Warning: Permanently added '10.128.1.199' (ED25519) to the list of known hosts. 2025/09/26 13:55:13 parsed 1 programs [ 111.108837][ T5844] cgroup: Unknown subsys name 'net' [ 111.382563][ T5844] cgroup: Unknown subsys name 'cpuset' [ 111.426914][ T5844] cgroup: Unknown subsys name 'rlimit' [ 113.530765][ T5844] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 122.834348][ T5912] chnl_net:caif_netlink_parms(): no params data found [ 123.266472][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.269264][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.269472][ T5912] bridge_slave_0: entered allmulticast mode [ 123.271651][ T5912] bridge_slave_0: entered promiscuous mode [ 123.280611][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.280911][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.281202][ T5912] bridge_slave_1: entered allmulticast mode [ 123.284693][ T5912] bridge_slave_1: entered promiscuous mode [ 123.521033][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.541101][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.741251][ T5912] team0: Port device team_slave_0 added [ 123.747671][ T5912] team0: Port device team_slave_1 added [ 123.911844][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.911865][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.911886][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.931832][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.931865][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.931895][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.154681][ T5912] hsr_slave_0: entered promiscuous mode [ 124.157294][ T5912] hsr_slave_1: entered promiscuous mode [ 124.743019][ T5912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.772977][ T5912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.806567][ T5912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.841582][ T5912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.023906][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.064612][ T5912] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.096319][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.096987][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.128266][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.128442][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.432003][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.507455][ T5912] veth0_vlan: entered promiscuous mode [ 125.520519][ T5912] veth1_vlan: entered promiscuous mode [ 125.580817][ T5912] veth0_macvtap: entered promiscuous mode [ 125.587815][ T5912] veth1_macvtap: entered promiscuous mode [ 125.613359][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.631824][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.653708][ T1113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.668565][ T1113] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.672864][ T1113] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.672927][ T1113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.017082][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.023192][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.024297][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.029507][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.040683][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.473379][ T1113] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.270859][ T1113] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.325179][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.325208][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.407609][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.407638][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 13:55:34 executed programs: 0 [ 128.244241][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.262186][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.264422][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.273838][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.276534][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.362342][ T1113] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.672956][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 129.155310][ T1113] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.206649][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.207020][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.207315][ T5949] bridge_slave_0: entered allmulticast mode [ 129.210456][ T5949] bridge_slave_0: entered promiscuous mode [ 129.213822][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.213991][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.214182][ T5949] bridge_slave_1: entered allmulticast mode [ 129.218799][ T5949] bridge_slave_1: entered promiscuous mode [ 129.433430][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.441450][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.661356][ T5949] team0: Port device team_slave_0 added [ 129.665344][ T5949] team0: Port device team_slave_1 added [ 129.885438][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.885462][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.885491][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.933403][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.933428][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.933460][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.097818][ T1113] bridge_slave_1: left allmulticast mode [ 130.098114][ T1113] bridge_slave_1: left promiscuous mode [ 130.101786][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.167641][ T1113] bridge_slave_0: left allmulticast mode [ 130.167673][ T1113] bridge_slave_0: left promiscuous mode [ 130.167896][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.329015][ T59] Bluetooth: hci0: command tx timeout [ 131.880266][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.936875][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.963097][ T1113] bond0 (unregistering): Released all slaves [ 132.152943][ T5949] hsr_slave_0: entered promiscuous mode [ 132.154058][ T5949] hsr_slave_1: entered promiscuous mode [ 132.154984][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 132.155093][ T5949] Cannot create hsr debugfs directory [ 132.405895][ T59] Bluetooth: hci0: command tx timeout [ 132.406136][ T1113] hsr_slave_0: left promiscuous mode [ 132.435997][ T1113] hsr_slave_1: left promiscuous mode [ 132.437351][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.437420][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.495139][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.495188][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.600689][ T1113] veth1_macvtap: left promiscuous mode [ 132.600935][ T1113] veth0_macvtap: left promiscuous mode [ 132.601183][ T1113] veth1_vlan: left promiscuous mode [ 132.601400][ T1113] veth0_vlan: left promiscuous mode [ 134.485765][ T59] Bluetooth: hci0: command tx timeout [ 134.926655][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 135.136857][ T1113] team0 (unregistering): Port device team_slave_0 removed [ 136.575872][ T59] Bluetooth: hci0: command tx timeout [ 138.903130][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.933986][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.980562][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.022620][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.643687][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.991266][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.011344][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.011580][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.074374][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.074571][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.539073][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.588934][ T5949] veth0_vlan: entered promiscuous mode [ 140.594777][ T5949] veth1_vlan: entered promiscuous mode [ 140.632451][ T5949] veth0_macvtap: entered promiscuous mode [ 140.637370][ T5949] veth1_macvtap: entered promiscuous mode [ 140.655007][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.673385][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.686226][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.687440][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.687487][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.687520][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.888731][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.888751][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.931242][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.931259][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 13:55:47 executed programs: 2 [ 141.132191][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.132278][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 2025/09/26 13:55:58 executed programs: 4 [ 151.505542][ C0] sched: DL replenish lagged too much [ 204.874580][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.909275][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.970489][ T5155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.975663][ T5155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.985651][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.701103][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.701941][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.342685][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.431254][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.431730][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.432911][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.433658][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.112305][ T5155] Bluetooth: hci1: command tx timeout [ 218.194259][ T5155] Bluetooth: hci1: command tx timeout [ 220.532615][ T5155] Bluetooth: hci1: command tx timeout [ 222.604019][ T5155] Bluetooth: hci1: command tx timeout [ 270.854819][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.885540][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.914097][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 288.468461][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 289.906721][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 289.916270][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 289.917082][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.586905][ T59] Bluetooth: hci0: command tx timeout [ 300.703618][ T59] Bluetooth: hci0: command tx timeout [ 305.941136][ T59] Bluetooth: hci0: command tx timeout [ 308.706382][ T59] Bluetooth: hci0: command tx timeout [ 330.854374][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.876060][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 338.197828][ T59] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 340.149927][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.281855][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 342.033507][ T6073] Bluetooth: hci2: Opcode 0x0c03 failed: -110 2025/09/26 13:59:13 executed programs: 5 [ 357.481365][ T38] INFO: task kworker/u8:5:83 blocked for more than 143 seconds. [ 357.481393][ T38] Not tainted syzkaller #0 [ 357.481403][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 357.481412][ T38] task:kworker/u8:5 state:D stack:19944 pid:83 tgid:83 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 357.481469][ T38] Workqueue: ipv6_addrconf addrconf_dad_work [ 357.481515][ T38] Call Trace: [ 357.481527][ T38] [ 357.481544][ T38] __schedule+0x16f3/0x4c20 [ 357.481604][ T38] ? __pfx___schedule+0x10/0x10 [ 357.481652][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.481685][ T38] rt_mutex_schedule+0x77/0xf0 [ 357.481706][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 357.481730][ T38] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 357.481770][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 357.481796][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 357.481821][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 357.481854][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.481887][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 357.481925][ T38] ? addrconf_dad_work+0x119/0x15a0 [ 357.481944][ T38] mutex_lock_nested+0x16a/0x1d0 [ 357.481967][ T38] ? addrconf_dad_work+0x119/0x15a0 [ 357.481991][ T38] addrconf_dad_work+0x119/0x15a0 [ 357.482014][ T38] ? __lock_acquire+0xab9/0xd20 [ 357.482047][ T38] ? __pfx_addrconf_dad_work+0x10/0x10 [ 357.482068][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 357.482103][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.482132][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 357.482154][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 357.482180][ T38] process_scheduled_works+0xade/0x17b0 [ 357.482232][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 357.482273][ T38] worker_thread+0x8a0/0xda0 [ 357.482300][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 357.482338][ T38] ? __kthread_parkme+0x7b/0x200 [ 357.482372][ T38] kthread+0x70e/0x8a0 [ 357.482404][ T38] ? __pfx_worker_thread+0x10/0x10 [ 357.482427][ T38] ? __pfx_kthread+0x10/0x10 [ 357.482461][ T38] ? __pfx_kthread+0x10/0x10 [ 357.482490][ T38] ret_from_fork+0x436/0x7d0 [ 357.482519][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 357.482549][ T38] ? __switch_to_asm+0x39/0x70 [ 357.482567][ T38] ? __switch_to_asm+0x33/0x70 [ 357.482584][ T38] ? __pfx_kthread+0x10/0x10 [ 357.482614][ T38] ret_from_fork_asm+0x1a/0x30 [ 357.482647][ T38] [ 357.482677][ T38] INFO: task kworker/0:2:990 blocked for more than 143 seconds. [ 357.482689][ T38] Not tainted syzkaller #0 [ 357.482699][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 357.482707][ T38] task:kworker/0:2 state:D stack:21240 pid:990 tgid:990 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 357.482757][ T38] Workqueue: events_power_efficient reg_check_chans_work [ 357.482775][ T38] Call Trace: [ 357.482781][ T38] [ 357.482793][ T38] __schedule+0x16f3/0x4c20 [ 357.482831][ T38] ? __lock_acquire+0xab9/0xd20 [ 357.482868][ T38] ? __pfx___schedule+0x10/0x10 [ 357.482918][ T38] rt_mutex_schedule+0x77/0xf0 [ 357.482936][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 357.482972][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 357.482999][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 357.483025][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 357.483050][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 357.483072][ T38] ? __lock_acquire+0xab9/0xd20 [ 357.483112][ T38] ? reg_check_chans_work+0x164/0xf30 [ 357.483135][ T38] ? __lock_acquire+0xab9/0xd20 [ 357.483165][ T38] ? reg_check_chans_work+0x164/0xf30 [ 357.483181][ T38] mutex_lock_nested+0x16a/0x1d0 [ 357.483204][ T38] ? do_raw_spin_lock+0x121/0x290 [ 357.483229][ T38] reg_check_chans_work+0x164/0xf30 [ 357.483253][ T38] ? __lock_acquire+0xab9/0xd20 [ 357.483285][ T38] ? __pfx_reg_check_chans_work+0x10/0x10 [ 357.483301][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 357.483331][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.483359][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 357.483381][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 357.483406][ T38] process_scheduled_works+0xade/0x17b0 [ 357.483458][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 357.483498][ T38] worker_thread+0x8a0/0xda0 [ 357.483546][ T38] kthread+0x70e/0x8a0 [ 357.483578][ T38] ? __pfx_worker_thread+0x10/0x10 [ 357.483601][ T38] ? __pfx_kthread+0x10/0x10 [ 357.483635][ T38] ? __pfx_kthread+0x10/0x10 [ 357.483665][ T38] ret_from_fork+0x436/0x7d0 [ 357.483692][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 357.483722][ T38] ? __switch_to_asm+0x39/0x70 [ 357.483739][ T38] ? __switch_to_asm+0x33/0x70 [ 357.483756][ T38] ? __pfx_kthread+0x10/0x10 [ 357.483785][ T38] ret_from_fork_asm+0x1a/0x30 [ 357.483819][ T38] [ 357.483921][ T38] [ 357.483921][ T38] Showing all locks held in the system: [ 357.483930][ T38] 3 locks held by kworker/u8:0/12: [ 357.483942][ T38] 4 locks held by kworker/u8:1/13: [ 357.483952][ T38] #0: ffff888030a9f938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 357.484004][ T38] #1: ffffc90000127bc0 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 357.484053][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 357.484108][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 357.484158][ T38] 7 locks held by rcuc/1/28: [ 357.484168][ T38] 2 locks held by ksoftirqd/1/30: [ 357.484178][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 357.484225][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 357.484273][ T38] 1 lock held by khungtaskd/38: [ 357.484282][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 357.484328][ T38] 3 locks held by kworker/u8:5/83: [ 357.484338][ T38] #0: ffff88802fd9c938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 357.484387][ T38] #1: ffffc900015cfbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 357.484434][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 357.484483][ T38] 4 locks held by kworker/0:2/990: [ 357.484493][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 357.484541][ T38] #1: ffffc90004be7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 357.484588][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 357.484630][ T38] #3: ffff888035490898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x164/0xf30 [ 357.484673][ T38] 5 locks held by kworker/u8:7/1113: [ 357.484684][ T38] 5 locks held by kworker/u8:8/1164: [ 357.484701][ T38] 3 locks held by dhcpcd/5501: [ 357.484712][ T38] 2 locks held by getty/5593: [ 357.484722][ T38] #0: ffff88823bfac8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 357.484777][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 357.484824][ T38] 1 lock held by syz-executor/5844: [ 357.484835][ T38] 1 lock held by syz-executor/5949: [ 357.484844][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 357.484898][ T38] 2 locks held by napi/wg1-0/5999: [ 357.484908][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 357.484955][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 357.485003][ T38] 2 locks held by kworker/0:8/6050: [ 357.485014][ T38] 1 lock held by syz-executor/6053: [ 357.485024][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 357.485069][ T38] 1 lock held by syz-executor/6061: [ 357.485079][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 357.485130][ T38] 1 lock held by dhcpcd/6079: [ 357.485140][ T38] #0: ffff888035942350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 357.485189][ T38] 2 locks held by syz-executor/6080: [ 357.485199][ T38] 3 locks held by dhcpcd/6081: [ 357.485209][ T38] #0: ffff888027348350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 357.485256][ T38] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 357.485302][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 357.485350][ T38] [ 357.485355][ T38] ============================================= [ 357.485355][ T38] [ 357.485372][ T38] NMI backtrace for cpu 0 [ 357.485394][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 357.485414][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 357.485428][ T38] Call Trace: [ 357.485435][ T38] [ 357.485442][ T38] dump_stack_lvl+0x189/0x250 [ 357.485472][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.485498][ T38] ? __pfx__printk+0x10/0x10 [ 357.485529][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 357.485557][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 357.485584][ T38] ? __pfx__printk+0x10/0x10 [ 357.485607][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 357.485633][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 357.485660][ T38] watchdog+0xf93/0xfe0 [ 357.485708][ T38] ? watchdog+0x1de/0xfe0 [ 357.485739][ T38] kthread+0x70e/0x8a0 [ 357.485771][ T38] ? __pfx_watchdog+0x10/0x10 [ 357.485796][ T38] ? __pfx_kthread+0x10/0x10 [ 357.485830][ T38] ? __pfx_kthread+0x10/0x10 [ 357.485861][ T38] ret_from_fork+0x436/0x7d0 [ 357.485889][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 357.485920][ T38] ? __switch_to_asm+0x39/0x70 [ 357.485938][ T38] ? __switch_to_asm+0x33/0x70 [ 357.485955][ T38] ? __pfx_kthread+0x10/0x10 [ 357.485986][ T38] ret_from_fork_asm+0x1a/0x30 [ 357.486020][ T38] [ 357.486066][ T38] Sending NMI from CPU 0 to CPUs 1: [ 357.486100][ C1] NMI backtrace for cpu 1 [ 357.486118][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 357.486136][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 357.486146][ C1] RIP: 0010:check_preemption_disabled+0x1e/0x120 [ 357.486180][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 48 83 ec 10 65 48 8b 05 fe f4 fe 06 48 89 44 24 08 65 8b 05 06 f5 fe 06 <65> 8b 0d fb f4 fe 06 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d db f4 fe [ 357.486193][ C1] RSP: 0018:ffffc90000a2e680 EFLAGS: 00000282 [ 357.486207][ C1] RAX: 0000000000000001 RBX: ffffffff8fa68f01 RCX: ffff88801cab0000 [ 357.486218][ C1] RDX: ffffc90000a2e801 RSI: ffffffff8b621660 RDI: ffffffff8b621620 [ 357.486229][ C1] RBP: dffffc0000000000 R08: ffffc90000a2e7f8 R09: 0000000000000000 [ 357.486240][ C1] R10: ffffc90000a2e858 R11: fffff52000145d0d R12: ffffc90000a2e808 [ 357.486252][ C1] R13: ffffc90000a28000 R14: ffffc90000a2e808 R15: ffffffff8172c165 [ 357.486263][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 357.486276][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.486285][ C1] CR2: 00007fa96fc41700 CR3: 00000000754bc000 CR4: 00000000003526f0 [ 357.486298][ C1] Call Trace: [ 357.486303][ C1] [ 357.486310][ C1] ? unwind_next_frame+0xa5/0x2390 [ 357.486331][ C1] rcu_is_watching+0x15/0xb0 [ 357.486355][ C1] ? unwind_next_frame+0xa5/0x2390 [ 357.486375][ C1] unwind_next_frame+0x1965/0x2390 [ 357.486400][ C1] ? unwind_next_frame+0xa5/0x2390 [ 357.486421][ C1] ? __unwind_start+0xf8/0x760 [ 357.486445][ C1] __unwind_start+0x5b9/0x760 [ 357.486468][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 357.486486][ C1] arch_stack_walk+0xe4/0x150 [ 357.486511][ C1] ? arch_stack_walk+0xe4/0x150 [ 357.486535][ C1] stack_trace_save+0x9c/0xe0 [ 357.486550][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 357.486566][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 357.486582][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 357.486599][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 357.486614][ C1] ? nft_do_chain+0x409/0x1920 [ 357.486632][ C1] ? __lock_acquire+0xab9/0xd20 [ 357.486651][ C1] kasan_save_track+0x3e/0x80 [ 357.486694][ C1] kasan_save_free_info+0x46/0x50 [ 357.486708][ C1] __kasan_slab_free+0x5b/0x80 [ 357.486727][ C1] ? skb_release_data+0x62d/0x7c0 [ 357.486740][ C1] kmem_cache_free+0x195/0x510 [ 357.486765][ C1] skb_release_data+0x62d/0x7c0 [ 357.486783][ C1] consume_skb+0x9e/0xf0 [ 357.486806][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 357.486825][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 357.486852][ C1] ? nf_ip_checksum+0x13c/0x510 [ 357.486870][ C1] nft_synproxy_do_eval+0x345/0x570 [ 357.486889][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 357.486913][ C1] nft_do_chain+0x409/0x1920 [ 357.486928][ C1] ? __asan_memset+0x22/0x50 [ 357.486949][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 357.486982][ C1] nft_do_chain_inet+0x25d/0x340 [ 357.486998][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 357.487013][ C1] ? __lock_acquire+0xab9/0xd20 [ 357.487038][ C1] ? NF_HOOK+0x9a/0x3a0 [ 357.487060][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 357.487076][ C1] nf_hook_slow+0xc5/0x220 [ 357.487102][ C1] NF_HOOK+0x206/0x3a0 [ 357.487123][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 357.487145][ C1] ? NF_HOOK+0x9a/0x3a0 [ 357.487164][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 357.487184][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 357.487207][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 357.487230][ C1] ? skb_dst+0x4f/0xd0 [ 357.487250][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 357.487273][ C1] NF_HOOK+0x309/0x3a0 [ 357.487294][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 357.487315][ C1] ? NF_HOOK+0x9a/0x3a0 [ 357.487335][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 357.487356][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 357.487382][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 357.487402][ C1] __netif_receive_skb+0x143/0x380 [ 357.487422][ C1] ? rt_spin_unlock+0x65/0x80 [ 357.487443][ C1] ? process_backlog+0x27b/0x900 [ 357.487463][ C1] process_backlog+0x31e/0x900 [ 357.487489][ C1] __napi_poll+0xb6/0x540 [ 357.487509][ C1] net_rx_action+0x707/0xe00 [ 357.487528][ C1] ? arch_stack_walk+0x11c/0x150 [ 357.487553][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 357.487573][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 357.487595][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 357.487621][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 357.487643][ C1] handle_softirqs+0x22f/0x710 [ 357.487666][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 357.487690][ C1] __local_bh_enable_ip+0x179/0x270 [ 357.487709][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 357.487733][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 357.487755][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 357.487776][ C1] rcu_cpu_kthread+0xc3d/0x1b50 [ 357.487800][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 357.487827][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 357.487861][ C1] ? __lock_acquire+0xab9/0xd20 [ 357.487881][ C1] ? __pfx___schedule+0x10/0x10 [ 357.487910][ C1] ? schedule+0x91/0x360 [ 357.487934][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 357.487952][ C1] smpboot_thread_fn+0x53f/0xa60 [ 357.487972][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 357.487994][ C1] kthread+0x70e/0x8a0 [ 357.488018][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 357.488037][ C1] ? __pfx_kthread+0x10/0x10 [ 357.488061][ C1] ? __pfx_kthread+0x10/0x10 [ 357.488084][ C1] ret_from_fork+0x436/0x7d0 [ 357.488105][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 357.488128][ C1] ? __switch_to_asm+0x39/0x70 [ 357.488142][ C1] ? __switch_to_asm+0x33/0x70 [ 357.488155][ C1] ? __pfx_kthread+0x10/0x10 [ 357.488178][ C1] ret_from_fork_asm+0x1a/0x30 [ 357.488200][ C1] [ 357.489149][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 357.489163][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 357.489185][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 357.489195][ T38] Call Trace: [ 357.489202][ T38] [ 357.489209][ T38] dump_stack_lvl+0x99/0x250 [ 357.489238][ T38] ? __asan_memcpy+0x40/0x70 [ 357.489258][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.489284][ T38] ? __pfx__printk+0x10/0x10 [ 357.489313][ T38] vpanic+0x281/0x750 [ 357.489342][ T38] ? __pfx_vpanic+0x10/0x10 [ 357.489367][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 357.489385][ T38] ? preempt_schedule+0xae/0xc0 [ 357.489414][ T38] ? preempt_schedule_common+0x83/0xd0 [ 357.489448][ T38] panic+0xb9/0xc0 [ 357.489474][ T38] ? __pfx_panic+0x10/0x10 [ 357.489502][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 357.489530][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 357.489557][ T38] watchdog+0xfd2/0xfe0 [ 357.489586][ T38] ? watchdog+0x1de/0xfe0 [ 357.489615][ T38] kthread+0x70e/0x8a0 [ 357.489663][ T38] ? __pfx_watchdog+0x10/0x10 [ 357.489688][ T38] ? __pfx_kthread+0x10/0x10 [ 357.489722][ T38] ? __pfx_kthread+0x10/0x10 [ 357.489753][ T38] ret_from_fork+0x436/0x7d0 [ 357.489781][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 357.489813][ T38] ? __switch_to_asm+0x39/0x70 [ 357.489830][ T38] ? __switch_to_asm+0x33/0x70 [ 357.489848][ T38] ? __pfx_kthread+0x10/0x10 [ 357.489879][ T38] ret_from_fork_asm+0x1a/0x30 [ 357.489914][ T38] [ 357.490265][ T38] Kernel Offset: disabled