Warning: Permanently added '[localhost]:24811' (ED25519) to the list of known hosts. 2026/05/30 13:56:41 parsed 1 programs syzkaller login: [ 64.937117][ T5618] cgroup: Unknown subsys name 'net' [ 64.997354][ T5618] cgroup: Unknown subsys name 'cpuset' [ 65.001816][ T5618] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.743351][ T5618] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.321765][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.358181][ T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.364208][ T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.414094][ T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.421126][ T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.882856][ T5656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.886868][ T5656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.890625][ T5656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.893535][ T5656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.896710][ T5656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.398490][ T5674] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.405748][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.409026][ T5674] bridge_slave_0: entered allmulticast mode [ 71.412113][ T5674] bridge_slave_0: entered promiscuous mode [ 71.437507][ T5674] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.439969][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.442300][ T5674] bridge_slave_1: entered allmulticast mode [ 71.445329][ T5674] bridge_slave_1: entered promiscuous mode [ 71.506532][ T5674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.514937][ T5674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.712325][ T5674] team0: Port device team_slave_0 added [ 71.716851][ T5674] team0: Port device team_slave_1 added [ 71.754297][ T5674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.757298][ T5674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.774896][ T5674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.814998][ T5674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.817277][ T5674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.828986][ T5674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.891218][ T5674] hsr_slave_0: entered promiscuous mode [ 71.894030][ T5674] hsr_slave_1: entered promiscuous mode [ 72.002157][ T5674] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.011137][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.014567][ T5674] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.019545][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.022525][ T5674] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.028507][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.031714][ T5674] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.035926][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.096118][ T5674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.111558][ T5674] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.120899][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.123902][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.131703][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.134076][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.365902][ T5674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.400185][ T5674] veth0_vlan: entered promiscuous mode [ 72.409092][ T5674] veth1_vlan: entered promiscuous mode [ 72.428920][ T5674] veth0_macvtap: entered promiscuous mode [ 72.434558][ T5674] veth1_macvtap: entered promiscuous mode [ 72.446883][ T5674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.454992][ T5674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.462428][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.465768][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.469064][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.471899][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/30 13:56:51 executed programs: 0 [ 72.572918][ T5002] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.581181][ T5002] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.590750][ T5002] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.596611][ T5002] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.599819][ T5002] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.621672][ T5656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.626921][ T5656] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.631174][ T5656] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.638665][ T5656] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.653268][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.657711][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.660702][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.666263][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.670823][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.676343][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.910692][ T5667] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.978802][ T5667] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.069921][ T5667] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.287902][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.290893][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.293527][ T5742] bridge_slave_0: entered allmulticast mode [ 73.296603][ T5742] bridge_slave_0: entered promiscuous mode [ 73.300106][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.302384][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.305456][ T5742] bridge_slave_1: entered allmulticast mode [ 73.308324][ T5742] bridge_slave_1: entered promiscuous mode [ 73.373862][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.391959][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.426289][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.428608][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.430793][ T5746] bridge_slave_0: entered allmulticast mode [ 73.433350][ T5746] bridge_slave_0: entered promiscuous mode [ 73.437209][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.439502][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.441810][ T5746] bridge_slave_1: entered allmulticast mode [ 73.444435][ T5746] bridge_slave_1: entered promiscuous mode [ 73.477488][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.480394][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.482714][ T5748] bridge_slave_0: entered allmulticast mode [ 73.486062][ T5748] bridge_slave_0: entered promiscuous mode [ 73.490963][ T5742] team0: Port device team_slave_0 added [ 73.499599][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.503293][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.507012][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.509913][ T5748] bridge_slave_1: entered allmulticast mode [ 73.513406][ T5748] bridge_slave_1: entered promiscuous mode [ 73.519218][ T5742] team0: Port device team_slave_1 added [ 73.522699][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.559172][ T5746] team0: Port device team_slave_0 added [ 73.563543][ T5746] team0: Port device team_slave_1 added [ 73.597117][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.601621][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.604854][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.607373][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.615454][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.619202][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.621889][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.630439][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.642339][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.644679][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.652295][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.656184][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.658210][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.667630][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.691845][ T5748] team0: Port device team_slave_0 added [ 73.709418][ T5748] team0: Port device team_slave_1 added [ 73.749929][ T5746] hsr_slave_0: entered promiscuous mode [ 73.752099][ T5746] hsr_slave_1: entered promiscuous mode [ 73.754965][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 73.756708][ T5746] Cannot create hsr debugfs directory [ 73.761556][ T5742] hsr_slave_0: entered promiscuous mode [ 73.764489][ T5742] hsr_slave_1: entered promiscuous mode [ 73.767557][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 73.769655][ T5742] Cannot create hsr debugfs directory [ 73.772789][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.776009][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.785912][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.789999][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.792215][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.800036][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.875872][ T5748] hsr_slave_0: entered promiscuous mode [ 73.878250][ T5748] hsr_slave_1: entered promiscuous mode [ 73.880507][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 73.882529][ T5748] Cannot create hsr debugfs directory [ 74.190022][ T5667] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.635224][ T5750] Bluetooth: hci0: command tx timeout [ 74.715356][ T5750] Bluetooth: hci1: command tx timeout [ 74.715798][ T5656] Bluetooth: hci2: command tx timeout [ 75.529040][ T5667] bridge_slave_1: left allmulticast mode [ 75.534786][ T5667] bridge_slave_1: left promiscuous mode [ 75.536994][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.543913][ T5667] bridge_slave_0: left allmulticast mode [ 75.549330][ T5667] bridge_slave_0: left promiscuous mode [ 75.551825][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.671954][ T5667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.677158][ T5667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.681696][ T5667] bond0 (unregistering): Released all slaves [ 75.690972][ T5357] 8021q: adding VLAN 0 to HW filter on device eth1 [ 75.794992][ T5667] hsr_slave_0: left promiscuous mode [ 75.797127][ T5667] hsr_slave_1: left promiscuous mode [ 75.799413][ T5667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.801670][ T5667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.804422][ T5667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.807035][ T5667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.818477][ T5667] veth1_macvtap: left promiscuous mode [ 75.820465][ T5667] veth0_macvtap: left promiscuous mode [ 75.822132][ T5667] veth1_vlan: left promiscuous mode [ 75.823773][ T5667] veth0_vlan: left promiscuous mode [ 76.032481][ T5667] team0 (unregistering): Port device team_slave_1 removed [ 76.042676][ T5667] team0 (unregistering): Port device team_slave_0 removed [ 76.130824][ T5357] 8021q: adding VLAN 0 to HW filter on device eth2 [ 76.329196][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.350461][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.353426][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.360707][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.364779][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.375999][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.378732][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.383117][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.470392][ T5742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.478049][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.488815][ T5742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.493860][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.501641][ T5742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.506622][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.516994][ T5742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.521190][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.556715][ T5748] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.561112][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.563896][ T5748] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.568039][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.570864][ T5748] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.575455][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.582952][ T5748] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.587863][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.627551][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.638688][ T1380] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.641565][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.676041][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.682587][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.697458][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.699854][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.713379][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.715920][ T5656] Bluetooth: hci0: command tx timeout [ 76.722242][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.725118][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.734326][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.736516][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.745717][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.747884][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.758253][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.792015][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.795857][ T5750] Bluetooth: hci2: command tx timeout [ 76.797504][ T5656] Bluetooth: hci1: command tx timeout [ 76.811029][ T813] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.813746][ T813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.822877][ T813] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.825208][ T813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.142434][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.151050][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.207146][ T5746] veth0_vlan: entered promiscuous mode [ 77.213928][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.239248][ T5746] veth1_vlan: entered promiscuous mode [ 77.245700][ T5742] veth0_vlan: entered promiscuous mode [ 77.259769][ T5742] veth1_vlan: entered promiscuous mode [ 77.283863][ T5748] veth0_vlan: entered promiscuous mode [ 77.298358][ T5746] veth0_macvtap: entered promiscuous mode [ 77.302479][ T5742] veth0_macvtap: entered promiscuous mode [ 77.308603][ T5748] veth1_vlan: entered promiscuous mode [ 77.312194][ T5746] veth1_macvtap: entered promiscuous mode [ 77.320432][ T5742] veth1_macvtap: entered promiscuous mode [ 77.331719][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.345500][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.352379][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.358572][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.375119][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.378530][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.389873][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.393684][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.408802][ T5748] veth0_macvtap: entered promiscuous mode [ 77.413501][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.418678][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.422445][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.428189][ T5748] veth1_macvtap: entered promiscuous mode [ 77.431429][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.487600][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.516541][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.529270][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.532429][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.556597][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.561051][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.565327][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.580745][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.585331][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.600978][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.615704][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.620359][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.652694][ T813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.665729][ T813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/30 13:56:56 executed programs: 6 [ 77.771098][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.775438][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.805900][ C1] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:623 [ 77.807462][ T813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.808814][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 23, name: ksoftirqd/1 [ 77.808826][ C1] preempt_count: 100, expected: 0 [ 77.812382][ T813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.814600][ C1] RCU nest depth: 0, expected: 0 [ 77.814607][ C1] 1 lock held by ksoftirqd/1/23: [ 77.814613][ C1] #0: ffffffff8e95ce00 (rcu_callback){....}-{0:0}, at: rcu_core+0x751/0x1070 [ 77.814641][ C1] Preemption disabled at: [ 77.814644][ C1] [] handle_softirqs+0xb0/0x840 [ 77.814671][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 77.814681][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 77.814686][ C1] Call Trace: [ 77.814690][ C1] [ 77.814694][ C1] dump_stack_lvl+0xe8/0x150 [ 77.814704][ C1] __might_resched+0x378/0x4d0 [ 77.814715][ C1] ? handle_softirqs+0xb0/0x840 [ 77.814724][ C1] __mutex_lock+0x11c/0x1550 [ 77.814739][ C1] ? __tcf_chain_put+0x60/0x820 [ 77.814751][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 77.814764][ C1] ? call_rcu+0x644/0x890 [ 77.814775][ C1] __tcf_chain_put+0x60/0x820 [ 77.814789][ C1] tcf_action_rcu_free+0x39d/0x440 [ 77.814800][ C1] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 77.814815][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 77.814827][ C1] ? rcu_core+0x751/0x1070 [ 77.814834][ C1] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 77.814844][ C1] rcu_core+0x7cd/0x1070 [ 77.814857][ C1] ? __pfx_rcu_core+0x10/0x10 [ 77.814869][ C1] handle_softirqs+0x22a/0x840 [ 77.814878][ C1] ? run_ksoftirqd+0x36/0x60 [ 77.814889][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 77.814898][ C1] run_ksoftirqd+0x36/0x60 [ 77.814906][ C1] smpboot_thread_fn+0x541/0xa50 [ 77.814915][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 77.814927][ C1] kthread+0x389/0x470 [ 77.814937][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 77.814945][ C1] ? __pfx_kthread+0x10/0x10 [ 77.814955][ C1] ret_from_fork+0x514/0xb70 [ 77.814965][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 77.814991][ C1] ? __switch_to+0xc79/0x1410 [ 77.815006][ C1] ? __pfx_kthread+0x10/0x10 [ 77.815016][ C1] ret_from_fork_asm+0x1a/0x30 [ 77.815032][ C1] [ 77.815036][ C1] [ 77.880624][ C1] ============================= [ 77.882521][ C1] [ BUG: Invalid wait context ] [ 77.884155][ C1] syzkaller #0 Tainted: G W [ 77.885928][ C1] ----------------------------- [ 77.887391][ C1] ksoftirqd/1/23 is trying to lock: [ 77.888929][ C1] ffff888171e3b0b0 (&block->lock){+.+.}-{4:4}, at: __tcf_chain_put+0x60/0x820 [ 77.891462][ C1] other info that might help us debug this: [ 77.893198][ C1] context-{3:3} [ 77.894345][ C1] 1 lock held by ksoftirqd/1/23: [ 77.896291][ C1] #0: ffffffff8e95ce00 (rcu_callback){....}-{0:0}, at: rcu_core+0x751/0x1070 [ 77.899646][ C1] stack backtrace: [ 77.901109][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT(full) [ 77.901129][ C1] Tainted: [W]=WARN [ 77.901134][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 77.901143][ C1] Call Trace: [ 77.901150][ C1] [ 77.901156][ C1] dump_stack_lvl+0xe8/0x150 [ 77.901173][ C1] __lock_acquire+0xec1/0x2cf0 [ 77.901192][ C1] ? __show_trace_log_lvl+0x478/0x550 [ 77.901212][ C1] ? __tcf_chain_put+0x60/0x820 [ 77.901232][ C1] lock_acquire+0x106/0x350 [ 77.901246][ C1] ? __tcf_chain_put+0x60/0x820 [ 77.901266][ C1] ? dump_stack_lvl+0x135/0x150 [ 77.901285][ C1] ? __might_resched+0x378/0x4d0 [ 77.901303][ C1] __mutex_lock+0x1a3/0x1550 [ 77.901318][ C1] ? __tcf_chain_put+0x60/0x820 [ 77.901342][ C1] ? __tcf_chain_put+0x60/0x820 [ 77.901361][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 77.901380][ C1] ? call_rcu+0x644/0x890 [ 77.901398][ C1] __tcf_chain_put+0x60/0x820 [ 77.901420][ C1] tcf_action_rcu_free+0x39d/0x440 [ 77.901440][ C1] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 77.901463][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 77.901484][ C1] ? rcu_core+0x751/0x1070 [ 77.901498][ C1] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 77.901517][ C1] rcu_core+0x7cd/0x1070 [ 77.901536][ C1] ? __pfx_rcu_core+0x10/0x10 [ 77.901554][ C1] handle_softirqs+0x22a/0x840 [ 77.901570][ C1] ? run_ksoftirqd+0x36/0x60 [ 77.901588][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 77.901604][ C1] run_ksoftirqd+0x36/0x60 [ 77.901620][ C1] smpboot_thread_fn+0x541/0xa50 [ 77.901636][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 77.901654][ C1] kthread+0x389/0x470 [ 77.901672][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 77.901688][ C1] ? __pfx_kthread+0x10/0x10 [ 77.901706][ C1] ret_from_fork+0x514/0xb70 [ 77.901722][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 77.901736][ C1] ? __switch_to+0xc79/0x1410 [ 77.901757][ C1] ? __pfx_kthread+0x10/0x10 [ 77.901773][ C1] ret_from_fork_asm+0x1a/0x30 [ 77.901796][ C1] [ 78.794618][ T5656] Bluetooth: hci0: command tx timeout [ 78.834786][ C0] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:623 [ 78.837629][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 15, name: ksoftirqd/0 [ 78.840328][ C0] preempt_count: 100, expected: 0 [ 78.841942][ C0] RCU nest depth: 0, expected: 0 [ 78.843464][ C0] INFO: lockdep is turned off. [ 78.845354][ C0] Preemption disabled at: [ 78.845364][ C0] [] handle_softirqs+0xb0/0x840 [ 78.849638][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 PREEMPT(full) [ 78.849660][ C0] Tainted: [W]=WARN [ 78.849666][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 78.849676][ C0] Call Trace: [ 78.849682][ C0] [ 78.849688][ C0] dump_stack_lvl+0xe8/0x150 [ 78.849708][ C0] __might_resched+0x378/0x4d0 [ 78.849727][ C0] ? handle_softirqs+0xb0/0x840 [ 78.849743][ C0] __mutex_lock+0x11c/0x1550 [ 78.849764][ C0] ? __tcf_chain_put+0x60/0x820 [ 78.849785][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 78.849804][ C0] ? trace_irq_enable+0x3b/0x140 [ 78.849831][ C0] __tcf_chain_put+0x60/0x820 [ 78.849853][ C0] tcf_action_rcu_free+0x39d/0x440 [ 78.849873][ C0] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 78.849895][ C0] ? rcu_is_watching+0x15/0xb0 [ 78.849941][ C0] ? trace_irq_enable+0x3b/0x140 [ 78.849961][ C0] ? rcu_core+0x751/0x1070 [ 78.849975][ C0] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 78.849993][ C0] rcu_core+0x7cd/0x1070 [ 78.850012][ C0] ? __pfx_rcu_core+0x10/0x10 [ 78.850026][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 78.850044][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 78.850062][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 78.850077][ C0] handle_softirqs+0x22a/0x840 [ 78.850092][ C0] ? run_ksoftirqd+0x36/0x60 [ 78.850110][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 78.850125][ C0] run_ksoftirqd+0x36/0x60 [ 78.850140][ C0] smpboot_thread_fn+0x541/0xa50 [ 78.850157][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 78.850175][ C0] kthread+0x389/0x470 [ 78.850193][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 78.850208][ C0] ? __pfx_kthread+0x10/0x10 [ 78.850225][ C0] ret_from_fork+0x514/0xb70 [ 78.850241][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 78.850256][ C0] ? __switch_to+0xc79/0x1410 [ 78.850276][ C0] ? __pfx_kthread+0x10/0x10 [ 78.850294][ C0] ret_from_fork_asm+0x1a/0x30 [ 78.850316][ C0] [ 78.925697][ T5750] Bluetooth: hci1: command tx timeout [ 78.927956][ T5656] Bluetooth: hci2: command tx timeout [ 79.854802][ C1] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:623 [ 79.857748][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 [ 79.860885][ C1] preempt_count: 101, expected: 0 [ 79.862901][ C1] RCU nest depth: 0, expected: 0 [ 79.864903][ C1] INFO: lockdep is turned off. [ 79.866776][ C1] Preemption disabled at: [ 79.866784][ C1] [<0000000000000000>] 0x0 [ 79.870196][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 PREEMPT(full) [ 79.870216][ C1] Tainted: [W]=WARN [ 79.870221][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 79.870229][ C1] Call Trace: [ 79.870235][ C1] [ 79.870240][ C1] dump_stack_lvl+0xe8/0x150 [ 79.870259][ C1] __might_resched+0x378/0x4d0 [ 79.870279][ C1] __mutex_lock+0x11c/0x1550 [ 79.870298][ C1] ? __tcf_chain_put+0x60/0x820 [ 79.870316][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 79.870331][ C1] ? trace_irq_enable+0x3b/0x140 [ 79.870351][ C1] __tcf_chain_put+0x60/0x820 [ 79.870369][ C1] tcf_action_rcu_free+0x39d/0x440 [ 79.870388][ C1] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 79.870406][ C1] ? rcu_is_watching+0x15/0xb0 [ 79.870423][ C1] ? trace_irq_enable+0x3b/0x140 [ 79.870438][ C1] ? rcu_core+0x751/0x1070 [ 79.870446][ C1] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 79.870455][ C1] rcu_core+0x7cd/0x1070 [ 79.870465][ C1] ? __pfx_rcu_core+0x10/0x10 [ 79.870476][ C1] ? sched_balance_domains+0x7ea/0x900 [ 79.870489][ C1] ? sched_balance_domains+0xf9/0x900 [ 79.870501][ C1] handle_softirqs+0x22a/0x840 [ 79.870515][ C1] ? __irq_exit_rcu+0xca/0x220 [ 79.870528][ C1] __irq_exit_rcu+0xca/0x220 [ 79.870539][ C1] irq_exit_rcu+0x9/0x30 [ 79.870551][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 79.870574][ C1] [ 79.870579][ C1] [ 79.870584][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 79.870599][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 79.870613][ C1] Code: 2b 7d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 c2 1f 00 fb f4 7c f7 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 79.870625][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 79.870637][ C1] RAX: ffff8882a9286000 RBX: ffffffff819a857a RCX: 0000000080000001 [ 79.870646][ C1] RDX: 0000000000000001 RSI: ffffffff8c28b7c0 RDI: ffffffff819a857a [ 79.870654][ C1] RBP: ffffc90000197f10 R08: ffff88823c6339db R09: 1ffff110478c673b [ 79.870662][ C1] R10: dffffc0000000000 R11: ffffed10478c673c R12: 0000000000000001 [ 79.870669][ C1] R13: 1ffff1102c09e000 R14: 0000000000000001 R15: 1ffff1102c09e000 [ 79.870677][ C1] ? do_idle+0x36a/0x5f0 [ 79.870692][ C1] ? do_idle+0x36a/0x5f0 [ 79.870705][ C1] default_idle+0x9/0x20 [ 79.870718][ C1] default_idle_call+0x72/0xb0 [ 79.870732][ C1] do_idle+0x36a/0x5f0 [ 79.870746][ C1] ? __pfx_do_idle+0x10/0x10 [ 79.870763][ C1] cpu_startup_entry+0x43/0x60 [ 79.870776][ C1] start_secondary+0x101/0x110 [ 79.870788][ C1] common_startup_64+0x13e/0x147 [ 79.870808][ C1] [ 80.854731][ C1] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:623 [ 80.858446][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5742, name: syz-executor [ 80.861773][ C1] preempt_count: 100, expected: 0 [ 80.863394][ C1] RCU nest depth: 0, expected: 0 [ 80.865012][ C1] INFO: lockdep is turned off. [ 80.866449][ C1] Preemption disabled at: [ 80.866453][ C1] [] handle_softirqs+0xb0/0x840 [ 80.869860][ C1] CPU: 1 UID: 0 PID: 5742 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 80.869878][ C1] Tainted: [W]=WARN [ 80.869882][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 80.869891][ C1] Call Trace: [ 80.869896][ C1] [ 80.869902][ C1] dump_stack_lvl+0xe8/0x150 [ 80.869920][ C1] __might_resched+0x378/0x4d0 [ 80.869937][ C1] ? handle_softirqs+0xb0/0x840 [ 80.869952][ C1] __mutex_lock+0x11c/0x1550 [ 80.869966][ C1] ? do_sock_getsockopt+0x51d/0x7e0 [ 80.869985][ C1] ? __x64_sys_getsockopt+0x1a4/0x240 [ 80.870005][ C1] ? do_syscall_64+0x15f/0x560 [ 80.870018][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.870035][ C1] ? __tcf_chain_put+0x60/0x820 [ 80.870054][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 80.870072][ C1] ? trace_irq_enable+0x3b/0x140 [ 80.870091][ C1] __tcf_chain_put+0x60/0x820 [ 80.870113][ C1] tcf_action_rcu_free+0x39d/0x440 [ 80.870132][ C1] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 80.870150][ C1] ? rcu_is_watching+0x15/0xb0 [ 80.870159][ C1] ? trace_irq_enable+0x3b/0x140 [ 80.870169][ C1] ? rcu_core+0x751/0x1070 [ 80.870177][ C1] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 80.870186][ C1] rcu_core+0x7cd/0x1070 [ 80.870196][ C1] ? __pfx_rcu_core+0x10/0x10 [ 80.870203][ C1] ? sched_balance_domains+0x7ea/0x900 [ 80.870213][ C1] ? sched_balance_domains+0xf9/0x900 [ 80.870221][ C1] handle_softirqs+0x22a/0x840 [ 80.870229][ C1] ? __irq_exit_rcu+0xca/0x220 [ 80.870237][ C1] __irq_exit_rcu+0xca/0x220 [ 80.870244][ C1] irq_exit_rcu+0x9/0x30 [ 80.870251][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 80.870263][ C1] [ 80.870266][ C1] [ 80.870269][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 80.870277][ C1] RIP: 0010:qlist_free_all+0x6f/0x100 [ 80.870289][ C1] Code: 49 8b 44 04 08 89 c2 83 e2 01 48 ff ca 48 09 c2 48 21 ca 0f b6 42 33 c1 e0 18 3d 00 00 00 f5 49 0f 45 d5 4c 8b 62 08 49 8b 2f <49> 63 84 24 b8 00 00 00 49 29 c7 4c 89 e7 4c 89 fe e8 4b e4 ff ff [ 80.870296][ C1] RSP: 0018:ffffc90003e9f440 EFLAGS: 00000246 [ 80.870304][ C1] RAX: 00000000f5000000 RBX: ffffc90003e9f478 RCX: ffffea0005c84b40 [ 80.870309][ C1] RDX: ffffea0005c84b40 RSI: ffffea00044f5600 RDI: ffff88817212d150 [ 80.870315][ C1] RBP: ffff88817263e598 R08: 0000000000000000 R09: ffffffff82310b6e [ 80.870320][ C1] R10: dffffc0000000000 R11: fffffbfff2061c3f R12: ffff888160417b40 [ 80.870325][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88817212d150 [ 80.870332][ C1] ? qlist_free_all+0x8e/0x100 [ 80.870343][ C1] kasan_quarantine_reduce+0x148/0x160 [ 80.870353][ C1] __kasan_slab_alloc+0x22/0x80 [ 80.870364][ C1] __kmalloc_node_noprof+0x498/0x7c0 [ 80.870375][ C1] ? __vmalloc_node_range_noprof+0x5ef/0x1750 [ 80.870385][ C1] ? __kmalloc_node_noprof+0x34f/0x7c0 [ 80.870395][ C1] __vmalloc_node_range_noprof+0x5ef/0x1750 [ 80.870407][ C1] ? __mutex_lock+0x319/0x1550 [ 80.870416][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 80.870426][ C1] ? xt_find_table_lock+0x51/0x3f0 [ 80.870435][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 80.870442][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 80.870449][ C1] ? rcu_is_watching+0x15/0xb0 [ 80.870457][ C1] ? net_generic+0x1e/0x240 [ 80.870465][ C1] ? alloc_counters+0x64/0x5d0 [ 80.870475][ C1] vzalloc_noprof+0xb2/0xe0 [ 80.870484][ C1] ? alloc_counters+0x64/0x5d0 [ 80.870493][ C1] alloc_counters+0x64/0x5d0 [ 80.870503][ C1] ? xt_find_table_lock+0x365/0x3f0 [ 80.870512][ C1] do_ipt_get_ctl+0xada/0x1240 [ 80.870521][ C1] ? rcu_is_watching+0x15/0xb0 [ 80.870529][ C1] ? do_ip_getsockopt+0x131d/0x1d40 [ 80.870539][ C1] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 80.870549][ C1] ? __mutex_trylock_common+0x158/0x260 [ 80.870559][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 80.870568][ C1] ? rcu_is_watching+0x15/0xb0 [ 80.870576][ C1] ? trace_contention_end+0x3d/0x140 [ 80.870586][ C1] ? rcu_is_watching+0x15/0xb0 [ 80.870594][ C1] ? lock_release+0x4b/0x3c0 [ 80.870602][ C1] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 80.870610][ C1] ? nf_getsockopt+0x34/0x290 [ 80.870619][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 80.870626][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.870636][ C1] nf_getsockopt+0x26e/0x290 [ 80.870646][ C1] ip_getsockopt+0x19e/0x230 [ 80.870656][ C1] ? __pfx_ip_getsockopt+0x10/0x10 [ 80.870665][ C1] ? __might_fault+0xcb/0x130 [ 80.870674][ C1] ? sock_common_getsockopt+0x2d/0xb0 [ 80.870684][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 80.870693][ C1] do_sock_getsockopt+0x51d/0x7e0 [ 80.870704][ C1] ? __asan_memcpy+0x40/0x70 [ 80.870719][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 80.870730][ C1] ? rcu_is_watching+0x15/0xb0 [ 80.870741][ C1] __x64_sys_getsockopt+0x1a4/0x240 [ 80.870752][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.870760][ C1] do_syscall_64+0x15f/0x560 [ 80.870767][ C1] ? trace_irq_disable+0x3b/0x140 [ 80.870778][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.870809][ C1] RIP: 0033:0x7f326419e62a [ 80.870817][ C1] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 80.870823][ C1] RSP: 002b:00007ffd38f686c8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 80.870830][ C1] RAX: ffffffffffffffda RBX: 00007ffd38f68750 RCX: 00007f326419e62a [ 80.870836][ C1] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 80.870840][ C1] RBP: 0000000000000003 R08: 00007ffd38f686ec R09: ff78736871746264 [ 80.870845][ C1] R10: 00007ffd38f68750 R11: 0000000000000216 R12: 00007f32643ecac0 [ 80.870850][ C1] R13: 00007ffd38f686ec R14: 0000000000000000 R15: 00007f32643ed180 [ 80.870858][ C1] [ 81.071223][ T5656] Bluetooth: hci0: command tx timeout [ 81.073076][ T5656] Bluetooth: hci2: command tx timeout [ 81.074737][ T5656] Bluetooth: hci1: command tx timeout [ 81.864653][ C0] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:623 [ 81.867527][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/0 [ 81.870304][ C0] preempt_count: 101, expected: 0 [ 81.871878][ C0] RCU nest depth: 0, expected: 0 [ 81.873409][ C0] INFO: lockdep is turned off. [ 81.874926][ C0] Preemption disabled at: [ 81.874930][ C0] [] schedule_preempt_disabled+0x1d/0x30 [ 81.878342][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT(full) [ 81.878355][ C0] Tainted: [W]=WARN [ 81.878357][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 81.878362][ C0] Call Trace: [ 81.878366][ C0] [ 81.878369][ C0] dump_stack_lvl+0xe8/0x150 [ 81.878380][ C0] __might_resched+0x378/0x4d0 [ 81.878390][ C0] ? schedule_preempt_disabled+0x1d/0x30 [ 81.878402][ C0] __mutex_lock+0x11c/0x1550 [ 81.878412][ C0] ? __tcf_chain_put+0x60/0x820 [ 81.878423][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 81.878433][ C0] ? trace_irq_enable+0x3b/0x140 [ 81.878445][ C0] __tcf_chain_put+0x60/0x820 [ 81.878456][ C0] tcf_action_rcu_free+0x39d/0x440 [ 81.878466][ C0] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 81.878477][ C0] ? rcu_is_watching+0x15/0xb0 [ 81.878486][ C0] ? trace_irq_enable+0x3b/0x140 [ 81.878496][ C0] ? rcu_core+0x751/0x1070 [ 81.878503][ C0] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 81.878512][ C0] rcu_core+0x7cd/0x1070 [ 81.878522][ C0] ? __pfx_rcu_core+0x10/0x10 [ 81.878529][ C0] ? sched_balance_domains+0x7ea/0x900 [ 81.878537][ C0] ? sched_balance_domains+0xf9/0x900 [ 81.878546][ C0] handle_softirqs+0x22a/0x840 [ 81.878554][ C0] ? __irq_exit_rcu+0xca/0x220 [ 81.878562][ C0] __irq_exit_rcu+0xca/0x220 [ 81.878569][ C0] irq_exit_rcu+0x9/0x30 [ 81.878576][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 81.878588][ C0] [ 81.878591][ C0] [ 81.878593][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 81.878602][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 81.878610][ C0] Code: 2b 7d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 c2 1f 00 fb f4 7c f7 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 81.878617][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 81.878624][ C0] RAX: ffff88818dc86000 RBX: ffffffff819a857a RCX: 0000000080000001 [ 81.878630][ C0] RDX: 0000000000000001 RSI: ffffffff8c28b7c0 RDI: ffffffff819a857a [ 81.878635][ C0] RBP: ffffffff8e607eb0 R08: ffff8881210339db R09: 1ffff1102420673b [ 81.878640][ C0] R10: dffffc0000000000 R11: ffffed102420673c R12: 0000000000000000 [ 81.878645][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 81.878651][ C0] ? do_idle+0x36a/0x5f0 [ 81.878660][ C0] ? do_idle+0x36a/0x5f0 [ 81.878668][ C0] default_idle+0x9/0x20 [ 81.878676][ C0] default_idle_call+0x72/0xb0 [ 81.878684][ C0] do_idle+0x36a/0x5f0 [ 81.878693][ C0] ? __pfx_do_idle+0x10/0x10 [ 81.878707][ C0] cpu_startup_entry+0x43/0x60 [ 81.878715][ C0] rest_init+0x2de/0x300 [ 81.878745][ C0] start_kernel+0x38a/0x3e0 [ 81.878754][ C0] x86_64_start_reservations+0x24/0x30 [ 81.878764][ C0] x86_64_start_kernel+0x143/0x1c0 [ 81.878773][ C0] common_startup_64+0x13e/0x147 [ 81.878786][ C0] 2026/05/30 13:57:01 executed programs: 160 [ 82.885283][ C1] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:623 [ 82.888138][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 23, name: ksoftirqd/1 [ 82.890825][ C1] preempt_count: 100, expected: 0 [ 82.892326][ C1] RCU nest depth: 0, expected: 0 [ 82.893858][ C1] INFO: lockdep is turned off. [ 82.895340][ C1] Preemption disabled at: [ 82.895344][ C1] [] handle_softirqs+0xb0/0x840 [ 82.898528][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT(full) [ 82.898539][ C1] Tainted: [W]=WARN [ 82.898542][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 82.898547][ C1] Call Trace: [ 82.898551][ C1] [ 82.898555][ C1] dump_stack_lvl+0xe8/0x150 [ 82.898566][ C1] __might_resched+0x378/0x4d0 [ 82.898576][ C1] ? handle_softirqs+0xb0/0x840 [ 82.898584][ C1] __mutex_lock+0x11c/0x1550 [ 82.898595][ C1] ? __tcf_chain_put+0x60/0x820 [ 82.898606][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 82.898615][ C1] ? trace_irq_enable+0x3b/0x140 [ 82.898627][ C1] __tcf_chain_put+0x60/0x820 [ 82.898638][ C1] tcf_action_rcu_free+0x39d/0x440 [ 82.898649][ C1] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 82.898681][ C1] ? rcu_is_watching+0x15/0xb0 [ 82.898690][ C1] ? trace_irq_enable+0x3b/0x140 [ 82.898701][ C1] ? rcu_core+0x751/0x1070 [ 82.898708][ C1] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 82.898717][ C1] rcu_core+0x7cd/0x1070 [ 82.898727][ C1] ? __pfx_rcu_core+0x10/0x10 [ 82.898736][ C1] handle_softirqs+0x22a/0x840 [ 82.898744][ C1] ? run_ksoftirqd+0x36/0x60 [ 82.898753][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 82.898761][ C1] run_ksoftirqd+0x36/0x60 [ 82.898769][ C1] smpboot_thread_fn+0x541/0xa50 [ 82.898777][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 82.898786][ C1] kthread+0x389/0x470 [ 82.898795][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 82.898803][ C1] ? __pfx_kthread+0x10/0x10 [ 82.898812][ C1] ret_from_fork+0x514/0xb70 [ 82.898821][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 82.898828][ C1] ? __switch_to+0xc79/0x1410 [ 82.898839][ C1] ? __pfx_kthread+0x10/0x10 [ 82.898848][ C1] ret_from_fork_asm+0x1a/0x30 [ 82.898859][ C1] [ 83.894647][ C0] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:623 [ 83.898170][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/0 [ 83.901643][ C0] preempt_count: 101, expected: 0 [ 83.903625][ C0] RCU nest depth: 0, expected: 0 [ 83.905700][ C0] INFO: lockdep is turned off. [ 83.907409][ C0] Preemption disabled at: [ 83.907415][ C0] [] schedule_preempt_disabled+0x1d/0x30 [ 83.911456][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT(full) [ 83.911478][ C0] Tainted: [W]=WARN [ 83.911484][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 83.911493][ C0] Call Trace: [ 83.911500][ C0] [ 83.911506][ C0] dump_stack_lvl+0xe8/0x150 [ 83.911526][ C0] __might_resched+0x378/0x4d0 [ 83.911544][ C0] ? schedule_preempt_disabled+0x1d/0x30 [ 83.911566][ C0] __mutex_lock+0x11c/0x1550 [ 83.911582][ C0] ? __tcf_chain_put+0x60/0x820 [ 83.911630][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 83.911646][ C0] ? trace_irq_enable+0x3b/0x140 [ 83.911668][ C0] __tcf_chain_put+0x60/0x820 [ 83.911688][ C0] tcf_action_rcu_free+0x39d/0x440 [ 83.911707][ C0] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 83.911726][ C0] ? rcu_is_watching+0x15/0xb0 [ 83.911740][ C0] ? trace_irq_enable+0x3b/0x140 [ 83.911756][ C0] ? rcu_core+0x751/0x1070 [ 83.911766][ C0] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 83.911780][ C0] rcu_core+0x7cd/0x1070 [ 83.911797][ C0] ? __pfx_rcu_core+0x10/0x10 [ 83.911810][ C0] ? sched_balance_domains+0x7ea/0x900 [ 83.911825][ C0] ? sched_balance_domains+0xf9/0x900 [ 83.911840][ C0] handle_softirqs+0x22a/0x840 [ 83.911856][ C0] ? __irq_exit_rcu+0xca/0x220 [ 83.911871][ C0] __irq_exit_rcu+0xca/0x220 [ 83.911885][ C0] irq_exit_rcu+0x9/0x30 [ 83.911897][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 83.911920][ C0] [ 83.911924][ C0] [ 83.911929][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 83.911945][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 83.911959][ C0] Code: 2b 7d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 c2 1f 00 fb f4 7c f7 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 83.911971][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 83.911985][ C0] RAX: ffff88818dc86000 RBX: ffffffff819a857a RCX: 0000000080000001 [ 83.911995][ C0] RDX: 0000000000000001 RSI: ffffffff8c28b7c0 RDI: ffffffff819a857a [ 83.912005][ C0] RBP: ffffffff8e607eb0 R08: ffff8881210339db R09: 1ffff1102420673b [ 83.912015][ C0] R10: dffffc0000000000 R11: ffffed102420673c R12: 0000000000000000 [ 83.912025][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 83.912036][ C0] ? do_idle+0x36a/0x5f0 [ 83.912052][ C0] ? do_idle+0x36a/0x5f0 [ 83.912075][ C0] default_idle+0x9/0x20 [ 83.912090][ C0] default_idle_call+0x72/0xb0 [ 83.912105][ C0] do_idle+0x36a/0x5f0 [ 83.912120][ C0] ? __pfx_do_idle+0x10/0x10 [ 83.912137][ C0] cpu_startup_entry+0x43/0x60 [ 83.912153][ C0] rest_init+0x2de/0x300 [ 83.912169][ C0] start_kernel+0x38a/0x3e0 [ 83.912184][ C0] x86_64_start_reservations+0x24/0x30 [ 83.912203][ C0] x86_64_start_kernel+0x143/0x1c0 [ 83.912219][ C0] common_startup_64+0x13e/0x147 [ 83.912241][ C0] [ 84.905450][ C0] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:623 [ 84.908602][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6347, name: syz.1.254 [ 84.911513][ C0] preempt_count: 101, expected: 0 [ 84.913140][ C0] RCU nest depth: 0, expected: 0 [ 84.915030][ C0] INFO: lockdep is turned off. [ 84.916840][ C0] Preemption disabled at: [ 84.916845][ C0] [] irq_work_queue+0x91/0x140 [ 84.920375][ C0] CPU: 0 UID: 0 PID: 6347 Comm: syz.1.254 Tainted: G W syzkaller #0 PREEMPT(full) [ 84.920388][ C0] Tainted: [W]=WARN [ 84.920390][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 84.920395][ C0] Call Trace: [ 84.920399][ C0] [ 84.920402][ C0] dump_stack_lvl+0xe8/0x150 [ 84.920414][ C0] __might_resched+0x378/0x4d0 [ 84.920424][ C0] ? irq_work_queue+0x91/0x140 [ 84.920439][ C0] __mutex_lock+0x11c/0x1550 [ 84.920448][ C0] ? do_syscall_64+0x15f/0x560 [ 84.920455][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.920465][ C0] ? __tcf_chain_put+0x60/0x820 [ 84.920476][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 84.920486][ C0] ? trace_irq_enable+0x3b/0x140 [ 84.920497][ C0] __tcf_chain_put+0x60/0x820 [ 84.920508][ C0] tcf_action_rcu_free+0x39d/0x440 [ 84.920518][ C0] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 84.920561][ C0] ? rcu_is_watching+0x15/0xb0 [ 84.920577][ C0] ? trace_irq_enable+0x3b/0x140 [ 84.920587][ C0] ? rcu_core+0x751/0x1070 [ 84.920594][ C0] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 84.920603][ C0] rcu_core+0x7cd/0x1070 [ 84.920613][ C0] ? __pfx_rcu_core+0x10/0x10 [ 84.920621][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 84.920627][ C0] ? sched_clock+0x3f/0x60 [ 84.920639][ C0] ? rcu_is_watching+0x15/0xb0 [ 84.920648][ C0] handle_softirqs+0x22a/0x840 [ 84.920656][ C0] ? __irq_exit_rcu+0xca/0x220 [ 84.920665][ C0] __irq_exit_rcu+0xca/0x220 [ 84.920672][ C0] irq_exit_rcu+0x9/0x30 [ 84.920679][ C0] sysvec_irq_work+0xa3/0xc0 [ 84.920689][ C0] [ 84.920691][ C0] [ 84.920694][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 84.920702][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 84.920713][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 00 38 37 0a cc 89 f6 31 d2 e9 26 b8 7a 03 66 0f 1f 44 00 [ 84.920720][ C0] RSP: 0018:ffffc9000760f188 EFLAGS: 00000246 [ 84.920728][ C0] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 84.920732][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 84.920737][ C0] RBP: ffffc9000760f260 R08: ffffc9000760f1e7 R09: 1ffff92000ec1e3c [ 84.920742][ C0] R10: dffffc0000000000 R11: fffff52000ec1e3d R12: ffffffff8eaa0a01 [ 84.920748][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888121031f30 [ 84.920756][ C0] arch_irq_work_raise+0x6d/0x80 [ 84.920763][ C0] __irq_work_queue_local+0x1eb/0x4c0 [ 84.920774][ C0] ? __pfx___irq_work_queue_local+0x10/0x10 [ 84.920785][ C0] ? lock_release+0x4b/0x3c0 [ 84.920795][ C0] irq_work_queue+0x99/0x140 [ 84.920806][ C0] __kfence_alloc+0x2b6/0x3e0 [ 84.920817][ C0] ? __kernel_text_address+0xd/0x30 [ 84.920827][ C0] ? __pfx___kfence_alloc+0x10/0x10 [ 84.920837][ C0] ? arch_stack_walk+0xfb/0x150 [ 84.920848][ C0] ? stack_trace_save+0xa9/0x100 [ 84.920858][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 84.920869][ C0] ? stack_depot_save_flags+0x33/0x810 [ 84.920880][ C0] ? __update_page_owner_handle+0x5a/0x570 [ 84.920890][ C0] ? rcu_is_watching+0x15/0xb0 [ 84.920899][ C0] ? rcu_is_watching+0x15/0xb0 [ 84.920907][ C0] ? lock_release+0x4b/0x3c0 [ 84.920914][ C0] ? post_alloc_hook+0x22d/0x280 [ 84.920923][ C0] ? get_page_from_freelist+0x2593/0x2610 [ 84.920940][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 84.920950][ C0] ? rcu_is_watching+0x15/0xb0 [ 84.920958][ C0] ? lock_acquire+0x5f/0x350 [ 84.920966][ C0] ? rcu_is_watching+0x15/0xb0 [ 84.920974][ C0] ? lock_release+0x4b/0x3c0 [ 84.920981][ C0] ? vm_area_alloc+0x24/0x140 [ 84.920991][ C0] kmem_cache_alloc_noprof+0x511/0x650 [ 84.921001][ C0] ? vm_area_alloc+0x24/0x140 [ 84.921010][ C0] ? __pfx_vma_merge_new_range+0x10/0x10 [ 84.921018][ C0] vm_area_alloc+0x24/0x140 [ 84.921028][ C0] mmap_region+0x11c6/0x22a0 [ 84.921037][ C0] ? unwind_next_frame+0xa6/0x2550 [ 84.921046][ C0] ? rcu_is_watching+0x15/0xb0 [ 84.921054][ C0] ? unwind_next_frame+0xa6/0x2550 [ 84.921062][ C0] ? __pfx_mmap_region+0x10/0x10 [ 84.921070][ C0] ? unwind_next_frame+0xa6/0x2550 [ 84.921078][ C0] ? rcu_is_watching+0x15/0xb0 [ 84.921086][ C0] ? unwind_next_frame+0xa6/0x2550 [ 84.921094][ C0] ? rcu_is_watching+0x15/0xb0 [ 84.921102][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 84.921109][ C0] ? rcu_is_watching+0x15/0xb0 [ 84.921117][ C0] ? mas_start+0x3d1/0x560 [ 84.921127][ C0] ? mas_next_slot+0xc3b/0xd10 [ 84.921135][ C0] ? mas_prev_slot+0xb7b/0xbf0 [ 84.921148][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 84.921163][ C0] ? cap_mmap_addr+0xaf/0x100 [ 84.921172][ C0] ? bpf_lsm_mmap_addr+0x9/0x50 [ 84.921185][ C0] do_mmap+0xc39/0x10c0 [ 84.921195][ C0] ? __pfx_do_mmap+0x10/0x10 [ 84.921203][ C0] ? down_write_killable+0x180/0x240 [ 84.921212][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 84.921220][ C0] ? sched_clock_cpu+0x74/0x440 [ 84.921228][ C0] ? apparmor_mmap_file+0x197/0x3e0 [ 84.921237][ C0] ? security_mmap_file+0x4df/0xa20 [ 84.921246][ C0] vm_mmap_pgoff+0x2c9/0x4f0 [ 84.921254][ C0] ? __pfx___schedule+0x10/0x10 [ 84.921265][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 84.921272][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 84.921284][ C0] ? ksys_mmap_pgoff+0xf3/0x760 [ 84.921292][ C0] ? rcu_is_watching+0x15/0xb0 [ 84.921300][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 84.921308][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.921315][ C0] do_syscall_64+0x15f/0x560 [ 84.921323][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.921330][ C0] RIP: 0033:0x7feffc99cbc2 [ 84.921337][ C0] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 84.921343][ C0] RSP: 002b:00007ffc30bea1a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 84.921351][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feffc99cbc2 [ 84.921356][ C0] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 84.921360][ C0] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 84.921364][ C0] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffc30bea310 [ 84.921369][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 84.921377][ C0] [ 85.924637][ C0] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:623 [ 85.927484][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/0 [ 85.930154][ C0] preempt_count: 101, expected: 0 [ 85.931702][ C0] RCU nest depth: 0, expected: 0 [ 85.933188][ C0] INFO: lockdep is turned off. [ 85.934689][ C0] Preemption disabled at: [ 85.934693][ C0] [] schedule_preempt_disabled+0x1d/0x30 [ 85.938167][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT(full) [ 85.938179][ C0] Tainted: [W]=WARN [ 85.938182][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 85.938187][ C0] Call Trace: [ 85.938191][ C0] [ 85.938195][ C0] dump_stack_lvl+0xe8/0x150 [ 85.938206][ C0] __might_resched+0x378/0x4d0 [ 85.938217][ C0] ? schedule_preempt_disabled+0x1d/0x30 [ 85.938229][ C0] __mutex_lock+0x11c/0x1550 [ 85.938239][ C0] ? __tcf_chain_put+0x60/0x820 [ 85.938251][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 85.938261][ C0] ? trace_irq_enable+0x3b/0x140 [ 85.938273][ C0] __tcf_chain_put+0x60/0x820 [ 85.938285][ C0] tcf_action_rcu_free+0x39d/0x440 [ 85.938295][ C0] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 85.938306][ C0] ? rcu_is_watching+0x15/0xb0 [ 85.938315][ C0] ? trace_irq_enable+0x3b/0x140 [ 85.938325][ C0] ? rcu_core+0x751/0x1070 [ 85.938333][ C0] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 85.938342][ C0] rcu_core+0x7cd/0x1070 [ 85.938352][ C0] ? __pfx_rcu_core+0x10/0x10 [ 85.938360][ C0] ? rcu_is_watching+0x15/0xb0 [ 85.938369][ C0] handle_softirqs+0x22a/0x840 [ 85.938378][ C0] ? __irq_exit_rcu+0xca/0x220 [ 85.938386][ C0] __irq_exit_rcu+0xca/0x220 [ 85.938394][ C0] irq_exit_rcu+0x9/0x30 [ 85.938400][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 85.938412][ C0] [ 85.938415][ C0] [ 85.938418][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.938426][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 85.938434][ C0] Code: 2b 7d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 c2 1f 00 fb f4 7c f7 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 85.938441][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 85.938449][ C0] RAX: ffff88818dc86000 RBX: ffffffff819a857a RCX: 0000000080000001 [ 85.938454][ C0] RDX: 0000000000000001 RSI: ffffffff8c28b7c0 RDI: ffffffff819a857a [ 85.938460][ C0] RBP: ffffffff8e607eb0 R08: ffff8881210339db R09: 1ffff1102420673b [ 85.938487][ C0] R10: dffffc0000000000 R11: ffffed102420673c R12: 0000000000000000 [ 85.938492][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 85.938498][ C0] ? do_idle+0x36a/0x5f0 [ 85.938508][ C0] ? do_idle+0x36a/0x5f0 [ 85.938516][ C0] default_idle+0x9/0x20 [ 85.938524][ C0] default_idle_call+0x72/0xb0 [ 85.938532][ C0] do_idle+0x36a/0x5f0 [ 85.938541][ C0] ? __pfx_do_idle+0x10/0x10 [ 85.938550][ C0] cpu_startup_entry+0x43/0x60 [ 85.938558][ C0] rest_init+0x2de/0x300 [ 85.938567][ C0] start_kernel+0x38a/0x3e0 [ 85.938576][ C0] x86_64_start_reservations+0x24/0x30 [ 85.938586][ C0] x86_64_start_kernel+0x143/0x1c0 [ 85.938596][ C0] common_startup_64+0x13e/0x147 [ 85.938608][ C0] [ 86.877935][ T10] cfg80211: failed to load regulatory.db [ 86.954873][ C0] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:623 [ 86.958792][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/0 [ 86.962445][ C0] preempt_count: 101, expected: 0 [ 86.964685][ C0] RCU nest depth: 0, expected: 0 [ 86.966841][ C0] INFO: lockdep is turned off. [ 86.968771][ C0] Preemption disabled at: [ 86.968780][ C0] [] schedule_preempt_disabled+0x1d/0x30 [ 86.973715][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 PREEMPT(full) [ 86.973734][ C0] Tainted: [W]=WARN [ 86.973739][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 86.973746][ C0] Call Trace: [ 86.973753][ C0] [ 86.973760][ C0] dump_stack_lvl+0xe8/0x150 [ 86.973780][ C0] __might_resched+0x378/0x4d0 [ 86.973797][ C0] ? schedule_preempt_disabled+0x1d/0x30 [ 86.973820][ C0] __mutex_lock+0x11c/0x1550 [ 86.973839][ C0] ? __tcf_chain_put+0x60/0x820 [ 86.973857][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 86.973875][ C0] ? trace_irq_enable+0x3b/0x140 [ 86.973896][ C0] __tcf_chain_put+0x60/0x820 [ 86.973916][ C0] tcf_action_rcu_free+0x39d/0x440 [ 86.973931][ C0] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 86.973946][ C0] ? rcu_is_watching+0x15/0xb0 [ 86.973963][ C0] ? trace_irq_enable+0x3b/0x140 [ 86.973980][ C0] ? rcu_core+0x751/0x1070 [ 86.973991][ C0] ? __pfx_tcf_action_rcu_free+0x10/0x10 [ 86.974008][ C0] rcu_core+0x7cd/0x1070 [ 86.974050][ C0] ? __pfx_rcu_core+0x10/0x10 [ 86.974064][ C0] ? sched_balance_domains+0x7ea/0x900 [ 86.974079][ C0] ? sched_balance_domains+0xf9/0x900 [ 86.974095][ C0] handle_softirqs+0x22a/0x840 [ 86.974110][ C0] ? __irq_exit_rcu+0xca/0x220 [ 86.974126][ C0] __irq_exit_rcu+0xca/0x220 [ 86.974140][ C0] irq_exit_rcu+0x9/0x30 [ 86.974152][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 86.974182][ C0] [ 86.974186][ C0] [ 86.974191][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.974207][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 86.974222][ C0] Code: 2b 7d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 03 c2 1f 00 fb f4 7c f7 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 86.974233][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 86.974246][ C0] RAX: ffff88818dc86000 RBX: ffffffff819a857a RCX: 0000000080000001 [ 86.974256][ C0] RDX: 0000000000000001 RSI: ffffffff8c28b7c0 RDI: ffffffff819a857a [ 86.974266][ C0] RBP: ffffffff8e607eb0 R08: ffff8881210339db R09: 1ffff1102420673b [ 86.974276][ C0] R10: dffffc0000000000 R11: ffffed102420673c R12: 0000000000000000 [ 86.974285][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 86.974296][ C0] ? do_idle+0x36a/0x5f0 [ 86.974312][ C0] ? do_idle+0x36a/0x5f0 [ 86.974327][ C0] default_idle+0x9/0x20 [ 86.974342][ C0] default_idle_call+0x72/0xb0 [ 86.974358][ C0] do_idle+0x36a/0x5f0 [ 86.974374][ C0] ? __pfx_do_idle+0x10/0x10 [ 86.974392][ C0] cpu_startup_entry+0x43/0x60 [ 86.974438][ C0] rest_init+0x2de/0x300 [ 86.974455][ C0] start_kernel+0x38a/0x3e0 [ 86.974471][ C0] x86_64_start_reservations+0x24/0x30 [ 86.974508][ C0] x86_64_start_kernel+0x143/0x1c0 [ 86.974527][ C0] common_startup_64+0x13e/0x147 [ 86.974550][ C0] 2026/05/30 13:57:06 executed programs: 334