Warning: Permanently added '10.128.10.3' (ED25519) to the list of known hosts. 2025/09/15 21:58:22 parsed 1 programs [ 232.512557][ T5868] cgroup: Unknown subsys name 'net' [ 232.794765][ T5868] cgroup: Unknown subsys name 'cpuset' [ 232.849935][ T5868] cgroup: Unknown subsys name 'rlimit' [ 234.811091][ T5868] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 241.691433][ T5918] chnl_net:caif_netlink_parms(): no params data found [ 242.163395][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.164523][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.164678][ T5918] bridge_slave_0: entered allmulticast mode [ 242.166758][ T5918] bridge_slave_0: entered promiscuous mode [ 242.198416][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.198503][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.198629][ T5918] bridge_slave_1: entered allmulticast mode [ 242.202452][ T5918] bridge_slave_1: entered promiscuous mode [ 242.517184][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.548221][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.844204][ T5918] team0: Port device team_slave_0 added [ 242.848503][ T5918] team0: Port device team_slave_1 added [ 243.021733][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.021747][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.021766][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.024515][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.024529][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.024557][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.268734][ T5918] hsr_slave_0: entered promiscuous mode [ 243.271853][ T5918] hsr_slave_1: entered promiscuous mode [ 243.681228][ T5918] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.719058][ T5918] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.753925][ T5918] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.853351][ T5918] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.975552][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.998373][ T5918] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.010032][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.010226][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.027847][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.028038][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.304358][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.356890][ T5918] veth0_vlan: entered promiscuous mode [ 244.371701][ T5918] veth1_vlan: entered promiscuous mode [ 244.411485][ T5918] veth0_macvtap: entered promiscuous mode [ 244.416117][ T5918] veth1_macvtap: entered promiscuous mode [ 244.441921][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.451336][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.465878][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.473902][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.479058][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.485894][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.285037][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.524780][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.605818][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.605845][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.752708][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.836153][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.836175][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.475556][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.838709][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.849795][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.861384][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.862902][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.863950][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.689655][ T57] bridge_slave_1: left allmulticast mode [ 247.689840][ T57] bridge_slave_1: left promiscuous mode [ 247.691186][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.803706][ T57] bridge_slave_0: left allmulticast mode [ 247.803740][ T57] bridge_slave_0: left promiscuous mode [ 247.803998][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.720125][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.780107][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.834313][ T57] bond0 (unregistering): Released all slaves [ 250.266434][ T57] hsr_slave_0: left promiscuous mode [ 250.299555][ T57] hsr_slave_1: left promiscuous mode [ 250.301485][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.301544][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.364373][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.364409][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.478682][ T57] veth1_macvtap: left promiscuous mode [ 250.478923][ T57] veth0_macvtap: left promiscuous mode [ 250.482951][ T57] veth1_vlan: left promiscuous mode [ 250.483402][ T57] veth0_vlan: left promiscuous mode [ 252.469964][ T57] team0 (unregistering): Port device team_slave_1 removed [ 252.660347][ T57] team0 (unregistering): Port device team_slave_0 removed 2025/09/15 21:58:49 executed programs: 0 [ 255.774008][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.777368][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.778155][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.804229][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.805435][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.675556][ T6023] chnl_net:caif_netlink_parms(): no params data found [ 257.041184][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.041342][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.041516][ T6023] bridge_slave_0: entered allmulticast mode [ 257.043407][ T6023] bridge_slave_0: entered promiscuous mode [ 257.045909][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.046055][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.046169][ T6023] bridge_slave_1: entered allmulticast mode [ 257.048040][ T6023] bridge_slave_1: entered promiscuous mode [ 257.225266][ T6023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.242243][ T6023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.835363][ T6023] team0: Port device team_slave_0 added [ 257.871187][ T5153] Bluetooth: hci0: command tx timeout [ 258.110695][ T6023] team0: Port device team_slave_1 added [ 258.400497][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.400514][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.400540][ T6023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.402757][ T6023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.402771][ T6023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.402794][ T6023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.648057][ T6023] hsr_slave_0: entered promiscuous mode [ 258.649040][ T6023] hsr_slave_1: entered promiscuous mode [ 259.949358][ T5153] Bluetooth: hci0: command tx timeout [ 260.599133][ T6023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 260.644619][ T6023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 260.687269][ T6023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 260.724601][ T6023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 260.835929][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.836030][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.947324][ T6023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.978886][ T6023] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.992508][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.992766][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.004726][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.007363][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.097114][ T6023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.377905][ T6023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.446959][ T6023] veth0_vlan: entered promiscuous mode [ 261.468970][ T6023] veth1_vlan: entered promiscuous mode [ 261.532457][ T6023] veth0_macvtap: entered promiscuous mode [ 261.540768][ T6023] veth1_macvtap: entered promiscuous mode [ 261.573039][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.612526][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.634523][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.634983][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.639045][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.644421][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.887506][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.887527][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.955878][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.955908][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/15 21:58:56 executed programs: 2 [ 262.029369][ T5153] Bluetooth: hci0: command tx timeout [ 264.109810][ T5153] Bluetooth: hci0: command tx timeout [ 265.799212][ C0] sched: DL replenish lagged too much 2025/09/15 21:59:04 executed programs: 4 2025/09/15 21:59:10 executed programs: 5 [ 329.824693][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.791937][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.818025][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.837213][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.530401][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.469614][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.470538][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.895942][ T59] Bluetooth: hci1: command tx timeout [ 350.849290][ T59] Bluetooth: hci1: command tx timeout [ 352.958898][ T59] Bluetooth: hci1: command tx timeout [ 355.728365][ T59] Bluetooth: hci1: command tx timeout [ 379.265092][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.267609][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.268558][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.269809][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.270825][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.486945][ T5153] Bluetooth: hci2: command tx timeout [ 386.482973][ T5153] Bluetooth: hci2: command tx timeout [ 386.614440][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.631977][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.718878][ T5153] Bluetooth: hci2: command tx timeout [ 392.266951][ T5153] Bluetooth: hci2: command tx timeout [ 443.840104][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 446.400664][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.417777][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.454645][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 446.686381][ T59] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 448.366792][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 450.409578][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 452.447561][ T6221] Bluetooth: hci0: Opcode 0x1001 failed: -110 [ 452.497752][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 468.766440][ T5153] Bluetooth: hci1: command 0x0406 tx timeout 2025/09/15 22:02:22 executed programs: 6 [ 478.618589][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 481.331623][ T6227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 481.937300][ T6227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 481.939998][ T6227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 481.940865][ T6227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 484.179295][ T38] INFO: task kworker/1:1:45 blocked for more than 144 seconds. [ 484.179325][ T38] Not tainted syzkaller #0 [ 484.179335][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 484.179348][ T38] task:kworker/1:1 state:D stack:22024 pid:45 tgid:45 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 484.179412][ T38] Workqueue: events_power_efficient reg_check_chans_work [ 484.179464][ T38] Call Trace: [ 484.179471][ T38] [ 484.179485][ T38] __schedule+0x16f3/0x4c20 [ 484.179527][ T38] ? __lock_acquire+0xab9/0xd20 [ 484.179566][ T38] ? __pfx___schedule+0x10/0x10 [ 484.179618][ T38] rt_mutex_schedule+0x77/0xf0 [ 484.179637][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 484.179675][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 484.179702][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 484.179729][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 484.179753][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 484.179775][ T38] ? __lock_acquire+0xab9/0xd20 [ 484.179813][ T38] ? reg_check_chans_work+0x164/0xf30 [ 484.179845][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 484.179875][ T38] ? __lock_acquire+0xab9/0xd20 [ 484.179907][ T38] ? reg_check_chans_work+0x164/0xf30 [ 484.179935][ T38] mutex_lock_nested+0x16a/0x1d0 [ 484.179957][ T38] ? reg_check_chans_work+0x95/0xf30 [ 484.179991][ T38] reg_check_chans_work+0x164/0xf30 [ 484.180039][ T38] ? __lock_acquire+0xab9/0xd20 [ 484.180093][ T38] ? __pfx_reg_check_chans_work+0x10/0x10 [ 484.180126][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 484.180160][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 484.180190][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 484.180215][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 484.180245][ T38] process_scheduled_works+0xade/0x17b0 [ 484.180302][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 484.180348][ T38] worker_thread+0x8a0/0xda0 [ 484.180404][ T38] kthread+0x70e/0x8a0 [ 484.180440][ T38] ? __pfx_worker_thread+0x10/0x10 [ 484.180467][ T38] ? __pfx_kthread+0x10/0x10 [ 484.180504][ T38] ? __pfx_kthread+0x10/0x10 [ 484.180537][ T38] ret_from_fork+0x439/0x7d0 [ 484.180568][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 484.180615][ T38] ? __switch_to_asm+0x39/0x70 [ 484.180633][ T38] ? __switch_to_asm+0x33/0x70 [ 484.180650][ T38] ? __pfx_kthread+0x10/0x10 [ 484.180681][ T38] ret_from_fork_asm+0x1a/0x30 [ 484.180717][ T38] [ 484.180853][ T38] [ 484.180853][ T38] Showing all locks held in the system: [ 484.180863][ T38] 2 locks held by kworker/0:0/9: [ 484.180875][ T38] 9 locks held by kworker/u8:1/13: [ 484.180887][ T38] 2 locks held by ksoftirqd/0/15: [ 484.180899][ T38] 2 locks held by ksoftirqd/1/30: [ 484.180909][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 484.180962][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 484.181021][ T38] 1 lock held by khungtaskd/38: [ 484.181031][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 484.181078][ T38] 5 locks held by kworker/u8:2/43: [ 484.181089][ T38] 4 locks held by kworker/1:1/45: [ 484.181100][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 484.181152][ T38] #1: ffffc90000b67bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 484.181201][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 484.181256][ T38] #3: ffff88803a7e0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x164/0xf30 [ 484.181313][ T38] 4 locks held by kworker/u9:0/59: [ 484.181324][ T38] #0: ffff88802a54a138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 484.181374][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 484.181426][ T38] #2: ffff88805efb0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 484.181473][ T38] #3: ffff88805efb00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 484.181528][ T38] 5 locks held by kworker/u8:4/67: [ 484.181539][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 484.181589][ T38] #1: ffffc9000152fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 484.181640][ T38] #2: ffff88803a850898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 484.181694][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 484.181744][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 484.181794][ T38] 3 locks held by kworker/u8:5/68: [ 484.181804][ T38] #0: ffff888030481138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 484.181856][ T38] #1: ffffc9000154fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 484.181926][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 484.181994][ T38] 7 locks held by kworker/u8:11/3655: [ 484.182013][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 484.182067][ T38] #1: ffffc9000daafbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 484.182123][ T38] #2: ffff888030b35300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 484.182197][ T38] #3: ffff888033b7a920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 484.182252][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 484.182300][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 484.182350][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 484.182401][ T38] 3 locks held by dhcpcd/5499: [ 484.182411][ T38] #0: ffff88802fb33a50 (sk_lock-AF_UNIX){+.+.}-{0:0}, at: sk_setsockopt+0xc2f/0x2a70 [ 484.182466][ T38] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 484.182514][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 484.182584][ T38] 2 locks held by getty/5597: [ 484.182596][ T38] #0: ffff88823bf6e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 484.182657][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 484.182711][ T38] 1 lock held by syz.0.20/6187: [ 484.182723][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 484.182782][ T38] 1 lock held by syz-executor/6191: [ 484.182794][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 484.182843][ T38] 2 locks held by kworker/1:7/6203: [ 484.182855][ T38] 1 lock held by syz-executor/6205: [ 484.182866][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 484.182916][ T38] 3 locks held by dhcpcd/6225: [ 484.182927][ T38] #0: ffff888036c48350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 484.182982][ T38] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 484.183042][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 484.183107][ T38] 1 lock held by syz-executor/6226: [ 484.183119][ T38] 2 locks held by udevd/6229: [ 484.183130][ T38] 1 lock held by dhcpcd/6230: [ 484.183140][ T38] #0: ffff88802b754350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 484.183190][ T38] [ 484.183195][ T38] ============================================= [ 484.183195][ T38] [ 484.183214][ T38] NMI backtrace for cpu 1 [ 484.183240][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 484.183266][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 484.183277][ T38] Call Trace: [ 484.183285][ T38] [ 484.183292][ T38] dump_stack_lvl+0x189/0x250 [ 484.183324][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.183352][ T38] ? __pfx__printk+0x10/0x10 [ 484.183385][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 484.183413][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 484.183440][ T38] ? __pfx__printk+0x10/0x10 [ 484.183466][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 484.183492][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 484.183519][ T38] watchdog+0xf93/0xfe0 [ 484.183548][ T38] ? watchdog+0x1de/0xfe0 [ 484.183579][ T38] kthread+0x70e/0x8a0 [ 484.183611][ T38] ? __pfx_watchdog+0x10/0x10 [ 484.183635][ T38] ? __pfx_kthread+0x10/0x10 [ 484.183669][ T38] ? __pfx_kthread+0x10/0x10 [ 484.183699][ T38] ret_from_fork+0x439/0x7d0 [ 484.183726][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 484.183756][ T38] ? __switch_to_asm+0x39/0x70 [ 484.183773][ T38] ? __switch_to_asm+0x33/0x70 [ 484.183790][ T38] ? __pfx_kthread+0x10/0x10 [ 484.183820][ T38] ret_from_fork_asm+0x1a/0x30 [ 484.183854][ T38] [ 484.183861][ T38] Sending NMI from CPU 1 to CPUs 0: [ 484.183891][ C0] NMI backtrace for cpu 0 [ 484.183906][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 484.183935][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 484.183966][ C0] Workqueue: bat_events batadv_dat_purge [ 484.184002][ C0] RIP: 0010:unwind_get_return_address+0x9/0x90 [ 484.184030][ C0] Code: 4c 89 f7 4c 89 fe e9 29 ff ff ff e8 51 31 84 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 <48> 89 fb 49 be 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 0f [ 484.184044][ C0] RSP: 0018:ffffc90000126128 EFLAGS: 00000202 [ 484.184059][ C0] RAX: 000000009029c201 RBX: ffffc90000126200 RCX: 82de0a0e2762ba00 [ 484.184072][ C0] RDX: 0000000000000008 RSI: ffffffff8d21ad8b RDI: ffffc90000126148 [ 484.184084][ C0] RBP: ffffc900001261d0 R08: ffffc90000127210 R09: 0000000000000000 [ 484.184096][ C0] R10: ffffc90000126198 R11: fffff52000024c35 R12: ffff88801ae80000 [ 484.184109][ C0] R13: ffff8880797ec3c0 R14: ffffffff81aaf310 R15: ffffc90000126148 [ 484.184122][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 484.184136][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.184148][ C0] CR2: 00007ffc90ff5a38 CR3: 000000003d784000 CR4: 00000000003526f0 [ 484.184163][ C0] Call Trace: [ 484.184170][ C0] [ 484.184176][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 484.184196][ C0] arch_stack_walk+0xfc/0x150 [ 484.184225][ C0] ? NF_HOOK+0x206/0x3a0 [ 484.184259][ C0] stack_trace_save+0x9c/0xe0 [ 484.184277][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 484.184295][ C0] ? do_raw_spin_lock+0x121/0x290 [ 484.184321][ C0] kasan_save_track+0x3e/0x80 [ 484.184341][ C0] ? kasan_save_track+0x3e/0x80 [ 484.184359][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 484.184380][ C0] ? __kmalloc_cache_noprof+0x1a8/0x320 [ 484.184415][ C0] ? ref_tracker_alloc+0x13b/0x450 [ 484.184439][ C0] ? dst_init+0xd9/0x450 [ 484.184454][ C0] ? dst_alloc+0x12a/0x170 [ 484.184468][ C0] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 484.184487][ C0] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 484.184503][ C0] ? ip_route_output_flow+0x2a/0x150 [ 484.184517][ C0] ? ip_route_me_harder+0x6d2/0x1030 [ 484.184535][ C0] ? synproxy_send_tcp+0x359/0x6c0 [ 484.184559][ C0] ? synproxy_send_client_synack+0x8bb/0xe20 [ 484.184583][ C0] ? nft_synproxy_eval_v4+0x36e/0x560 [ 484.184599][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 484.184615][ C0] ? nft_do_chain+0x409/0x1920 [ 484.184630][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 484.184646][ C0] ? nf_hook_slow+0xc5/0x220 [ 484.184686][ C0] ? ref_tracker_alloc+0x13b/0x450 [ 484.184711][ C0] __kasan_kmalloc+0x93/0xb0 [ 484.184732][ C0] __kmalloc_cache_noprof+0x1a8/0x320 [ 484.184754][ C0] ? ref_tracker_alloc+0x13b/0x450 [ 484.184780][ C0] ref_tracker_alloc+0x13b/0x450 [ 484.184809][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 484.184856][ C0] ? dst_alloc+0x105/0x170 [ 484.184874][ C0] ? dst_alloc+0x105/0x170 [ 484.184892][ C0] dst_init+0xd9/0x450 [ 484.184911][ C0] dst_alloc+0x12a/0x170 [ 484.184949][ C0] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 484.184974][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 484.184995][ C0] ip_route_output_key_hash+0x1b9/0x2e0 [ 484.185014][ C0] ? __lock_acquire+0xab9/0xd20 [ 484.185039][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 484.185062][ C0] ? ip_route_me_harder+0x4ad/0x1030 [ 484.185087][ C0] ip_route_output_flow+0x2a/0x150 [ 484.185103][ C0] ? ip_route_me_harder+0x6c0/0x1030 [ 484.185124][ C0] ip_route_me_harder+0x6d2/0x1030 [ 484.185152][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 484.185189][ C0] synproxy_send_tcp+0x359/0x6c0 [ 484.185219][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 484.185261][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 484.185288][ C0] ? nft_tunnel_get_reduce+0x548/0x640 [ 484.185314][ C0] ? synproxy_pernet+0x45/0x270 [ 484.185336][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 484.185359][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 484.185380][ C0] ? nf_ip_checksum+0x13c/0x510 [ 484.185400][ C0] nft_synproxy_do_eval+0x345/0x570 [ 484.185423][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 484.185443][ C0] ? check_path+0x21/0x40 [ 484.185465][ C0] nft_do_chain+0x409/0x1920 [ 484.185491][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 484.185530][ C0] nft_do_chain_inet+0x25d/0x340 [ 484.185548][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 484.185566][ C0] ? __lock_acquire+0xab9/0xd20 [ 484.185596][ C0] ? NF_HOOK+0x9a/0x3a0 [ 484.185620][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 484.185639][ C0] nf_hook_slow+0xc5/0x220 [ 484.185667][ C0] NF_HOOK+0x206/0x3a0 [ 484.185692][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 484.185717][ C0] ? NF_HOOK+0x9a/0x3a0 [ 484.185741][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 484.185764][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 484.185791][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 484.185817][ C0] ? skb_dst+0x4f/0xd0 [ 484.185842][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 484.185868][ C0] NF_HOOK+0x309/0x3a0 [ 484.185893][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 484.185918][ C0] ? NF_HOOK+0x9a/0x3a0 [ 484.185941][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 484.185966][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 484.185997][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 484.186021][ C0] __netif_receive_skb+0x143/0x380 [ 484.186044][ C0] ? rt_spin_unlock+0x65/0x80 [ 484.186068][ C0] ? process_backlog+0x27b/0x900 [ 484.186091][ C0] process_backlog+0x31e/0x900 [ 484.186136][ C0] __napi_poll+0xb3/0x540 [ 484.186159][ C0] net_rx_action+0x707/0xe00 [ 484.186191][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 484.186228][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 484.186260][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 484.186302][ C0] handle_softirqs+0x22f/0x710 [ 484.186328][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 484.186356][ C0] __local_bh_enable_ip+0x179/0x270 [ 484.186377][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 484.186400][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 484.186424][ C0] ? rt_spin_unlock+0x65/0x80 [ 484.186446][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 484.186469][ C0] __batadv_dat_purge+0x344/0x400 [ 484.186490][ C0] ? __batadv_dat_purge+0xae/0x400 [ 484.186511][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 484.186536][ C0] batadv_dat_purge+0x20/0x70 [ 484.186555][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 484.186575][ C0] process_scheduled_works+0xade/0x17b0 [ 484.186612][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 484.186642][ C0] worker_thread+0x8a0/0xda0 [ 484.186678][ C0] kthread+0x70e/0x8a0 [ 484.186705][ C0] ? __pfx_worker_thread+0x10/0x10 [ 484.186727][ C0] ? __pfx_kthread+0x10/0x10 [ 484.186755][ C0] ? __pfx_kthread+0x10/0x10 [ 484.186781][ C0] ret_from_fork+0x439/0x7d0 [ 484.186805][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 484.186830][ C0] ? __switch_to_asm+0x39/0x70 [ 484.186846][ C0] ? __switch_to_asm+0x33/0x70 [ 484.186861][ C0] ? __pfx_kthread+0x10/0x10 [ 484.186888][ C0] ret_from_fork_asm+0x1a/0x30 [ 484.186912][ C0] [ 484.187895][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 484.187912][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 484.187936][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 484.187948][ T38] Call Trace: [ 484.187956][ T38] [ 484.187965][ T38] dump_stack_lvl+0x99/0x250 [ 484.187998][ T38] ? __asan_memcpy+0x40/0x70 [ 484.188040][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.188072][ T38] ? __pfx__printk+0x10/0x10 [ 484.188110][ T38] vpanic+0x281/0x750 [ 484.188146][ T38] ? __pfx_vpanic+0x10/0x10 [ 484.188175][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 484.188197][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.188241][ T38] panic+0xb9/0xc0 [ 484.188272][ T38] ? __pfx_panic+0x10/0x10 [ 484.188308][ T38] ? irq_work_queue+0xc3/0x140 [ 484.188340][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 484.188370][ T38] watchdog+0xfd2/0xfe0 [ 484.188403][ T38] ? watchdog+0x1de/0xfe0 [ 484.188437][ T38] kthread+0x70e/0x8a0 [ 484.188473][ T38] ? __pfx_watchdog+0x10/0x10 [ 484.188500][ T38] ? __pfx_kthread+0x10/0x10 [ 484.188537][ T38] ? __pfx_kthread+0x10/0x10 [ 484.188572][ T38] ret_from_fork+0x439/0x7d0 [ 484.188603][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 484.188637][ T38] ? __switch_to_asm+0x39/0x70 [ 484.188656][ T38] ? __switch_to_asm+0x33/0x70 [ 484.188676][ T38] ? __pfx_kthread+0x10/0x10 [ 484.188710][ T38] ret_from_fork_asm+0x1a/0x30 [ 484.188748][ T38] [ 484.188924][ T38] Kernel Offset: disabled