last executing test programs: 2.719943425s ago: executing program 0 (id=55): readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) 2.719092281s ago: executing program 4 (id=57): socket$tipc(0x1e, 0x2, 0x0) 2.713082858s ago: executing program 3 (id=59): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 2.670232603s ago: executing program 0 (id=60): socket$packet(0x11, 0x2, 0x300) 2.667706249s ago: executing program 4 (id=61): socket$phonet_pipe(0x23, 0x5, 0x2) 2.667536567s ago: executing program 3 (id=62): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/mac80211_hwsim/', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/mac80211_hwsim/', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/mac80211_hwsim/', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/mac80211_hwsim/', 0x800, 0x0) 2.667267818s ago: executing program 4 (id=64): socket$inet6(0xa, 0x1, 0x0) 2.666223996s ago: executing program 1 (id=65): socket(0x1, 0x1, 0x0) 2.665934645s ago: executing program 0 (id=66): socket$inet_icmp_raw(0x2, 0x3, 0x1) 2.665171373s ago: executing program 2 (id=67): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2.663776086s ago: executing program 3 (id=68): socket$inet_mptcp(0x2, 0x1, 0x106) 2.615299221s ago: executing program 4 (id=69): socket$phonet(0x23, 0x2, 0x1) 2.614956718s ago: executing program 0 (id=70): socket(0x1e, 0x2, 0x0) 2.614672222s ago: executing program 3 (id=71): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.61453518s ago: executing program 1 (id=72): socket$caif_stream(0x25, 0x1, 0x0) 2.614463722s ago: executing program 2 (id=73): getuid() 2.614283731s ago: executing program 2 (id=74): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 2.614191538s ago: executing program 0 (id=75): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 2.614033445s ago: executing program 3 (id=76): pselect6(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) 2.564779231s ago: executing program 4 (id=77): socket$inet_smc(0x2b, 0x1, 0x0) 2.564480306s ago: executing program 2 (id=78): socket$l2tp(0x2, 0x2, 0x73) 2.564442897s ago: executing program 2 (id=79): socket$nl_route(0x10, 0x3, 0x0) 2.564402129s ago: executing program 1 (id=81): listen(0xffffffffffffffff, 0x0) 2.544729465s ago: executing program 1 (id=83): socket$inet6_dccp(0xa, 0x6, 0x0) 2.025716483s ago: executing program 1 (id=86): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.821002782s ago: executing program 3 (id=82): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.535692236s ago: executing program 0 (id=80): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.21409066s ago: executing program 2 (id=88): expanding glob: /sys/**/* 923.116461ms ago: executing program 1 (id=87): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=85): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. [ 52.787907][ T5816] cgroup: Unknown subsys name 'net' [ 52.900529][ T5816] cgroup: Unknown subsys name 'cpuset' [ 52.908357][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.204863][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.272388][ T5872] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.442515][ T5899] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.246344][ T5931] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.673066][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 58.110580][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.120506][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.137937][ T5929] bridge_slave_0: entered allmulticast mode [ 58.149920][ T5929] bridge_slave_0: entered promiscuous mode [ 58.167813][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.177044][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.184266][ T5929] bridge_slave_1: entered allmulticast mode [ 58.202063][ T5929] bridge_slave_1: entered promiscuous mode [ 58.237070][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.249206][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.307803][ T5929] team0: Port device team_slave_0 added [ 58.316293][ T5929] team0: Port device team_slave_1 added [ 58.344392][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.352857][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.380954][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.400623][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.407947][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.434260][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.483340][ T5929] hsr_slave_0: entered promiscuous mode [ 58.491030][ T5929] hsr_slave_1: entered promiscuous mode [ 58.584771][ T5929] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.597287][ T5929] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.606634][ T5929] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.617368][ T5929] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.679674][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.701936][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.713872][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.721177][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.735096][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.742189][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.859495][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.983836][ T5929] veth0_vlan: entered promiscuous mode [ 58.995987][ T5929] veth1_vlan: entered promiscuous mode [ 59.028132][ T5929] veth0_macvtap: entered promiscuous mode [ 59.038020][ T5929] veth1_macvtap: entered promiscuous mode [ 59.053016][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.065978][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.078758][ T5929] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.087744][ T5929] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.096439][ T5929] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.105468][ T5929] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.831190][ T5929] syz-executor (5929) used greatest stack depth: 18736 bytes left [ 63.362865][ T5993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.373136][ T5993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.383713][ T5993] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.392423][ T5993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.403383][ T5993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.412738][ T5993] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.420447][ T5993] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.423677][ T5998] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.438774][ T5998] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.482478][ T5998] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.490411][ T5998] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.498609][ T5998] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.568519][ T5998] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.572254][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.588110][ T5998] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.597302][ T5998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.605673][ T5998] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.613646][ T5998] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.621086][ T5998] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.643514][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.671036][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.681733][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.691296][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.705849][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.713962][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.739578][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.740901][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.760059][ T5993] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.768518][ T5993] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.776340][ T5993] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.787507][ T5993] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.795421][ T5993] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.831866][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.901977][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.102764][ T5990] chnl_net:caif_netlink_parms(): no params data found [ 64.148485][ T51] bridge_slave_1: left allmulticast mode [ 64.154326][ T51] bridge_slave_1: left promiscuous mode [ 64.162235][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.173994][ T51] bridge_slave_0: left allmulticast mode [ 64.181152][ T51] bridge_slave_0: left promiscuous mode [ 64.186814][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.453239][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.465879][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.476606][ T51] bond0 (unregistering): Released all slaves [ 64.490896][ T5995] chnl_net:caif_netlink_parms(): no params data found [ 64.780201][ T51] hsr_slave_0: left promiscuous mode [ 64.789192][ T51] hsr_slave_1: left promiscuous mode [ 64.798131][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.806090][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.814998][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.822555][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.843435][ T51] veth1_macvtap: left promiscuous mode [ 64.849784][ T51] veth0_macvtap: left promiscuous mode [ 64.855477][ T51] veth1_vlan: left promiscuous mode [ 64.861464][ T51] veth0_vlan: left promiscuous mode [ 65.165982][ T51] team0 (unregistering): Port device team_slave_1 removed [ 65.196503][ T51] team0 (unregistering): Port device team_slave_0 removed [ 65.490504][ T6000] chnl_net:caif_netlink_parms(): no params data found [ 65.491732][ T53] Bluetooth: hci0: command tx timeout [ 65.504568][ T5501] [ 65.506910][ T5501] ============================================ [ 65.513142][ T5501] WARNING: possible recursive locking detected [ 65.519320][ T5501] 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 Not tainted [ 65.526416][ T5501] -------------------------------------------- [ 65.532555][ T5501] dhcpcd/5501 is trying to acquire lock: [ 65.538171][ T5501] ffff88807bdccd28 (&dev->lock){+.+.}-{4:4}, at: register_netdevice+0x12d8/0x1b70 [ 65.547381][ T5501] [ 65.547381][ T5501] but task is already holding lock: [ 65.554720][ T5501] ffff88805eb3cd28 (&dev->lock){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 [ 65.563575][ T5501] [ 65.563575][ T5501] other info that might help us debug this: [ 65.571617][ T5501] Possible unsafe locking scenario: [ 65.571617][ T5501] [ 65.579048][ T5501] CPU0 [ 65.582314][ T5501] ---- [ 65.585581][ T5501] lock(&dev->lock); [ 65.589552][ T5501] lock(&dev->lock); [ 65.593519][ T5501] [ 65.593519][ T5501] *** DEADLOCK *** [ 65.593519][ T5501] [ 65.601646][ T5501] May be due to missing lock nesting notation [ 65.601646][ T5501] [ 65.609947][ T5501] 2 locks held by dhcpcd/5501: [ 65.614691][ T5501] #0: ffffffff8fed6848 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x34c/0x1d80 [ 65.623995][ T5501] #1: ffff88805eb3cd28 (&dev->lock){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 [ 65.633387][ T5501] [ 65.633387][ T5501] stack backtrace: [ 65.639268][ T5501] CPU: 1 UID: 0 PID: 5501 Comm: dhcpcd Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 65.639283][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 65.639294][ T5501] Call Trace: [ 65.639299][ T5501] [ 65.639305][ T5501] dump_stack_lvl+0x241/0x360 [ 65.639323][ T5501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.639336][ T5501] ? __pfx__printk+0x10/0x10 [ 65.639348][ T5501] ? lockdep_unlock+0x16a/0x300 [ 65.639367][ T5501] print_deadlock_bug+0x483/0x620 [ 65.639381][ T5501] ? lockdep_unlock+0x16a/0x300 [ 65.639397][ T5501] validate_chain+0x15e2/0x5920 [ 65.639417][ T5501] ? __pfx_validate_chain+0x10/0x10 [ 65.639431][ T5501] ? __pfx_validate_chain+0x10/0x10 [ 65.639447][ T5501] ? look_up_lock_class+0x77/0x170 [ 65.639461][ T5501] ? register_lock_class+0x102/0x980 [ 65.639479][ T5501] ? __pfx_register_lock_class+0x10/0x10 [ 65.639497][ T5501] ? mark_lock+0x9a/0x360 [ 65.639509][ T5501] __lock_acquire+0x1397/0x2100 [ 65.639530][ T5501] lock_acquire+0x1ed/0x550 [ 65.639547][ T5501] ? register_netdevice+0x12d8/0x1b70 [ 65.639575][ T5501] ? __pfx_lock_acquire+0x10/0x10 [ 65.639593][ T5501] ? __pfx___might_resched+0x10/0x10 [ 65.639608][ T5501] ? __pfx_lock_release+0x10/0x10 [ 65.639628][ T5501] __mutex_lock+0x19c/0x1010 [ 65.639642][ T5501] ? register_netdevice+0x12d8/0x1b70 [ 65.639655][ T5501] ? __mutex_unlock_slowpath+0x227/0x800 [ 65.639670][ T5501] ? _raw_spin_lock_irq+0xdf/0x120 [ 65.639683][ T5501] ? register_netdevice+0x12d8/0x1b70 [ 65.639695][ T5501] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 65.639709][ T5501] ? __pfx___mutex_lock+0x10/0x10 [ 65.639722][ T5501] ? _raw_spin_unlock_irq+0x23/0x50 [ 65.639737][ T5501] ? netdev_register_kobject+0x2b0/0x2f0 [ 65.639752][ T5501] register_netdevice+0x12d8/0x1b70 [ 65.639770][ T5501] ? __pfx_register_netdevice+0x10/0x10 [ 65.639792][ T5501] bpq_device_event+0x4b1/0x8d0 [ 65.639810][ T5501] ? lockdep_rtnl_is_held+0x26/0x40 [ 65.639825][ T5501] notifier_call_chain+0x1a5/0x3f0 [ 65.639843][ T5501] __dev_notify_flags+0x207/0x400 [ 65.639861][ T5501] ? dev_set_rx_mode+0xb8/0x2e0 [ 65.639879][ T5501] ? __pfx___dev_notify_flags+0x10/0x10 [ 65.639896][ T5501] ? __dev_change_flags+0x515/0x6f0 [ 65.639908][ T5501] ? __pfx___mutex_lock+0x10/0x10 [ 65.639921][ T5501] ? __pfx___dev_change_flags+0x10/0x10 [ 65.639934][ T5501] ? __pfx___mutex_lock+0x10/0x10 [ 65.639948][ T5501] netif_change_flags+0xf0/0x1a0 [ 65.639962][ T5501] dev_change_flags+0x146/0x270 [ 65.639980][ T5501] devinet_ioctl+0xea2/0x1d80 [ 65.639999][ T5501] ? __pfx_devinet_ioctl+0x10/0x10 [ 65.640016][ T5501] ? get_user_ifreq+0x1bb/0x200 [ 65.640031][ T5501] inet_ioctl+0x3d7/0x4f0 [ 65.640045][ T5501] ? __pfx_inet_ioctl+0x10/0x10 [ 65.640058][ T5501] ? tomoyo_path_number_perm+0x5dd/0x770 [ 65.640082][ T5501] sock_do_ioctl+0x158/0x460 [ 65.640099][ T5501] ? __pfx_sock_do_ioctl+0x10/0x10 [ 65.640114][ T5501] ? __pfx_lock_release+0x10/0x10 [ 65.640133][ T5501] sock_ioctl+0x626/0x8e0 [ 65.640148][ T5501] ? __pfx_sock_ioctl+0x10/0x10 [ 65.640163][ T5501] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 65.640180][ T5501] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 65.640198][ T5501] ? __pfx_sock_ioctl+0x10/0x10 [ 65.640212][ T5501] __se_sys_ioctl+0xf5/0x170 [ 65.640226][ T5501] do_syscall_64+0xf3/0x230 [ 65.640240][ T5501] ? clear_bhb_loop+0x35/0x90 [ 65.640257][ T5501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.640277][ T5501] RIP: 0033:0x7f957afb9d49 [ 65.640292][ T5501] Code: 5c c3 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <41> 89 c0 3d 00 f0 ff ff 76 10 48 8b 15 ae 60 0d 00 f7 d8 41 83 c8 [ 65.640302][ T5501] RSP: 002b:00007fff175397b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.640316][ T5501] RAX: ffffffffffffffda RBX: 00007f957aeeb6c0 RCX: 00007f957afb9d49 [ 65.640326][ T5501] RDX: 00007fff175499a8 RSI: 0000000000008914 RDI: 0000000000000018 [ 65.640335][ T5501] RBP: 00007fff17559b68 R08: 00007fff17549968 R09: 00007fff17549918 [ 65.640344][ T5501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.640352][ T5501] R13: 00007fff175499a8 R14: 0000000000000028 R15: 0000000000008914 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 65.640364][ T5501] [ 66.059492][ T53] Bluetooth: hci3: command tx timeout [ 66.065041][ T53] Bluetooth: hci1: command tx timeout [ 66.070970][ T5993] Bluetooth: hci2: command tx timeout [ 66.076383][ T5993] Bluetooth: hci4: command tx timeout [ 66.918844][ T51] bond0 (unregistering): Released all slaves [ 66.926783][ T51] bond0 (unregistering): Released all slaves [ 66.935044][ T51] bond0 (unregistering): Released all slaves [ 66.943187][ T51] bond0 (unregistering): Released all slaves [ 66.952452][ T51] bond0 (unregistering): Released all slaves [ 71.728421][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.734705][ T1297] ieee802154 phy1 wpan1: encryption failed: -22