Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. 1970/01/01 00:01:08 parsed 1 programs [ 69.274576][ T4505] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 69.623192][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.623892][ T21] cfg80211: failed to load regulatory.db [ 69.624402][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.735845][ T1652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.736980][ T1652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.738557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.754669][ T1652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.756084][ T1652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.757358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.187354][ T4580] chnl_net:caif_netlink_parms(): no params data found [ 71.207894][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.209054][ T4580] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.210580][ T4580] device bridge_slave_0 entered promiscuous mode [ 71.213420][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.214632][ T4580] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.216138][ T4580] device bridge_slave_1 entered promiscuous mode [ 71.226411][ T4580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.229234][ T4580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.238038][ T4580] team0: Port device team_slave_0 added [ 71.239956][ T4580] team0: Port device team_slave_1 added [ 71.248786][ T4580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.249914][ T4580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.254347][ T4580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.256832][ T4580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.257959][ T4580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.262820][ T4580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.313016][ T4580] device hsr_slave_0 entered promiscuous mode [ 71.383082][ T4580] device hsr_slave_1 entered promiscuous mode [ 72.060235][ T4580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.104009][ T4580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.143853][ T4580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.173877][ T4580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.258339][ T4580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.263176][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.264761][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.267906][ T4580] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.270606][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.272903][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.275028][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.276114][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.278205][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.283510][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.285123][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.286560][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.287614][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.289011][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.298314][ T4580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.300072][ T4580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.304869][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.306656][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.308541][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.310137][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.311725][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.324021][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.326593][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.328326][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.329790][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.331293][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.333861][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.368372][ T4580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.371453][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.373185][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.379737][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.381433][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.388476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.390004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.393396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.394954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.397935][ T4580] device veth0_vlan entered promiscuous mode [ 72.404929][ T4580] device veth1_vlan entered promiscuous mode [ 72.412991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.414458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.415951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.417446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.420350][ T4580] device veth0_macvtap entered promiscuous mode [ 72.424545][ T4580] device veth1_macvtap entered promiscuous mode [ 72.431507][ T4580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.433566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.435176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.436682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.438235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.441301][ T4580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.443644][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.445202][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.449243][ T4580] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.450630][ T4580] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.452657][ T4580] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.454068][ T4580] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:12 executed programs: 0 [ 72.775454][ T4745] chnl_net:caif_netlink_parms(): no params data found [ 72.798634][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.799883][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.801489][ T4745] device bridge_slave_0 entered promiscuous mode [ 72.804466][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.805574][ T4745] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.807180][ T4745] device bridge_slave_1 entered promiscuous mode [ 72.818556][ T4745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.821325][ T4745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.835069][ T4745] team0: Port device team_slave_0 added [ 72.837233][ T4745] team0: Port device team_slave_1 added [ 72.846610][ T4745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.847842][ T4745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.852371][ T4745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.855207][ T4745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.856249][ T4745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.860509][ T4745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.903730][ T4745] device hsr_slave_0 entered promiscuous mode [ 72.952320][ T4745] device hsr_slave_1 entered promiscuous mode [ 72.972320][ T4745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.973646][ T4745] Cannot create hsr debugfs directory [ 73.011336][ T4745] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.741984][ T4165] Bluetooth: hci0: command 0x0409 tx timeout [ 76.007589][ T4745] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.821842][ T4637] Bluetooth: hci0: command 0x041b tx timeout [ 78.335689][ T4745] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.377767][ T4745] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.537666][ T4745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.577608][ T4745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.613233][ T4745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.658259][ T4745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.734162][ T4745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.738866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.740501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.744164][ T4745] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.746747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.748373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.749886][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.751080][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.752603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.755405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.756990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.758550][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.759753][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.764772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.767659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.770600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.773228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.775490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.777936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.779553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.782549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.784059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.787547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.789114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.791504][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.835152][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.836511][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.840493][ T4745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.847342][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.848937][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.857801][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.859455][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.861028][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.863266][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.865697][ T4745] device veth0_vlan entered promiscuous mode [ 78.869360][ T4745] device veth1_vlan entered promiscuous mode [ 78.878500][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.879976][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.881421][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.883369][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.886040][ T4745] device veth0_macvtap entered promiscuous mode [ 78.888745][ T4745] device veth1_macvtap entered promiscuous mode [ 78.895905][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.897524][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.899552][ T4745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.900780][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.902704][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.904920][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.906574][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.909255][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.910846][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.912671][ T4642] Bluetooth: hci0: command 0x040f tx timeout [ 78.914737][ T4745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.916227][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.917846][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.920574][ T4745] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.922769][ T4745] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.924150][ T4745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.925503][ T4745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.949344][ T1652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.951407][ T1652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.954853][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.961210][ T1652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.963746][ T1652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.965110][ T1652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:18 executed programs: 2 [ 79.036594][ T534] device hsr_slave_0 left promiscuous mode [ 79.072105][ T534] device hsr_slave_1 left promiscuous mode [ 79.152183][ T534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.153457][ T534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.158153][ T534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.159338][ T534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.161210][ T534] device bridge_slave_1 left promiscuous mode [ 79.162661][ T534] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.194394][ T534] device bridge_slave_0 left promiscuous mode [ 79.195693][ T534] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.302657][ T534] device veth1_macvtap left promiscuous mode [ 79.303656][ T534] device veth0_macvtap left promiscuous mode [ 79.304684][ T534] device veth1_vlan left promiscuous mode [ 79.305670][ T534] device veth0_vlan left promiscuous mode [ 79.480802][ T534] team0 (unregistering): Port device team_slave_1 removed [ 79.487926][ T534] team0 (unregistering): Port device team_slave_0 removed [ 79.492490][ T534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.528908][ T534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.636927][ T534] bond0 (unregistering): Released all slaves [ 80.982599][ T4642] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:01:23 executed programs: 273 1970/01/01 00:01:28 executed programs: 567 [ 112.131781][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz.0.604:6738] [ 112.133246][ C0] Modules linked in: [ 112.133872][ C0] irq event stamp: 5177 [ 112.134506][ C0] hardirqs last enabled at (5176): [] exit_to_kernel_mode+0xe0/0x168 [ 112.136153][ C0] hardirqs last disabled at (5177): [] enter_el1_irq_or_nmi+0x10/0x1c [ 112.137578][ C0] softirqs last enabled at (600): [] release_sock+0x1d0/0x258 [ 112.138926][ C0] softirqs last disabled at (606): [] lock_sock_nested+0xf4/0x1d4 [ 112.140386][ C0] CPU: 0 PID: 6738 Comm: syz.0.604 Not tainted syzkaller #0 [ 112.141510][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 112.142994][ C0] pstate: 02400005 (nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 112.144176][ C0] pc : queued_spin_lock_slowpath+0x13c/0x7ac [ 112.145083][ C0] lr : queued_spin_lock_slowpath+0x148/0x7ac [ 112.145953][ C0] sp : ffff8000239c7600 [ 112.146539][ C0] x29: ffff8000239c76a0 x28: ffff8000141f1008 x27: ffff8000239c7620 [ 112.147711][ C0] x26: 0000000000000001 x25: ffff0000d3f88000 x24: dfff800000000000 [ 112.148884][ C0] x23: ffff700004738ec4 x22: ffff700004738ee4 x21: ffff0000e9279c90 [ 112.150292][ C0] x20: ffff0000e9279c98 x19: ffff0000e9279c88 x18: 0000000000000000 [ 112.151594][ C0] x17: 0000000000000000 x16: ffff8000082d82e4 x15: 000000000000000a [ 112.152950][ C0] x14: 0000000000000001 x13: 1fffe0001d24f391 x12: 0000000000000000 [ 112.154206][ C0] x11: 0000000000000000 x10: ffff60001d24f392 x9 : 0000000000000000 [ 112.155456][ C0] x8 : 0000000000000101 x7 : ffff80000f705550 x6 : 0000000000000000 [ 112.156686][ C0] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d75d4 [ 112.157920][ C0] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 112.159196][ C0] Call trace: [ 112.159731][ C0] queued_spin_lock_slowpath+0x13c/0x7ac [ 112.160642][ C0] do_raw_spin_lock+0x2f8/0x2fc [ 112.161419][ C0] _raw_spin_lock_bh+0x11c/0x1b4 [ 112.162213][ C0] lock_sock_nested+0xf4/0x1d4 [ 112.162957][ C0] tipc_sendstream+0x50/0x84 [ 112.163698][ C0] ____sys_sendmsg+0x62c/0x940 [ 112.164490][ C0] ___sys_sendmsg+0x1f0/0x27c [ 112.165309][ C0] __arm64_sys_sendmsg+0x1bc/0x278 [ 112.166188][ C0] invoke_syscall+0x98/0x2b0 [ 112.166967][ C0] el0_svc_common+0x138/0x258 [ 112.167740][ C0] do_el0_svc+0x58/0x13c [ 112.168427][ C0] el0_svc+0x78/0x1d0 [ 112.169044][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 112.169799][ C0] el0t_64_sync+0x1a0/0x1a4 [ 112.170543][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 112.171673][ C0] CPU: 0 PID: 6738 Comm: syz.0.604 Tainted: G L syzkaller #0 [ 112.173052][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 112.174602][ C0] Call trace: [ 112.175102][ C0] dump_backtrace+0x0/0x458 [ 112.175821][ C0] show_stack+0x2c/0x3c [ 112.176468][ C0] __dump_stack+0x30/0x40 [ 112.177200][ C0] dump_stack_lvl+0xf4/0x15c [ 112.177979][ C0] dump_stack+0x1c/0x5c [ 112.178700][ C0] panic+0x2fc/0x860 [ 112.179371][ C0] softlockup_fn+0x0/0x120 [ 112.180077][ C0] __hrtimer_run_queues+0x3e8/0xb44 [ 112.180918][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 112.181747][ C0] arch_timer_handler_virt+0x74/0x88 [ 112.182598][ C0] handle_percpu_devid_irq+0x29c/0x764 [ 112.183439][ C0] handle_domain_irq+0x144/0x1fc [ 112.184343][ C0] gic_handle_irq+0x78/0x1b8 [ 112.185122][ C0] call_on_irq_stack+0x30/0x48 [ 112.185884][ C0] do_interrupt_handler+0x6c/0x88 [ 112.186701][ C0] el1_interrupt+0x30/0x58 [ 112.187451][ C0] el1h_64_irq_handler+0x18/0x24 [ 112.188253][ C0] el1h_64_irq+0x78/0x7c [ 112.188938][ C0] queued_spin_lock_slowpath+0x13c/0x7ac [ 112.189835][ C0] do_raw_spin_lock+0x2f8/0x2fc [ 112.190621][ C0] _raw_spin_lock_bh+0x11c/0x1b4 [ 112.191396][ C0] lock_sock_nested+0xf4/0x1d4 [ 112.192161][ C0] tipc_sendstream+0x50/0x84 [ 112.192885][ C0] ____sys_sendmsg+0x62c/0x940 [ 112.193658][ C0] ___sys_sendmsg+0x1f0/0x27c [ 112.194353][ C0] __arm64_sys_sendmsg+0x1bc/0x278 [ 112.195205][ C0] invoke_syscall+0x98/0x2b0 [ 112.196037][ C0] el0_svc_common+0x138/0x258 [ 112.196848][ C0] do_el0_svc+0x58/0x13c [ 112.197550][ C0] el0_svc+0x78/0x1d0 [ 112.198254][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 112.199119][ C0] el0t_64_sync+0x1a0/0x1a4 [ 112.199892][ C0] SMP: stopping secondary CPUs [ 112.200665][ C0] Kernel Offset: disabled [ 112.201402][ C0] CPU features: 0x8,000003c1,7d33ffd9 [ 112.202287][ C0] Memory Limit: none [ 112.209833][ C0] [ 112.210197][ C0] ================================ [ 112.210945][ C0] WARNING: inconsistent lock state [ 112.211725][ C0] syzkaller #0 Tainted: G L [ 112.212717][ C0] -------------------------------- [ 112.213489][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 112.214535][ C0] syz.0.604/6738 [HC1[1]:SC0[2]:HE0:SE0] takes: [ 112.215533][ C0] ffff8000142de678 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 112.217266][ C0] {HARDIRQ-ON-W} state was registered at: [ 112.218179][ C0] lock_acquire+0x1f4/0x618 [ 112.218867][ C0] _raw_spin_lock+0xb0/0x10c [ 112.219576][ C0] efi_call_rts+0x80/0x9d8 [ 112.220289][ C0] process_one_work+0x79c/0x1138 [ 112.221080][ C0] worker_thread+0x8f4/0x1034 [ 112.221871][ C0] kthread+0x374/0x454 [ 112.222552][ C0] ret_from_fork+0x10/0x20 [ 112.223260][ C0] irq event stamp: 5177 [ 112.223954][ C0] hardirqs last enabled at (5176): [] exit_to_kernel_mode+0xe0/0x168 [ 112.225429][ C0] hardirqs last disabled at (5177): [] enter_el1_irq_or_nmi+0x10/0x1c [ 112.226940][ C0] softirqs last enabled at (600): [] release_sock+0x1d0/0x258 [ 112.228407][ C0] softirqs last disabled at (606): [] lock_sock_nested+0xf4/0x1d4 [ 112.229934][ C0] [ 112.229934][ C0] other info that might help us debug this: [ 112.231207][ C0] Possible unsafe locking scenario: [ 112.231207][ C0] [ 112.232414][ C0] CPU0 [ 112.232873][ C0] ---- [ 112.233402][ C0] lock(efi_rt_lock); [ 112.234030][ C0] [ 112.234535][ C0] lock(efi_rt_lock); [ 112.235204][ C0] [ 112.235204][ C0] *** DEADLOCK *** [ 112.235204][ C0] [ 112.236424][ C0] 4 locks held by syz.0.604/6738: [ 112.237138][ C0] #0: ffff0000e9279d20 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: tipc_sendstream+0x50/0x84 [ 112.238744][ C0] #1: ffff0000e9279ca0 (slock-AF_TIPC){+...}-{2:2}, at: lock_sock_nested+0xf4/0x1d4 [ 112.240328][ C0] #2: ffff800014471360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 112.241862][ C0] #3: ffff800015fce8c8 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x180/0x7ec [ 112.243387][ C0] [ 112.243387][ C0] stack backtrace: [ 112.244295][ C0] CPU: 0 PID: 6738 Comm: syz.0.604 Tainted: G L syzkaller #0 [ 112.245707][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 112.247261][ C0] Call trace: [ 112.247788][ C0] dump_backtrace+0x0/0x458 [ 112.248525][ C0] show_stack+0x2c/0x3c [ 112.249209][ C0] __dump_stack+0x30/0x40 [ 112.249923][ C0] dump_stack_lvl+0xf4/0x15c [ 112.250690][ C0] dump_stack+0x1c/0x5c [ 112.251348][ C0] print_usage_bug+0x3a4/0x550 [ 112.252129][ C0] mark_lock_irq+0x81c/0xa7c [ 112.252876][ C0] mark_lock+0x224/0x320 [ 112.253548][ C0] __lock_acquire+0xa48/0x67ec [ 112.254333][ C0] lock_acquire+0x1f4/0x618 [ 112.255028][ C0] _raw_spin_lock+0xb0/0x10c [ 112.255770][ C0] virt_efi_set_variable_nonblocking+0x74/0x16c [ 112.256797][ C0] efivar_entry_set_safe+0x498/0x4b8 [ 112.257614][ C0] efi_pstore_write+0x260/0x3fc [ 112.258364][ C0] pstore_dump+0x588/0x7ec [ 112.259087][ C0] kmsg_dump+0x170/0x260 [ 112.259775][ C0] panic+0x350/0x860 [ 112.260489][ C0] softlockup_fn+0x0/0x120 [ 112.261225][ C0] __hrtimer_run_queues+0x3e8/0xb44 [ 112.262097][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 112.262830][ C0] arch_timer_handler_virt+0x74/0x88 [ 112.263672][ C0] handle_percpu_devid_irq+0x29c/0x764 [ 112.264510][ C0] handle_domain_irq+0x144/0x1fc [ 112.265242][ C0] gic_handle_irq+0x78/0x1b8 [ 112.266010][ C0] call_on_irq_stack+0x30/0x48 [ 112.266791][ C0] do_interrupt_handler+0x6c/0x88 [ 112.267550][ C0] el1_interrupt+0x30/0x58 [ 112.268285][ C0] el1h_64_irq_handler+0x18/0x24 [ 112.269011][ C0] el1h_64_irq+0x78/0x7c [ 112.269665][ C0] queued_spin_lock_slowpath+0x13c/0x7ac [ 112.270554][ C0] do_raw_spin_lock+0x2f8/0x2fc [ 112.271310][ C0] _raw_spin_lock_bh+0x11c/0x1b4 [ 112.272116][ C0] lock_sock_nested+0xf4/0x1d4 [ 112.272869][ C0] tipc_sendstream+0x50/0x84 [ 112.273563][ C0] ____sys_sendmsg+0x62c/0x940 [ 112.274336][ C0] ___sys_sendmsg+0x1f0/0x27c [ 112.275059][ C0] __arm64_sys_sendmsg+0x1bc/0x278 [ 112.275919][ C0] invoke_syscall+0x98/0x2b0 [ 112.276684][ C0] el0_svc_common+0x138/0x258 [ 112.277451][ C0] do_el0_svc+0x58/0x13c [ 112.278159][ C0] el0_svc+0x78/0x1d0 [ 112.278768][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 112.279540][ C0] el0t_64_sync+0x1a0/0x1a4 [ 112.510780][ C0] Rebooting in 86400 seconds..