ffffffffffffffda RBX: 000055558b5a1500 RCX: 00007fd81356e90e [ 283.818877][ T38] RDX: 0000000000000040 RSI: 00007fd814364670 RDI: 0000000000000003 [ 283.818926][ T38] RBP: 0000000000000001 R08: 00007ffddb25d7f4 R09: 000000000000000c [ 283.818977][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 283.819030][ T38] R13: 0000000000000000 R14: 00007fd814364670 R15: 0000000000000000 [ 283.820375][ T38] [ 283.820507][ T38] INFO: task syz-executor:5743 blocked for more than 146 seconds. [ 283.820560][ T38] Not tainted syzkaller #0 [ 283.820611][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 283.820663][ T38] task:syz-executor state:D stack:22400 pid:5743 tgid:5743 ppid:1 task_flags:0x400140 flags:0x00080002 [ 283.935300][ T38] Call Trace: [ 283.935370][ T38] [ 283.935923][ T38] __schedule+0x16dc/0x5500 [ 283.941254][ T38] ? trace_event_raw_event_lock+0x1c6/0x280 [ 283.941812][ T38] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 283.942404][ T38] ? __pfx___schedule+0x10/0x10 [ 284.017814][ T38] ? rt_mutex_slowlock_block+0x2c6/0x680 [ 284.018971][ T38] rt_mutex_schedule+0x76/0xf0 [ 284.019224][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 284.047599][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 284.047872][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 284.109951][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 284.110933][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 284.111598][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 284.185505][ T38] ? inet_rtm_newaddr+0x464/0x19e0 [ 284.185707][ T38] mutex_lock_nested+0x168/0x1d0 [ 284.186219][ T38] inet_rtm_newaddr+0x464/0x19e0 [ 284.279660][ T38] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 284.279991][ T38] ? ring_buffer_unlock_commit+0x514/0x6b0 [ 284.280288][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 284.346144][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 284.346352][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 284.346935][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 284.347043][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 284.348322][ T38] netlink_rcv_skb+0x226/0x4a0 [ 284.348706][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 284.349289][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.349500][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 284.351120][ T38] netlink_unicast+0x7f5/0x990 [ 284.352159][ T38] netlink_sendmsg+0x813/0xb40 [ 284.352363][ T38] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 284.446956][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.447404][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 284.448306][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.448451][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 284.449012][ T38] __sys_sendto+0x41e/0x5d0 [ 284.449735][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 284.449822][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 284.450996][ T38] ? fput_close_sync+0x11f/0x240 [ 284.451086][ T38] ? kmem_cache_free+0x526/0x6c0 [ 284.452052][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 284.456245][ T38] __x64_sys_sendto+0xde/0x100 [ 284.456625][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.457051][ T38] do_syscall_64+0x174/0x580 [ 284.457266][ T38] ? clear_bhb_loop+0x70/0xc0 [ 284.457559][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.457699][ T38] RIP: 0033:0x7f129d04e90e [ 284.662333][ T38] RSP: 002b:00007ffd279437c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 284.662490][ T38] RAX: ffffffffffffffda RBX: 0000555570ac5500 RCX: 00007f129d04e90e [ 284.662572][ T38] RDX: 0000000000000028 RSI: 00007f129de44670 RDI: 0000000000000003 [ 284.662653][ T38] RBP: 0000000000000001 R08: 00007ffd27943844 R09: 000000000000000c [ 284.730199][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 284.730229][ T38] R13: 0000000000000000 R14: 00007f129de44670 R15: 0000000000000000 [ 284.731381][ T38] [ 284.731488][ T38] [ 284.731488][ T38] Showing all locks held in the system: [ 284.731522][ T38] 3 locks held by kworker/u8:1/13: [ 284.731554][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 284.731830][ T38] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 284.732202][ T38] #2: ffff88805e0b08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 284.810490][ T38] 5 locks held by ksoftirqd/1/30: [ 284.810569][ T38] 4 locks held by kworker/1:1/36: [ 284.810645][ T38] #0: ffff88813ff1f138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 284.811251][ T38] #1: ffffc90000ab7c40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 284.874550][ T38] #2: ffffffff8e1c3040 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 284.874948][ T38] #3: ffff8880b87241a8 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600 [ 284.875479][ T38] 1 lock held by khungtaskd/38: [ 284.875564][ T38] #0: ffffffff8e1c3040 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 284.877510][ T38] 8 locks held by kworker/u8:2/41: [ 284.877589][ T38] 5 locks held by kworker/u8:3/56: [ 284.877666][ T38] 5 locks held by kworker/u9:0/59: [ 284.877745][ T38] #0: ffff88803f1d3938 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 284.878458][ T38] #1: ffffc9000125fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 284.879195][ T38] #2: ffff88803a2f4f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 284.879642][ T38] #3: ffff88803a2f40b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 284.880196][ T38] #4: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 284.880897][ T38] 2 locks held by kworker/u8:4/67: [ 284.881002][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 284.881851][ T38] #1: ffffc9000152fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 284.882014][ T38] 6 locks held by kworker/u8:5/68: [ 284.882051][ T38] 2 locks held by kworker/u8:6/71: [ 284.882102][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 284.882408][ T38] #1: ffffc9000156fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 285.148894][ T38] 2 locks held by kworker/u8:7/109: [ 285.148946][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 285.149845][ T38] #1: ffffc90002fe7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 285.150787][ T38] 2 locks held by kworker/0:2/199: [ 285.150869][ T38] 3 locks held by kworker/u8:8/1017: [ 285.267325][ T38] #0: ffff888031ce0138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 285.267604][ T38] #1: ffffc90005c57c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 285.267974][ T38] #2: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 285.268513][ T38] 5 locks held by kworker/u8:9/1170: [ 285.269024][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 285.357014][ T38] #1: ffffc900060a7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 285.357396][ T38] #2: ffffffff8e051bb0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 285.357864][ T38] #3: ffffffff8e298358 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 285.358492][ T38] #4: ffffffff8e068298 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_queue+0x5f/0x110 [ 285.556071][ T38] 6 locks held by kworker/u8:10/1180: [ 285.556097][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 285.556297][ T38] #1: ffffc900061c7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 285.556599][ T38] #2: ffff8880400c0310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 285.557081][ T38] #3: ffff888035f07920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 285.557612][ T38] #4: ffffffff8e1c3040 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 285.620739][ T38] #5: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xcc4/0x26a0 [ 285.621078][ T38] 5 locks held by kworker/u9:1/4896: [ 285.621131][ T38] #0: ffff88802b86a138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 285.728288][ T38] #1: ffffc9000fea7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 285.729054][ T38] #2: ffff88803f2e4f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 285.729683][ T38] #3: ffff88803f2e40b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 285.730405][ T38] #4: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 285.841989][ T38] 2 locks held by klogd/4936: [ 285.842033][ T38] 2 locks held by udevd/4947: [ 285.842071][ T38] 4 locks held by kworker/0:3/5313: [ 285.842109][ T38] #0: ffff88813ff1f938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 285.842435][ T38] #1: ffffc9000404fc40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 285.879298][ T38] #2: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0xa70 [ 285.880042][ T38] #3: ffff88803f5208d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x8d/0x160 [ 285.880620][ T38] 2 locks held by getty/5338: [ 285.880717][ T38] #0: ffff88803531b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.000118][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 286.000500][ T38] 6 locks held by kworker/u9:2/5665: [ 286.000561][ T38] #0: ffff88802b8e9138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 286.001040][ T38] #1: ffffc900045bfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 286.001593][ T38] #2: ffff888043d08f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 286.002254][ T38] #3: ffff888043d080b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 286.002400][ T38] #4: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 286.075458][ T38] #5: ffff88802b8eeb70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520 [ 286.075752][ T38] 3 locks held by kworker/0:4/5670: [ 286.075801][ T38] #0: ffff88813ff1e538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 286.076197][ T38] #1: ffffc900045dfc40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 286.076726][ T38] #2: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 286.215674][ T38] 1 lock held by syz-executor/5730: [ 286.215727][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 286.216134][ T38] 1 lock held by syz-executor/5735: [ 286.216200][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65e/0xdf0 [ 286.216727][ T38] 5 locks held by kworker/u9:3/5736: [ 286.216816][ T38] #0: ffff88802c213138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 286.243024][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 286.243074][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P30/3:b..l P36/1:b..l [ 286.243289][ C1] rcu: (detected by 1, t=10502 jiffies, g=16253, q=2340 ncpus=2) [ 286.243349][ C1] task:kworker/1:1 state:D stack:23536 pid:36 tgid:36 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 286.243431][ C1] Workqueue: events_long defense_work_handler [ 286.243476][ C1] Call Trace: [ 286.243487][ C1] [ 286.243619][ C1] __schedule+0x16dc/0x5500 [ 286.244825][ C1] ? __pfx___schedule+0x10/0x10 [ 286.245526][ C1] schedule_rtlock+0x30/0x70 [ 286.245611][ C1] rtlock_slowlock_locked+0x35c5/0x3c20 [ 286.246165][ C1] ? trace_event_raw_event_lock_acquire+0x1f6/0x2e0 [ 286.246335][ C1] ? rtlock_slowlock_locked+0x2ab/0x3c20 [ 286.246794][ C1] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 286.247395][ C1] ? rcu_is_watching+0x15/0xb0 [ 286.247766][ C1] rt_spin_lock+0x165/0x400 [ 286.248018][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 286.248055][ C1] ? trace_event_raw_event_softirq+0x105/0x1b0 [ 286.248128][ C1] ? __pfx_trace_event_raw_event_softirq+0x10/0x10 [ 286.248731][ C1] tasklet_action_common+0xc5/0x600 [ 286.248793][ C1] ? workqueue_softirq_action+0xd1/0x150 [ 286.249005][ C1] handle_softirqs+0x1d9/0x6c0 [ 286.249587][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 286.249793][ C1] update_defense_level+0x867/0xcb0 [ 286.249990][ C1] ? update_defense_level+0x10b/0xcb0 [ 286.250135][ C1] ? __pfx_update_defense_level+0x10/0x10 [ 286.250680][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 286.251058][ C1] defense_work_handler+0x2d/0xd0 [ 286.251197][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 286.251345][ C1] process_scheduled_works+0xa8e/0x14e0 [ 286.252497][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 286.253048][ C1] ? assign_work+0x3cf/0x5d0 [ 286.253337][ C1] worker_thread+0xa47/0xfb0 [ 286.254012][ C1] ? __kthread_parkme+0x71/0x1f0 [ 286.254571][ C1] kthread+0x388/0x470 [ 286.254716][ C1] ? __pfx_worker_thread+0x10/0x10 [ 286.254769][ C1] ? __pfx_kthread+0x10/0x10 [ 286.255022][ C1] ret_from_fork+0x514/0xb70 [ 286.255298][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 286.255388][ C1] ? __switch_to+0xc89/0x1420 [ 286.255636][ C1] ? __pfx_kthread+0x10/0x10 [ 286.255913][ C1] ret_from_fork_asm+0x1a/0x30 [ 286.256617][ C1] [ 286.256625][ C1] task:ksoftirqd/1 state:D stack:21784 pid:30 tgid:30 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 286.256675][ C1] Call Trace: [ 286.256682][ C1] [ 286.256792][ C1] __schedule+0x16dc/0x5500 [ 286.257969][ C1] ? __pfx___schedule+0x10/0x10 [ 286.258754][ C1] schedule_rtlock+0x30/0x70 [ 286.258853][ C1] rtlock_slowlock_locked+0x35c5/0x3c20 [ 286.259015][ C1] ? trace_event_buffer_commit+0x258/0x7a0 [ 286.259560][ C1] ? trace_event_raw_event_lock_acquire+0x1f6/0x2e0 [ 286.259739][ C1] ? rtlock_slowlock_locked+0x2ab/0x3c20 [ 286.259793][ C1] ? __pfx_trace_event_raw_event_lock_acquire+0x10/0x10 [ 286.259854][ C1] ? trace_event_buffer_reserve+0x249/0x2d0 [ 286.260273][ C1] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 286.260919][ C1] ? rcu_is_watching+0x15/0xb0 [ 286.261349][ C1] rt_spin_lock+0x165/0x400 [ 286.261616][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 286.261786][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 286.261899][ C1] ? cfg80211_put_bss+0x45/0x270 [ 286.262228][ C1] cfg80211_put_bss+0x5b/0x270 [ 286.262305][ C1] ? cfg80211_put_bss+0x45/0x270 [ 286.262428][ C1] ieee80211_rx_list+0x2d23/0x3b40 [ 286.262486][ C1] ? ring_buffer_event_data+0x94/0x100 [ 286.263367][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 286.263776][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 286.264008][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 286.264238][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 286.264373][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 286.264410][ C1] ? rt_spin_lock+0x1e0/0x400 [ 286.264510][ C1] ? rt_spin_unlock+0x157/0x200 [ 286.264802][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 286.264922][ C1] ieee80211_rx_napi+0x1ad/0x3d0 [ 286.265073][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 286.265387][ C1] ? skb_dequeue+0x11a/0x150 [ 286.265677][ C1] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 286.265912][ C1] tasklet_action_common+0x31c/0x600 [ 286.266397][ C1] handle_softirqs+0x1d9/0x6c0 [ 286.266837][ C1] run_ksoftirqd+0x52/0x180 [ 286.267058][ C1] smpboot_thread_fn+0x57c/0xa80 [ 286.267189][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 286.267618][ C1] kthread+0x388/0x470 [ 286.267769][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 286.267798][ C1] ? __pfx_kthread+0x10/0x10 [ 286.267920][ C1] ret_from_fork+0x514/0xb70 [ 286.268162][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 286.268380][ C1] ? __switch_to+0xc89/0x1420 [ 286.268570][ C1] ? __pfx_kthread+0x10/0x10 [ 286.268759][ C1] ret_from_fork_asm+0x1a/0x30 [ 286.269553][ C1] [ 286.411777][ T38] #1: ffffc9000456fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 286.412050][ T38] #2: ffff88803f2ecf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 286.412404][ T38] #3: ffff88803f2ec0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 286.460931][ T38] #4: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 286.461427][ T38] 1 lock held by syz-executor/5743: [ 286.461502][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 286.461984][ T38] 1 lock held by syz-executor/5744: [ 286.462062][ T38] #0: ffffffff8f5ac938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 286.462672][ T38] 5 locks held by kworker/u9:4/5750: [ 286.617440][ T38] #0: ffff88803f1d7938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 286.618200][ T38] #1: ffffc90002fd7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 286.730221][ T38] #2: ffff88803ad40f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 286.731237][ T38] #3: ffff88803ad400b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 286.920202][ T38] #4: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 287.150862][ T38] 6 locks held by syz.2.19/5979: [ 287.151023][ T38] 5 locks held by kworker/u8:15/6001: [ 287.151198][ T38] 1 lock held by dhcpcd/6008: [ 287.151339][ T38] #0: ffff88803b4b0358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 287.151950][ T38] 1 lock held by dhcpcd/6011: [ 287.152025][ T38] #0: ffff888033d10358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 287.299957][ T38] 1 lock held by dhcpcd/6014: [ 287.299998][ T38] #0: ffff888034082358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 287.300362][ T38] 1 lock held by dhcpcd/6017: [ 287.300561][ T38] #0: ffff888034098358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 287.301740][ T38] 1 lock held by dhcpcd/6020: [ 287.302002][ T38] #0: ffff888032478358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 287.379549][ T38] 1 lock held by dhcpcd/6024: [ 287.379602][ T38] #0: ffff88804e6e2358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 287.380023][ T38] 4 locks held by kworker/u9:6/6028: [ 287.380092][ T38] #0: ffff88804cc4b138 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 287.380717][ T38] #1: ffffc900042bfc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 287.381415][ T38] #2: ffff8880353240b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 287.538129][ T38] #3: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 287.538883][ T38] 4 locks held by kworker/u9:7/6029: [ 287.538979][ T38] #0: ffff8880446c2938 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 287.540669][ T38] #1: ffffc900042cfc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 287.709999][ T38] #2: ffff888041fc40b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 287.710499][ T38] #3: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 287.711110][ T38] 2 locks held by syz-executor/6030: [ 287.711207][ T38] 4 locks held by kworker/u9:8/6036: [ 287.711304][ T38] #0: ffff88803f156938 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 287.838041][ T38] #1: ffffc9000430fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 287.838455][ T38] #2: ffff88805ec8c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 287.838991][ T38] #3: ffffffff8f7350d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 287.839661][ T38] 5 locks held by kworker/u8:16/6038: [ 287.940419][ T38] 1 lock held by modprobe/6039: [ 287.940459][ T38] 2 locks held by syz-executor/6042: [ 287.940490][ T38] 4 locks held by modprobe/6044: [ 287.940522][ T38] 4 locks held by kworker/u9:9/6045: [ 287.940555][ T38] #0: ffff8880394ba938 ((wq_completion)hci10){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 287.940845][ T38] #1: ffffc900041ffc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 287.941237][ T38] #2: ffff88805ec8cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 287.941781][ T38] #3: ffff88805ec8c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_update_scan_sync+0x211/0x4f0 [ 287.942391][ T38] 2 locks held by modprobe/6047: [ 287.942489][ T38] 2 locks held by udevd/6049: [ 288.037240][ T38] 2 locks held by syz-executor/6048: [ 288.037682][ T38] [ 288.037854][ T38] ============================================= [ 288.037854][ T38] [ 288.038095][ T38] NMI backtrace for cpu 0 [ 288.038208][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 288.038364][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.038468][ T38] Call Trace: [ 288.038840][ T38] [ 288.039227][ T38] dump_stack_lvl+0xe8/0x150 [ 288.040220][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 288.040514][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 288.040897][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 288.041488][ T38] sys_info+0x135/0x170 [ 288.042151][ T38] watchdog+0xfd7/0x1030 [ 288.042977][ T38] ? watchdog+0x1c7/0x1030 [ 288.043776][ T38] kthread+0x388/0x470 [ 288.043945][ T38] ? __pfx_watchdog+0x10/0x10 [ 288.044188][ T38] ? __pfx_kthread+0x10/0x10 [ 288.045046][ T38] ret_from_fork+0x514/0xb70 [ 288.046291][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 288.046597][ T38] ? __switch_to+0xc89/0x1420 [ 288.047555][ T38] ? __pfx_kthread+0x10/0x10 [ 288.048046][ T38] ret_from_fork_asm+0x1a/0x30 [ 288.049997][ T38] [ 288.051985][ T38] Sending NMI from CPU 0 to CPUs 1: [ 288.052085][ C1] NMI backtrace for cpu 1 [ 288.052109][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 288.052132][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.052144][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x82/0x110 [ 288.052184][ C1] Code: 10 45 31 c9 41 ba 00 01 00 00 eb 0c 49 ff c1 4c 39 c8 0f 84 86 00 00 00 4e 8b 5c ce 10 65 8b 2d f4 90 d8 10 81 e5 00 00 ff 00 <41> 8b 98 f4 0b 00 00 44 21 d3 41 89 de 41 09 ee 74 12 85 ed 75 cc [ 288.052201][ C1] RSP: 0000:ffffc900001671f8 EFLAGS: 00000046 [ 288.052220][ C1] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000000000000005 [ 288.052233][ C1] RDX: ffffffff81c7b935 RSI: ffffffff8e225e00 RDI: 0000000000000004 [ 288.052247][ C1] RBP: 0000000000000000 R08: ffff88801cea5d00 R09: 000000000000001f [ 288.052261][ C1] R10: 0000000000000100 R11: 000000000000001f R12: dffffc0000000000 [ 288.052274][ C1] R13: 00000000000004bc R14: 0000000000000000 R15: 000000000325ee84 [ 288.052287][ C1] FS: 0000000000000000(0000) GS:ffff888125d3a000(0000) knlGS:0000000000000000 [ 288.052303][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.052317][ C1] CR2: 000055b2f6bbd520 CR3: 00000000401da000 CR4: 00000000003526f0 [ 288.052335][ C1] Call Trace: [ 288.052347][ C1] [ 288.052395][ C1] rb_event_length+0x45/0x400 [ 288.052461][ C1] rb_read_data_buffer+0xe2/0x5b0 [ 288.052583][ C1] check_buffer+0x288/0x7f0 [ 288.052638][ C1] ? __pfx_trace_clock_local+0x10/0x10 [ 288.052797][ C1] __rb_reserve_next+0x537/0xdc0 [ 288.053036][ C1] ring_buffer_lock_reserve+0xbd5/0x1040 [ 288.053138][ C1] ? ring_buffer_unlock_commit+0x514/0x6b0 [ 288.053249][ C1] ? trace_buffer_unlock_commit_regs+0x155/0x520 [ 288.053389][ C1] trace_event_buffer_lock_reserve+0x1d2/0x700 [ 288.053499][ C1] trace_event_buffer_reserve+0x1ef/0x2d0 [ 288.053564][ C1] ? __schedule+0x1c85/0x5500 [ 288.053604][ C1] trace_event_raw_event_preemptirq_template+0xe6/0x210 [ 288.053693][ C1] ? __pfx_trace_event_raw_event_preemptirq_template+0x10/0x10 [ 288.053806][ C1] ? __schedule+0x1c80/0x5500 [ 288.053886][ C1] ? __schedule+0x1c85/0x55[ 288.053886][ C1] ? __schedule+0x1c85/0x5500 [ 288.053947][ C1] trace_irq_enable+0x110/0x140 [ 288.054012][ C1] trace_hardirqs_on+0x18/0x40 [ 288.054050][ C1] __schedule+0x1c85/0x5500 [ 288.054093][ C1] ? trace_buffer_unlock_commit_regs+0x155/0x520 [ 288.054243][ C1] ? trace_event_buffer_reserve+0x249/0x2d0 [ 288.054364][ C1] ? __pfx_trace_event_raw_event_preemptirq_template+0x10/0x10 [ 288.054401][ C1] ? trace_event_raw_event_preemptirq_template+0x143/0x210 [ 288.054450][ C1] ? __pfx___schedule+0x10/0x10 [ 288.054501][ C1] ? trace_event_buffer_reserve+0x249/0x2d0 [ 288.054661][ C1] preempt_schedule_irq+0x4d/0xa0 [ 288.054709][ C1] irqentry_exit+0x14f/0x910 [ 288.054741][ C1] ? trace_irq_disable+0x3b/0x140 [ 288.054853][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 288.054885][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 288.054920][ C1] Code: e8 7e 10 70 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7f 94 d9 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 288.054936][ C1] RSP: 0000:ffffc90000167a28 EFLAGS: 00000202 [ 288.054955][ C1] RAX: 1ffffffff33ca400 RBX: 00000000000003fd RCX: 0000000000000000 [ 288.054969][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 288.054982][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 288.054995][ C1] R10: dffffc0000000000 R11: ffffffff8555b7e0 R12: dffffc0000000000 [ 288.055010][ C1] R13: 0000000000000000 R14: ffffffff99e52340 R15: 0000000000000000 [ 288.055064][ C1] ? __pfx_io_serial_in+0x10/0x10 [ 288.055189][ C1] ? io_serial_in+0x52/0xc0 [ 288.055257][ C1] wait_for_lsr+0x190/0x300 [ 288.055348][ C1] serial8250_console_write+0x113a/0x1b40 [ 288.055500][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 288.055550][ C1] ? console_flush_one_record+0xfa/0xb50 [ 288.055651][ C1] ? console_flush_one_record+0x472/0xb50 [ 288.055750][ C1] console_flush_one_record+0x642/0xb50 [ 288.055840][ C1] ? console_flush_one_record+0xfa/0xb50 [ 288.055931][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 288.056019][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 288.056100][ C1] legacy_kthread_func+0x1b6/0x250 [ 288.056171][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 288.056222][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 288.056277][ C1] ? __kthread_parkme+0x71/0x1f0 [ 288.056335][ C1] ? __kthread_parkme+0x196/0x1f0 [ 288.056422][ C1] kthread+0x388/0x470 [ 288.056473][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 288.056505][ C1] ? __pfx_kthread+0x10/0x10 [ 288.056565][ C1] ret_from_fork+0x514/0xb70 [ 288.056635][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 288.056689][ C1] ? __switch_to+0xc89/0x1420 [ 288.056757][ C1] ? __pfx_kthread+0x10/0x10 [ 288.056816][ C1] ret_from_fork_asm+0x1a/0x30 [ 288.056990][ C1] [ 288.608706][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 288.608737][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 288.608770][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.608792][ T38] Call Trace: [ 288.608853][ T38] [ 288.608917][ T38] vpanic+0x56c/0xa60 [ 288.609163][ T38] ? __pfx___schedule+0x10/0x10 [ 288.609480][ T38] ? __pfx_vpanic+0x10/0x10 [ 288.610396][ T38] panic+0xc5/0xd0 [ 288.610670][ T38] ? __pfx_panic+0x10/0x10 [ 288.610799][ T38] ? preempt_schedule_common+0x82/0xd0 [ 288.611158][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 288.611447][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 288.611665][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 288.612218][ T38] watchdog+0x1030/0x1030 [ 288.612974][ T38] ? watchdog+0x1c7/0x1030 [ 288.613921][ T38] kthread+0x388/0x470 [ 288.614149][ T38] ? __pfx_watchdog+0x10/0x10 [ 288.614206][ T38] ? __pfx_kthread+0x10/0x10 [ 288.614469][ T38] ret_from_fork+0x514/0xb70 [ 288.615032][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 288.615434][ T38] ? __switch_to+0xc89/0x1420 [ 288.615679][ T38] ? __pfx_kthread+0x10/0x10 [ 288.616023][ T38] ret_from_fork_asm+0x1a/0x30 [ 288.617425][ T38] [ 288.618127][ T38] Kernel Offset: disabled