last executing test programs: 18.120537409s ago: executing program 0 (id=1): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$AUDIT_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x6c, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25ADDUID(r4, 0x89e1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 17.557771761s ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018010000202070250000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket(0x200000000000011, 0x2, 0x1) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) (async) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="900000006404000126bd7000fbdbdf254213b4038c214be8ee4c752066b7080f624196c5af1112ffa57979326ff635fae40b5102c00e218ab0e52088cefe390952f13373501bf087911ce09f4ed908b025f64c13ecebcb355185be484f8880dd56ed620a6c1c81161f92b99ede94025aa8cb7b61e4b39beca3f6de4999092147be957190a4cd74eae80a1e37dc8f3600f293267d5ede95105eceaf2531ee0bfce89818204b92f067239685dfed57f2d454cd4b3d5c89084d4664313f786c594c624d8fec8dbd229fa57fe3fdd0140559f88e8e614dc9fb0c5280d76b9be7745bdbf4d721240afdef"], 0x90}, 0x1, 0x0, 0x0, 0x20008010}, 0x40022) 17.515351853s ago: executing program 0 (id=6): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x10000000000) 17.195886879s ago: executing program 0 (id=7): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x29, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'rr\x00', 0x3a, 0x0, 0x7f}, 0x2c) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40480c5) (async, rerun: 64) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) (rerun: 64) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r9, @ANYBLOB="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"], 0x114}}, 0x0) 17.0333108s ago: executing program 1 (id=2): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x8b2c, &(0x7f0000000040)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'erspan0\x00', {0x1}, 0x5442}) 15.866040444s ago: executing program 3 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) 15.699184029s ago: executing program 3 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) (fail_nth: 1) 15.296381406s ago: executing program 3 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00040000000000ff0f00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000240)=0x1, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r4, 0x0, 0x0}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000000)=0xb, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000000)=0xb, 0x4) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000002c00)={0x0, 0x100000, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000002c00)={0x0, 0x100000, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0) r6 = epoll_create1(0x80000) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0xff}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x80000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x80000000}) 1.999141852s ago: executing program 32 (id=7): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x29, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'rr\x00', 0x3a, 0x0, 0x7f}, 0x2c) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40480c5) (async, rerun: 64) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) (rerun: 64) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r9, @ANYBLOB="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"], 0x114}}, 0x0) 1.497759246s ago: executing program 33 (id=2): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x8b2c, &(0x7f0000000040)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'erspan0\x00', {0x1}, 0x5442}) 0s ago: executing program 34 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00040000000000ff0f00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000240)=0x1, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r4, 0x0, 0x0}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000000)=0xb, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000000)=0xb, 0x4) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000002c00)={0x0, 0x100000, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000002c00)={0x0, 0x100000, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0) r6 = epoll_create1(0x80000) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0xff}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x80000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x80000000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. [ 89.822937][ T5849] cgroup: Unknown subsys name 'net' [ 89.916119][ T5849] cgroup: Unknown subsys name 'cpuset' [ 89.925968][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.750536][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.574360][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.583587][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.599890][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.628599][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.637883][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.716478][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.731670][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.741912][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.767217][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.776631][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.799045][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.847837][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.874248][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.883073][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.893328][ T5183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.898423][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.909734][ T5183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.909905][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.928339][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.939063][ T5183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.972126][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.980635][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.990929][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.001791][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.010679][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.403658][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 96.473752][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 96.664040][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.672190][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.680096][ T5864] bridge_slave_0: entered allmulticast mode [ 96.687414][ T5864] bridge_slave_0: entered promiscuous mode [ 96.697195][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.704980][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.712789][ T5864] bridge_slave_1: entered allmulticast mode [ 96.721981][ T5864] bridge_slave_1: entered promiscuous mode [ 96.922496][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.941580][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.069418][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 97.096852][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.105486][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.114030][ T5869] bridge_slave_0: entered allmulticast mode [ 97.122506][ T5869] bridge_slave_0: entered promiscuous mode [ 97.132548][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 97.161579][ T5864] team0: Port device team_slave_0 added [ 97.184530][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.194141][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.205416][ T5869] bridge_slave_1: entered allmulticast mode [ 97.216139][ T5869] bridge_slave_1: entered promiscuous mode [ 97.248557][ T5864] team0: Port device team_slave_1 added [ 97.334790][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 97.354115][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.409124][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.436353][ T9] cfg80211: failed to load regulatory.db [ 97.445211][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.453016][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.484399][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.544563][ T5869] team0: Port device team_slave_0 added [ 97.552300][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.560228][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.595963][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.648431][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.656888][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.665070][ T5881] bridge_slave_0: entered allmulticast mode [ 97.671733][ T5876] Bluetooth: hci0: command tx timeout [ 97.679756][ T5881] bridge_slave_0: entered promiscuous mode [ 97.690004][ T5869] team0: Port device team_slave_1 added [ 97.696397][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.703917][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.711495][ T5881] bridge_slave_1: entered allmulticast mode [ 97.719643][ T5881] bridge_slave_1: entered promiscuous mode [ 97.800867][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.808967][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.816708][ T5873] bridge_slave_0: entered allmulticast mode [ 97.825626][ T5873] bridge_slave_0: entered promiscuous mode [ 97.856448][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.864354][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.893911][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.908986][ T5876] Bluetooth: hci1: command tx timeout [ 97.909986][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.926030][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.934638][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.943358][ T5873] bridge_slave_1: entered allmulticast mode [ 97.952349][ T5873] bridge_slave_1: entered promiscuous mode [ 97.979840][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.987032][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.017615][ T5876] Bluetooth: hci3: command tx timeout [ 98.017833][ T5876] Bluetooth: hci2: command tx timeout [ 98.029895][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.054824][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.068291][ T5183] Bluetooth: hci4: command tx timeout [ 98.120869][ T5864] hsr_slave_0: entered promiscuous mode [ 98.131062][ T5864] hsr_slave_1: entered promiscuous mode [ 98.183141][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.191725][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.202108][ T5872] bridge_slave_0: entered allmulticast mode [ 98.211600][ T5872] bridge_slave_0: entered promiscuous mode [ 98.224090][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.233292][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.244382][ T5872] bridge_slave_1: entered allmulticast mode [ 98.254487][ T5872] bridge_slave_1: entered promiscuous mode [ 98.279916][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.336590][ T5881] team0: Port device team_slave_0 added [ 98.346721][ T5881] team0: Port device team_slave_1 added [ 98.356481][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.388182][ T5869] hsr_slave_0: entered promiscuous mode [ 98.395002][ T5869] hsr_slave_1: entered promiscuous mode [ 98.402789][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 98.409626][ T5869] Cannot create hsr debugfs directory [ 98.493550][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.521222][ T5873] team0: Port device team_slave_0 added [ 98.528615][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.536568][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.565554][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.604527][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.633526][ T5873] team0: Port device team_slave_1 added [ 98.657982][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.667512][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.698520][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.763720][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.771117][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.799770][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.832031][ T5872] team0: Port device team_slave_0 added [ 98.841532][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.850369][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.879933][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.919719][ T5872] team0: Port device team_slave_1 added [ 99.006957][ T5881] hsr_slave_0: entered promiscuous mode [ 99.013922][ T5881] hsr_slave_1: entered promiscuous mode [ 99.021340][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 99.027265][ T5881] Cannot create hsr debugfs directory [ 99.102767][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.110940][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.139994][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.154987][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.163003][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.191835][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.275488][ T5873] hsr_slave_0: entered promiscuous mode [ 99.283270][ T5873] hsr_slave_1: entered promiscuous mode [ 99.290947][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 99.297623][ T5873] Cannot create hsr debugfs directory [ 99.464867][ T5872] hsr_slave_0: entered promiscuous mode [ 99.471571][ T5872] hsr_slave_1: entered promiscuous mode [ 99.478193][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 99.484595][ T5872] Cannot create hsr debugfs directory [ 99.748459][ T5183] Bluetooth: hci0: command tx timeout [ 99.762821][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.777483][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.798993][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.828558][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.978654][ T5869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.989293][ T5183] Bluetooth: hci1: command tx timeout [ 100.001385][ T5869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.015322][ T5869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.030521][ T5869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.068455][ T5183] Bluetooth: hci2: command tx timeout [ 100.068632][ T5876] Bluetooth: hci3: command tx timeout [ 100.148582][ T5876] Bluetooth: hci4: command tx timeout [ 100.154137][ T5881] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.170263][ T5881] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.183817][ T5881] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.210494][ T5881] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.332608][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.347840][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.362557][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.375593][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.521491][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.549660][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.578608][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.595048][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.629742][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.704886][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.733144][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.780587][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.788931][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.813630][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.825665][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.847401][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.855670][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.915498][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.923862][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.944088][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.951688][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.035270][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.053627][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.093643][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.102468][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.142659][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.195508][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.202809][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.216332][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.224023][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.257020][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.265081][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.317390][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.441227][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.565236][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.573237][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.632443][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.670884][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.679097][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.829258][ T5876] Bluetooth: hci0: command tx timeout [ 102.021458][ T5864] veth0_vlan: entered promiscuous mode [ 102.069106][ T5876] Bluetooth: hci1: command tx timeout [ 102.076216][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.133752][ T5864] veth1_vlan: entered promiscuous mode [ 102.148552][ T5876] Bluetooth: hci3: command tx timeout [ 102.154469][ T5876] Bluetooth: hci2: command tx timeout [ 102.230722][ T5876] Bluetooth: hci4: command tx timeout [ 102.245382][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.327451][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.411114][ T5864] veth0_macvtap: entered promiscuous mode [ 102.496566][ T5864] veth1_macvtap: entered promiscuous mode [ 102.555268][ T5869] veth0_vlan: entered promiscuous mode [ 102.623653][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.637855][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.647676][ T5869] veth1_vlan: entered promiscuous mode [ 102.676433][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.702724][ T5873] veth0_vlan: entered promiscuous mode [ 102.783844][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.797775][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.826627][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.835810][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.859414][ T5873] veth1_vlan: entered promiscuous mode [ 102.881127][ T5869] veth0_macvtap: entered promiscuous mode [ 102.911649][ T5869] veth1_macvtap: entered promiscuous mode [ 102.930446][ T5872] veth0_vlan: entered promiscuous mode [ 102.984069][ T5881] veth0_vlan: entered promiscuous mode [ 103.028788][ T5872] veth1_vlan: entered promiscuous mode [ 103.046868][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.106378][ T5881] veth1_vlan: entered promiscuous mode [ 103.126802][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.150521][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.159793][ T5873] veth0_macvtap: entered promiscuous mode [ 103.178872][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.206164][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.220798][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.233333][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.249813][ T5873] veth1_macvtap: entered promiscuous mode [ 103.273829][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.332389][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.345714][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.364004][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.408666][ T5872] veth0_macvtap: entered promiscuous mode [ 103.426852][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.447444][ T5881] veth0_macvtap: entered promiscuous mode [ 103.480608][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.502782][ T5881] veth1_macvtap: entered promiscuous mode [ 103.520565][ T5872] veth1_macvtap: entered promiscuous mode [ 103.572746][ T1341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.586162][ T1341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.647197][ T1341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.656983][ T1341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.696882][ T5977] syzkaller1: entered promiscuous mode [ 103.701517][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.705035][ T5977] syzkaller1: entered allmulticast mode [ 103.723636][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.728021][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.793427][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.823358][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.895416][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.903806][ T1318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.913351][ T1318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.923274][ T5876] Bluetooth: hci0: command tx timeout [ 103.925755][ T1318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.939839][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.947955][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.974822][ T1318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.006513][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.022629][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.070136][ T1318] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.082329][ T1318] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.114062][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.141401][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.159363][ T5876] Bluetooth: hci1: command tx timeout [ 104.228538][ T5183] Bluetooth: hci3: command tx timeout [ 104.234571][ T5876] Bluetooth: hci2: command tx timeout [ 104.311279][ T5876] Bluetooth: hci4: command tx timeout [ 104.361578][ T5980] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 104.463633][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.514491][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.607210][ T5987] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 104.756498][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.777185][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.809086][ T6000] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.911435][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.920949][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.562947][ T6001] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.570877][ T6001] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 105.637782][ T6001] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.664282][ T6001] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 105.696377][ T6001] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.712809][ T6001] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 105.752625][ T6001] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.766914][ T6001] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 105.792375][ T6001] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 105.808386][ T6001] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 106.045992][ T6022] FAULT_INJECTION: forcing a failure. [ 106.045992][ T6022] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.060800][ T6022] CPU: 0 UID: 0 PID: 6022 Comm: syz.3.9 Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 PREEMPT(full) [ 106.060826][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.060836][ T6022] Call Trace: [ 106.060842][ T6022] [ 106.060849][ T6022] dump_stack_lvl+0x189/0x250 [ 106.060875][ T6022] ? __pfx____ratelimit+0x10/0x10 [ 106.060897][ T6022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.060916][ T6022] ? __pfx__printk+0x10/0x10 [ 106.060939][ T6022] ? __might_fault+0xb0/0x130 [ 106.060972][ T6022] should_fail_ex+0x414/0x560 [ 106.061002][ T6022] _copy_from_user+0x2d/0xb0 [ 106.061025][ T6022] ___sys_sendmsg+0x158/0x2a0 [ 106.061049][ T6022] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.061106][ T6022] ? __fget_files+0x2a/0x420 [ 106.061134][ T6022] ? __fget_files+0x3a0/0x420 [ 106.061164][ T6022] __x64_sys_sendmsg+0x19b/0x260 [ 106.061186][ T6022] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 106.061213][ T6022] ? __pfx_ksys_write+0x10/0x10 [ 106.061233][ T6022] ? rcu_is_watching+0x15/0xb0 [ 106.061258][ T6022] ? do_syscall_64+0xbe/0x3b0 [ 106.061287][ T6022] do_syscall_64+0xfa/0x3b0 [ 106.061310][ T6022] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.061332][ T6022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.061350][ T6022] ? clear_bhb_loop+0x60/0xb0 [ 106.061373][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.061390][ T6022] RIP: 0033:0x7fa59e78ebe9 [ 106.061408][ T6022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.061422][ T6022] RSP: 002b:00007fa59f61d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.061443][ T6022] RAX: ffffffffffffffda RBX: 00007fa59e9b5fa0 RCX: 00007fa59e78ebe9 [ 106.061455][ T6022] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 106.061466][ T6022] RBP: 00007fa59f61d090 R08: 0000000000000000 R09: 0000000000000000 [ 106.061477][ T6022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.061488][ T6022] R13: 00007fa59e9b6038 R14: 00007fa59e9b5fa0 R15: 00007fff75d21288 [ 106.061520][ T6022] [ 133.281681][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.289134][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.711253][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.717606][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.588334][ T31] INFO: task syz-executor:5872 blocked for more than 143 seconds. [ 253.596394][ T31] Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 [ 253.604506][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.613376][ T31] task:syz-executor state:D stack:21832 pid:5872 tgid:5872 ppid:1 task_flags:0x400140 flags:0x00004004 [ 253.625494][ T31] Call Trace: [ 253.628884][ T31] [ 253.631874][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 253.636476][ T31] ? __lock_acquire+0xab9/0xd20 [ 253.642568][ T31] ? __lock_acquire+0xab9/0xd20 [ 253.647556][ T31] ? __pfx___schedule+0x10/0x10 [ 253.652805][ T31] ? schedule+0x91/0x360 [ 253.657083][ T31] schedule+0x165/0x360 [ 253.661326][ T31] schedule_preempt_disabled+0x13/0x30 [ 253.708099][ T31] __mutex_lock+0x7e6/0x1360 [ 253.712797][ T31] ? __mutex_lock+0x5b6/0x1360 [ 253.717630][ T31] ? genl_rcv_msg+0x10d/0x790 [ 253.755160][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 253.760512][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 253.765661][ T31] ? radix_tree_lookup+0x240/0x290 [ 253.770940][ T31] genl_rcv_msg+0x10d/0x790 [ 253.775471][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.780579][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 253.785635][ T31] ? __asan_memcpy+0x40/0x70 [ 253.790299][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 253.795700][ T31] netlink_rcv_skb+0x208/0x470 [ 253.800564][ T31] ? __lock_acquire+0xab9/0xd20 [ 253.805615][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.810703][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.816566][ T31] ? down_read+0x1ad/0x2e0 [ 253.821069][ T31] genl_rcv+0x28/0x40 [ 253.825085][ T31] netlink_unicast+0x82c/0x9e0 [ 253.829967][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 253.835368][ T31] ? netlink_sendmsg+0x642/0xb30 [ 253.840342][ T31] ? skb_put+0x11b/0x210 [ 253.844610][ T31] netlink_sendmsg+0x805/0xb30 [ 253.849472][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.854785][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 253.859763][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 253.865164][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.870505][ T31] __sock_sendmsg+0x219/0x270 [ 253.875204][ T31] __sys_sendto+0x3bd/0x520 [ 253.879762][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 253.884834][ T31] ? fput_close_sync+0x119/0x200 [ 253.889861][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 253.895175][ T31] __x64_sys_sendto+0xde/0x100 [ 253.900011][ T31] do_syscall_64+0xfa/0x3b0 [ 253.904540][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.910866][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 253.917037][ T31] ? clear_bhb_loop+0x60/0xb0 [ 253.921803][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.927729][ T31] RIP: 0033:0x7f5238990a7c [ 253.932330][ T31] RSP: 002b:00007ffc0e66d000 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 253.940902][ T31] RAX: ffffffffffffffda RBX: 00007f52396e4620 RCX: 00007f5238990a7c [ 253.949042][ T31] RDX: 0000000000000024 RSI: 00007f52396e4670 RDI: 0000000000000003 [ 253.957259][ T31] RBP: 0000000000000000 R08: 00007ffc0e66d054 R09: 000000000000000c [ 253.965395][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 253.973423][ T31] R13: 0000000000000000 R14: 00007f52396e4670 R15: 0000000000000000 [ 253.981513][ T31] [ 253.984688][ T31] INFO: task syz-executor:5881 blocked for more than 143 seconds. [ 253.992644][ T31] Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 [ 254.000415][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.009211][ T31] task:syz-executor state:D stack:21832 pid:5881 tgid:5881 ppid:1 task_flags:0x400140 flags:0x00004006 [ 254.021191][ T31] Call Trace: [ 254.024567][ T31] [ 254.027498][ T31] __schedule+0x1798/0x4cc0 [ 254.032184][ T31] ? __lock_acquire+0xab9/0xd20 [ 254.037112][ T31] ? __lock_acquire+0xab9/0xd20 [ 254.042040][ T31] ? __pfx___schedule+0x10/0x10 [ 254.046959][ T31] ? schedule+0x91/0x360 [ 254.051275][ T31] schedule+0x165/0x360 [ 254.056178][ T31] schedule_preempt_disabled+0x13/0x30 [ 254.061726][ T31] __mutex_lock+0x7e6/0x1360 [ 254.066353][ T31] ? __mutex_lock+0x5b6/0x1360 [ 254.071627][ T31] ? rfkill_register+0x37/0x8e0 [ 254.076527][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 254.081749][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 254.086726][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.092073][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 254.097726][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 254.103427][ T31] rfkill_register+0x37/0x8e0 [ 254.108536][ T31] wiphy_register+0x214c/0x28d0 [ 254.113445][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 254.119100][ T31] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 254.124252][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 254.130735][ T31] ieee80211_register_hw+0x3425/0x4080 [ 254.136284][ T31] ? ieee80211_register_hw+0x1451/0x4080 [ 254.142272][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 254.148699][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 254.155325][ T31] ? __hrtimer_setup+0x187/0x210 [ 254.161172][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 254.167212][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 254.173509][ T31] ? finish_task_switch+0x266/0x950 [ 254.179125][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 254.185253][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 254.191370][ T31] ? __sock_sendmsg+0x219/0x270 [ 254.196246][ T31] ? __sys_sendto+0x3bd/0x520 [ 254.201029][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 254.206256][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 254.212317][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 254.217926][ T31] ? __nla_parse+0x40/0x60 [ 254.222637][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 254.229373][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 254.234961][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 254.241107][ T31] ? bpf_lsm_capable+0x9/0x20 [ 254.245819][ T31] ? security_capable+0x7e/0x2e0 [ 254.250958][ T31] genl_rcv_msg+0x60e/0x790 [ 254.255537][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.260886][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 254.266489][ T31] ? __asan_memcpy+0x40/0x70 [ 254.271249][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 254.276667][ T31] netlink_rcv_skb+0x208/0x470 [ 254.281509][ T31] ? __lock_acquire+0xab9/0xd20 [ 254.286398][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.291682][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.297026][ T31] ? down_read+0x1ad/0x2e0 [ 254.301755][ T31] genl_rcv+0x28/0x40 [ 254.305767][ T31] netlink_unicast+0x82c/0x9e0 [ 254.310751][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 254.316160][ T31] ? netlink_sendmsg+0x642/0xb30 [ 254.321253][ T31] ? skb_put+0x11b/0x210 [ 254.325518][ T31] netlink_sendmsg+0x805/0xb30 [ 254.330362][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.335791][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 254.340769][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.346253][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.351733][ T31] __sock_sendmsg+0x219/0x270 [ 254.356576][ T31] __sys_sendto+0x3bd/0x520 [ 254.361296][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 254.366369][ T31] ? fput_close_sync+0x119/0x200 [ 254.371419][ T31] ? rcu_is_watching+0x15/0xb0 [ 254.376315][ T31] __x64_sys_sendto+0xde/0x100 [ 254.381180][ T31] do_syscall_64+0xfa/0x3b0 [ 254.385727][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.391012][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.397113][ T31] ? clear_bhb_loop+0x60/0xb0 [ 254.401929][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.407845][ T31] RIP: 0033:0x7fc5fdd90a7c [ 254.412325][ T31] RSP: 002b:00007ffe404c9b50 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 254.420806][ T31] RAX: ffffffffffffffda RBX: 00007fc5feae4620 RCX: 00007fc5fdd90a7c [ 254.428927][ T31] RDX: 0000000000000024 RSI: 00007fc5feae4670 RDI: 0000000000000003 [ 254.436928][ T31] RBP: 0000000000000000 R08: 00007ffe404c9ba4 R09: 000000000000000c [ 254.444976][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 254.453009][ T31] R13: 0000000000000000 R14: 00007fc5feae4670 R15: 0000000000000000 [ 254.461076][ T31] [ 254.464161][ T31] INFO: task kworker/1:4:5953 blocked for more than 144 seconds. [ 254.478608][ T31] Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 [ 254.486284][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.495045][ T31] task:kworker/1:4 state:D stack:24936 pid:5953 tgid:5953 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 254.507327][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 254.514084][ T31] Call Trace: [ 254.517485][ T31] [ 254.520515][ T31] __schedule+0x1798/0x4cc0 [ 254.525076][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 254.530504][ T31] ? __pfx___schedule+0x10/0x10 [ 254.535385][ T31] ? schedule+0x91/0x360 [ 254.539691][ T31] schedule+0x165/0x360 [ 254.544053][ T31] schedule_preempt_disabled+0x13/0x30 [ 254.549618][ T31] __mutex_lock+0x7e6/0x1360 [ 254.554250][ T31] ? __mutex_lock+0x5b6/0x1360 [ 254.559097][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 254.565718][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 254.570949][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 254.576705][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 254.582831][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 254.589160][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 254.594971][ T31] process_scheduled_works+0xade/0x17b0 [ 254.601920][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 254.607946][ T31] worker_thread+0x8a0/0xda0 [ 254.612838][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 254.619473][ T31] ? __kthread_parkme+0x7b/0x200 [ 254.624558][ T31] kthread+0x70e/0x8a0 [ 254.629031][ T31] ? __pfx_worker_thread+0x10/0x10 [ 254.634167][ T31] ? __pfx_kthread+0x10/0x10 [ 254.639123][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 254.644518][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.649751][ T31] ? __pfx_kthread+0x10/0x10 [ 254.654374][ T31] ret_from_fork+0x3f9/0x770 [ 254.659017][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 254.664146][ T31] ? __switch_to_asm+0x39/0x70 [ 254.669505][ T31] ? __switch_to_asm+0x33/0x70 [ 254.674411][ T31] ? __pfx_kthread+0x10/0x10 [ 254.679098][ T31] ret_from_fork_asm+0x1a/0x30 [ 254.683919][ T31] [ 254.687086][ T31] INFO: task syz.0.7:5991 blocked for more than 144 seconds. [ 254.698610][ T31] Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 [ 254.706284][ T31] Blocked by coredump. [ 254.710943][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.719680][ T31] task:syz.0.7 state:D stack:26328 pid:5991 tgid:5985 ppid:5864 task_flags:0x40054c flags:0x00004002 [ 254.731763][ T31] Call Trace: [ 254.735068][ T31] [ 254.738002][ T31] __schedule+0x1798/0x4cc0 [ 254.742583][ T31] ? __lock_acquire+0xab9/0xd20 [ 254.747556][ T31] ? __lock_acquire+0xab9/0xd20 [ 254.752601][ T31] ? __pfx___schedule+0x10/0x10 [ 254.758242][ T31] ? schedule+0x91/0x360 [ 254.762797][ T31] schedule+0x165/0x360 [ 254.767004][ T31] schedule_preempt_disabled+0x13/0x30 [ 254.772681][ T31] __mutex_lock+0x7e6/0x1360 [ 254.777396][ T31] ? __mutex_lock+0x5b6/0x1360 [ 254.782785][ T31] ? rfkill_unregister+0xc8/0x220 [ 254.788183][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 254.793461][ T31] ? __pfx_device_del+0x10/0x10 [ 254.798604][ T31] rfkill_unregister+0xc8/0x220 [ 254.803637][ T31] nfc_unregister_device+0x96/0x2a0 [ 254.808975][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 254.814734][ T31] virtual_ncidev_close+0x56/0x90 [ 254.819830][ T31] __fput+0x449/0xa70 [ 254.823834][ T31] task_work_run+0x1d4/0x260 [ 254.828520][ T31] ? __pfx_task_work_run+0x10/0x10 [ 254.833696][ T31] ? kmem_cache_free+0x18f/0x400 [ 254.838786][ T31] do_exit+0x6b5/0x2300 [ 254.842989][ T31] ? do_raw_spin_lock+0x121/0x290 [ 254.848155][ T31] ? __pfx_do_exit+0x10/0x10 [ 254.852795][ T31] do_group_exit+0x21c/0x2d0 [ 254.857643][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.862944][ T31] get_signal+0x1286/0x1340 [ 254.867511][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 254.873300][ T31] ? count_memcg_event_mm+0x21/0x260 [ 254.878830][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 254.885235][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 254.890794][ T31] exit_to_user_mode_loop+0x75/0x110 [ 254.896207][ T31] do_syscall_64+0x2bd/0x3b0 [ 254.900966][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.906187][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.912316][ T31] ? clear_bhb_loop+0x60/0xb0 [ 254.917027][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.923000][ T31] RIP: 0033:0x7f02be990a7c [ 254.927433][ T31] RSP: 002b:00007f02bf859ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 254.935903][ T31] RAX: 000000000000001c RBX: 00007f02bf859fc0 RCX: 00007f02be990a7c [ 254.944034][ T31] RDX: 000000000000001c RSI: 00007f02bf85a010 RDI: 0000000000000049 [ 254.952174][ T31] RBP: 0000000000000000 R08: 00007f02bf859f14 R09: 000000000000000c [ 254.960199][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000049 [ 254.968521][ T31] R13: 00007f02bf859f68 R14: 00007f02bf85a010 R15: 0000000000000000 [ 254.976607][ T31] [ 254.979729][ T31] INFO: task syz.1.2:6001 blocked for more than 144 seconds. [ 254.987140][ T31] Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 [ 254.994835][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.003580][ T31] task:syz.1.2 state:D stack:25048 pid:6001 tgid:5999 ppid:5873 task_flags:0x400040 flags:0x00004006 [ 255.015768][ T31] Call Trace: [ 255.019135][ T31] [ 255.022114][ T31] __schedule+0x1798/0x4cc0 [ 255.026626][ T31] ? __lock_acquire+0xab9/0xd20 [ 255.032449][ T31] ? __lock_acquire+0xab9/0xd20 [ 255.037531][ T31] ? __pfx___schedule+0x10/0x10 [ 255.042699][ T31] ? schedule+0x91/0x360 [ 255.046990][ T31] schedule+0x165/0x360 [ 255.051275][ T31] schedule_preempt_disabled+0x13/0x30 [ 255.058154][ T31] __mutex_lock+0x7e6/0x1360 [ 255.062815][ T31] ? __mutex_lock+0x5b6/0x1360 [ 255.067649][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 255.073035][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 255.078174][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.083404][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 255.089362][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 255.095890][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 255.101656][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 255.106797][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 255.112995][ T31] rfkill_set_block+0x1cf/0x440 [ 255.117892][ T31] rfkill_fop_write+0x44b/0x570 [ 255.122794][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 255.128595][ T31] ? security_kernfs_init_security+0x240/0x290 [ 255.135012][ T31] ? rw_verify_area+0x255/0x4d0 [ 255.140045][ T31] ? __lock_acquire+0xab9/0xd20 [ 255.144956][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 255.150483][ T31] vfs_write+0x27e/0xb30 [ 255.154812][ T31] ? __pfx_vfs_write+0x10/0x10 [ 255.159678][ T31] ? __fget_files+0x2a/0x420 [ 255.164772][ T31] ? __fget_files+0x2a/0x420 [ 255.169443][ T31] ? __fget_files+0x3a0/0x420 [ 255.174185][ T31] ? __fget_files+0x2a/0x420 [ 255.178920][ T31] ksys_write+0x145/0x250 [ 255.183375][ T31] ? __pfx_ksys_write+0x10/0x10 [ 255.188401][ T31] ? do_syscall_64+0xbe/0x3b0 [ 255.193121][ T31] do_syscall_64+0xfa/0x3b0 [ 255.197659][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.203085][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.209196][ T31] ? clear_bhb_loop+0x60/0xb0 [ 255.213960][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.219929][ T31] RIP: 0033:0x7fdcf838ebe9 [ 255.224405][ T31] RSP: 002b:00007fdcf9163038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.232890][ T31] RAX: ffffffffffffffda RBX: 00007fdcf85b6090 RCX: 00007fdcf838ebe9 [ 255.240930][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 255.249115][ T31] RBP: 00007fdcf8411e19 R08: 0000000000000000 R09: 0000000000000000 [ 255.257237][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.265286][ T31] R13: 00007fdcf85b6128 R14: 00007fdcf85b6090 R15: 00007fff0ff1fc98 [ 255.273351][ T31] [ 255.276593][ T31] INFO: task syz.3.10:6028 blocked for more than 145 seconds. [ 255.284259][ T31] Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 [ 255.291945][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.300788][ T31] task:syz.3.10 state:D stack:27976 pid:6028 tgid:6025 ppid:5869 task_flags:0x400040 flags:0x00004004 [ 255.312801][ T31] Call Trace: [ 255.316130][ T31] [ 255.319136][ T31] __schedule+0x1798/0x4cc0 [ 255.323778][ T31] ? __lock_acquire+0xab9/0xd20 [ 255.328807][ T31] ? __lock_acquire+0xab9/0xd20 [ 255.333700][ T31] ? __pfx___schedule+0x10/0x10 [ 255.338632][ T31] ? schedule+0x91/0x360 [ 255.342947][ T31] schedule+0x165/0x360 [ 255.347113][ T31] schedule_preempt_disabled+0x13/0x30 [ 255.353179][ T31] __mutex_lock+0x7e6/0x1360 [ 255.357812][ T31] ? __mutex_lock+0x5b6/0x1360 [ 255.362651][ T31] ? genl_rcv_msg+0x10d/0x790 [ 255.367346][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 255.372466][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 255.377629][ T31] ? radix_tree_lookup+0x240/0x290 [ 255.382864][ T31] genl_rcv_msg+0x10d/0x790 [ 255.387409][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.392493][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 255.397546][ T31] ? __asan_memcpy+0x40/0x70 [ 255.402297][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 255.407875][ T31] netlink_rcv_skb+0x208/0x470 [ 255.412744][ T31] ? __lock_acquire+0xab9/0xd20 [ 255.417646][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.422750][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 255.428149][ T31] ? down_read+0x1ad/0x2e0 [ 255.432613][ T31] genl_rcv+0x28/0x40 [ 255.436619][ T31] netlink_unicast+0x82c/0x9e0 [ 255.441492][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 255.446807][ T31] ? netlink_sendmsg+0x642/0xb30 [ 255.451860][ T31] ? skb_put+0x11b/0x210 [ 255.456123][ T31] netlink_sendmsg+0x805/0xb30 [ 255.460969][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.466288][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 255.471281][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.476601][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.481968][ T31] __sock_sendmsg+0x219/0x270 [ 255.486719][ T31] __sys_sendto+0x3bd/0x520 [ 255.491453][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 255.496707][ T31] ? count_memcg_event_mm+0x21/0x260 [ 255.502083][ T31] ? exc_page_fault+0x76/0xf0 [ 255.506809][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 255.512632][ T31] __x64_sys_sendto+0xde/0x100 [ 255.517606][ T31] do_syscall_64+0xfa/0x3b0 [ 255.522459][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.527712][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.533925][ T31] ? clear_bhb_loop+0x60/0xb0 [ 255.538769][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.544699][ T31] RIP: 0033:0x7fa59e790a7c [ 255.549157][ T31] RSP: 002b:00007fa59f61bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 255.557621][ T31] RAX: ffffffffffffffda RBX: 00007fa59f61bfc0 RCX: 00007fa59e790a7c [ 255.565790][ T31] RDX: 000000000000001c RSI: 00007fa59f61c010 RDI: 0000000000000004 [ 255.574322][ T31] RBP: 0000000000000000 R08: 00007fa59f61bf14 R09: 000000000000000c [ 255.582466][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 255.590662][ T31] R13: 00007fa59f61bf68 R14: 00007fa59f61c010 R15: 0000000000000000 [ 255.599029][ T31] [ 255.602147][ T31] INFO: task syz.3.10:6030 blocked for more than 145 seconds. [ 255.609699][ T31] Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 [ 255.617449][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.626211][ T31] task:syz.3.10 state:D stack:28360 pid:6030 tgid:6025 ppid:5869 task_flags:0x400040 flags:0x00004004 [ 255.638256][ T31] Call Trace: [ 255.641563][ T31] [ 255.644499][ T31] __schedule+0x1798/0x4cc0 [ 255.649177][ T31] ? __lock_acquire+0xab9/0xd20 [ 255.654073][ T31] ? __lock_acquire+0xab9/0xd20 [ 255.658987][ T31] ? __pfx___schedule+0x10/0x10 [ 255.663890][ T31] ? schedule+0x91/0x360 [ 255.668192][ T31] schedule+0x165/0x360 [ 255.672384][ T31] schedule_preempt_disabled+0x13/0x30 [ 255.677845][ T31] __mutex_lock+0x7e6/0x1360 [ 255.682499][ T31] ? __mutex_lock+0x5b6/0x1360 [ 255.687290][ T31] ? genl_rcv_msg+0x10d/0x790 [ 255.692149][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 255.697212][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 255.702611][ T31] ? radix_tree_lookup+0x240/0x290 [ 255.707877][ T31] genl_rcv_msg+0x10d/0x790 [ 255.712551][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.717648][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 255.722770][ T31] ? __asan_memcpy+0x40/0x70 [ 255.727417][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 255.732981][ T31] netlink_rcv_skb+0x208/0x470 [ 255.737797][ T31] ? __lock_acquire+0xab9/0xd20 [ 255.742752][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.747886][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 255.753323][ T31] ? down_read+0x1ad/0x2e0 [ 255.757788][ T31] genl_rcv+0x28/0x40 [ 255.762011][ T31] netlink_unicast+0x82c/0x9e0 [ 255.766852][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 255.772243][ T31] ? netlink_sendmsg+0x642/0xb30 [ 255.777244][ T31] ? skb_put+0x11b/0x210 [ 255.781629][ T31] netlink_sendmsg+0x805/0xb30 [ 255.786465][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.791845][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 255.796814][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.802193][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.807531][ T31] __sock_sendmsg+0x219/0x270 [ 255.812292][ T31] __sys_sendto+0x3bd/0x520 [ 255.816838][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 255.821994][ T31] ? fd_install+0x97/0x540 [ 255.826533][ T31] ? fd_install+0x30d/0x540 [ 255.831116][ T31] __x64_sys_sendto+0xde/0x100 [ 255.835941][ T31] do_syscall_64+0xfa/0x3b0 [ 255.840549][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.845871][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.852007][ T31] ? clear_bhb_loop+0x60/0xb0 [ 255.856739][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.862760][ T31] RIP: 0033:0x7fa59e790a7c [ 255.867210][ T31] RSP: 002b:00007fa59f5faec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 255.875690][ T31] RAX: ffffffffffffffda RBX: 00007fa59f5fafc0 RCX: 00007fa59e790a7c [ 255.883795][ T31] RDX: 000000000000001c RSI: 00007fa59f5fb010 RDI: 0000000000000005 [ 255.891834][ T31] RBP: 0000000000000000 R08: 00007fa59f5faf14 R09: 000000000000000c [ 255.899856][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 255.908076][ T31] R13: 00007fa59f5faf68 R14: 00007fa59f5fb010 R15: 0000000000000000 [ 255.916268][ T31] [ 255.919397][ T31] [ 255.919397][ T31] Showing all locks held in the system: [ 255.927325][ T31] 1 lock held by khungtaskd/31: [ 255.932266][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 255.942234][ T31] 2 locks held by getty/5624: [ 255.947114][ T31] #0: ffff8880303b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 255.957221][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 255.967398][ T31] 1 lock held by syz-executor/5864: [ 255.972646][ T31] #0: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 255.982916][ T31] 2 locks held by syz-executor/5872: [ 255.988456][ T31] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 255.996791][ T31] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 256.005914][ T31] 3 locks held by syz-executor/5881: [ 256.011261][ T31] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 256.019665][ T31] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 256.028721][ T31] #2: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 256.038761][ T31] 3 locks held by kworker/1:4/5953: [ 256.043984][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 256.055010][ T31] #1: ffffc9000470fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 256.068574][ T31] #2: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 256.080143][ T31] 2 locks held by syz.0.7/5991: [ 256.085029][ T31] #0: ffff8880294ca100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 256.095319][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 256.105720][ T31] 2 locks held by syz.1.2/6001: [ 256.110639][ T31] #0: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 256.120830][ T31] #1: ffff8880294ca100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 256.130585][ T31] 2 locks held by syz.3.10/6028: [ 256.135633][ T31] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 256.143872][ T31] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 256.157255][ T31] 2 locks held by syz.3.10/6030: [ 256.159273][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.163994][ T31] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 256.173339][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.177014][ T31] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 256.192467][ T31] 2 locks held by syz-executor/6095: [ 256.197960][ T31] #0: ffff88807f4f6918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 256.208160][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 256.218376][ T31] 2 locks held by syz-executor/6099: [ 256.223740][ T31] #0: ffff8880213ba118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 256.234343][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 256.244699][ T31] 2 locks held by syz-executor/6101: [ 256.250146][ T31] #0: ffff88807dfe3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 256.260249][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 256.270269][ T31] 2 locks held by syz-executor/6110: [ 256.275604][ T31] #0: ffff88807d150118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 256.285831][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 256.295934][ T31] 2 locks held by syz-executor/6111: [ 256.301681][ T31] #0: ffff88807a77a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 256.311889][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 256.321898][ T31] 2 locks held by syz-executor/6115: [ 256.327208][ T31] #0: ffff8880442c2918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 256.337308][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 256.347350][ T31] 2 locks held by syz-executor/6118: [ 256.352706][ T31] #0: ffff8880552ce118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 256.362914][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 256.373202][ T31] 2 locks held by syz-executor/6120: [ 256.378530][ T31] #0: ffff888055012918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 256.388613][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 256.398681][ T31] 2 locks held by syz-executor/6127: [ 256.403990][ T31] #0: ffff8880380e3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 256.414092][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 256.424124][ T31] 2 locks held by syz-executor/6129: [ 256.429648][ T31] #0: ffff888031c3b118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 256.439833][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 256.449860][ T31] 2 locks held by syz-executor/6131: [ 256.455181][ T31] #0: ffff8880288a1118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 256.465642][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 256.475802][ T31] 2 locks held by syz-executor/6134: [ 256.481171][ T31] #0: ffff888022776118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 256.491286][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 256.501390][ T31] 2 locks held by syz-executor/6136: [ 256.506703][ T31] #0: ffff88805eaed118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 256.516912][ T31] #1: ffffffff8f811788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 256.526980][ T31] [ 256.529395][ T31] ============================================= [ 256.529395][ T31] [ 256.538135][ T31] NMI backtrace for cpu 0 [ 256.538155][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 PREEMPT(full) [ 256.538177][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.538186][ T31] Call Trace: [ 256.538194][ T31] [ 256.538204][ T31] dump_stack_lvl+0x189/0x250 [ 256.538235][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.538258][ T31] ? __pfx__printk+0x10/0x10 [ 256.538297][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 256.538319][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 256.538341][ T31] ? __pfx__printk+0x10/0x10 [ 256.538369][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 256.538398][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 256.538422][ T31] watchdog+0xf93/0xfe0 [ 256.538454][ T31] ? watchdog+0x1de/0xfe0 [ 256.538487][ T31] kthread+0x70e/0x8a0 [ 256.538514][ T31] ? __pfx_watchdog+0x10/0x10 [ 256.538538][ T31] ? __pfx_kthread+0x10/0x10 [ 256.538564][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.538587][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.538609][ T31] ? __pfx_kthread+0x10/0x10 [ 256.538633][ T31] ret_from_fork+0x3f9/0x770 [ 256.538656][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 256.538682][ T31] ? __switch_to_asm+0x39/0x70 [ 256.538704][ T31] ? __switch_to_asm+0x33/0x70 [ 256.538727][ T31] ? __pfx_kthread+0x10/0x10 [ 256.538751][ T31] ret_from_fork_asm+0x1a/0x30 [ 256.538791][ T31] [ 256.538799][ T31] Sending NMI from CPU 0 to CPUs 1: [ 256.688818][ C1] NMI backtrace for cpu 1 [ 256.688838][ C1] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 PREEMPT(full) [ 256.688856][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.688882][ C1] Workqueue: events_unbound toggle_allocation_gate [ 256.688909][ C1] RIP: 0010:x2apic_send_IPI+0x73/0xe0 [ 256.688930][ C1] Code: 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 42 41 8b 16 0f ae f0 0f ae e8 83 fb 02 b8 00 04 00 00 0f 45 c3 b9 30 08 00 00 0f 30 <66> 90 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 89 fe 89 fd 48 c7 [ 256.688942][ C1] RSP: 0018:ffffc90000b97630 EFLAGS: 00000206 [ 256.688954][ C1] RAX: 00000000000000fb RBX: 00000000000000fb RCX: 0000000000000830 [ 256.688965][ C1] RDX: 0000000000000000 RSI: 00000000000000fb RDI: 0000000000000000 [ 256.688974][ C1] RBP: ffffc90000b977e0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 256.688984][ C1] R10: dffffc0000000000 R11: ffffffff81705100 R12: dffffc0000000000 [ 256.688994][ C1] R13: dffffc0000000000 R14: ffff8880b86201b0 R15: ffffffff8dbded10 [ 256.689006][ C1] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 256.689018][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.689028][ C1] CR2: 00005613a9502660 CR3: 000000000df36000 CR4: 00000000003526f0 [ 256.689043][ C1] Call Trace: [ 256.689049][ C1] [ 256.689057][ C1] smp_call_function_many_cond+0xab8/0x12d0 [ 256.689077][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 256.689101][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 256.689115][ C1] ? perf_event_text_poke+0x13d/0x190 [ 256.689129][ C1] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 256.689149][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 256.689162][ C1] ? rcu_is_watching+0x15/0xb0 [ 256.689176][ C1] ? trace_contention_end+0x39/0x120 [ 256.689195][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 256.689212][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 256.689227][ C1] smp_text_poke_batch_finish+0xb44/0x1130 [ 256.689251][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 256.689272][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 256.689297][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 256.689317][ C1] static_key_enable_cpuslocked+0x128/0x250 [ 256.689349][ C1] static_key_enable+0x1a/0x20 [ 256.689368][ C1] toggle_allocation_gate+0xad/0x240 [ 256.689387][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 256.689406][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 256.689423][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 256.689436][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 256.689450][ C1] process_scheduled_works+0xade/0x17b0 [ 256.689475][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 256.689496][ C1] worker_thread+0x8a0/0xda0 [ 256.689521][ C1] kthread+0x70e/0x8a0 [ 256.689539][ C1] ? __pfx_worker_thread+0x10/0x10 [ 256.689553][ C1] ? __pfx_kthread+0x10/0x10 [ 256.689570][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.689588][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.689605][ C1] ? __pfx_kthread+0x10/0x10 [ 256.689621][ C1] ret_from_fork+0x3f9/0x770 [ 256.689637][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 256.689653][ C1] ? __switch_to_asm+0x39/0x70 [ 256.689671][ C1] ? __switch_to_asm+0x33/0x70 [ 256.689687][ C1] ? __pfx_kthread+0x10/0x10 [ 256.689704][ C1] ret_from_fork_asm+0x1a/0x30 [ 256.689729][ C1] [ 256.694154][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 257.031210][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00125-g79116acb75e1 #0 PREEMPT(full) [ 257.043025][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.053270][ T31] Call Trace: [ 257.056556][ T31] [ 257.059493][ T31] dump_stack_lvl+0x99/0x250 [ 257.064180][ T31] ? __asan_memcpy+0x40/0x70 [ 257.068771][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.073976][ T31] ? __pfx__printk+0x10/0x10 [ 257.078595][ T31] vpanic+0x281/0x750 [ 257.082627][ T31] ? __pfx_vpanic+0x10/0x10 [ 257.087141][ T31] ? preempt_schedule+0xae/0xc0 [ 257.092039][ T31] ? preempt_schedule_common+0x83/0xd0 [ 257.097635][ T31] panic+0xb9/0xc0 [ 257.101370][ T31] ? __pfx_panic+0x10/0x10 [ 257.105791][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 257.111175][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 257.117429][ T31] watchdog+0xfd2/0xfe0 [ 257.121598][ T31] ? watchdog+0x1de/0xfe0 [ 257.126037][ T31] kthread+0x70e/0x8a0 [ 257.130141][ T31] ? __pfx_watchdog+0x10/0x10 [ 257.134825][ T31] ? __pfx_kthread+0x10/0x10 [ 257.139512][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.144718][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.149936][ T31] ? __pfx_kthread+0x10/0x10 [ 257.154530][ T31] ret_from_fork+0x3f9/0x770 [ 257.159129][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 257.164300][ T31] ? __switch_to_asm+0x39/0x70 [ 257.169069][ T31] ? __switch_to_asm+0x33/0x70 [ 257.173850][ T31] ? __pfx_kthread+0x10/0x10 [ 257.178561][ T31] ret_from_fork_asm+0x1a/0x30 [ 257.183380][ T31] [ 257.186788][ T31] Kernel Offset: disabled [ 257.191193][ T31] Rebooting in 86400 seconds..