Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. 2025/11/12 01:43:06 parsed 1 programs [ 125.019226][ T5813] cgroup: Unknown subsys name 'net' [ 125.153565][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 126.563398][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 128.152970][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.162080][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.191985][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.200150][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.669557][ T5835] syz-executor (5835) used greatest stack depth: 20072 bytes left [ 129.337167][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.347068][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.355202][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.368789][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.377229][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 129.384699][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.113835][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 131.228363][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.235635][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.243264][ T5884] bridge_slave_0: entered allmulticast mode [ 131.251030][ T5884] bridge_slave_0: entered promiscuous mode [ 131.260072][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.267447][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.274635][ T5884] bridge_slave_1: entered allmulticast mode [ 131.281567][ T5884] bridge_slave_1: entered promiscuous mode [ 131.305782][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.318696][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.344086][ T5884] team0: Port device team_slave_0 added [ 131.351828][ T5884] team0: Port device team_slave_1 added [ 131.373579][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.381843][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.407867][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.434314][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.441346][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.469427][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.517960][ T5884] hsr_slave_0: entered promiscuous mode [ 131.524412][ T5884] hsr_slave_1: entered promiscuous mode [ 131.664475][ T5884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.675560][ T5884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.685180][ T5884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.708917][ T5884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.738061][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.745244][ T5884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.753197][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.760353][ T5884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.823780][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.851939][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.860661][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.878309][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.906249][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.913374][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.926662][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.933788][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.128329][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.176196][ T5884] veth0_vlan: entered promiscuous mode [ 132.192115][ T5884] veth1_vlan: entered promiscuous mode [ 132.232704][ T5884] veth0_macvtap: entered promiscuous mode [ 132.244239][ T5884] veth1_macvtap: entered promiscuous mode [ 132.260560][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.274456][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.286370][ T5884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.296019][ T5884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.307803][ T5884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.316689][ T5884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.453896][ T2893] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/11/12 01:43:16 executed programs: 0 [ 132.881102][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.889712][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.898085][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.907032][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.914791][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 132.922350][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.021194][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.028899][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.061804][ T5915] chnl_net:caif_netlink_parms(): no params data found [ 133.122500][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.130019][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.137467][ T5915] bridge_slave_0: entered allmulticast mode [ 133.144823][ T5915] bridge_slave_0: entered promiscuous mode [ 133.153328][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.160816][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.168396][ T5915] bridge_slave_1: entered allmulticast mode [ 133.175514][ T5915] bridge_slave_1: entered promiscuous mode [ 133.201514][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.214241][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.242942][ T5915] team0: Port device team_slave_0 added [ 133.250376][ T5915] team0: Port device team_slave_1 added [ 133.290030][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.297607][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.323546][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.336025][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.343026][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.369265][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.414138][ T5915] hsr_slave_0: entered promiscuous mode [ 133.421270][ T5915] hsr_slave_1: entered promiscuous mode [ 133.427782][ T5915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.435558][ T5915] Cannot create hsr debugfs directory [ 135.017797][ T5105] Bluetooth: hci0: command tx timeout [ 135.178600][ T2893] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.097164][ T5105] Bluetooth: hci0: command tx timeout [ 137.366539][ T2893] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.433069][ T2893] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.339574][ T2893] hsr_slave_0: left promiscuous mode [ 138.355677][ T2893] hsr_slave_1: left promiscuous mode [ 138.364717][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.372724][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.384840][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.393156][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.403905][ T2893] bridge_slave_1: left allmulticast mode [ 138.410010][ T2893] bridge_slave_1: left promiscuous mode [ 138.416732][ T2893] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.436274][ T2893] bridge_slave_0: left allmulticast mode [ 138.448972][ T2893] bridge_slave_0: left promiscuous mode [ 138.454763][ T2893] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.499138][ T2893] veth1_macvtap: left promiscuous mode [ 138.505003][ T2893] veth0_macvtap: left promiscuous mode [ 138.513357][ T2893] veth1_vlan: left promiscuous mode [ 138.519039][ T2893] veth0_vlan: left promiscuous mode [ 138.909436][ T2893] team0 (unregistering): Port device team_slave_1 removed [ 138.943548][ T2893] team0 (unregistering): Port device team_slave_0 removed [ 138.971474][ T2893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.004335][ T2893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.178617][ T5105] Bluetooth: hci0: command tx timeout [ 139.266238][ T2893] bond0 (unregistering): Released all slaves [ 139.383587][ T5915] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.397408][ T5915] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.413545][ T5915] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.431484][ T5915] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.531932][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.550823][ T5915] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.564063][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.571401][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.591683][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.598886][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.644043][ T5915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.792333][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.838191][ T5915] veth0_vlan: entered promiscuous mode [ 139.855967][ T5915] veth1_vlan: entered promiscuous mode [ 139.891154][ T5915] veth0_macvtap: entered promiscuous mode [ 139.911533][ T5915] veth1_macvtap: entered promiscuous mode [ 139.926979][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.941773][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.952573][ T5915] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.962064][ T5915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.972459][ T5915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.981702][ T5915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.050609][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.061907][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.085268][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/11/12 01:43:23 executed programs: 2 [ 140.095300][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.163579][ T5964] input: syz0 as /devices/virtual/input/input5 [ 194.459274][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.465633][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.901503][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.907903][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 288.536635][ T28] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 288.544307][ T28] Not tainted syzkaller #0 [ 288.549340][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.558133][ T28] task:kworker/0:0 state:D stack:25688 pid:8 ppid:2 flags:0x00004000 [ 288.567467][ T28] Workqueue: events rfkill_global_led_trigger_worker [ 288.574178][ T28] Call Trace: [ 288.577510][ T28] [ 288.580451][ T28] __schedule+0x14d2/0x44d0 [ 288.584953][ T28] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 288.590926][ T28] ? mark_lock+0x94/0x320 [ 288.595264][ T28] ? asan.module_dtor+0x20/0x20 [ 288.600186][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 288.605389][ T28] schedule+0xbd/0x170 [ 288.609607][ T28] schedule_preempt_disabled+0x13/0x20 [ 288.615079][ T28] __mutex_lock+0x6b7/0xcc0 [ 288.619727][ T28] ? __mutex_lock+0x4e8/0xcc0 [ 288.624436][ T28] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 288.630747][ T28] ? mutex_lock_nested+0x20/0x20 [ 288.635694][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 288.641720][ T28] ? read_lock_is_recursive+0x20/0x20 [ 288.647156][ T28] ? process_scheduled_works+0x957/0x15b0 [ 288.652868][ T28] rfkill_global_led_trigger_worker+0x27/0xd0 [ 288.658982][ T28] ? process_scheduled_works+0x957/0x15b0 [ 288.664725][ T28] process_scheduled_works+0xa45/0x15b0 [ 288.670357][ T28] ? assign_work+0x400/0x400 [ 288.674958][ T28] ? assign_work+0x39e/0x400 [ 288.679689][ T28] worker_thread+0xa55/0xfc0 [ 288.684322][ T28] kthread+0x2fa/0x390 [ 288.688463][ T28] ? pr_cont_work+0x560/0x560 [ 288.693145][ T28] ? kthread_blkcg+0xd0/0xd0 [ 288.697779][ T28] ret_from_fork+0x48/0x80 [ 288.702200][ T28] ? kthread_blkcg+0xd0/0xd0 [ 288.706944][ T28] ret_from_fork_asm+0x11/0x20 [ 288.711726][ T28] [ 288.714734][ T28] INFO: task kworker/0:1:9 blocked for more than 143 seconds. [ 288.722250][ T28] Not tainted syzkaller #0 [ 288.727440][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.736186][ T28] task:kworker/0:1 state:D stack:25072 pid:9 ppid:2 flags:0x00004000 [ 288.745433][ T28] Workqueue: events rfkill_op_handler [ 288.750860][ T28] Call Trace: [ 288.754131][ T28] [ 288.757108][ T28] __schedule+0x14d2/0x44d0 [ 288.761626][ T28] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 288.767585][ T28] ? mark_lock+0x94/0x320 [ 288.771918][ T28] ? asan.module_dtor+0x20/0x20 [ 288.777008][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 288.782223][ T28] schedule+0xbd/0x170 [ 288.786282][ T28] schedule_preempt_disabled+0x13/0x20 [ 288.791829][ T28] __mutex_lock+0x6b7/0xcc0 [ 288.796338][ T28] ? __mutex_lock+0x4e8/0xcc0 [ 288.801091][ T28] ? nfc_rfkill_set_block+0x50/0x2e0 [ 288.806391][ T28] ? mutex_lock_nested+0x20/0x20 [ 288.811417][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 288.816663][ T28] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 288.822566][ T28] ? _raw_spin_unlock+0x40/0x40 [ 288.827461][ T28] ? kobject_uevent_env+0x363/0x8c0 [ 288.832665][ T28] ? nfc_unregister_device+0x2a0/0x2a0 [ 288.838162][ T28] nfc_rfkill_set_block+0x50/0x2e0 [ 288.843379][ T28] ? nfc_unregister_device+0x2a0/0x2a0 [ 288.848888][ T28] rfkill_set_block+0x1c6/0x420 [ 288.853795][ T28] rfkill_epo+0x79/0x180 [ 288.858145][ T28] ? process_scheduled_works+0x957/0x15b0 [ 288.863981][ T28] rfkill_op_handler+0x84/0x240 [ 288.868952][ T28] process_scheduled_works+0xa45/0x15b0 [ 288.874565][ T28] ? assign_work+0x400/0x400 [ 288.879228][ T28] ? assign_work+0x39e/0x400 [ 288.883840][ T28] worker_thread+0xa55/0xfc0 [ 288.888485][ T28] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 288.894422][ T28] ? _raw_spin_unlock+0x40/0x40 [ 288.899344][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 288.905263][ T28] kthread+0x2fa/0x390 [ 288.909407][ T28] ? pr_cont_work+0x560/0x560 [ 288.914095][ T28] ? kthread_blkcg+0xd0/0xd0 [ 288.918735][ T28] ret_from_fork+0x48/0x80 [ 288.923165][ T28] ? kthread_blkcg+0xd0/0xd0 [ 288.927813][ T28] ret_from_fork_asm+0x11/0x20 [ 288.932668][ T28] [ 288.935757][ T28] INFO: task syz.0.17:5964 blocked for more than 143 seconds. [ 288.943389][ T28] Not tainted syzkaller #0 [ 288.948374][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.957108][ T28] task:syz.0.17 state:D stack:25128 pid:5964 ppid:5915 flags:0x00004004 [ 288.966399][ T28] Call Trace: [ 288.969713][ T28] [ 288.972659][ T28] __schedule+0x14d2/0x44d0 [ 288.977233][ T28] ? __kernfs_remove+0x720/0x840 [ 288.982185][ T28] ? asan.module_dtor+0x20/0x20 [ 288.987097][ T28] ? __mutex_lock+0x6b2/0xcc0 [ 288.991792][ T28] ? __mutex_trylock_common+0x84/0x250 [ 288.997296][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 289.003463][ T28] schedule+0xbd/0x170 [ 289.007596][ T28] schedule_preempt_disabled+0x13/0x20 [ 289.013071][ T28] __mutex_lock+0x6b7/0xcc0 [ 289.017949][ T28] ? __mutex_lock+0x4e8/0xcc0 [ 289.022747][ T28] ? rfkill_unregister+0xc8/0x220 [ 289.027841][ T28] ? mutex_lock_nested+0x20/0x20 [ 289.032826][ T28] ? kill_device+0x160/0x160 [ 289.037493][ T28] ? nfc_genl_device_removed+0x22e/0x320 [ 289.043139][ T28] ? destroy_workqueue+0x898/0xf20 [ 289.048377][ T28] ? nfc_genl_setup_device_added+0x320/0x320 [ 289.054366][ T28] ? destroy_workqueue+0xd80/0xf20 [ 289.059516][ T28] ? destroy_workqueue+0x898/0xf20 [ 289.064636][ T28] rfkill_unregister+0xc8/0x220 [ 289.069529][ T28] nfc_unregister_device+0x96/0x2a0 [ 289.074742][ T28] ? virtual_ncidev_open+0x1a0/0x1a0 [ 289.080104][ T28] virtual_ncidev_close+0x59/0x90 [ 289.085148][ T28] __fput+0x234/0x970 [ 289.089219][ T28] task_work_run+0x1ce/0x250 [ 289.093825][ T28] ? task_work_cancel+0x240/0x240 [ 289.099056][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 289.104546][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 289.109896][ T28] exit_to_user_mode_prepare+0xf6/0x180 [ 289.115450][ T28] syscall_exit_to_user_mode+0x1a/0x50 [ 289.120959][ T28] do_syscall_64+0x61/0xb0 [ 289.125383][ T28] ? clear_bhb_loop+0x40/0x90 [ 289.130102][ T28] ? clear_bhb_loop+0x40/0x90 [ 289.134787][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.140732][ T28] RIP: 0033:0x7f9696d8f6c9 [ 289.145167][ T28] RSP: 002b:00007fff1e0c5998 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 289.153721][ T28] RAX: 0000000000000000 RBX: 0000000000022354 RCX: 00007f9696d8f6c9 [ 289.161754][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 289.169780][ T28] RBP: 0000000000000000 R08: 0000000000000001 R09: 000000061e0c5c8f [ 289.177883][ T28] R10: 0000001b2da20000 R11: 0000000000000246 R12: 00007f9696fe5fac [ 289.185958][ T28] R13: 00007f9696fe5fa0 R14: ffffffffffffffff R15: 0000000000000002 [ 289.194025][ T28] [ 289.197101][ T28] [ 289.197101][ T28] Showing all locks held in the system: [ 289.204806][ T28] 3 locks held by kworker/0:0/8: [ 289.209801][ T28] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 289.220969][ T28] #1: ffffc900000d7d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 289.234568][ T28] #2: ffffffff8e297928 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 289.246036][ T28] 4 locks held by kworker/0:1/9: [ 289.251062][ T28] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 289.262148][ T28] #1: ffffc900000e7d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 289.273189][ T28] #2: ffffffff8e297928 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x47/0x180 [ 289.282725][ T28] #3: ffff88802ba14100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 289.292522][ T28] 1 lock held by khungtaskd/28: [ 289.297403][ T28] #0: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 289.307329][ T28] 2 locks held by getty/5548: [ 289.312025][ T28] #0: ffff8880313e00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 289.321807][ T28] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 289.331957][ T28] 2 locks held by syz.0.17/5964: [ 289.336943][ T28] #0: ffff88802ba14100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 289.346791][ T28] #1: ffffffff8e297928 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xc8/0x220 [ 289.357053][ T28] 2 locks held by syz-executor/6049: [ 289.362358][ T28] #0: ffff88802c5b7118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x650 [ 289.372492][ T28] #1: ffffffff8e297928 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x37/0x8e0 [ 289.382571][ T28] 2 locks held by syz-executor/6056: [ 289.387892][ T28] #0: ffff88806d154918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x650 [ 289.397983][ T28] #1: ffffffff8e297928 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x37/0x8e0 [ 289.407957][ T28] 2 locks held by syz-executor/6063: [ 289.413241][ T28] #0: ffff888078b65118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x650 [ 289.423335][ T28] #1: ffffffff8e297928 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x37/0x8e0 [ 289.433331][ T28] [ 289.435642][ T28] ============================================= [ 289.435642][ T28] [ 289.444124][ T28] NMI backtrace for cpu 0 [ 289.448477][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 289.455661][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.465809][ T28] Call Trace: [ 289.469077][ T28] [ 289.471993][ T28] dump_stack_lvl+0x16c/0x230 [ 289.476670][ T28] ? preempt_count_add+0x91/0x1a0 [ 289.481787][ T28] ? show_regs_print_info+0x20/0x20 [ 289.486998][ T28] ? load_image+0x3b0/0x3b0 [ 289.491523][ T28] nmi_cpu_backtrace+0x39b/0x3d0 [ 289.496497][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 289.502661][ T28] ? _printk+0xd0/0x110 [ 289.506813][ T28] ? load_image+0x3b0/0x3b0 [ 289.511315][ T28] ? load_image+0x3b0/0x3b0 [ 289.515814][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 289.521878][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 289.527857][ T28] watchdog+0xf41/0xf80 [ 289.532008][ T28] ? watchdog+0x1e1/0xf80 [ 289.536334][ T28] kthread+0x2fa/0x390 [ 289.540393][ T28] ? hungtask_pm_notify+0x90/0x90 [ 289.545408][ T28] ? kthread_blkcg+0xd0/0xd0 [ 289.549985][ T28] ret_from_fork+0x48/0x80 [ 289.554400][ T28] ? kthread_blkcg+0xd0/0xd0 [ 289.558979][ T28] ret_from_fork_asm+0x11/0x20 [ 289.563837][ T28] [ 289.567001][ T28] Sending NMI from CPU 0 to CPUs 1: [ 289.572234][ C1] NMI backtrace for cpu 1 [ 289.572243][ C1] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 289.572257][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.572266][ C1] Workqueue: events_unbound toggle_allocation_gate [ 289.572290][ C1] RIP: 0010:preempt_count_add+0x14a/0x1a0 [ 289.572312][ C1] Code: 80 c1 03 38 c1 0f 8c 00 ff ff ff 89 fb 48 c7 c7 80 f4 ea 96 e8 57 7c 81 00 89 df e9 eb fe ff ff 48 c7 c1 80 f4 ea 96 80 e1 07 <80> c1 03 38 c1 0f 8c 05 ff ff ff 89 fb 48 c7 c7 80 f4 ea 96 e8 2d [ 289.572323][ C1] RSP: 0018:ffffc90000ba7860 EFLAGS: 00000046 [ 289.572334][ C1] RAX: 0000000000000004 RBX: 0000000000000000 RCX: ffffffff96eaf400 [ 289.572343][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 289.572351][ C1] RBP: ffffc90000ba7ab0 R08: ffffffff8e4a8d6f R09: 1ffffffff1c951ad [ 289.572361][ C1] R10: dffffc0000000000 R11: fffffbfff1c951ae R12: 0000000000000000 [ 289.572370][ C1] R13: ffff8880b8f3c200 R14: ffff8880b8f3c200 R15: dffffc0000000000 [ 289.572380][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 289.572392][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.572401][ C1] CR2: 0000558afedbd190 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 289.572414][ C1] Call Trace: [ 289.572420][ C1] [ 289.572426][ C1] raw_spin_rq_lock_nested+0x1e/0x140 [ 289.572448][ C1] __schedule+0x2dd/0x44d0 [ 289.572473][ C1] ? lock_chain_count+0x20/0x20 [ 289.572489][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 289.572504][ C1] ? asan.module_dtor+0x20/0x20 [ 289.572522][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 289.572537][ C1] ? _raw_spin_unlock+0x40/0x40 [ 289.572553][ C1] ? prepare_to_wait_event+0x3db/0x470 [ 289.572569][ C1] ? kthread_data+0x4f/0xc0 [ 289.572590][ C1] ? wq_worker_sleeping+0x63/0x240 [ 289.572604][ C1] schedule+0xbd/0x170 [ 289.572622][ C1] toggle_allocation_gate+0x162/0x250 [ 289.572642][ C1] ? show_object+0x70/0x70 [ 289.572661][ C1] ? wake_bit_function+0x200/0x200 [ 289.572678][ C1] ? process_scheduled_works+0x957/0x15b0 [ 289.572695][ C1] ? process_scheduled_works+0x957/0x15b0 [ 289.572712][ C1] process_scheduled_works+0xa45/0x15b0 [ 289.572741][ C1] ? assign_work+0x400/0x400 [ 289.572760][ C1] ? assign_work+0x39e/0x400 [ 289.572778][ C1] worker_thread+0xa55/0xfc0 [ 289.572806][ C1] kthread+0x2fa/0x390 [ 289.572818][ C1] ? pr_cont_work+0x560/0x560 [ 289.572834][ C1] ? kthread_blkcg+0xd0/0xd0 [ 289.572846][ C1] ret_from_fork+0x48/0x80 [ 289.572862][ C1] ? kthread_blkcg+0xd0/0xd0 [ 289.572875][ C1] ret_from_fork_asm+0x11/0x20 [ 289.572900][ C1] [ 289.574039][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 289.574048][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 289.574062][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.574070][ T28] Call Trace: [ 289.574076][ T28] [ 289.574082][ T28] dump_stack_lvl+0x16c/0x230 [ 289.574108][ T28] ? show_regs_print_info+0x20/0x20 [ 289.574127][ T28] ? load_image+0x3b0/0x3b0 [ 289.574153][ T28] panic+0x2c0/0x710 [ 289.574167][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 289.574191][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 289.574205][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 289.574227][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 289.574254][ T28] watchdog+0xf80/0xf80 [ 289.574275][ T28] ? watchdog+0x1e1/0xf80 [ 289.574301][ T28] kthread+0x2fa/0x390 [ 289.574316][ T28] ? hungtask_pm_notify+0x90/0x90 [ 289.574335][ T28] ? kthread_blkcg+0xd0/0xd0 [ 289.574348][ T28] ret_from_fork+0x48/0x80 [ 289.574365][ T28] ? kthread_blkcg+0xd0/0xd0 [ 289.574381][ T28] ret_from_fork_asm+0x11/0x20 [ 289.574413][ T28] [ 289.577835][ T28] Kernel Offset: disabled [ 289.946394][ T28] Rebooting in 86400 seconds..