[ 7.836743][ T4406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7.839532][ T4406] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK [ 7.884205][ T3097] gve 0000:00:00.0 enp0s0: Device link is up. Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. 1970/01/01 00:00:27 parsed 1 programs 1970/01/01 00:00:27 serving rpc on tcp://44787 syzkaller login: [ 28.372224][ T4727] cgroup: Unknown subsys name 'net' [ 28.482464][ T4727] cgroup: Unknown subsys name 'cpuset' [ 28.485153][ T4727] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.627545][ T4727] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.914434][ T4734] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.483897][ T4768] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.484235][ T4768] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.498113][ T4768] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.525387][ T4768] infiniband rxe0: set active [ 31.525617][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.525654][ T4768] infiniband rxe0: added rxe_eth0 [ 31.535834][ T4768] RDS/IB: rxe0: added [ 31.535909][ T4768] smc: adding ib device rxe0 with port count 1 [ 31.535934][ T4768] smc: ib device rxe0 port 1 has no pnetid [ 31.536573][ T4768] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.541128][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.593465][ T4768] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.720417][ T4768] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.720650][ T4768] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.720711][ T4768] bridge_slave_0: entered allmulticast mode [ 31.721954][ T4768] bridge_slave_0: entered promiscuous mode [ 31.723120][ T4768] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.723185][ T4768] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.723238][ T4768] bridge_slave_1: entered allmulticast mode [ 31.723584][ T4768] bridge_slave_1: entered promiscuous mode [ 31.729338][ T4768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.730107][ T4768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.735342][ T4768] team0: Port device team_slave_0 added [ 31.736255][ T4768] team0: Port device team_slave_1 added [ 31.741511][ T4768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.741520][ T4768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.741530][ T4768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.742186][ T4768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.742193][ T4768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.742204][ T4768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.750963][ T4768] hsr_slave_0: entered promiscuous mode [ 31.751341][ T4768] hsr_slave_1: entered promiscuous mode [ 31.797037][ T4768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.798749][ T4768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.799061][ T4768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.800122][ T4768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.800432][ T4768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.801727][ T4768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.802002][ T4768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.806293][ T4768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.818657][ T4768] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.818689][ T4768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.818819][ T4768] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.818847][ T4768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.834410][ T4768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.837818][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.838277][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.840816][ T4768] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.848479][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.848521][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.848903][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.848923][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.863050][ T4768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.863063][ T4768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.949088][ T4768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.960177][ T4768] veth0_vlan: entered promiscuous mode [ 31.964220][ T4768] veth1_vlan: entered promiscuous mode [ 31.974669][ T4768] veth0_macvtap: entered promiscuous mode [ 31.975776][ T4768] veth1_macvtap: entered promiscuous mode [ 31.979625][ T4768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.988205][ T4768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.041189][ T3097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.041372][ T3097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.041389][ T3097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.041404][ T3097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.105785][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.107949][ T4810] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.196814][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.241819][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.245652][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.247781][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.248139][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.248464][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.263272][ T4816] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.284391][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.325053][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.376250][ T4824] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.449811][ T4830] br_netfilter no longer supported in user namespaces [ 32.451902][ T4830] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.585566][ T4835] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.656846][ T4839] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.775534][ T4845] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.829030][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.829039][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.835131][ T3097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.835141][ T3097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.896208][ T4851] rxe_eth0 speed is unknown, defaulting to 1000 [ 33.006212][ T4857] rxe_eth0 speed is unknown, defaulting to 1000 1970/01/01 00:00:33 executed programs: 0 [ 33.180175][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.180589][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.180767][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.182108][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.182327][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.251776][ T4863] rxe_eth0 speed is unknown, defaulting to 1000 [ 33.337698][ T4863] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.337758][ T4863] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.337812][ T4863] bridge_slave_0: entered allmulticast mode [ 33.338178][ T4863] bridge_slave_0: entered promiscuous mode [ 33.341930][ T4863] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.341951][ T4863] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.342005][ T4863] bridge_slave_1: entered allmulticast mode [ 33.342380][ T4863] bridge_slave_1: entered promiscuous mode [ 33.350067][ T4863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.354644][ T4863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.361110][ T4863] team0: Port device team_slave_0 added [ 33.361888][ T4863] team0: Port device team_slave_1 added [ 33.367191][ T4863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.367200][ T4863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.367213][ T4863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.367739][ T4863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.367745][ T4863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.367756][ T4863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.377792][ T4863] hsr_slave_0: entered promiscuous mode [ 33.378088][ T4863] hsr_slave_1: entered promiscuous mode [ 33.378280][ T4863] debugfs: 'hsr0' already exists in 'hsr' [ 33.378288][ T4863] Cannot create hsr debugfs directory [ 35.211138][ T4742] Bluetooth: hci0: command tx timeout [ 35.631554][ T61] bridge_slave_1: left allmulticast mode [ 35.631580][ T61] bridge_slave_1: left promiscuous mode [ 35.631896][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.633600][ T61] bridge_slave_0: left allmulticast mode [ 35.633615][ T61] bridge_slave_0: left promiscuous mode [ 35.633770][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.687516][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.694453][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.731823][ T61] bond0 (unregistering): Released all slaves [ 35.859552][ T4406] 8021q: adding VLAN 0 to HW filter on device eth0 [ 35.865975][ T61] hsr_slave_0: left promiscuous mode [ 35.866278][ T61] hsr_slave_1: left promiscuous mode [ 35.866553][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.866566][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.866915][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.866924][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.870447][ T61] veth1_macvtap: left promiscuous mode [ 35.870484][ T61] veth0_macvtap: left promiscuous mode [ 35.870558][ T61] veth1_vlan: left promiscuous mode [ 35.870593][ T61] veth0_vlan: left promiscuous mode [ 35.966650][ T61] team0 (unregistering): Port device team_slave_1 removed [ 35.970564][ T61] team0 (unregistering): Port device team_slave_0 removed [ 36.158549][ T4863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.160818][ T4863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.163217][ T4863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.165829][ T4863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.168597][ T4863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.174135][ T4863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.174557][ T4863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.176847][ T4863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.200367][ T4863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.207947][ T4863] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.209560][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.209583][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.217240][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.217272][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.489015][ T4863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.500766][ T4863] veth0_vlan: entered promiscuous mode [ 36.503783][ T4863] veth1_vlan: entered promiscuous mode [ 36.513366][ T4863] veth0_macvtap: entered promiscuous mode [ 36.514401][ T4863] veth1_macvtap: entered promiscuous mode [ 36.517886][ T4863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.519652][ T4863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.531354][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.531553][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.531579][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.570349][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.570360][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.598476][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.598489][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.601441][ T3097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.060858][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz.0.42:5008] [ 60.060874][ C0] Modules linked in: [ 60.060880][ C0] irq event stamp: 7423 [ 60.064320][ C0] hardirqs last enabled at (7422): [] __arm64_exit_to_kernel_mode+0xe4/0x140 [ 60.066635][ C0] hardirqs last disabled at (7423): [] el1_interrupt+0x28/0x60 [ 60.068742][ C0] softirqs last enabled at (2824): [] release_sock+0x150/0x228 [ 60.070796][ C0] softirqs last disabled at (2830): [] lock_sock_nested+0x70/0x110 [ 60.072948][ C0] CPU: 0 UID: 0 PID: 5008 Comm: syz.0.42 Not tainted syzkaller #0 PREEMPT [ 60.072971][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 60.072977][ C0] pstate: 03400005 (nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 60.072986][ C0] pc : queued_spin_lock_slowpath+0x138/0xb5c [ 60.072997][ C0] lr : queued_spin_lock_slowpath+0x144/0xb5c [ 60.073005][ C0] sp : ffff80009b9174e0 [ 60.073008][ C0] x29: ffff80009b917580 x28: ffff0000c8151d90 x27: 1fffe0001944c94b [ 60.073020][ C0] x26: 1fffe0001902a3b2 x25: ffff0000c8151d80 x24: dfff800000000000 [ 60.073029][ C0] x23: ffff700013722ea0 x22: ffff700013722ec0 x21: ffff0000ca264a58 [ 60.073039][ C0] x20: ffff0000ca264a60 x19: ffff0000ca264a50 x18: ffff800123625000 [ 60.073048][ C0] x17: ffff0001ace95387 x16: ffff0000c8151d94 x15: 0000000020007000 [ 60.073058][ C0] x14: 00000000005e6a88 x13: 0000000000000001 x12: 0000000000000000 [ 60.073067][ C0] x11: 0000000000000000 x10: ffff60001944c94b x9 : 0000000000000000 [ 60.073076][ C0] x8 : 0000000000000001 x7 : ffff800084c894d0 x6 : 0000000000000000 [ 60.073084][ C0] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80008697b308 [ 60.073093][ C0] x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000001 [ 60.073102][ C0] Call trace: [ 60.073104][ C0] queued_spin_lock_slowpath+0x138/0xb5c (P) [ 60.073115][ C0] do_raw_spin_lock+0x21c/0x2d0 [ 60.073127][ C0] _raw_spin_lock_bh+0x50/0x60 [ 60.073136][ C0] lock_sock_nested+0x70/0x110 [ 60.073143][ C0] tipc_sendstream+0x54/0x88 [ 60.073156][ C0] __sock_sendmsg+0xc8/0x188 [ 60.073164][ C0] ____sys_sendmsg+0x3f8/0x6c8 [ 60.073172][ C0] ___sys_sendmsg+0x198/0x224 [ 60.073181][ C0] __sys_sendmmsg+0x204/0x580 [ 60.073190][ C0] __arm64_sys_sendmmsg+0xac/0xc8 [ 60.073198][ C0] invoke_syscall+0x98/0x244 [ 60.073207][ C0] el0_svc_common+0xec/0x23c [ 60.073213][ C0] do_el0_svc+0x4c/0x5c [ 60.073220][ C0] el0_svc+0x60/0x1d8 [ 60.073228][ C0] el0t_64_sync_handler+0x44/0x104 [ 60.073236][ C0] el0t_64_sync+0x198/0x19c [ 60.073244][ C0] Sending NMI from CPU 0 to CPUs 1: [ 60.073257][ C1] NMI backtrace for cpu 1 [ 60.073267][ C1] CPU: 1 UID: 0 PID: 5009 Comm: syz.0.42 Not tainted syzkaller #0 PREEMPT [ 60.073277][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 60.073281][ C1] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 60.073289][ C1] pc : __local_bh_enable_ip+0x150/0x234 [ 60.073298][ C1] lr : __local_bh_enable_ip+0x14c/0x234 [ 60.073304][ C1] sp : ffff800096516740 [ 60.073307][ C1] x29: ffff800096516740 x28: ffff800096516b80 x27: 000000007a3a32f3 [ 60.073318][ C1] x26: ffff0000dd3d8780 x25: ffff800096516800 x24: ffff700012ca2d00 [ 60.073328][ C1] x23: dfff800000000000 x22: 1fffe000191a6b11 x21: ffff800086493f3c [ 60.073337][ C1] x20: 0000000000000201 x19: ffff0000c8d35888 x18: 00000000ffffffff [ 60.073347][ C1] x17: 0000000000000000 x16: 0000000000000000 x15: ffff800080d84024 [ 60.073356][ C1] x14: 00000000027c6219 x13: 0000000000000001 x12: 0000000000000003 [ 60.073364][ C1] x11: ffff80008b386328 x10: 0000000000000003 x9 : 0000000000000001 [ 60.073373][ C1] x8 : 0000000002d1a4ce x7 : 0000000000000000 x6 : 0000000000000000 [ 60.073382][ C1] x5 : 0000000000000000 x4 : 0000000000000008 x3 : ffff8000801546f4 [ 60.073390][ C1] x2 : 0000000000000002 x1 : ffff0000c8d35880 x0 : ffff80012364b000 [ 60.073399][ C1] Call trace: [ 60.073402][ C1] __local_bh_enable_ip+0x150/0x234 (P) [ 60.073410][ C1] _raw_spin_unlock_bh+0x3c/0x4c [ 60.073419][ C1] tipc_sk_rcv+0x2ec/0x13f0 [ 60.073429][ C1] tipc_node_xmit+0x1c8/0xb9c [ 60.073438][ C1] tipc_node_xmit_skb+0x10c/0x178 [ 60.073447][ C1] tipc_sk_rcv+0x11c0/0x13f0 [ 60.073456][ C1] tipc_node_xmit+0x1c8/0xb9c [ 60.073465][ C1] tipc_sk_push_backlog+0x3a0/0x788 [ 60.073472][ C1] tipc_sk_filter_rcv+0xcb8/0x1fa4 [ 60.073479][ C1] tipc_sk_rcv+0x5b0/0x13f0 [ 60.073488][ C1] tipc_node_xmit+0x1c8/0xb9c [ 60.073497][ C1] tipc_node_distr_xmit+0x264/0x370 [ 60.073506][ C1] tipc_sk_backlog_rcv+0x17c/0x23c [ 60.073512][ C1] __release_sock+0x174/0x2c0 [ 60.073520][ C1] release_sock+0x174/0x228 [ 60.073529][ C1] tipc_release+0xca8/0x10d0 [ 60.073536][ C1] __sock_release+0xa0/0x1d4 [ 60.073543][ C1] sock_close+0x24/0x38 [ 60.073552][ C1] __fput+0x338/0x74c [ 60.073560][ C1] fput_close_sync+0x10c/0x278 [ 60.073569][ C1] filp_close_sync+0x7c/0xb4 [ 60.073575][ C1] __arm64_sys_close_range+0x898/0xbdc [ 60.073585][ C1] invoke_syscall+0x98/0x244 [ 60.073592][ C1] el0_svc_common+0x19c/0x23c [ 60.073599][ C1] do_el0_svc+0x4c/0x5c [ 60.073605][ C1] el0_svc+0x60/0x1d8 [ 60.073613][ C1] el0t_64_sync_handler+0x44/0x104 [ 60.073621][ C1] el0t_64_sync+0x198/0x19c [ 60.074258][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 60.174611][ C0] CPU: 0 UID: 0 PID: 5008 Comm: syz.0.42 Tainted: G L syzkaller #0 PREEMPT [ 60.176853][ C0] Tainted: [L]=SOFTLOCKUP [ 60.177742][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 60.179944][ C0] Call trace: [ 60.180688][ C0] show_stack+0x2c/0x3c (C) [ 60.181669][ C0] __dump_stack+0x30/0x40 [ 60.182647][ C0] dump_stack_lvl+0x30/0x12c [ 60.183690][ C0] dump_stack+0x1c/0x28 [ 60.184654][ C0] vpanic+0x314/0x7d4 [ 60.185495][ C0] oops_exit+0x0/0x40 [ 60.186381][ C0] update_touch_ts+0x0/0xac [ 60.187390][ C0] __hrtimer_run_queues+0x2e4/0x998 [ 60.188549][ C0] hrtimer_interrupt+0x408/0x8c0 [ 60.189663][ C0] arch_timer_handler_virt+0x70/0x84 [ 60.190861][ C0] handle_percpu_devid_irq+0x240/0x42c [ 60.191973][ C0] generic_handle_domain_irq+0xe4/0x154 [ 60.193126][ C0] gic_handle_irq+0x6c/0x180 [ 60.194077][ C0] call_on_irq_stack+0x30/0x48 [ 60.195066][ C0] do_interrupt_handler+0xd4/0x138 [ 60.196148][ C0] el1_interrupt+0x3c/0x60 [ 60.197068][ C0] el1h_64_irq_handler+0x18/0x24 [ 60.198085][ C0] el1h_64_irq+0x78/0x7c [ 60.198960][ C0] queued_spin_lock_slowpath+0x138/0xb5c (P) [ 60.200204][ C0] do_raw_spin_lock+0x21c/0x2d0 [ 60.201199][ C0] _raw_spin_lock_bh+0x50/0x60 [ 60.202189][ C0] lock_sock_nested+0x70/0x110 [ 60.203154][ C0] tipc_sendstream+0x54/0x88 [ 60.204079][ C0] __sock_sendmsg+0xc8/0x188 [ 60.204976][ C0] ____sys_sendmsg+0x3f8/0x6c8 [ 60.205938][ C0] ___sys_sendmsg+0x198/0x224 [ 60.206897][ C0] __sys_sendmmsg+0x204/0x580 [ 60.207838][ C0] __arm64_sys_sendmmsg+0xac/0xc8 [ 60.208823][ C0] invoke_syscall+0x98/0x244 [ 60.209756][ C0] el0_svc_common+0xec/0x23c [ 60.210676][ C0] do_el0_svc+0x4c/0x5c [ 60.211582][ C0] el0_svc+0x60/0x1d8 [ 60.212355][ C0] el0t_64_sync_handler+0x44/0x104 [ 60.213377][ C0] el0t_64_sync+0x198/0x19c [ 60.214297][ C0] SMP: stopping secondary CPUs [ 60.215280][ C0] Kernel Offset: disabled [ 60.216138][ C0] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 60.217516][ C0] Memory Limit: none [ 60.218282][ C0] [ 60.218745][ C0] ============================= [ 60.219719][ C0] [ BUG: Invalid wait context ] [ 60.220682][ C0] syzkaller #0 Tainted: G L [ 60.221900][ C0] ----------------------------- [ 60.222889][ C0] syz.0.42/5008 is trying to lock: [ 60.223983][ C0] ffff0000c1baa128 (&k->list_lock){+.+.}-{3:3}, at: bus_to_subsys+0x40/0x120 [ 60.225749][ C0] other info that might help us debug this: [ 60.226900][ C0] context-{2:2} [ 60.227574][ C0] locks held by syz.0.42/5008: 3, last CPU#0: [ 60.228798][ C0] #0: ffff0000ca264ae0 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: tipc_sendstream+0x54/0x88 [ 60.230693][ C0] #1: ffff0000ca264a68 (slock-AF_TIPC){+...}-{3:3}, at: lock_sock_nested+0x70/0x110 [ 60.232461][ C0] #2: ffff800089aa57a0 (rcu_read_lock){....}-{1:3}, at: atomic_notifier_call_chain+0x44/0x1ac [ 60.234412][ C0] stack backtrace: [ 60.235102][ C0] CPU: 0 UID: 0 PID: 5008 Comm: syz.0.42 Tainted: G L syzkaller #0 PREEMPT [ 60.237134][ C0] Tainted: [L]=SOFTLOCKUP [ 60.238018][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 60.240074][ C0] Call trace: [ 60.240725][ C0] show_stack+0x2c/0x3c (C) [ 60.241619][ C0] __dump_stack+0x30/0x40 [ 60.242501][ C0] dump_stack_lvl+0x30/0x12c [ 60.243498][ C0] dump_stack+0x1c/0x28 [ 60.244416][ C0] __lock_acquire+0xea0/0x2b08 [ 60.245433][ C0] lock_acquire+0x13c/0x320 [ 60.246376][ C0] _raw_spin_lock+0x48/0x60 [ 60.247316][ C0] bus_to_subsys+0x40/0x120 [ 60.248259][ C0] bus_for_each_dev+0x8c/0x1b4 [ 60.249199][ C0] coresight_panic_cb+0x2c/0x3c [ 60.250186][ C0] notifier_call_chain+0x1a4/0x4cc [ 60.251316][ C0] atomic_notifier_call_chain+0xf0/0x1ac [ 60.252476][ C0] vpanic+0x3a0/0x7d4 [ 60.253311][ C0] oops_exit+0x0/0x40 [ 60.254155][ C0] update_touch_ts+0x0/0xac [ 60.255115][ C0] __hrtimer_run_queues+0x2e4/0x998 [ 60.256250][ C0] hrtimer_interrupt+0x408/0x8c0 [ 60.257374][ C0] arch_timer_handler_virt+0x70/0x84 [ 60.258589][ C0] handle_percpu_devid_irq+0x240/0x42c [ 60.259801][ C0] generic_handle_domain_irq+0xe4/0x154 [ 60.261006][ C0] gic_handle_irq+0x6c/0x180 [ 60.261996][ C0] call_on_irq_stack+0x30/0x48 [ 60.263025][ C0] do_interrupt_handler+0xd4/0x138 [ 60.264056][ C0] el1_interrupt+0x3c/0x60 [ 60.264959][ C0] el1h_64_irq_handler+0x18/0x24 [ 60.266036][ C0] el1h_64_irq+0x78/0x7c [ 60.266969][ C0] queued_spin_lock_slowpath+0x138/0xb5c (P) [ 60.268305][ C0] do_raw_spin_lock+0x21c/0x2d0 [ 60.269363][ C0] _raw_spin_lock_bh+0x50/0x60 [ 60.270402][ C0] lock_sock_nested+0x70/0x110 [ 60.271456][ C0] tipc_sendstream+0x54/0x88 [ 60.272484][ C0] __sock_sendmsg+0xc8/0x188 [ 60.273527][ C0] ____sys_sendmsg+0x3f8/0x6c8 [ 60.274576][ C0] ___sys_sendmsg+0x198/0x224 [ 60.275630][ C0] __sys_sendmmsg+0x204/0x580 [ 60.276679][ C0] __arm64_sys_sendmmsg+0xac/0xc8 [ 60.277810][ C0] invoke_syscall+0x98/0x244 [ 60.278847][ C0] el0_svc_common+0xec/0x23c [ 60.279834][ C0] do_el0_svc+0x4c/0x5c [ 60.280731][ C0] el0_svc+0x60/0x1d8 [ 60.281613][ C0] el0t_64_sync_handler+0x44/0x104 [ 60.282711][ C0] el0t_64_sync+0x198/0x19c [ 60.291239][ C0] Calling EFI runtime from hardirq context [ 60.303814][ C0] Calling EFI runtime from hardirq context [ 60.316317][ C0] Calling EFI runtime from hardirq context [ 60.328259][ C0] Calling EFI runtime from hardirq context [ 60.340559][ C0] Calling EFI runtime from hardirq context [ 60.352846][ C0] Calling EFI runtime from hardirq context [ 60.364971][ C0] Calling EFI runtime from hardirq context [ 60.376950][ C0] Calling EFI runtime from hardirq context [ 60.390242][ C0] Calling EFI runtime from hardirq context [ 60.401459][ C0] Calling EFI runtime from hardirq context [ 60.484597][ C0] Rebooting in 86400 seconds..