Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. 1970/01/01 00:01:06 parsed 1 programs [ 68.052743][ T4515] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 69.611409][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.612514][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.621491][ T2365] cfg80211: failed to load regulatory.db [ 69.790019][ T4526] chnl_net:caif_netlink_parms(): no params data found [ 69.809040][ T4526] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.810351][ T4526] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.811841][ T4526] device bridge_slave_0 entered promiscuous mode [ 69.813912][ T4526] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.815102][ T4526] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.816507][ T4526] device bridge_slave_1 entered promiscuous mode [ 69.825343][ T4526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.827730][ T4526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.835793][ T4526] team0: Port device team_slave_0 added [ 69.837557][ T4526] team0: Port device team_slave_1 added [ 69.845006][ T4526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.846189][ T4526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.849891][ T4526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.852214][ T4526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.853308][ T4526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.857224][ T4526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.901747][ T4526] device hsr_slave_0 entered promiscuous mode [ 69.940149][ T4526] device hsr_slave_1 entered promiscuous mode [ 70.560377][ T4526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.601495][ T4526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.631509][ T4526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.661616][ T4526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.708795][ T4526] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.709896][ T4526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.711155][ T4526] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.712186][ T4526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.732631][ T4526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.737407][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.739166][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.741933][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.743751][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 70.748158][ T4526] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.753590][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.755505][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.756606][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.759458][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.761523][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.762565][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.768742][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.771779][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.777459][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.779207][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.785307][ T4526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.786987][ T4526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.791239][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.792654][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.794197][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.795628][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.797083][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.838786][ T4526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.840638][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.841911][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.853400][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.855045][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.862598][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.864076][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.865723][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.867090][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.869532][ T4526] device veth0_vlan entered promiscuous mode [ 70.873974][ T4526] device veth1_vlan entered promiscuous mode [ 70.882973][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.885711][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.887227][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.888770][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.892520][ T4526] device veth0_macvtap entered promiscuous mode [ 70.895188][ T4526] device veth1_macvtap entered promiscuous mode [ 70.901467][ T4526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.902754][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.904233][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.905638][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.907095][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.910880][ T4526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.912000][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.913451][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.916623][ T4526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.917932][ T4526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.919189][ T4526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.922257][ T4526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.212962][ T136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.133123][ T136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.583513][ T136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.644747][ T136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.483980][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.485222][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.487082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.497142][ T325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.498373][ T325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.500567][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.608850][ T136] device hsr_slave_0 left promiscuous mode [ 77.650289][ T136] device hsr_slave_1 left promiscuous mode [ 77.740016][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.741184][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.743217][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.744378][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.745708][ T136] device bridge_slave_1 left promiscuous mode [ 77.746698][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.790588][ T136] device bridge_slave_0 left promiscuous mode [ 77.791611][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.930157][ T136] device veth1_macvtap left promiscuous mode [ 77.931252][ T136] device veth0_macvtap left promiscuous mode [ 77.932184][ T136] device veth1_vlan left promiscuous mode [ 77.933058][ T136] device veth0_vlan left promiscuous mode [ 78.044703][ T136] team0 (unregistering): Port device team_slave_1 removed [ 78.049214][ T136] team0 (unregistering): Port device team_slave_0 removed [ 78.055221][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.085863][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.195670][ T136] bond0 (unregistering): Released all slaves 1970/01/01 00:01:18 executed programs: 0 [ 78.717819][ T5031] chnl_net:caif_netlink_parms(): no params data found [ 78.738975][ T5031] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.740721][ T5031] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.742235][ T5031] device bridge_slave_0 entered promiscuous mode [ 78.744415][ T5031] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.745582][ T5031] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.747169][ T5031] device bridge_slave_1 entered promiscuous mode [ 78.755850][ T5031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.758431][ T5031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.767693][ T5031] team0: Port device team_slave_0 added [ 78.769677][ T5031] team0: Port device team_slave_1 added [ 78.777666][ T5031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.778805][ T5031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.782720][ T5031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.785318][ T5031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.786393][ T5031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.790594][ T5031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.842637][ T5031] device hsr_slave_0 entered promiscuous mode [ 78.900829][ T5031] device hsr_slave_1 entered promiscuous mode [ 79.430301][ T5031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.461921][ T5031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.511376][ T5031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.561325][ T5031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.626954][ T5031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.631115][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.632589][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.635173][ T5031] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.637910][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.639596][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.641853][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.643011][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.651052][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.654006][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.655568][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.657000][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.658090][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.669569][ T5031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.675925][ T5031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.679409][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.681450][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.683105][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.684865][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.686332][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.688174][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.689494][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.702328][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.704112][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.705599][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.709351][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.711020][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.746260][ T136] ODEBUG: Out of memory. ODEBUG disabled [ 79.770435][ T5031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.771939][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.773314][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.782833][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.784296][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.811662][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.813090][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.814463][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.815821][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.818217][ T5031] device veth0_vlan entered promiscuous mode [ 79.821700][ T5031] device veth1_vlan entered promiscuous mode [ 79.829637][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.831544][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.832925][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.834509][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.838755][ T5031] device veth0_macvtap entered promiscuous mode [ 79.841668][ T5031] device veth1_macvtap entered promiscuous mode [ 79.855451][ T5031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.856602][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.858037][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.859400][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.864292][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.867387][ T5031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.869699][ T5031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.871214][ T5031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.872578][ T5031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.873927][ T5031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.876584][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.878087][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.902758][ T1693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.903964][ T1693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.905400][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.916380][ T325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.917613][ T325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.919127][ T1693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.730123][ T4090] Bluetooth: hci0: command 0x0409 tx timeout [ 104.119928][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz.0.58:5337] [ 104.121082][ C1] Modules linked in: [ 104.121610][ C1] irq event stamp: 5233 [ 104.122194][ C1] hardirqs last enabled at (5232): [] exit_to_kernel_mode+0xe0/0x168 [ 104.123548][ C1] hardirqs last disabled at (5233): [] enter_el1_irq_or_nmi+0x10/0x1c [ 104.124867][ C1] softirqs last enabled at (552): [] release_sock+0x1d0/0x258 [ 104.126110][ C1] softirqs last disabled at (558): [] lock_sock_nested+0xf4/0x1d4 [ 104.127400][ C1] CPU: 1 PID: 5337 Comm: syz.0.58 Not tainted syzkaller #0 [ 104.128379][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 104.129731][ C1] pstate: 02400005 (nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 104.130831][ C1] pc : queued_spin_lock_slowpath+0x13c/0x798 [ 104.131655][ C1] lr : queued_spin_lock_slowpath+0x148/0x798 [ 104.132505][ C1] sp : ffff80001f9b7600 [ 104.133069][ C1] x29: ffff80001f9b76a0 x28: ffff800014071008 x27: 1fffe0001b8c5012 [ 104.134204][ C1] x26: 0000000000000000 x25: ffff0000dcabb680 x24: dfff800000000000 [ 104.135353][ C1] x23: ffff700003f36ec4 x22: 1ffff00003f36ee4 x21: ffff0000dc628090 [ 104.136677][ C1] x20: ffff0000dc628098 x19: ffff0000dc628088 x18: 0000000000000000 [ 104.138000][ C1] x17: 0000000000000000 x16: ffff8000082d5fa8 x15: 000000000000000a [ 104.139197][ C1] x14: 0000000000ff0100 x13: 1ffff0000282406b x12: 0000000000000001 [ 104.140389][ C1] x11: 1fffe0001b8c5011 x10: 0000000000000000 x9 : 0000000000000000 [ 104.141545][ C1] x8 : 0000000000000101 x7 : ffff80000f646bd4 x6 : 0000000000000000 [ 104.142706][ C1] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d52ac [ 104.144054][ C1] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 104.145303][ C1] Call trace: [ 104.145827][ C1] queued_spin_lock_slowpath+0x13c/0x798 [ 104.146700][ C1] do_raw_spin_lock+0x2ec/0x2f0 [ 104.147465][ C1] _raw_spin_lock_bh+0x11c/0x1b4 [ 104.148233][ C1] lock_sock_nested+0xf4/0x1d4 [ 104.148960][ C1] tipc_sendstream+0x50/0x84 [ 104.149657][ C1] ____sys_sendmsg+0x61c/0x920 [ 104.150390][ C1] ___sys_sendmsg+0x1d0/0x240 [ 104.151087][ C1] __arm64_sys_sendmsg+0x1a8/0x254 [ 104.151799][ C1] invoke_syscall+0x98/0x2b8 [ 104.152465][ C1] el0_svc_common+0x138/0x258 [ 104.153170][ C1] do_el0_svc+0x58/0x14c [ 104.153762][ C1] el0_svc+0x78/0x1e0 [ 104.154289][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 104.154982][ C1] el0t_64_sync+0x1a0/0x1a4 [ 104.155633][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 104.156506][ C1] CPU: 1 PID: 5337 Comm: syz.0.58 Tainted: G L syzkaller #0 [ 104.157627][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 104.158969][ C1] Call trace: [ 104.159408][ C1] dump_backtrace+0x0/0x43c [ 104.160030][ C1] show_stack+0x2c/0x3c [ 104.160597][ C1] __dump_stack+0x30/0x40 [ 104.161169][ C1] dump_stack_lvl+0xf8/0x160 [ 104.161817][ C1] dump_stack+0x1c/0x5c [ 104.162361][ C1] panic+0x2e4/0x854 [ 104.162887][ C1] softlockup_fn+0x0/0x120 [ 104.163488][ C1] __hrtimer_run_queues+0x3fc/0xb6c [ 104.164235][ C1] hrtimer_interrupt+0x2bc/0xb5c [ 104.164902][ C1] arch_timer_handler_virt+0x74/0x88 [ 104.165609][ C1] handle_percpu_devid_irq+0x29c/0x76c [ 104.166347][ C1] handle_domain_irq+0x144/0x1fc [ 104.167003][ C1] gic_handle_irq+0x78/0x1c8 [ 104.167597][ C1] call_on_irq_stack+0x30/0x48 [ 104.168300][ C1] do_interrupt_handler+0x6c/0x88 [ 104.169001][ C1] el1_interrupt+0x30/0x58 [ 104.169575][ C1] el1h_64_irq_handler+0x18/0x24 [ 104.170270][ C1] el1h_64_irq+0x78/0x7c [ 104.170901][ C1] queued_spin_lock_slowpath+0x13c/0x798 [ 104.171819][ C1] do_raw_spin_lock+0x2ec/0x2f0 [ 104.172599][ C1] _raw_spin_lock_bh+0x11c/0x1b4 [ 104.173363][ C1] lock_sock_nested+0xf4/0x1d4 [ 104.174091][ C1] tipc_sendstream+0x50/0x84 [ 104.174754][ C1] ____sys_sendmsg+0x61c/0x920 [ 104.175445][ C1] ___sys_sendmsg+0x1d0/0x240 [ 104.176130][ C1] __arm64_sys_sendmsg+0x1a8/0x254 [ 104.176840][ C1] invoke_syscall+0x98/0x2b8 [ 104.177486][ C1] el0_svc_common+0x138/0x258 [ 104.178132][ C1] do_el0_svc+0x58/0x14c [ 104.178731][ C1] el0_svc+0x78/0x1e0 [ 104.179281][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 104.179996][ C1] el0t_64_sync+0x1a0/0x1a4 [ 104.180617][ C1] SMP: stopping secondary CPUs [ 104.181276][ C1] Kernel Offset: disabled [ 104.181949][ C1] CPU features: 0x8,000003c1,7d33ffd9 [ 104.182706][ C1] Memory Limit: none [ 104.190326][ C1] [ 104.190637][ C1] ================================ [ 104.191325][ C1] WARNING: inconsistent lock state [ 104.192064][ C1] syzkaller #0 Tainted: G L [ 104.192853][ C1] -------------------------------- [ 104.193520][ C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 104.194463][ C1] syz.0.58/5337 [HC1[1]:SC0[2]:HE0:SE0] takes: [ 104.195320][ C1] ffff80001415e878 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 104.196726][ C1] {HARDIRQ-ON-W} state was registered at: [ 104.197443][ C1] lock_acquire+0x1f4/0x620 [ 104.198057][ C1] _raw_spin_lock+0xb0/0x10c [ 104.198720][ C1] efi_call_rts+0x384/0x9f4 [ 104.199372][ C1] process_one_work+0x79c/0x1140 [ 104.200160][ C1] worker_thread+0x8f4/0x101c [ 104.200899][ C1] kthread+0x374/0x454 [ 104.201536][ C1] ret_from_fork+0x10/0x20 [ 104.202208][ C1] irq event stamp: 5233 [ 104.202818][ C1] hardirqs last enabled at (5232): [] exit_to_kernel_mode+0xe0/0x168 [ 104.204269][ C1] hardirqs last disabled at (5233): [] enter_el1_irq_or_nmi+0x10/0x1c [ 104.205660][ C1] softirqs last enabled at (552): [] release_sock+0x1d0/0x258 [ 104.206948][ C1] softirqs last disabled at (558): [] lock_sock_nested+0xf4/0x1d4 [ 104.208369][ C1] [ 104.208369][ C1] other info that might help us debug this: [ 104.209573][ C1] Possible unsafe locking scenario: [ 104.209573][ C1] [ 104.210668][ C1] CPU0 [ 104.211145][ C1] ---- [ 104.211593][ C1] lock(efi_rt_lock); [ 104.212199][ C1] [ 104.212680][ C1] lock(efi_rt_lock); [ 104.213319][ C1] [ 104.213319][ C1] *** DEADLOCK *** [ 104.213319][ C1] [ 104.214504][ C1] 4 locks held by syz.0.58/5337: [ 104.215189][ C1] #0: ffff0000dc628120 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: tipc_sendstream+0x50/0x84 [ 104.216563][ C1] #1: ffff0000dc6280a0 (slock-AF_TIPC){+...}-{2:2}, at: lock_sock_nested+0xf4/0x1d4 [ 104.217989][ C1] #2: ffff8000142f1520 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 104.219300][ C1] #3: ffff800015e4faa8 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x170/0x6f8 [ 104.220612][ C1] [ 104.220612][ C1] stack backtrace: [ 104.221416][ C1] CPU: 1 PID: 5337 Comm: syz.0.58 Tainted: G L syzkaller #0 [ 104.222564][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 104.223948][ C1] Call trace: [ 104.224397][ C1] dump_backtrace+0x0/0x43c [ 104.224987][ C1] show_stack+0x2c/0x3c [ 104.225546][ C1] __dump_stack+0x30/0x40 [ 104.226127][ C1] dump_stack_lvl+0xf8/0x160 [ 104.226722][ C1] dump_stack+0x1c/0x5c [ 104.227312][ C1] print_usage_bug+0x3a4/0x550 [ 104.228028][ C1] mark_lock_irq+0x788/0x9e4 [ 104.228664][ C1] mark_lock+0x224/0x320 [ 104.229252][ C1] __lock_acquire+0xd28/0x651c [ 104.229912][ C1] lock_acquire+0x1f4/0x620 [ 104.230515][ C1] _raw_spin_lock+0xb0/0x10c [ 104.231120][ C1] virt_efi_set_variable_nonblocking+0x74/0x16c [ 104.231970][ C1] efivar_entry_set_safe+0x460/0x480 [ 104.232687][ C1] efi_pstore_write+0x22c/0x3ac [ 104.233353][ C1] pstore_dump+0x4dc/0x6f8 [ 104.233928][ C1] kmsg_dump+0x170/0x260 [ 104.234487][ C1] panic+0x338/0x854 [ 104.235065][ C1] softlockup_fn+0x0/0x120 [ 104.235626][ C1] __hrtimer_run_queues+0x3fc/0xb6c [ 104.236348][ C1] hrtimer_interrupt+0x2bc/0xb5c [ 104.237037][ C1] arch_timer_handler_virt+0x74/0x88 [ 104.237896][ C1] handle_percpu_devid_irq+0x29c/0x76c [ 104.238712][ C1] handle_domain_irq+0x144/0x1fc [ 104.239420][ C1] gic_handle_irq+0x78/0x1c8 [ 104.240053][ C1] call_on_irq_stack+0x30/0x48 [ 104.240690][ C1] do_interrupt_handler+0x6c/0x88 [ 104.241371][ C1] el1_interrupt+0x30/0x58 [ 104.241959][ C1] el1h_64_irq_handler+0x18/0x24 [ 104.242659][ C1] el1h_64_irq+0x78/0x7c [ 104.243239][ C1] queued_spin_lock_slowpath+0x13c/0x798 [ 104.244010][ C1] do_raw_spin_lock+0x2ec/0x2f0 [ 104.244660][ C1] _raw_spin_lock_bh+0x11c/0x1b4 [ 104.245371][ C1] lock_sock_nested+0xf4/0x1d4 [ 104.246134][ C1] tipc_sendstream+0x50/0x84 [ 104.246861][ C1] ____sys_sendmsg+0x61c/0x920 [ 104.247608][ C1] ___sys_sendmsg+0x1d0/0x240 [ 104.248287][ C1] __arm64_sys_sendmsg+0x1a8/0x254 [ 104.249051][ C1] invoke_syscall+0x98/0x2b8 [ 104.249732][ C1] el0_svc_common+0x138/0x258 [ 104.250421][ C1] do_el0_svc+0x58/0x14c [ 104.251031][ C1] el0_svc+0x78/0x1e0 [ 104.251628][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 104.252369][ C1] el0t_64_sync+0x1a0/0x1a4 [ 104.455391][ C1] Rebooting in 86400 seconds..