Warning: Permanently added '10.128.1.217' (ED25519) to the list of known hosts. 2025/09/16 13:57:00 parsed 1 programs [ 247.542813][ T5867] cgroup: Unknown subsys name 'net' [ 247.808370][ T5867] cgroup: Unknown subsys name 'cpuset' [ 247.873508][ T5867] cgroup: Unknown subsys name 'rlimit' [ 249.884994][ T5867] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 254.887406][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.887430][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.933752][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.933775][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.970883][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.970990][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.620204][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.634129][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.634835][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.636065][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.636716][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 258.396457][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 258.866156][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.867773][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.867992][ T5931] bridge_slave_0: entered allmulticast mode [ 258.871926][ T5931] bridge_slave_0: entered promiscuous mode [ 258.880665][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.880851][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.881021][ T5931] bridge_slave_1: entered allmulticast mode [ 258.890944][ T5931] bridge_slave_1: entered promiscuous mode [ 259.030683][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.049289][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.366986][ T5931] team0: Port device team_slave_0 added [ 259.369577][ T5931] team0: Port device team_slave_1 added [ 259.547504][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.547517][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.547532][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.551008][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.551023][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.551050][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.899838][ T5931] hsr_slave_0: entered promiscuous mode [ 259.902269][ T5931] hsr_slave_1: entered promiscuous mode [ 260.504734][ T5931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 260.533326][ T5931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 260.569425][ T5931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 260.608773][ T5931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 260.756825][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.789082][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.810296][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.812401][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.832755][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.833108][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.090874][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.144681][ T5931] veth0_vlan: entered promiscuous mode [ 261.154045][ T5931] veth1_vlan: entered promiscuous mode [ 261.192471][ T5931] veth0_macvtap: entered promiscuous mode [ 261.201640][ T5931] veth1_macvtap: entered promiscuous mode [ 261.227498][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.241678][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.257713][ T1168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.260135][ T1168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.260440][ T1168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.260480][ T1168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.058396][ T3567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.265455][ T3567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.502185][ T3567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.768129][ T3567] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/09/16 13:57:19 executed programs: 0 [ 264.368365][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.382249][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.390430][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.391882][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.393005][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.595662][ T3567] bridge_slave_1: left allmulticast mode [ 264.595772][ T3567] bridge_slave_1: left promiscuous mode [ 264.597564][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.673875][ T3567] bridge_slave_0: left allmulticast mode [ 264.673902][ T3567] bridge_slave_0: left promiscuous mode [ 264.674133][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.393542][ T3567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.444308][ T5154] Bluetooth: hci0: command tx timeout [ 266.458669][ T3567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.498019][ T3567] bond0 (unregistering): Released all slaves [ 266.872815][ T3567] hsr_slave_0: left promiscuous mode [ 266.912820][ T3567] hsr_slave_1: left promiscuous mode [ 266.914286][ T3567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.914367][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.967544][ T3567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.967578][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.078246][ T3567] veth1_macvtap: left promiscuous mode [ 267.078522][ T3567] veth0_macvtap: left promiscuous mode [ 267.079559][ T3567] veth1_vlan: left promiscuous mode [ 267.079960][ T3567] veth0_vlan: left promiscuous mode [ 268.522750][ T5154] Bluetooth: hci0: command tx timeout [ 269.175132][ T3567] team0 (unregistering): Port device team_slave_1 removed [ 269.363259][ T3567] team0 (unregistering): Port device team_slave_0 removed [ 270.602776][ T5154] Bluetooth: hci0: command tx timeout [ 271.610845][ T5977] chnl_net:caif_netlink_parms(): no params data found [ 272.035032][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.035256][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.035482][ T5977] bridge_slave_0: entered allmulticast mode [ 272.038773][ T5977] bridge_slave_0: entered promiscuous mode [ 272.069289][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.069534][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.069751][ T5977] bridge_slave_1: entered allmulticast mode [ 272.103169][ T5977] bridge_slave_1: entered promiscuous mode [ 272.355303][ T5977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.379057][ T5977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.678022][ T5977] team0: Port device team_slave_0 added [ 272.682275][ T5977] team0: Port device team_slave_1 added [ 272.683686][ T5154] Bluetooth: hci0: command tx timeout [ 272.837948][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.837966][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.837992][ T5977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.840591][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.840605][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.840631][ T5977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.651273][ T5977] hsr_slave_0: entered promiscuous mode [ 273.658834][ T5977] hsr_slave_1: entered promiscuous mode [ 275.542500][ T5977] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 275.579332][ T5977] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 275.635892][ T5977] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 275.684221][ T5977] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 275.890521][ T5977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.916848][ T5977] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.928114][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.931202][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.960199][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.960407][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.389059][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.476029][ T5977] veth0_vlan: entered promiscuous mode [ 276.490494][ T5977] veth1_vlan: entered promiscuous mode [ 276.560141][ T5977] veth0_macvtap: entered promiscuous mode [ 276.580131][ T5977] veth1_macvtap: entered promiscuous mode [ 276.626495][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.666525][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.688259][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.688559][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.688598][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.688635][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.049321][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.049348][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.149040][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.149061][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/16 13:57:32 executed programs: 2 [ 285.222602][ C0] sched: DL replenish lagged too much 2025/09/16 13:57:53 executed programs: 4 [ 319.656295][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.659236][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.124866][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.748521][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.768016][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.960386][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.961354][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 328.979924][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.576150][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.849076][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 331.940095][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 331.941008][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.002620][ T6116] Bluetooth: hci1: Opcode 0x0c39 failed: -110 2025/09/16 13:58:57 executed programs: 5 [ 384.013562][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.066788][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.792506][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.798009][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.800047][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.801357][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.802225][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 395.676605][ T59] Bluetooth: hci1: command tx timeout [ 399.253651][ T5154] Bluetooth: hci1: command tx timeout [ 402.025784][ T5154] Bluetooth: hci1: command tx timeout [ 405.506077][ T5154] Bluetooth: hci1: command tx timeout [ 443.351152][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.370849][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.762097][ T5915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 468.353833][ T6145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 469.313174][ T6145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 469.315119][ T6145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 469.316512][ T6145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 481.333625][ T5154] Bluetooth: hci0: command tx timeout [ 483.414558][ T6145] Bluetooth: hci0: command tx timeout [ 485.636942][ T6145] Bluetooth: hci0: command tx timeout [ 487.745365][ T6145] Bluetooth: hci0: command tx timeout [ 501.123690][ T38] INFO: task kworker/0:4:5949 blocked for more than 148 seconds. [ 501.123718][ T38] Not tainted syzkaller #0 [ 501.123729][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.123739][ T38] task:kworker/0:4 state:D stack:19880 pid:5949 tgid:5949 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 501.123801][ T38] Workqueue: events_power_efficient reg_check_chans_work [ 501.123837][ T38] Call Trace: [ 501.123845][ T38] [ 501.123860][ T38] __schedule+0x16f3/0x4c20 [ 501.123902][ T38] ? sched_clock+0x3f/0x60 [ 501.123929][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 501.123966][ T38] ? __pfx___schedule+0x10/0x10 [ 501.124024][ T38] rt_mutex_schedule+0x77/0xf0 [ 501.124045][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 501.124086][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 501.124116][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 501.124144][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 501.124171][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 501.124193][ T38] ? __lock_acquire+0xab9/0xd20 [ 501.124234][ T38] ? reg_check_chans_work+0x164/0xf30 [ 501.124267][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 501.124308][ T38] ? __lock_acquire+0xab9/0xd20 [ 501.124342][ T38] ? reg_check_chans_work+0x164/0xf30 [ 501.124371][ T38] mutex_lock_nested+0x16a/0x1d0 [ 501.124395][ T38] ? reg_check_chans_work+0x95/0xf30 [ 501.124430][ T38] reg_check_chans_work+0x164/0xf30 [ 501.124468][ T38] ? __lock_acquire+0xab9/0xd20 [ 501.124504][ T38] ? __pfx_reg_check_chans_work+0x10/0x10 [ 501.124536][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 501.124570][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.124599][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 501.124623][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 501.124651][ T38] process_scheduled_works+0xade/0x17b0 [ 501.124712][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 501.124773][ T38] worker_thread+0x8a0/0xda0 [ 501.124832][ T38] kthread+0x70e/0x8a0 [ 501.124867][ T38] ? __pfx_worker_thread+0x10/0x10 [ 501.124893][ T38] ? __pfx_kthread+0x10/0x10 [ 501.124931][ T38] ? __pfx_kthread+0x10/0x10 [ 501.124963][ T38] ret_from_fork+0x439/0x7d0 [ 501.124994][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 501.125029][ T38] ? __switch_to_asm+0x39/0x70 [ 501.125047][ T38] ? __switch_to_asm+0x33/0x70 [ 501.125066][ T38] ? __pfx_kthread+0x10/0x10 [ 501.125098][ T38] ret_from_fork_asm+0x1a/0x30 [ 501.125138][ T38] [ 501.125162][ T38] [ 501.125162][ T38] Showing all locks held in the system: [ 501.125171][ T38] 2 locks held by kworker/u8:0/12: [ 501.125184][ T38] 5 locks held by kworker/u8:1/13: [ 501.125195][ T38] 2 locks held by ksoftirqd/0/15: [ 501.125207][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 501.125263][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 501.125328][ T38] 2 locks held by rcuc/0/20: [ 501.125339][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 501.125391][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 501.125445][ T38] 6 locks held by rcuc/1/28: [ 501.125456][ T38] 2 locks held by ksoftirqd/1/30: [ 501.125468][ T38] 1 lock held by khungtaskd/38: [ 501.125479][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 501.125533][ T38] 2 locks held by kworker/1:2/989: [ 501.125545][ T38] 3 locks held by kworker/u8:5/1019: [ 501.125556][ T38] #0: ffff88814cb77138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 501.125609][ T38] #1: ffffc90004d07bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 501.125663][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 501.125717][ T38] 5 locks held by kworker/u8:7/1168: [ 501.125729][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 501.125782][ T38] #1: ffffc900050c7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 501.125833][ T38] #2: ffff888036570898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 501.125889][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 501.125940][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 501.125993][ T38] 7 locks held by kworker/u8:9/1238: [ 501.126005][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 501.126055][ T38] #1: ffffc900052c7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 501.126108][ T38] #2: ffff88802842d300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 501.126174][ T38] #3: ffff888036622920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 501.126231][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 501.126281][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 501.126341][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 501.126404][ T38] 4 locks held by udevd/5205: [ 501.126416][ T38] 5 locks held by dhcpcd/5500: [ 501.126426][ T38] #0: ffff8880532eaaf8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 501.126483][ T38] #1: ffff88803a084af0 (&u->lock){+.+.}-{3:3}, at: unix_release_sock+0x413/0xd80 [ 501.126534][ T38] #2: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 501.126584][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 501.126637][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 501.126690][ T38] 2 locks held by getty/5592: [ 501.126700][ T38] #0: ffff88823bf640a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 501.126759][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 501.126813][ T38] 4 locks held by kworker/0:4/5949: [ 501.126824][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 501.126876][ T38] #1: ffffc9000402fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 501.126927][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 501.126983][ T38] #3: ffff888036570898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x164/0xf30 [ 501.127041][ T38] 2 locks held by napi/wg2-0/6074: [ 501.127052][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 501.127100][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 501.127151][ T38] 2 locks held by kworker/1:4/6108: [ 501.127162][ T38] 1 lock held by syz.0.19/6112: [ 501.127173][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 501.127230][ T38] 4 locks held by kworker/0:7/6114: [ 501.127241][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 501.127309][ T38] #1: ffffc90003b2fbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 501.127362][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 501.127413][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 501.127465][ T38] 2 locks held by kworker/1:6/6118: [ 501.127478][ T38] 4 locks held by kworker/0:10/6130: [ 501.127489][ T38] #0: ffff888030f45938 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 501.127541][ T38] #1: ffffc90003a3fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 501.127608][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 501.127658][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 501.127711][ T38] 1 lock held by syz-executor/6133: [ 501.127722][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 501.127771][ T38] 3 locks held by dhcpcd/6141: [ 501.127781][ T38] #0: ffff88803d9a60f8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 501.127836][ T38] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 501.127886][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 501.127939][ T38] 1 lock held by syz-executor/6142: [ 501.127950][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 501.127994][ T38] 1 lock held by dhcpcd/6146: [ 501.128004][ T38] #0: ffff8880532eb1b8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 501.128058][ T38] 3 locks held by dhcpcd/6149: [ 501.128068][ T38] #0: ffff88805320da38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 501.128124][ T38] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 501.128175][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 501.128226][ T38] 1 lock held by dhcpcd/6150: [ 501.128237][ T38] #0: ffff8880532e8278 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 501.128299][ T38] 1 lock held by dhcpcd/6151: [ 501.128310][ T38] #0: ffff888019942350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 501.128364][ T38] [ 501.128369][ T38] ============================================= [ 501.128369][ T38] [ 501.128378][ T38] NMI backtrace for cpu 0 [ 501.128393][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 501.128415][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 501.128426][ T38] Call Trace: [ 501.128434][ T38] [ 501.128442][ T38] dump_stack_lvl+0x189/0x250 [ 501.128476][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.128505][ T38] ? __pfx__printk+0x10/0x10 [ 501.128541][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 501.128570][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 501.128599][ T38] ? __pfx__printk+0x10/0x10 [ 501.128626][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 501.128654][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 501.128689][ T38] watchdog+0xf93/0xfe0 [ 501.128727][ T38] ? watchdog+0x1de/0xfe0 [ 501.128758][ T38] kthread+0x70e/0x8a0 [ 501.128792][ T38] ? __pfx_watchdog+0x10/0x10 [ 501.128816][ T38] ? __pfx_kthread+0x10/0x10 [ 501.128852][ T38] ? __pfx_kthread+0x10/0x10 [ 501.128883][ T38] ret_from_fork+0x439/0x7d0 [ 501.128913][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 501.128945][ T38] ? __switch_to_asm+0x39/0x70 [ 501.128963][ T38] ? __switch_to_asm+0x33/0x70 [ 501.128981][ T38] ? __pfx_kthread+0x10/0x10 [ 501.129011][ T38] ret_from_fork_asm+0x1a/0x30 [ 501.129046][ T38] [ 501.129054][ T38] Sending NMI from CPU 0 to CPUs 1: [ 501.129083][ C1] NMI backtrace for cpu 1 [ 501.129099][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 501.129118][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 501.129127][ C1] RIP: 0010:kmem_cache_alloc_node_noprof+0x106/0x330 [ 501.129153][ C1] Code: f7 89 ee 44 89 ea 4c 89 f9 4d 89 e0 4c 8b 4c 24 08 e8 6e 68 00 00 49 89 c5 e8 96 35 7d ff 0f 1f 44 00 00 66 90 49 83 7e 48 00 <74> 04 31 db eb 1c 41 0f b7 46 08 a9 04 02 00 00 74 0e f3 0f 1e fa [ 501.129166][ C1] RSP: 0018:ffffc90000a2eae0 EFLAGS: 00000246 [ 501.129181][ C1] RAX: 733a750544445600 RBX: 0000000000000001 RCX: dffffc0000000000 [ 501.129193][ C1] RDX: ffff88801ca90440 RSI: ffffffff8d03ac8a RDI: 00000000ffffffff [ 501.129205][ C1] RBP: 0000000000000820 R08: ffffffff8f1d6037 R09: 1ffffffff1e3ac06 [ 501.129216][ C1] R10: dffffc0000000000 R11: fffffbfff1e3ac07 R12: ffff8880b8945660 [ 501.129227][ C1] R13: ffff8880707d3dc0 R14: ffff88801bec2500 R15: ffffffff88d81a92 [ 501.129239][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 501.129253][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.129264][ C1] CR2: 00007fff05dfbff8 CR3: 00000000369c8000 CR4: 00000000003526f0 [ 501.129280][ C1] Call Trace: [ 501.129286][ C1] [ 501.129296][ C1] __alloc_skb+0x112/0x2d0 [ 501.129320][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 501.129349][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 501.129371][ C1] ? nft_tunnel_get_reduce+0x330/0x640 [ 501.129392][ C1] ? synproxy_pernet+0x45/0x270 [ 501.129411][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 501.129430][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 501.129448][ C1] ? nf_ip_checksum+0x13c/0x510 [ 501.129467][ C1] nft_synproxy_do_eval+0x345/0x570 [ 501.129486][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 501.129510][ C1] nft_do_chain+0x409/0x1920 [ 501.129528][ C1] ? pick_task_fair+0x2b2/0x520 [ 501.129548][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 501.129567][ C1] ? rcu_is_watching+0x15/0xb0 [ 501.129602][ C1] nft_do_chain_inet+0x25d/0x340 [ 501.129618][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 501.129634][ C1] ? __lock_acquire+0xab9/0xd20 [ 501.129658][ C1] ? NF_HOOK+0x9a/0x3a0 [ 501.129678][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 501.129695][ C1] nf_hook_slow+0xc5/0x220 [ 501.129718][ C1] NF_HOOK+0x206/0x3a0 [ 501.129738][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 501.129759][ C1] ? NF_HOOK+0x9a/0x3a0 [ 501.129777][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 501.129796][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 501.129817][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 501.129838][ C1] ? skb_dst+0x4f/0xd0 [ 501.129858][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 501.129880][ C1] NF_HOOK+0x309/0x3a0 [ 501.129900][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 501.129920][ C1] ? NF_HOOK+0x9a/0x3a0 [ 501.129939][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 501.129959][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 501.129984][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 501.130003][ C1] __netif_receive_skb+0x143/0x380 [ 501.130021][ C1] ? rt_spin_unlock+0x65/0x80 [ 501.130048][ C1] ? process_backlog+0x27b/0x900 [ 501.130067][ C1] process_backlog+0x31e/0x900 [ 501.130092][ C1] __napi_poll+0xb3/0x540 [ 501.130113][ C1] net_rx_action+0x707/0xe00 [ 501.130132][ C1] ? arch_stack_walk+0x11c/0x150 [ 501.130156][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 501.130176][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 501.130197][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 501.130222][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 501.130244][ C1] handle_softirqs+0x22f/0x710 [ 501.130267][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 501.130290][ C1] __local_bh_enable_ip+0x179/0x270 [ 501.130309][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 501.130332][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 501.130353][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 501.130374][ C1] rcu_cpu_kthread+0xc3d/0x1b50 [ 501.130398][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 501.130429][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 501.130451][ C1] ? __lock_acquire+0xab9/0xd20 [ 501.130470][ C1] ? __pfx___schedule+0x10/0x10 [ 501.130497][ C1] ? schedule+0x91/0x360 [ 501.130520][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 501.130537][ C1] smpboot_thread_fn+0x53f/0xa60 [ 501.130556][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 501.130578][ C1] kthread+0x70e/0x8a0 [ 501.130601][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 501.130619][ C1] ? __pfx_kthread+0x10/0x10 [ 501.130643][ C1] ? __pfx_kthread+0x10/0x10 [ 501.130664][ C1] ret_from_fork+0x439/0x7d0 [ 501.130685][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 501.130706][ C1] ? __switch_to_asm+0x39/0x70 [ 501.130721][ C1] ? __switch_to_asm+0x33/0x70 [ 501.130734][ C1] ? __pfx_kthread+0x10/0x10 [ 501.130756][ C1] ret_from_fork_asm+0x1a/0x30 [ 501.130778][ C1] [ 501.131079][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 501.131094][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 501.131116][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 501.131127][ T38] Call Trace: [ 501.131135][ T38] [ 501.131143][ T38] dump_stack_lvl+0x99/0x250 [ 501.131173][ T38] ? __asan_memcpy+0x40/0x70 [ 501.131196][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.131225][ T38] ? __pfx__printk+0x10/0x10 [ 501.131260][ T38] vpanic+0x281/0x750 [ 501.131302][ T38] ? __pfx_vpanic+0x10/0x10 [ 501.131329][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 501.131350][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.131391][ T38] panic+0xb9/0xc0 [ 501.131419][ T38] ? __pfx_panic+0x10/0x10 [ 501.131452][ T38] ? irq_work_queue+0xc3/0x140 [ 501.131482][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 501.131511][ T38] watchdog+0xfd2/0xfe0 [ 501.131542][ T38] ? watchdog+0x1de/0xfe0 [ 501.131574][ T38] kthread+0x70e/0x8a0 [ 501.131608][ T38] ? __pfx_watchdog+0x10/0x10 [ 501.131633][ T38] ? __pfx_kthread+0x10/0x10 [ 501.131668][ T38] ? __pfx_kthread+0x10/0x10 [ 501.131700][ T38] ret_from_fork+0x439/0x7d0 [ 501.131728][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 501.131761][ T38] ? __switch_to_asm+0x39/0x70 [ 501.131779][ T38] ? __switch_to_asm+0x33/0x70 [ 501.131798][ T38] ? __pfx_kthread+0x10/0x10 [ 501.131829][ T38] ret_from_fork_asm+0x1a/0x30 [ 501.131866][ T38] [ 501.132016][ T38] Kernel Offset: disabled