Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. 1970/01/01 00:01:05 parsed 1 programs [ 66.603557][ T4465] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 69.624046][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.625274][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.633397][ T7] cfg80211: failed to load regulatory.db [ 70.336076][ T4483] chnl_net:caif_netlink_parms(): no params data found [ 70.351954][ T4483] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.353357][ T4483] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.354788][ T4483] device bridge_slave_0 entered promiscuous mode [ 70.357842][ T4483] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.358993][ T4483] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.360424][ T4483] device bridge_slave_1 entered promiscuous mode [ 70.368088][ T4483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.370470][ T4483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.377676][ T4483] team0: Port device team_slave_0 added [ 70.379917][ T4483] team0: Port device team_slave_1 added [ 70.386081][ T4483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.387250][ T4483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.391415][ T4483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.393926][ T4483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.395013][ T4483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.398965][ T4483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.453566][ T4483] device hsr_slave_0 entered promiscuous mode [ 70.502755][ T4483] device hsr_slave_1 entered promiscuous mode [ 71.015899][ T4483] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.053626][ T4483] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.105487][ T4483] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.145186][ T4483] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.191253][ T4483] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.192506][ T4483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.193875][ T4483] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.194928][ T4483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.214038][ T4483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.217895][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.219569][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.221409][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.224109][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 71.283745][ T4483] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.287406][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.288826][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.289950][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.299771][ T4483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.301415][ T4483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.315972][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.317494][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.318591][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.324796][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.333238][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.334949][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.337886][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.339359][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.344034][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.375977][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.377374][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.382003][ T4483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.399873][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.401486][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.413054][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.414471][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.416195][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.417511][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.421756][ T4483] device veth0_vlan entered promiscuous mode [ 71.435277][ T4483] device veth1_vlan entered promiscuous mode [ 71.441615][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.443658][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.445098][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.446640][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.450648][ T4483] device veth0_macvtap entered promiscuous mode [ 71.453282][ T4483] device veth1_macvtap entered promiscuous mode [ 71.457705][ T4483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.459861][ T4483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.461859][ T4483] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.464157][ T4483] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.465468][ T4483] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.466818][ T4483] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.468708][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.470126][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.471554][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.474230][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.475749][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.477178][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.858083][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.859465][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.861650][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.870551][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.871758][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.873943][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.279007][ T153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:12 executed programs: 0 [ 72.800250][ T4778] chnl_net:caif_netlink_parms(): no params data found [ 72.817003][ T4778] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.818143][ T4778] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.819707][ T4778] device bridge_slave_0 entered promiscuous mode [ 72.821626][ T4778] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.822974][ T4778] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.824421][ T4778] device bridge_slave_1 entered promiscuous mode [ 72.831989][ T4778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.835092][ T4778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.847269][ T4778] team0: Port device team_slave_0 added [ 72.849163][ T4778] team0: Port device team_slave_1 added [ 72.855830][ T4778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.856981][ T4778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.860969][ T4778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.863359][ T4778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.864398][ T4778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.868268][ T4778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.913729][ T4778] device hsr_slave_0 entered promiscuous mode [ 72.943051][ T4778] device hsr_slave_1 entered promiscuous mode [ 72.973141][ T4778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.974388][ T4778] Cannot create hsr debugfs directory [ 74.435495][ T153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.822611][ T4150] Bluetooth: hci0: command 0x0409 tx timeout [ 76.545405][ T153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.598637][ T153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.903088][ T4137] Bluetooth: hci0: command 0x041b tx timeout [ 77.566221][ T4778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.594841][ T4778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.643850][ T4778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.683746][ T4778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.758377][ T4778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.762190][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.764468][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.767409][ T4778] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.769895][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.771466][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.774721][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.775781][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.777186][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.779966][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.781459][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.783096][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.784172][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.786868][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.789623][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.793544][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.795265][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.796854][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.799468][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.801022][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.804464][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.805987][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.808888][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.810462][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.813461][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.851782][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.853133][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.856123][ T4778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.861434][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.864178][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.870955][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.874408][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.875896][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.877296][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.879723][ T4778] device veth0_vlan entered promiscuous mode [ 77.883262][ T4778] device veth1_vlan entered promiscuous mode [ 77.890092][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.891651][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.894223][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.895824][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.898452][ T4778] device veth0_macvtap entered promiscuous mode [ 77.900844][ T4778] device veth1_macvtap entered promiscuous mode [ 77.906503][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.908163][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.910238][ T4778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.911477][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.913532][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.914986][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.916462][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.919361][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.921040][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.923261][ T4778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.924507][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.926074][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.928945][ T4778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.930214][ T4778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.931657][ T4778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.933104][ T4778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.949259][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.953843][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.956142][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.958186][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.959423][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.961077][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:17 executed programs: 2 [ 78.983053][ T4149] Bluetooth: hci0: command 0x040f tx timeout [ 80.389879][ T153] device hsr_slave_0 left promiscuous mode [ 80.423417][ T153] device hsr_slave_1 left promiscuous mode [ 80.512829][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.514184][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.516236][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.517440][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.518799][ T153] device bridge_slave_1 left promiscuous mode [ 80.519802][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.533610][ T153] device bridge_slave_0 left promiscuous mode [ 80.534785][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.633916][ T153] device veth1_macvtap left promiscuous mode [ 80.634922][ T153] device veth0_macvtap left promiscuous mode [ 80.635930][ T153] device veth1_vlan left promiscuous mode [ 80.636910][ T153] device veth0_vlan left promiscuous mode [ 80.731288][ T153] team0 (unregistering): Port device team_slave_1 removed [ 80.737561][ T153] team0 (unregistering): Port device team_slave_0 removed [ 80.741451][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.776967][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.866244][ T153] bond0 (unregistering): Released all slaves [ 81.062750][ T4137] Bluetooth: hci0: command 0x0419 tx timeout [ 104.132556][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz.0.202:5518] [ 104.133955][ C0] Modules linked in: [ 104.134641][ C0] irq event stamp: 5199 [ 104.135317][ C0] hardirqs last enabled at (5198): [] exit_to_kernel_mode+0xe0/0x168 [ 104.136938][ C0] hardirqs last disabled at (5199): [] enter_el1_irq_or_nmi+0x10/0x1c [ 104.138528][ C0] softirqs last enabled at (582): [] release_sock+0x1d0/0x258 [ 104.140015][ C0] softirqs last disabled at (588): [] lock_sock_nested+0xf4/0x1d4 [ 104.141518][ C0] CPU: 0 PID: 5518 Comm: syz.0.202 Not tainted syzkaller #0 [ 104.142715][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 104.144301][ C0] pstate: 02400005 (nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 104.145515][ C0] pc : queued_spin_lock_slowpath+0x13c/0x798 [ 104.146366][ C0] lr : queued_spin_lock_slowpath+0x148/0x798 [ 104.147211][ C0] sp : ffff800021227600 [ 104.147866][ C0] x29: ffff8000212276a0 x28: ffff8000140c1008 x27: 1fffe0001a114012 [ 104.149140][ C0] x26: 0000000000000001 x25: ffff0000d193b680 x24: dfff800000000000 [ 104.150386][ C0] x23: ffff700004244ec4 x22: 1ffff00004244ee4 x21: ffff0000d08a0090 [ 104.151639][ C0] x20: ffff0000d08a0098 x19: ffff0000d08a0088 x18: 0000000000000000 [ 104.152886][ C0] x17: 0000000000000000 x16: ffff8000082d5ea8 x15: 000000000000000a [ 104.154177][ C0] x14: 0000000000ff0100 x13: 1ffff0000282e06b x12: 0000000000000001 [ 104.155475][ C0] x11: 1fffe0001a114011 x10: 0000000000000000 x9 : 0000000000000000 [ 104.156827][ C0] x8 : 0000000000000101 x7 : ffff80000f69ef54 x6 : 0000000000000000 [ 104.158091][ C0] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d51ac [ 104.159418][ C0] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 104.160772][ C0] Call trace: [ 104.161282][ C0] queued_spin_lock_slowpath+0x13c/0x798 [ 104.162132][ C0] do_raw_spin_lock+0x2ec/0x2f0 [ 104.162809][ C0] _raw_spin_lock_bh+0x11c/0x1b4 [ 104.163477][ C0] lock_sock_nested+0xf4/0x1d4 [ 104.164145][ C0] tipc_sendstream+0x50/0x84 [ 104.164871][ C0] ____sys_sendmsg+0x61c/0x920 [ 104.165625][ C0] ___sys_sendmsg+0x1d0/0x240 [ 104.166313][ C0] __arm64_sys_sendmsg+0x1a8/0x254 [ 104.167133][ C0] invoke_syscall+0x98/0x2b8 [ 104.167806][ C0] el0_svc_common+0x138/0x258 [ 104.168527][ C0] do_el0_svc+0x58/0x14c [ 104.169206][ C0] el0_svc+0x78/0x1e0 [ 104.169828][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 104.170617][ C0] el0t_64_sync+0x1a0/0x1a4 [ 104.171299][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 104.172327][ C0] CPU: 0 PID: 5518 Comm: syz.0.202 Tainted: G L syzkaller #0 [ 104.173719][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 104.175379][ C0] Call trace: [ 104.175900][ C0] dump_backtrace+0x0/0x43c [ 104.176681][ C0] show_stack+0x2c/0x3c [ 104.177345][ C0] __dump_stack+0x30/0x40 [ 104.178091][ C0] dump_stack_lvl+0xf8/0x160 [ 104.178916][ C0] dump_stack+0x1c/0x5c [ 104.179634][ C0] panic+0x2e4/0x854 [ 104.180286][ C0] softlockup_fn+0x0/0x120 [ 104.181029][ C0] __hrtimer_run_queues+0x3fc/0xb6c [ 104.181922][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 104.182697][ C0] arch_timer_handler_virt+0x74/0x88 [ 104.183603][ C0] handle_percpu_devid_irq+0x29c/0x76c [ 104.184394][ C0] handle_domain_irq+0x144/0x1fc [ 104.185106][ C0] gic_handle_irq+0x78/0x1c8 [ 104.185770][ C0] call_on_irq_stack+0x24/0x30 [ 104.186544][ C0] do_interrupt_handler+0x6c/0x88 [ 104.187379][ C0] el1_interrupt+0x30/0x58 [ 104.188049][ C0] el1h_64_irq_handler+0x18/0x24 [ 104.188794][ C0] el1h_64_irq+0x78/0x7c [ 104.189421][ C0] queued_spin_lock_slowpath+0x13c/0x798 [ 104.190326][ C0] do_raw_spin_lock+0x2ec/0x2f0 [ 104.191094][ C0] _raw_spin_lock_bh+0x11c/0x1b4 [ 104.191862][ C0] lock_sock_nested+0xf4/0x1d4 [ 104.192596][ C0] tipc_sendstream+0x50/0x84 [ 104.193325][ C0] ____sys_sendmsg+0x61c/0x920 [ 104.194061][ C0] ___sys_sendmsg+0x1d0/0x240 [ 104.194828][ C0] __arm64_sys_sendmsg+0x1a8/0x254 [ 104.195629][ C0] invoke_syscall+0x98/0x2b8 [ 104.196341][ C0] el0_svc_common+0x138/0x258 [ 104.197142][ C0] do_el0_svc+0x58/0x14c [ 104.197866][ C0] el0_svc+0x78/0x1e0 [ 104.198474][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 104.199298][ C0] el0t_64_sync+0x1a0/0x1a4 [ 104.199971][ C0] SMP: stopping secondary CPUs [ 104.200757][ C0] Kernel Offset: disabled [ 104.201534][ C0] CPU features: 0x8,000003c1,7d33ffd9 [ 104.202536][ C0] Memory Limit: none [ 104.210016][ C0] [ 104.210357][ C0] ================================ [ 104.211095][ C0] WARNING: inconsistent lock state [ 104.211864][ C0] syzkaller #0 Tainted: G L [ 104.212690][ C0] -------------------------------- [ 104.213404][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 104.214348][ C0] syz.0.202/5518 [HC1[1]:SC0[2]:HE0:SE0] takes: [ 104.215208][ C0] ffff8000141ae778 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 104.216616][ C0] {HARDIRQ-ON-W} state was registered at: [ 104.217371][ C0] lock_acquire+0x1f4/0x620 [ 104.217992][ C0] _raw_spin_lock+0xb0/0x10c [ 104.218621][ C0] efi_call_rts+0x384/0x9f4 [ 104.219306][ C0] process_one_work+0x79c/0x1140 [ 104.220046][ C0] worker_thread+0x8f4/0x101c [ 104.220745][ C0] kthread+0x374/0x454 [ 104.221323][ C0] ret_from_fork+0x10/0x20 [ 104.221919][ C0] irq event stamp: 5199 [ 104.222472][ C0] hardirqs last enabled at (5198): [] exit_to_kernel_mode+0xe0/0x168 [ 104.224027][ C0] hardirqs last disabled at (5199): [] enter_el1_irq_or_nmi+0x10/0x1c [ 104.225506][ C0] softirqs last enabled at (582): [] release_sock+0x1d0/0x258 [ 104.226985][ C0] softirqs last disabled at (588): [] lock_sock_nested+0xf4/0x1d4 [ 104.228442][ C0] [ 104.228442][ C0] other info that might help us debug this: [ 104.229577][ C0] Possible unsafe locking scenario: [ 104.229577][ C0] [ 104.230615][ C0] CPU0 [ 104.231071][ C0] ---- [ 104.231624][ C0] lock(efi_rt_lock); [ 104.232272][ C0] [ 104.232829][ C0] lock(efi_rt_lock); [ 104.233494][ C0] [ 104.233494][ C0] *** DEADLOCK *** [ 104.233494][ C0] [ 104.234698][ C0] 4 locks held by syz.0.202/5518: [ 104.235469][ C0] #0: ffff0000d08a0120 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: tipc_sendstream+0x50/0x84 [ 104.236989][ C0] #1: ffff0000d08a00a0 (slock-AF_TIPC){+...}-{2:2}, at: lock_sock_nested+0xf4/0x1d4 [ 104.238631][ C0] #2: ffff800014341360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 104.240274][ C0] #3: ffff800015e9c588 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x170/0x6f8 [ 104.241869][ C0] [ 104.241869][ C0] stack backtrace: [ 104.242826][ C0] CPU: 0 PID: 5518 Comm: syz.0.202 Tainted: G L syzkaller #0 [ 104.244303][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 104.245914][ C0] Call trace: [ 104.246415][ C0] dump_backtrace+0x0/0x43c [ 104.247065][ C0] show_stack+0x2c/0x3c [ 104.247764][ C0] __dump_stack+0x30/0x40 [ 104.248445][ C0] dump_stack_lvl+0xf8/0x160 [ 104.249230][ C0] dump_stack+0x1c/0x5c [ 104.249902][ C0] print_usage_bug+0x3a4/0x550 [ 104.250699][ C0] mark_lock_irq+0x788/0x9e4 [ 104.251466][ C0] mark_lock+0x224/0x320 [ 104.252141][ C0] __lock_acquire+0xd28/0x651c [ 104.252901][ C0] lock_acquire+0x1f4/0x620 [ 104.253650][ C0] _raw_spin_lock+0xb0/0x10c [ 104.254353][ C0] virt_efi_set_variable_nonblocking+0x74/0x16c [ 104.255383][ C0] efivar_entry_set_safe+0x460/0x480 [ 104.256253][ C0] efi_pstore_write+0x22c/0x3ac [ 104.257035][ C0] pstore_dump+0x4dc/0x6f8 [ 104.257773][ C0] kmsg_dump+0x170/0x260 [ 104.258438][ C0] panic+0x338/0x854 [ 104.259132][ C0] softlockup_fn+0x0/0x120 [ 104.259887][ C0] __hrtimer_run_queues+0x3fc/0xb6c [ 104.260667][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 104.261476][ C0] arch_timer_handler_virt+0x74/0x88 [ 104.262347][ C0] handle_percpu_devid_irq+0x29c/0x76c [ 104.263217][ C0] handle_domain_irq+0x144/0x1fc [ 104.263966][ C0] gic_handle_irq+0x78/0x1c8 [ 104.264704][ C0] call_on_irq_stack+0x24/0x30 [ 104.265452][ C0] do_interrupt_handler+0x6c/0x88 [ 104.266205][ C0] el1_interrupt+0x30/0x58 [ 104.266908][ C0] el1h_64_irq_handler+0x18/0x24 [ 104.267710][ C0] el1h_64_irq+0x78/0x7c [ 104.268301][ C0] queued_spin_lock_slowpath+0x13c/0x798 [ 104.269195][ C0] do_raw_spin_lock+0x2ec/0x2f0 [ 104.269939][ C0] _raw_spin_lock_bh+0x11c/0x1b4 [ 104.270670][ C0] lock_sock_nested+0xf4/0x1d4 [ 104.271414][ C0] tipc_sendstream+0x50/0x84 [ 104.272112][ C0] ____sys_sendmsg+0x61c/0x920 [ 104.272884][ C0] ___sys_sendmsg+0x1d0/0x240 [ 104.273653][ C0] __arm64_sys_sendmsg+0x1a8/0x254 [ 104.274519][ C0] invoke_syscall+0x98/0x2b8 [ 104.275248][ C0] el0_svc_common+0x138/0x258 [ 104.275895][ C0] do_el0_svc+0x58/0x14c [ 104.276514][ C0] el0_svc+0x78/0x1e0 [ 104.277094][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 104.277876][ C0] el0t_64_sync+0x1a0/0x1a4 [ 104.497679][ C0] Rebooting in 86400 seconds..