Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. 2025/12/20 18:50:31 parsed 1 programs [ 121.597814][ T30] audit: type=1400 audit(1766256631.569:62): avc: denied { node_bind } for pid=5833 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 123.395294][ T30] audit: type=1400 audit(1766256633.369:63): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 123.418536][ T30] audit: type=1400 audit(1766256633.389:64): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 123.420823][ T5841] cgroup: Unknown subsys name 'net' [ 123.447433][ T30] audit: type=1400 audit(1766256633.419:65): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 123.613229][ T5841] cgroup: Unknown subsys name 'cpuset' [ 123.620741][ T5841] cgroup: Unknown subsys name 'rlimit' [ 123.792073][ T30] audit: type=1400 audit(1766256633.769:66): avc: denied { setattr } for pid=5841 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.837784][ T30] audit: type=1400 audit(1766256633.769:67): avc: denied { create } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.861192][ T30] audit: type=1400 audit(1766256633.769:68): avc: denied { write } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 123.867749][ T5843] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 123.882298][ T30] audit: type=1400 audit(1766256633.769:69): avc: denied { read } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.910440][ T30] audit: type=1400 audit(1766256633.779:70): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 123.935441][ T30] audit: type=1400 audit(1766256633.779:71): avc: denied { mount } for pid=5841 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 124.867249][ T5841] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 126.704660][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 126.704675][ T30] audit: type=1400 audit(1766256636.679:80): avc: denied { mounton } for pid=5852 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 126.737649][ T30] audit: type=1400 audit(1766256636.679:81): avc: denied { mount } for pid=5852 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 126.782043][ T30] audit: type=1400 audit(1766256636.679:82): avc: denied { mounton } for pid=5852 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 126.823916][ T3883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.832739][ T30] audit: type=1400 audit(1766256636.679:83): avc: denied { mount } for pid=5852 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 126.857606][ T30] audit: type=1400 audit(1766256636.739:84): avc: denied { mounton } for pid=5853 comm="syz-executor" path="/root/syzkaller.IV4ePX/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 126.882398][ T3883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.890184][ T30] audit: type=1400 audit(1766256636.739:85): avc: denied { mount } for pid=5853 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 126.912386][ T30] audit: type=1400 audit(1766256636.749:86): avc: denied { mounton } for pid=5853 comm="syz-executor" path="/root/syzkaller.IV4ePX/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 126.937971][ T30] audit: type=1400 audit(1766256636.749:87): avc: denied { mount } for pid=5853 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 126.968335][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 126.980895][ T30] audit: type=1400 audit(1766256636.759:88): avc: denied { mounton } for pid=5853 comm="syz-executor" path="/root/syzkaller.IV4ePX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 126.983269][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.024619][ T30] audit: type=1400 audit(1766256636.759:89): avc: denied { mounton } for pid=5853 comm="syz-executor" path="/root/syzkaller.IV4ePX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 127.074176][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.269356][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 127.691551][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.699187][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.708306][ T5855] bridge_slave_0: entered allmulticast mode [ 127.715861][ T5855] bridge_slave_0: entered promiscuous mode [ 127.862322][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.869575][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.876763][ T5855] bridge_slave_1: entered allmulticast mode [ 127.891904][ T5855] bridge_slave_1: entered promiscuous mode [ 128.091625][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.138353][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.147996][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.156398][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.172961][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.191997][ T5904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.199806][ T5904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.508831][ T5855] team0: Port device team_slave_0 added [ 128.526665][ T5855] team0: Port device team_slave_1 added [ 128.597309][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.606060][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.632039][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.646962][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.654149][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.680424][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.792492][ T5855] hsr_slave_0: entered promiscuous mode [ 128.798863][ T5855] hsr_slave_1: entered promiscuous mode [ 129.469884][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 129.516080][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 129.554982][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 129.565680][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 129.666879][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.707109][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.733271][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.740547][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.752033][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.759149][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.893128][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.929504][ T5855] veth0_vlan: entered promiscuous mode [ 129.944648][ T5855] veth1_vlan: entered promiscuous mode [ 129.966202][ T5855] veth0_macvtap: entered promiscuous mode [ 129.977281][ T5855] veth1_macvtap: entered promiscuous mode [ 129.993008][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.008798][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.020740][ T4148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.030578][ T4148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.043705][ T4148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.052460][ T4148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/12/20 18:50:40 executed programs: 0 [ 130.146218][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.161671][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.169638][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.182398][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.190340][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.277397][ T5904] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.286832][ T5904] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.294288][ T5904] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.302602][ T5904] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.310412][ T5904] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.388378][ T5905] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.396307][ T5905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.411497][ T5905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.415795][ T5959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.427265][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.435369][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.443544][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.450645][ T5961] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.459380][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.466638][ T5961] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.467003][ T4148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.473841][ T5961] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.492536][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.499986][ T5961] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.507481][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.515220][ T5961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.795397][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 130.983907][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.993101][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.000203][ T5946] bridge_slave_0: entered allmulticast mode [ 131.006964][ T5946] bridge_slave_0: entered promiscuous mode [ 131.050357][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.058231][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.067598][ T5946] bridge_slave_1: entered allmulticast mode [ 131.074361][ T5946] bridge_slave_1: entered promiscuous mode [ 131.103928][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 131.152189][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 131.181477][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 131.196558][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.239090][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.261768][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 131.340427][ T5946] team0: Port device team_slave_0 added [ 131.376998][ T5946] team0: Port device team_slave_1 added [ 131.405352][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.412582][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.419677][ T5951] bridge_slave_0: entered allmulticast mode [ 131.426638][ T5951] bridge_slave_0: entered promiscuous mode [ 131.450641][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.458049][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.465186][ T5955] bridge_slave_0: entered allmulticast mode [ 131.472107][ T5955] bridge_slave_0: entered promiscuous mode [ 131.479370][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.486509][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.494539][ T5951] bridge_slave_1: entered allmulticast mode [ 131.501501][ T5951] bridge_slave_1: entered promiscuous mode [ 131.525974][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.533317][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.540552][ T5955] bridge_slave_1: entered allmulticast mode [ 131.547391][ T5955] bridge_slave_1: entered promiscuous mode [ 131.575067][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.582190][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.608473][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.640341][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.647671][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.654886][ T5956] bridge_slave_0: entered allmulticast mode [ 131.661738][ T5956] bridge_slave_0: entered promiscuous mode [ 131.668820][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.675812][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.702077][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.724523][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.736847][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.746189][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.753476][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.760569][ T5956] bridge_slave_1: entered allmulticast mode [ 131.767674][ T5956] bridge_slave_1: entered promiscuous mode [ 131.788587][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.796166][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.803420][ T5954] bridge_slave_0: entered allmulticast mode [ 131.810059][ T5954] bridge_slave_0: entered promiscuous mode [ 131.818566][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.829236][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.846654][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.854325][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.861968][ T5954] bridge_slave_1: entered allmulticast mode [ 131.868732][ T5954] bridge_slave_1: entered promiscuous mode [ 131.896172][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.937866][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.960078][ T4148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.974571][ T5955] team0: Port device team_slave_0 added [ 131.981929][ T5951] team0: Port device team_slave_0 added [ 131.997749][ T5946] hsr_slave_0: entered promiscuous mode [ 132.003823][ T5946] hsr_slave_1: entered promiscuous mode [ 132.009670][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 132.015831][ T5946] Cannot create hsr debugfs directory [ 132.033501][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.043881][ T5955] team0: Port device team_slave_1 added [ 132.050455][ T5951] team0: Port device team_slave_1 added [ 132.067668][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.099040][ T4148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.115717][ T5956] team0: Port device team_slave_0 added [ 132.151033][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.157983][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.184841][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.203802][ T5956] team0: Port device team_slave_1 added [ 132.216948][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.224089][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.250310][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.262461][ T5961] Bluetooth: hci0: command tx timeout [ 132.263101][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.274880][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.300873][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.312554][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.319476][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.345981][ T5961] Bluetooth: hci1: command tx timeout [ 132.351636][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.373764][ T5954] team0: Port device team_slave_0 added [ 132.387810][ T4148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.414316][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.420755][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.430020][ T5954] team0: Port device team_slave_1 added [ 132.445231][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.452414][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.478320][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.508132][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.515795][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.542230][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.570971][ T5904] Bluetooth: hci3: command tx timeout [ 132.570974][ T5905] Bluetooth: hci4: command tx timeout [ 132.582955][ T5961] Bluetooth: hci2: command tx timeout [ 132.602841][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.609782][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.636155][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.658556][ T5955] hsr_slave_0: entered promiscuous mode [ 132.664858][ T5955] hsr_slave_1: entered promiscuous mode [ 132.670705][ T5955] debugfs: 'hsr0' already exists in 'hsr' [ 132.676532][ T5955] Cannot create hsr debugfs directory [ 132.691904][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.698847][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.725295][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.746337][ T5951] hsr_slave_0: entered promiscuous mode [ 132.752648][ T5951] hsr_slave_1: entered promiscuous mode [ 132.758555][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 132.764327][ T5951] Cannot create hsr debugfs directory [ 132.853073][ T5956] hsr_slave_0: entered promiscuous mode [ 132.859162][ T5956] hsr_slave_1: entered promiscuous mode [ 132.865371][ T5956] debugfs: 'hsr0' already exists in 'hsr' [ 132.871138][ T5956] Cannot create hsr debugfs directory [ 132.945096][ T5954] hsr_slave_0: entered promiscuous mode [ 132.952248][ T5954] hsr_slave_1: entered promiscuous mode [ 132.958089][ T5954] debugfs: 'hsr0' already exists in 'hsr' [ 132.964003][ T5954] Cannot create hsr debugfs directory [ 133.059429][ T4148] bridge_slave_1: left allmulticast mode [ 133.066209][ T4148] bridge_slave_1: left promiscuous mode [ 133.072720][ T4148] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.082912][ T4148] bridge_slave_0: left allmulticast mode [ 133.088551][ T4148] bridge_slave_0: left promiscuous mode [ 133.094527][ T4148] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.249553][ T4148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.259518][ T4148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.269004][ T4148] bond0 (unregistering): Released all slaves [ 133.410732][ T4148] hsr_slave_0: left promiscuous mode [ 133.416781][ T4148] hsr_slave_1: left promiscuous mode [ 133.423003][ T4148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.430365][ T4148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.438262][ T4148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.445659][ T4148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.459422][ T4148] veth1_macvtap: left promiscuous mode [ 133.465069][ T4148] veth0_macvtap: left promiscuous mode [ 133.470592][ T4148] veth1_vlan: left promiscuous mode [ 133.475930][ T4148] veth0_vlan: left promiscuous mode [ 133.654880][ T4148] team0 (unregistering): Port device team_slave_1 removed [ 133.674805][ T4148] team0 (unregistering): Port device team_slave_0 removed [ 133.824372][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.849326][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.863309][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.887106][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.021009][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.080251][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.096883][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.104050][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.136268][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.143459][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.266462][ T5954] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 134.293088][ T5954] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 134.331723][ T5904] Bluetooth: hci0: command tx timeout [ 134.412383][ T5904] Bluetooth: hci1: command tx timeout [ 134.441739][ T5954] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 134.452283][ T5954] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 134.570388][ T5955] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 134.583011][ T5955] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 134.595819][ T5955] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 134.607863][ T5955] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 134.639061][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.651418][ T5904] Bluetooth: hci4: command tx timeout [ 134.661257][ T5961] Bluetooth: hci2: command tx timeout [ 134.666689][ T5904] Bluetooth: hci3: command tx timeout [ 134.689228][ T5951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.724360][ T5951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.779480][ T5951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 134.823915][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.853384][ T5951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 134.918518][ T5946] veth0_vlan: entered promiscuous mode [ 134.925939][ T5956] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.949532][ T5956] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.965364][ T5956] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.981207][ T5946] veth1_vlan: entered promiscuous mode [ 134.995881][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.004009][ T5956] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.030026][ T4148] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.037183][ T4148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.074243][ T4148] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.081412][ T4148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.130078][ T5946] veth0_macvtap: entered promiscuous mode [ 135.148209][ T5946] veth1_macvtap: entered promiscuous mode [ 135.180149][ T5954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.197279][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.224066][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.250321][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.274146][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.288869][ T4148] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.296199][ T4148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.312896][ T4148] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.320034][ T4148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.338412][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.348601][ T3503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.383913][ T3503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.393866][ T3503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.418580][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.452972][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.468186][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.477467][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.498887][ T1304] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.505977][ T1304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.526549][ T4148] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.533714][ T4148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.593941][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.605302][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.617179][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.646810][ T5954] veth0_vlan: entered promiscuous mode [ 135.683239][ T694] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.690371][ T694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.705837][ T694] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.706369][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.712976][ T694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.731165][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.759477][ T5954] veth1_vlan: entered promiscuous mode 2025/12/20 18:50:45 executed programs: 10 [ 135.885081][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.925758][ T5954] veth0_macvtap: entered promiscuous mode [ 135.972660][ T5954] veth1_macvtap: entered promiscuous mode [ 136.052002][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.075676][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.091711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.099968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.108525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.117105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.125651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.134428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 136.179045][ T3503] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.210136][ T3503] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.235486][ T3503] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.248803][ T5955] veth0_vlan: entered promiscuous mode [ 136.260248][ T3503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.284273][ T5955] veth1_vlan: entered promiscuous mode [ 136.369257][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.412022][ T5904] Bluetooth: hci0: command tx timeout [ 136.421802][ T5955] veth0_macvtap: entered promiscuous mode [ 136.448167][ T5955] veth1_macvtap: entered promiscuous mode [ 136.488869][ T694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.501390][ T5904] Bluetooth: hci1: command tx timeout [ 136.518901][ T694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.566701][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.580133][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.581161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.596034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 136.637158][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.658269][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.718658][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.743893][ T5905] Bluetooth: hci4: command tx timeout [ 136.749370][ T5904] Bluetooth: hci3: command tx timeout [ 136.755460][ T5961] Bluetooth: hci2: command tx timeout [ 136.779862][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.802629][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.814676][ T5951] veth0_vlan: entered promiscuous mode [ 136.823436][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.900378][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.041030][ T5951] veth1_vlan: entered promiscuous mode [ 138.492702][ T5961] Bluetooth: hci0: command tx timeout [ 138.573784][ T5961] Bluetooth: hci1: command tx timeout [ 138.815478][ T5905] Bluetooth: hci4: command tx timeout [ 138.822741][ T5904] Bluetooth: hci3: command tx timeout [ 138.832730][ T5961] Bluetooth: hci2: command tx timeout [ 139.344379][ T5951] veth0_macvtap: entered promiscuous mode [ 139.431350][ T5951] veth1_macvtap: entered promiscuous mode [ 139.497727][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.825834][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.841722][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.885188][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/20 18:50:52 executed programs: 32 [ 142.631073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.639604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.668266][ T4148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.694628][ T5956] veth0_vlan: entered promiscuous mode [ 142.728494][ T4148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.812280][ T4148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.824286][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.858110][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.867407][ T4148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.530445][ T5956] veth1_vlan: entered promiscuous mode [ 143.731694][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.227300][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.369410][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.898414][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.402430][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.135697][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.300785][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 329.307786][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4912/1:b..l [ 329.315909][ C0] rcu: (detected by 0, t=10503 jiffies, g=9721, q=383 ncpus=2) [ 329.323523][ C0] task:kworker/u8:16 state:R running task stack:25480 pid:4912 tgid:4912 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 329.337373][ C0] Workqueue: bat_events batadv_mcast_mla_update [ 329.343602][ C0] Call Trace: [ 329.346853][ C0] [ 329.349755][ C0] ? __schedule+0x10b9/0x6150 [ 329.354401][ C0] __schedule+0x1139/0x6150 [ 329.358879][ C0] ? __pfx___schedule+0x10/0x10 [ 329.363705][ C0] ? mark_held_locks+0x49/0x80 [ 329.368438][ C0] preempt_schedule_irq+0x51/0x90 [ 329.373431][ C0] irqentry_exit+0x1d8/0x8c0 [ 329.377998][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 329.383945][ C0] RIP: 0010:__kmalloc_cache_noprof+0x4de/0x800 [ 329.390071][ C0] Code: c9 74 b9 48 85 db 75 a9 eb b2 4d 85 c9 74 ad 48 85 db 74 a8 bf ff ff ff ff 41 8b 44 24 40 49 8b 34 24 48 8d 4a 08 49 8b 1c 01 <4c> 89 c8 65 48 0f c7 0e 0f 85 51 ff ff ff 41 8b 44 24 40 0f 0d 0c [ 329.409643][ C0] RSP: 0018:ffffc9000ebe79a0 EFLAGS: 00000246 [ 329.415674][ C0] RAX: 0000000000000010 RBX: ffff8880792c5a00 RCX: 000000000010c861 [ 329.423610][ C0] RDX: 000000000010c859 RSI: ffffffff93b4a250 RDI: 00000000ffffffff [ 329.431547][ C0] RBP: ffffc9000ebe7a00 R08: 0000000000000018 R09: ffff8880792c5840 [ 329.439484][ C0] R10: 0000000000000000 R11: ffff888036e5aff0 R12: ffff88813ff26780 [ 329.447423][ C0] R13: 0000000000000820 R14: 00000000aaff3300 R15: 0000000000000018 [ 329.455366][ C0] ? batadv_mcast_mla_update+0x1937/0x31b0 [ 329.461148][ C0] ? batadv_mcast_mla_update+0x1937/0x31b0 [ 329.466925][ C0] batadv_mcast_mla_update+0x1937/0x31b0 [ 329.472531][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 329.477271][ C0] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 329.483226][ C0] ? lock_acquire+0x67/0x330 [ 329.487782][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 329.493124][ C0] process_one_work+0x9ba/0x1b20 [ 329.498043][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 329.504168][ C0] ? __pfx_process_one_work+0x10/0x10 [ 329.509519][ C0] ? assign_work+0x1a0/0x250 [ 329.514079][ C0] worker_thread+0x6c8/0xf10 [ 329.518642][ C0] ? __kthread_parkme+0x19e/0x250 [ 329.523633][ C0] ? __pfx_worker_thread+0x10/0x10 [ 329.528718][ C0] kthread+0x3c5/0x780 [ 329.532773][ C0] ? __pfx_kthread+0x10/0x10 [ 329.537330][ C0] ? rcu_is_watching+0x12/0xc0 [ 329.542058][ C0] ? __pfx_kthread+0x10/0x10 [ 329.546615][ C0] ret_from_fork+0x983/0xb10 [ 329.551172][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 329.556249][ C0] ? __switch_to+0x7af/0x10d0 [ 329.560900][ C0] ? __pfx_kthread+0x10/0x10 [ 329.565471][ C0] ret_from_fork_asm+0x1a/0x30 [ 329.570211][ C0] [ 329.573204][ C0] rcu: rcu_preempt kthread starved for 9521 jiffies! g9721 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 329.584201][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 329.594155][ C0] rcu: RCU grace-period kthread stack dump: [ 329.600023][ C0] task:rcu_preempt state:R running task stack:28440 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 329.613497][ C0] Call Trace: [ 329.616761][ C0] [ 329.619678][ C0] ? __schedule+0x10b9/0x6150 [ 329.624344][ C0] __schedule+0x1139/0x6150 [ 329.628841][ C0] ? rcu_is_watching+0x12/0xc0 [ 329.633589][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 329.638343][ C0] ? __pfx___schedule+0x10/0x10 [ 329.643186][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 329.648546][ C0] preempt_schedule_common+0x44/0xc0 [ 329.653818][ C0] preempt_schedule_thunk+0x16/0x30 [ 329.659005][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 329.664624][ C0] rcu_gp_fqs_loop+0x216/0xaf0 [ 329.669378][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 329.674666][ C0] rcu_gp_kthread+0x26d/0x380 [ 329.679337][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 329.684523][ C0] ? rcu_is_watching+0x12/0xc0 [ 329.689274][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 329.694469][ C0] ? __kthread_parkme+0x19e/0x250 [ 329.699483][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 329.704670][ C0] kthread+0x3c5/0x780 [ 329.708728][ C0] ? __pfx_kthread+0x10/0x10 [ 329.713306][ C0] ? rcu_is_watching+0x12/0xc0 [ 329.718062][ C0] ? __pfx_kthread+0x10/0x10 [ 329.722637][ C0] ret_from_fork+0x983/0xb10 [ 329.727216][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 329.732322][ C0] ? __switch_to+0x7af/0x10d0 [ 329.736987][ C0] ? __pfx_kthread+0x10/0x10 [ 329.741569][ C0] ret_from_fork_asm+0x1a/0x30 [ 329.746343][ C0] [ 329.749348][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 329.755652][ C0] Sending NMI from CPU 0 to CPUs 1: [ 329.760839][ C1] NMI backtrace for cpu 1 [ 329.760850][ C1] CPU: 1 UID: 0 PID: 5905 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 329.760865][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 329.760873][ C1] Workqueue: hci4 hci_conn_timeout [ 329.760891][ C1] RIP: 0010:restore_regs_and_return_to_kernel+0x10/0x2e [ 329.760907][ C1] Code: ef 3f 48 81 cf 00 08 00 00 48 81 cf 00 10 00 00 0f 22 df 58 5f e9 6e ff ff ff f6 84 24 88 00 00 00 03 74 02 0f 0b 41 5f 41 5e <41> 5d 41 5c 5d 5b 41 5b 41 5a 41 59 41 58 58 59 5a 5e 5f 48 83 c4 [ 329.760918][ C1] RSP: 0018:ffffc9000469f4c8 EFLAGS: 00000046 [ 329.760928][ C1] RAX: 00000000000f1699 RBX: 0000000000000000 RCX: 0000000000000007 [ 329.760936][ C1] RDX: 0000000000000000 RSI: ffffffff8dacde18 RDI: ffffffff8bf2b380 [ 329.760944][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 329.760951][ C1] R10: ffffffff9088b3d7 R11: ffff8880265f8b30 R12: 0000000000000000 [ 329.760959][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.760966][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 329.760980][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.760988][ C1] CR2: 0000200000000058 CR3: 000000005b778000 CR4: 00000000003526f0 [ 329.760996][ C1] Call Trace: [ 329.761000][ C1] [ 329.761004][ C1] RIP: 0010:rcu_is_watching+0x80/0xc0 [ 329.761016][ C1] Code: 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b 03 c1 e8 02 83 e0 01 65 ff 0d 30 9e 0f 12 <74> 07 5b 5d e9 97 21 d8 09 e8 e2 f4 88 ff 5b 5d e9 8b 21 d8 09 48 [ 329.761027][ C1] RSP: 0018:ffffc9000469f560 EFLAGS: 00000286 [ 329.761036][ C1] RAX: 0000000000000001 RBX: ffff8880b85339e8 RCX: 0000000000000002 [ 329.761044][ C1] RDX: 0000000000000000 RSI: ffffffff8bf2b300 RDI: ffffffff8dd7bf28 [ 329.761052][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 329.761059][ C1] R10: 0000000000000002 R11: 00000000000128d3 R12: 0000000000000000 [ 329.761070][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.761083][ C1] lock_acquire+0x2cd/0x330 [ 329.761098][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 329.761115][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 329.761131][ C1] unwind_next_frame+0xd1/0x20b0 [ 329.761147][ C1] ? unwind_next_frame+0xbd/0x20b0 [ 329.761161][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 329.761178][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 329.761192][ C1] arch_stack_walk+0x94/0x100 [ 329.761208][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 329.761223][ C1] stack_trace_save+0x8e/0xc0 [ 329.761236][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 329.761250][ C1] ? save_stack+0x6d/0x1f0 [ 329.761264][ C1] ? save_stack+0x7f/0x1f0 [ 329.761277][ C1] save_stack+0x160/0x1f0 [ 329.761290][ C1] ? __pfx_save_stack+0x10/0x10 [ 329.761304][ C1] ? __free_frozen_pages+0x7df/0x1170 [ 329.761322][ C1] ? __put_partials+0x130/0x170 [ 329.761333][ C1] ? qlist_free_all+0x4c/0xf0 [ 329.761345][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 329.761361][ C1] ? page_ext_put+0x3e/0xd0 [ 329.761376][ C1] __reset_page_owner+0x84/0x1a0 [ 329.761392][ C1] __free_frozen_pages+0x7df/0x1170 [ 329.761411][ C1] __put_partials+0x130/0x170 [ 329.761423][ C1] qlist_free_all+0x4c/0xf0 [ 329.761436][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 329.761450][ C1] __kasan_slab_alloc+0x69/0x90 [ 329.761466][ C1] __kmalloc_cache_noprof+0x282/0x800 [ 329.761485][ C1] ? hci_cmd_sync_submit+0xbc/0x330 [ 329.761501][ C1] ? hci_cmd_sync_submit+0x48/0x330 [ 329.761516][ C1] ? __pfx_abort_conn_sync+0x10/0x10 [ 329.761530][ C1] ? hci_cmd_sync_submit+0xbc/0x330 [ 329.761545][ C1] hci_cmd_sync_submit+0xbc/0x330 [ 329.761561][ C1] ? __pfx_abort_conn_sync+0x10/0x10 [ 329.761573][ C1] hci_cmd_sync_run+0x93/0xf0 [ 329.761588][ C1] ? __pfx_abort_conn_sync+0x10/0x10 [ 329.761601][ C1] hci_cmd_sync_run_once+0x1b5/0x200 [ 329.761618][ C1] hci_abort_conn+0x182/0x360 [ 329.761634][ C1] hci_conn_timeout+0x1f3/0x230 [ 329.761650][ C1] process_one_work+0x9ba/0x1b20 [ 329.761669][ C1] ? __pfx_process_one_work+0x10/0x10 [ 329.761687][ C1] ? assign_work+0x1a0/0x250 [ 329.761701][ C1] worker_thread+0x6c8/0xf10 [ 329.761719][ C1] ? __kthread_parkme+0x19e/0x250 [ 329.761731][ C1] ? __pfx_worker_thread+0x10/0x10 [ 329.761745][ C1] kthread+0x3c5/0x780 [ 329.761759][ C1] ? __pfx_kthread+0x10/0x10 [ 329.761773][ C1] ? rcu_is_watching+0x12/0xc0 [ 329.761784][ C1] ? __pfx_kthread+0x10/0x10 [ 329.761798][ C1] ret_from_fork+0x983/0xb10 [ 329.761812][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 329.761826][ C1] ? __switch_to+0x7af/0x10d0 [ 329.761840][ C1] ? __pfx_kthread+0x10/0x10 [ 329.761854][ C1] ret_from_fork_asm+0x1a/0x30 [ 329.761875][ C1] [ 331.555655][ T31] INFO: task kworker/u8:6:1107 blocked for more than 187 seconds. [ 331.571226][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.577520][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.601425][ T31] Not tainted syzkaller #0 [ 331.606828][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.670037][ T31] task:kworker/u8:6 state:D stack:25480 pid:1107 tgid:1107 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 331.746424][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 331.797508][ T31] Call Trace: [ 331.823332][ T31] [ 331.826292][ T31] ? __schedule+0x10b9/0x6150 [ 331.915756][ T6164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.931988][ T6164] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.932888][ T31] __schedule+0x1139/0x6150 [ 331.960382][ T6167] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 331.968962][ T6167] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.976600][ T6167] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 331.984687][ T6167] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 331.984704][ T6169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.001804][ T6169] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.032863][ T31] ? __lock_acquire+0x436/0x2890 [ 332.037856][ T31] ? __pfx___schedule+0x10/0x10 [ 332.062865][ T6169] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.072465][ T6169] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 332.086844][ T6167] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 332.094979][ T6167] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 332.105626][ T6169] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 332.115285][ T31] ? find_held_lock+0x2b/0x80 [ 332.120730][ T31] ? schedule+0x2d7/0x3a0 [ 332.121609][ T6169] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 332.132957][ T6169] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 332.141439][ T6169] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 332.143330][ T31] schedule+0xe7/0x3a0 [ 332.153192][ T6169] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 332.163225][ T6164] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 332.172473][ T6164] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 332.182218][ T6164] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 332.243200][ T5905] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 332.258069][ T6164] Bluetooth: hci2: command 0x0406 tx timeout [ 332.264799][ T5905] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 332.274193][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.279670][ T31] __mutex_lock+0xc69/0x1ca0 [ 332.286353][ T5905] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 332.294385][ T5905] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 332.303441][ T5905] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 332.360904][ T31] ? addrconf_dad_work+0x120/0x14f0 [ 332.366526][ T31] ? __lock_acquire+0x436/0x2890 [ 332.421615][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.426675][ T31] ? rcu_is_watching+0x12/0xc0 [ 332.450885][ T31] ? trace_contention_end+0xdd/0x110 [ 332.456213][ T31] ? look_up_lock_class+0x59/0x130 [ 332.490952][ T31] ? addrconf_dad_work+0x120/0x14f0 [ 332.496196][ T31] ? rtnl_lock+0x9/0x20 [ 332.500351][ T31] addrconf_dad_work+0x120/0x14f0 [ 332.550854][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 332.556370][ T31] ? rcu_is_watching+0x12/0xc0 [ 332.573220][ T5905] Bluetooth: hci1: command 0x0406 tx timeout [ 332.620904][ T31] process_one_work+0x9ba/0x1b20 [ 332.625891][ T31] ? __pfx_deferred_probe_work_func+0x10/0x10 [ 332.667196][ T31] ? __pfx_process_one_work+0x10/0x10 [ 332.700947][ T31] ? assign_work+0x1a0/0x250 [ 332.705589][ T31] worker_thread+0x6c8/0xf10 [ 332.710181][ T31] ? __kthread_parkme+0x19e/0x250 [ 332.723124][ T31] ? __pfx_worker_thread+0x10/0x10 [ 332.728258][ T31] kthread+0x3c5/0x780 [ 332.734404][ T31] ? __pfx_kthread+0x10/0x10 [ 332.739167][ T31] ? rcu_is_watching+0x12/0xc0 [ 332.744153][ T31] ? __pfx_kthread+0x10/0x10 [ 332.748775][ T31] ret_from_fork+0x983/0xb10 [ 332.754353][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 332.759598][ T31] ? __switch_to+0x7af/0x10d0 [ 332.765644][ T31] ? __pfx_kthread+0x10/0x10 [ 332.779407][ T31] ret_from_fork_asm+0x1a/0x30 [ 332.803694][ T31] [ 332.812740][ T31] [ 332.812740][ T31] Showing all locks held in the system: [ 332.820454][ T31] 3 locks held by kworker/1:0/24: [ 332.900866][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 332.930835][ T31] #1: ffffc900001e7c90 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 332.968340][ T31] #2: ffff88807cec1240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x65f0 [ 332.985699][ T31] 1 lock held by khungtaskd/31: [ 332.990599][ T31] #0: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 333.001304][ T31] 3 locks held by kworker/u9:0/52: [ 333.006447][ T31] #0: ffff888079b2a148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 333.017719][ T31] #1: ffffc90000bd7c90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 333.029869][ T31] #2: ffff88802bf48ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x470 [ 333.039921][ T31] 3 locks held by kworker/1:2/934: [ 333.045115][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 333.055703][ T31] #1: ffffc90003d97c90 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 333.067966][ T31] #2: ffff88807d657240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x65f0 [ 333.085460][ T31] 3 locks held by kworker/u8:6/1107: [ 333.090748][ T31] #0: ffff888032259148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 333.101895][ T31] #1: ffffc900042efc90 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 333.114149][ T31] #2: ffffffff90141a28 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14f0 [ 333.125121][ T31] 6 locks held by kworker/u9:1/5138: [ 333.130404][ T31] #0: ffff888034594148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 333.140822][ T31] #1: ffffc9000fddfc90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 333.155836][ T31] #2: ffff888033770ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x470 [ 333.168650][ T31] #3: ffff8880337700c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb20 [ 333.178497][ T31] #4: ffffffff903bec88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x360 [ 333.188983][ T31] #5: ffff888034593b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760 [ 333.198475][ T31] 2 locks held by getty/5575: [ 333.203163][ T31] #0: ffff8880377c70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 333.212974][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 333.223117][ T31] 4 locks held by kworker/u9:2/5904: [ 333.228415][ T31] #0: ffff888034591148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 333.238785][ T31] #1: ffffc90003087c90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 333.250726][ T31] #2: ffff8880343d8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x470 [ 333.260632][ T31] #3: ffff8880343d80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb20 [ 333.270411][ T31] 3 locks held by kworker/u9:5/5961: [ 333.275722][ T31] #0: ffff88814cadf148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 333.286734][ T31] #1: ffffc90003117c90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 333.300804][ T31] #2: ffff888034958ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x470 [ 333.310654][ T31] 5 locks held by kworker/u9:6/5962: [ 333.340912][ T31] #0: ffff8880342c6948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 333.352851][ T31] #1: ffffc90003817c90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 333.365438][ T31] #2: ffff8880343dcec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x470 [ 333.376010][ T5905] Bluetooth: hci3: command 0x0406 tx timeout [ 333.382041][ T31] #3: ffff8880343dc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb20 [ 333.392787][ T31] #4: ffffffff903bec88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x360 [ 333.409472][ T31] 2 locks held by kworker/u8:17/6126: [ 333.411391][ T6159] chnl_net:caif_netlink_parms(): no params data found [ 333.415374][ T31] #0: ffff88813ff69148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 333.433203][ T31] #1: ffff8880b8424608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x19b1/0x6150 [ 333.442137][ T31] 1 lock held by syz.0.50/6146: [ 333.451252][ T31] #0: ffffffff8e3d4d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 333.464673][ T31] 2 locks held by kworker/0:9/6149: [ 333.477222][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 333.488576][ T31] #1: ffffc90003267c90 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 333.498383][ T31] 1 lock held by dhcpcd/6150: [ 333.517135][ T6171] chnl_net:caif_netlink_parms(): no params data found [ 333.520806][ T31] #0: ffff8880578f3008 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 333.530769][ T6170] chnl_net:caif_netlink_parms(): no params data found [ 333.530863][ T5905] Bluetooth: hci0: command 0x0406 tx timeout [ 333.534793][ T31] 2 locks held by dhcpcd/6154: [ 333.552131][ T31] #0: ffff8880578f1ec8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 333.570199][ T31] #1: ffffffff8e3d4d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 333.600414][ T31] 1 lock held by dhcpcd/6155: [ 333.605149][ T31] #0: ffff88805796de08 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 333.611171][ T5905] Bluetooth: hci4: command 0x0406 tx timeout [ 333.623296][ T31] 1 lock held by dhcpcd/6156: [ 333.627972][ T31] #0: ffff888078797ac8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 333.638846][ T31] 1 lock held by dhcpcd/6158: [ 333.643572][ T31] #0: ffff88805796f508 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 333.654142][ T31] 2 locks held by syz-executor/6159: [ 333.659407][ T31] #0: ffffffff8f4d9488 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 333.669034][ T31] #1: ffffffff90141a28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5f6/0x1f50 [ 333.678375][ T31] 1 lock held by dhcpcd/6160: [ 333.683091][ T31] #0: ffff88805796ef48 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 333.694522][ T31] 1 lock held by syz-executor/6165: [ 333.699716][ T31] #0: ffffffff90141a28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5f6/0x1f50 [ 333.708871][ T31] 4 locks held by kworker/u9:9/6169: [ 333.714161][ T31] #0: ffff88802895f948 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 333.724714][ T31] #1: ffffc900031d7c90 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 333.740230][ T31] #2: ffff888033b2c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x94/0x9c0 [ 333.750177][ T31] #3: ffffffff903bec88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x498/0x9c0 [ 333.760631][ T31] 2 locks held by syz-executor/6170: [ 333.765930][ T31] #0: ffffffff8f4ee888 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 333.776218][ T31] #1: ffffffff90141a28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5f6/0x1f50 [ 333.785451][ T31] 2 locks held by syz-executor/6171: [ 333.790718][ T31] #0: ffffffff908acba8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 333.800991][ T31] #1: ffffffff90141a28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5f6/0x1f50 [ 333.810029][ T31] 2 locks held by syz-executor/6174: [ 333.815442][ T31] #0: ffffffff9088ed88 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 333.825040][ T31] #1: ffffffff90141a28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5f6/0x1f50 [ 333.901832][ T31] [ 333.917401][ T31] ============================================= [ 333.917401][ T31] [ 333.938519][ T31] NMI backtrace for cpu 0 [ 333.938534][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 333.938552][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.938560][ T31] Call Trace: [ 333.938566][ T31] [ 333.938572][ T31] dump_stack_lvl+0x116/0x1f0 [ 333.938597][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 333.938622][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 333.938640][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 333.938666][ T31] sys_info+0x133/0x180 [ 333.938686][ T31] watchdog+0xe66/0x1180 [ 333.938709][ T31] ? rcu_is_watching+0x12/0xc0 [ 333.938724][ T31] ? __pfx_watchdog+0x10/0x10 [ 333.938740][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 333.938760][ T31] ? __kthread_parkme+0x19e/0x250 [ 333.938777][ T31] ? __pfx_watchdog+0x10/0x10 [ 333.938793][ T31] kthread+0x3c5/0x780 [ 333.938812][ T31] ? __pfx_kthread+0x10/0x10 [ 333.938830][ T31] ? rcu_is_watching+0x12/0xc0 [ 333.938843][ T31] ? __pfx_kthread+0x10/0x10 [ 333.938860][ T31] ret_from_fork+0x983/0xb10 [ 333.938877][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 333.938896][ T31] ? __switch_to+0x7af/0x10d0 [ 333.938916][ T31] ? __pfx_kthread+0x10/0x10 [ 333.938935][ T31] ret_from_fork_asm+0x1a/0x30 [ 333.938970][ T31] [ 333.938976][ T31] Sending NMI from CPU 0 to CPUs 1: [ 334.075203][ C1] NMI backtrace for cpu 1 [ 334.075215][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 334.075230][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.075237][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 334.075259][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 334.075270][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 334.075281][ C1] RAX: 00000000000725eb RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 334.075289][ C1] RDX: 0000000000000000 RSI: ffffffff8dacde18 RDI: ffffffff8bf2b380 [ 334.075297][ C1] RBP: ffffed1003b58498 R08: 0000000000000001 R09: ffffed10170a673d [ 334.075305][ C1] R10: ffff8880b85339eb R11: ffff88801dac2ff0 R12: 0000000000000001 [ 334.075313][ C1] R13: ffff88801dac24c0 R14: ffffffff9088b3d0 R15: 0000000000000000 [ 334.075320][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 334.075334][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.075342][ C1] CR2: 00007fa8c8f2a6b0 CR3: 00000000650ec000 CR4: 00000000003526f0 [ 334.075349][ C1] Call Trace: [ 334.075354][ C1] [ 334.075358][ C1] default_idle+0x13/0x20 [ 334.075375][ C1] default_idle_call+0x6c/0xb0 [ 334.075392][ C1] do_idle+0x38d/0x510 [ 334.075411][ C1] ? __pfx_do_idle+0x10/0x10 [ 334.075431][ C1] cpu_startup_entry+0x4f/0x60 [ 334.075448][ C1] start_secondary+0x21d/0x2d0 [ 334.075463][ C1] ? __pfx_start_secondary+0x10/0x10 [ 334.075477][ C1] common_startup_64+0x13e/0x148 [ 334.075497][ C1] [ 334.091026][ T52] Bluetooth: hci5: command tx timeout [ 334.174206][ T5961] Bluetooth: hci6: command tx timeout [ 334.200910][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 334.200924][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 334.200941][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.200950][ T31] Call Trace: [ 334.200955][ T31] [ 334.200961][ T31] dump_stack_lvl+0x3d/0x1f0 [ 334.200984][ T31] vpanic+0x640/0x6f0 [ 334.201002][ T31] panic+0xca/0xd0 [ 334.201016][ T31] ? __pfx_panic+0x10/0x10 [ 334.201029][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 334.201047][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 334.201075][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 334.201097][ T31] ? watchdog+0xe83/0x1180 [ 334.201112][ T31] ? watchdog+0xe76/0x1180 [ 334.201128][ T31] watchdog+0xe94/0x1180 [ 334.201147][ T31] ? rcu_is_watching+0x12/0xc0 [ 334.201161][ T31] ? __pfx_watchdog+0x10/0x10 [ 334.201175][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 334.201193][ T31] ? __kthread_parkme+0x19e/0x250 [ 334.201209][ T31] ? __pfx_watchdog+0x10/0x10 [ 334.201224][ T31] kthread+0x3c5/0x780 [ 334.201241][ T31] ? __pfx_kthread+0x10/0x10 [ 334.201258][ T31] ? rcu_is_watching+0x12/0xc0 [ 334.201271][ T31] ? __pfx_kthread+0x10/0x10 [ 334.201288][ T31] ret_from_fork+0x983/0xb10 [ 334.201304][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 334.201321][ T31] ? __switch_to+0x7af/0x10d0 [ 334.201339][ T31] ? __pfx_kthread+0x10/0x10 [ 334.201356][ T31] ret_from_fork_asm+0x1a/0x30 [ 334.201387][ T31] [ 334.202136][ T31] Kernel Offset: disabled