[ 55.531154][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.649686][ T9] device veth1_macvtap left promiscuous mode [ 55.650576][ T9] device veth0_macvtap left promiscuous mode [ 55.651457][ T9] device veth1_vlan left promiscuous mode [ 55.652287][ T9] device veth0_vlan left promiscuous mode [ 55.733677][ T9] team0 (unregistering): Port device team_slave_1 removed [ 55.737331][ T9] team0 (unregistering): Port device team_slave_0 removed [ 55.740957][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.774084][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.903220][ T9] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. 1970/01/01 00:01:04 parsed 1 programs [ 66.129779][ T4470] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 69.610324][ T1968] cfg80211: failed to load regulatory.db [ 69.624762][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.625915][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.358137][ T4555] chnl_net:caif_netlink_parms(): no params data found [ 70.376518][ T4555] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.377812][ T4555] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.379396][ T4555] device bridge_slave_0 entered promiscuous mode [ 70.383319][ T4555] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.384566][ T4555] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.386191][ T4555] device bridge_slave_1 entered promiscuous mode [ 70.393926][ T4555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.396585][ T4555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.405052][ T4555] team0: Port device team_slave_0 added [ 70.406967][ T4555] team0: Port device team_slave_1 added [ 70.413883][ T4555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.415102][ T4555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.419448][ T4555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.422108][ T4555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.423289][ T4555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.427637][ T4555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.530741][ T4555] device hsr_slave_0 entered promiscuous mode [ 70.589788][ T4555] device hsr_slave_1 entered promiscuous mode [ 71.246327][ T4555] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.289169][ T4555] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.333006][ T4555] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.360612][ T4555] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.422868][ T4555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.426571][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.428193][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.432123][ T4555] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.434650][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.436401][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.437936][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.439120][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.441626][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.450764][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.452405][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.454041][ T446] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.455234][ T446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.456630][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.458267][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.461187][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.463180][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.464772][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.466524][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.470894][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.472446][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.474015][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.477496][ T4555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.480129][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.482927][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.484626][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.525156][ T4555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.530450][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.531737][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.535120][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.536755][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.543056][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.544613][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.546190][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.547540][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.552171][ T4555] device veth0_vlan entered promiscuous mode [ 71.555800][ T4555] device veth1_vlan entered promiscuous mode [ 71.563649][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.565119][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.566655][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.568260][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.571109][ T4555] device veth0_macvtap entered promiscuous mode [ 71.573530][ T4555] device veth1_macvtap entered promiscuous mode [ 71.578804][ T4555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.582259][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.583849][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.585458][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.587039][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.590916][ T4555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.593249][ T4555] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.594775][ T4555] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.596244][ T4555] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.597778][ T4555] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.600641][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.602314][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.688115][ T347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.689539][ T347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.691521][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.699243][ T347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.700569][ T347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.701819][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:11 executed programs: 0 [ 72.023667][ T4728] chnl_net:caif_netlink_parms(): no params data found [ 72.044313][ T4728] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.045578][ T4728] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.047391][ T4728] device bridge_slave_0 entered promiscuous mode [ 72.049474][ T4728] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.051391][ T4728] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.052990][ T4728] device bridge_slave_1 entered promiscuous mode [ 72.063119][ T4728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.065820][ T4728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.074608][ T4728] team0: Port device team_slave_0 added [ 72.076481][ T4728] team0: Port device team_slave_1 added [ 72.084616][ T4728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.085807][ T4728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.090316][ T4728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.092984][ T4728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.094101][ T4728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.098250][ T4728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.141343][ T4728] device hsr_slave_0 entered promiscuous mode [ 72.181665][ T4728] device hsr_slave_1 entered promiscuous mode [ 72.201003][ T4728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.202376][ T4728] Cannot create hsr debugfs directory [ 72.231702][ T4728] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.009623][ T4640] Bluetooth: hci0: command 0x0409 tx timeout [ 74.673094][ T4728] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.099739][ T4640] Bluetooth: hci0: command 0x041b tx timeout [ 76.922731][ T4728] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.974605][ T4728] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.133146][ T4728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.170978][ T4728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.210758][ T4728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.261211][ T4728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.330123][ T4728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.333798][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.335390][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.338148][ T4728] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.341108][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.342870][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.344354][ T1643] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.345488][ T1643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.346831][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.350956][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.352722][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.354309][ T446] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.355510][ T446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.358551][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.362377][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.365135][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.367165][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.368859][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.377316][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.379264][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.382810][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.384394][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.386903][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.388576][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.391710][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.428316][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.430982][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.434559][ T4728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.441000][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.442639][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.448510][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.451740][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.453328][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.454744][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.457021][ T4728] device veth0_vlan entered promiscuous mode [ 77.461091][ T4728] device veth1_vlan entered promiscuous mode [ 77.467766][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.469313][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.471146][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.472814][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.475415][ T4728] device veth0_macvtap entered promiscuous mode [ 77.477820][ T4728] device veth1_macvtap entered promiscuous mode [ 77.482494][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.484242][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.486488][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.487802][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.489333][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.491171][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.492752][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.495187][ T4728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.496971][ T4728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.499032][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.501062][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.502781][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.510428][ T4728] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.511798][ T4728] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.513298][ T4728] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.514821][ T4728] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.533691][ T1643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.535029][ T1643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.536298][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.548750][ T1643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.550322][ T1643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.551592][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:17 executed programs: 2 [ 100.119549][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [syz.0.40:5009] [ 100.120822][ C0] Modules linked in: [ 100.121432][ C0] irq event stamp: 31545065 [ 100.122116][ C0] hardirqs last enabled at (31545064): [] __local_bh_enable_ip+0x1f8/0x37c [ 100.123714][ C0] hardirqs last disabled at (31545065): [] enter_el1_irq_or_nmi+0x10/0x1c [ 100.125445][ C0] softirqs last enabled at (84): [] tipc_sk_rcv+0x284/0x2240 [ 100.126894][ C0] softirqs last disabled at (86): [] tipc_sk_rcv+0x2a0/0x2240 [ 100.128340][ C0] CPU: 0 PID: 5009 Comm: syz.0.40 Not tainted syzkaller #0 [ 100.129434][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 100.131140][ C0] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 100.132466][ C0] pc : tipc_sk_lookup+0x670/0x89c [ 100.133230][ C0] lr : tipc_sk_lookup+0x668/0x89c [ 100.134071][ C0] sp : ffff80001fef62a0 [ 100.134761][ C0] x29: ffff80001fef6340 x28: 0000000000000004 x27: ffff0000cf0d1ab0 [ 100.136142][ C0] x26: ffff0000ccef44f8 x25: 1fffe0001a040a29 x24: dfff800000000000 [ 100.137493][ C0] x23: 0000000000000528 x22: ffff0000d020514e x21: 0000000000000004 [ 100.138792][ C0] x20: ffff0000cf0d1580 x19: ffff0000cf0d1500 x18: 0000000000000402 [ 100.140086][ C0] x17: 0000000000000000 x16: ffff8000082c18dc x15: ffff80000f6eac8c [ 100.141430][ C0] x14: 0000000000000001 x13: 1fffe00019e1a2b0 x12: 0000000000ff0100 [ 100.142819][ C0] x11: 0000000000000201 x10: 0000000000000000 x9 : ffff800010d85854 [ 100.144209][ C0] x8 : ffff0000c10a3680 x7 : ffff800010d8fcb0 x6 : 0000000000000000 [ 100.145493][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800010d85848 [ 100.146772][ C0] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 [ 100.148065][ C0] Call trace: [ 100.148570][ C0] tipc_sk_lookup+0x670/0x89c [ 100.149375][ C0] tipc_sk_rcv+0x290/0x2240 [ 100.150143][ C0] tipc_node_xmit+0x1c0/0xdf8 [ 100.150924][ C0] tipc_node_distr_xmit+0x260/0x364 [ 100.151826][ C0] tipc_sk_rcv+0x1d60/0x2240 [ 100.152628][ C0] tipc_node_xmit+0x1c0/0xdf8 [ 100.153518][ C0] tipc_sk_push_backlog+0x398/0x740 [ 100.154364][ C0] tipc_sk_proto_rcv+0x780/0x13bc [ 100.155207][ C0] tipc_sk_filter_rcv+0x2608/0x287c [ 100.156024][ C0] tipc_sk_rcv+0x5d0/0x2240 [ 100.156765][ C0] tipc_node_xmit+0x1c0/0xdf8 [ 100.157494][ C0] tipc_node_distr_xmit+0x260/0x364 [ 100.158380][ C0] tipc_sk_backlog_rcv+0x17c/0x244 [ 100.159236][ C0] __release_sock+0x1b4/0x3b4 [ 100.159979][ C0] release_sock+0x60/0x258 [ 100.160692][ C0] sock_setsockopt+0x1908/0x1e54 [ 100.161535][ C0] __sys_setsockopt+0x294/0x36c [ 100.162362][ C0] __arm64_sys_setsockopt+0xb8/0xd4 [ 100.163220][ C0] invoke_syscall+0x98/0x2b0 [ 100.163912][ C0] el0_svc_common+0x138/0x258 [ 100.164681][ C0] do_el0_svc+0x58/0x13c [ 100.165371][ C0] el0_svc+0x78/0x1d0 [ 100.166008][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 100.166831][ C0] el0t_64_sync+0x1a0/0x1a4 [ 100.167641][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 100.168714][ C0] CPU: 0 PID: 5009 Comm: syz.0.40 Tainted: G L syzkaller #0 [ 100.170081][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 100.171626][ C0] Call trace: [ 100.172182][ C0] dump_backtrace+0x0/0x458 [ 100.172940][ C0] show_stack+0x2c/0x3c [ 100.173640][ C0] __dump_stack+0x30/0x40 [ 100.174344][ C0] dump_stack_lvl+0xf4/0x15c [ 100.175129][ C0] dump_stack+0x1c/0x5c [ 100.175836][ C0] panic+0x2fc/0x860 [ 100.176486][ C0] softlockup_fn+0x0/0x120 [ 100.177230][ C0] __hrtimer_run_queues+0x3e8/0xb44 [ 100.178093][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 100.178904][ C0] arch_timer_handler_virt+0x74/0x88 [ 100.179784][ C0] handle_percpu_devid_irq+0x29c/0x764 [ 100.180698][ C0] handle_domain_irq+0x144/0x1fc [ 100.181519][ C0] gic_handle_irq+0x78/0x1b8 [ 100.182262][ C0] call_on_irq_stack+0x30/0x48 [ 100.183031][ C0] do_interrupt_handler+0x6c/0x88 [ 100.183889][ C0] el1_interrupt+0x30/0x58 [ 100.184584][ C0] el1h_64_irq_handler+0x18/0x24 [ 100.185410][ C0] el1h_64_irq+0x78/0x7c [ 100.186134][ C0] tipc_sk_lookup+0x670/0x89c [ 100.186926][ C0] tipc_sk_rcv+0x290/0x2240 [ 100.187623][ C0] tipc_node_xmit+0x1c0/0xdf8 [ 100.188410][ C0] tipc_node_distr_xmit+0x260/0x364 [ 100.189313][ C0] tipc_sk_rcv+0x1d60/0x2240 [ 100.190062][ C0] tipc_node_xmit+0x1c0/0xdf8 [ 100.190772][ C0] tipc_sk_push_backlog+0x398/0x740 [ 100.191653][ C0] tipc_sk_proto_rcv+0x780/0x13bc [ 100.192509][ C0] tipc_sk_filter_rcv+0x2608/0x287c [ 100.193348][ C0] tipc_sk_rcv+0x5d0/0x2240 [ 100.194091][ C0] tipc_node_xmit+0x1c0/0xdf8 [ 100.194795][ C0] tipc_node_distr_xmit+0x260/0x364 [ 100.195574][ C0] tipc_sk_backlog_rcv+0x17c/0x244 [ 100.196388][ C0] __release_sock+0x1b4/0x3b4 [ 100.197123][ C0] release_sock+0x60/0x258 [ 100.197809][ C0] sock_setsockopt+0x1908/0x1e54 [ 100.198591][ C0] __sys_setsockopt+0x294/0x36c [ 100.199302][ C0] __arm64_sys_setsockopt+0xb8/0xd4 [ 100.200193][ C0] invoke_syscall+0x98/0x2b0 [ 100.200925][ C0] el0_svc_common+0x138/0x258 [ 100.201646][ C0] do_el0_svc+0x58/0x13c [ 100.202289][ C0] el0_svc+0x78/0x1d0 [ 100.202920][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 100.203743][ C0] el0t_64_sync+0x1a0/0x1a4 [ 100.204533][ C0] SMP: stopping secondary CPUs [ 100.205292][ C0] Kernel Offset: disabled [ 100.206012][ C0] CPU features: 0x8,000003c1,7d33ffd9 [ 100.206850][ C0] Memory Limit: none [ 100.214379][ C0] [ 100.214735][ C0] ================================ [ 100.215511][ C0] WARNING: inconsistent lock state [ 100.216286][ C0] syzkaller #0 Tainted: G L [ 100.217166][ C0] -------------------------------- [ 100.218009][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 100.219123][ C0] syz.0.40/5009 [HC1[1]:SC0[2]:HE0:SE0] takes: [ 100.220142][ C0] ffff8000142de678 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 100.221865][ C0] {HARDIRQ-ON-W} state was registered at: [ 100.222783][ C0] lock_acquire+0x1f4/0x618 [ 100.223481][ C0] _raw_spin_lock+0xb0/0x10c [ 100.224221][ C0] efi_call_rts+0x80/0x9d8 [ 100.225053][ C0] process_one_work+0x79c/0x1138 [ 100.225910][ C0] worker_thread+0x8f4/0x1034 [ 100.226709][ C0] kthread+0x374/0x454 [ 100.227408][ C0] ret_from_fork+0x10/0x20 [ 100.228161][ C0] irq event stamp: 31545065 [ 100.228939][ C0] hardirqs last enabled at (31545064): [] __local_bh_enable_ip+0x1f8/0x37c [ 100.230636][ C0] hardirqs last disabled at (31545065): [] enter_el1_irq_or_nmi+0x10/0x1c [ 100.232266][ C0] softirqs last enabled at (84): [] tipc_sk_rcv+0x284/0x2240 [ 100.233716][ C0] softirqs last disabled at (86): [] tipc_sk_rcv+0x2a0/0x2240 [ 100.235077][ C0] [ 100.235077][ C0] other info that might help us debug this: [ 100.236409][ C0] Possible unsafe locking scenario: [ 100.236409][ C0] [ 100.237637][ C0] CPU0 [ 100.238208][ C0] ---- [ 100.238726][ C0] lock(efi_rt_lock); [ 100.239398][ C0] [ 100.239954][ C0] lock(efi_rt_lock); [ 100.240676][ C0] [ 100.240676][ C0] *** DEADLOCK *** [ 100.240676][ C0] [ 100.242115][ C0] 5 locks held by syz.0.40/5009: [ 100.242941][ C0] #0: ffff0000cf0d0f20 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: sock_setsockopt+0x600/0x1e54 [ 100.244628][ C0] #1: ffff0000cf0d15a0 (slock-AF_TIPC){+...}-{2:2}, at: tipc_sk_rcv+0x2a0/0x2240 [ 100.246217][ C0] #2: ffff800014471360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 100.247814][ C0] #3: ffff800014471360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 100.249359][ C0] #4: ffff800015fceec8 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x180/0x7ec [ 100.251005][ C0] [ 100.251005][ C0] stack backtrace: [ 100.251961][ C0] CPU: 0 PID: 5009 Comm: syz.0.40 Tainted: G L syzkaller #0 [ 100.253406][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 100.255043][ C0] Call trace: [ 100.255621][ C0] dump_backtrace+0x0/0x458 [ 100.256397][ C0] show_stack+0x2c/0x3c [ 100.257120][ C0] __dump_stack+0x30/0x40 [ 100.257810][ C0] dump_stack_lvl+0xf4/0x15c [ 100.258579][ C0] dump_stack+0x1c/0x5c [ 100.259252][ C0] print_usage_bug+0x3a4/0x550 [ 100.260065][ C0] mark_lock_irq+0x81c/0xa7c [ 100.260789][ C0] mark_lock+0x224/0x320 [ 100.261446][ C0] __lock_acquire+0xa48/0x67ec [ 100.262184][ C0] lock_acquire+0x1f4/0x618 [ 100.262956][ C0] _raw_spin_lock+0xb0/0x10c [ 100.263743][ C0] virt_efi_set_variable_nonblocking+0x74/0x16c [ 100.264803][ C0] efivar_entry_set_safe+0x498/0x4b8 [ 100.265656][ C0] efi_pstore_write+0x260/0x3fc [ 100.266470][ C0] pstore_dump+0x588/0x7ec [ 100.267186][ C0] kmsg_dump+0x170/0x260 [ 100.267906][ C0] panic+0x350/0x860 [ 100.268534][ C0] softlockup_fn+0x0/0x120 [ 100.269231][ C0] __hrtimer_run_queues+0x3e8/0xb44 [ 100.270068][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 100.270908][ C0] arch_timer_handler_virt+0x74/0x88 [ 100.271880][ C0] handle_percpu_devid_irq+0x29c/0x764 [ 100.272767][ C0] handle_domain_irq+0x144/0x1fc [ 100.273615][ C0] gic_handle_irq+0x78/0x1b8 [ 100.274363][ C0] call_on_irq_stack+0x30/0x48 [ 100.275188][ C0] do_interrupt_handler+0x6c/0x88 [ 100.276020][ C0] el1_interrupt+0x30/0x58 [ 100.276790][ C0] el1h_64_irq_handler+0x18/0x24 [ 100.277613][ C0] el1h_64_irq+0x78/0x7c [ 100.278319][ C0] tipc_sk_lookup+0x670/0x89c [ 100.279076][ C0] tipc_sk_rcv+0x290/0x2240 [ 100.279774][ C0] tipc_node_xmit+0x1c0/0xdf8 [ 100.280542][ C0] tipc_node_distr_xmit+0x260/0x364 [ 100.281373][ C0] tipc_sk_rcv+0x1d60/0x2240 [ 100.282138][ C0] tipc_node_xmit+0x1c0/0xdf8 [ 100.282836][ C0] tipc_sk_push_backlog+0x398/0x740 [ 100.283665][ C0] tipc_sk_proto_rcv+0x780/0x13bc [ 100.284491][ C0] tipc_sk_filter_rcv+0x2608/0x287c [ 100.285285][ C0] tipc_sk_rcv+0x5d0/0x2240 [ 100.286047][ C0] tipc_node_xmit+0x1c0/0xdf8 [ 100.286831][ C0] tipc_node_distr_xmit+0x260/0x364 [ 100.287703][ C0] tipc_sk_backlog_rcv+0x17c/0x244 [ 100.288562][ C0] __release_sock+0x1b4/0x3b4 [ 100.289341][ C0] release_sock+0x60/0x258 [ 100.290092][ C0] sock_setsockopt+0x1908/0x1e54 [ 100.290941][ C0] __sys_setsockopt+0x294/0x36c [ 100.291702][ C0] __arm64_sys_setsockopt+0xb8/0xd4 [ 100.292588][ C0] invoke_syscall+0x98/0x2b0 [ 100.293386][ C0] el0_svc_common+0x138/0x258 [ 100.294123][ C0] do_el0_svc+0x58/0x13c [ 100.294783][ C0] el0_svc+0x78/0x1d0 [ 100.295429][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 100.296204][ C0] el0t_64_sync+0x1a0/0x1a4 [ 100.507289][ C0] Rebooting in 86400 seconds..