Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. 2026/09/05 16:48:37 parsed 1 programs 2026/09/05 16:48:37 serving rpc on tcp://38457 [ 88.589833][ T2035] cfg80211: failed to load regulatory.db [ 91.587188][ T5628] cgroup: Unknown subsys name 'net' [ 91.678344][ T5628] cgroup: Unknown subsys name 'cpuset' [ 91.687855][ T5628] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.423847][ T5628] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.878633][ T5642] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.032763][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.042918][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.052342][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.062539][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.072153][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.363947][ T5702] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.364763][ T5702] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.364960][ T5702] bridge_slave_0: entered allmulticast mode [ 100.367157][ T5702] bridge_slave_0: entered promiscuous mode [ 100.373083][ T5702] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.373271][ T5702] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.373405][ T5702] bridge_slave_1: entered allmulticast mode [ 100.375761][ T5702] bridge_slave_1: entered promiscuous mode [ 100.414145][ T5702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.418118][ T5702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.454271][ T5702] team0: Port device team_slave_0 added [ 100.459128][ T5702] team0: Port device team_slave_1 added [ 100.483854][ T5702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.483883][ T5702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.484886][ T5702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.488095][ T5702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.488109][ T5702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.488132][ T5702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.556349][ T5702] hsr_slave_0: entered promiscuous mode [ 100.558143][ T5702] hsr_slave_1: entered promiscuous mode [ 100.727312][ T5702] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.739459][ T5702] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.740667][ T5702] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.753968][ T5702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.755810][ T5702] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.768377][ T5702] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.779691][ T5702] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.789562][ T5702] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.821710][ T5702] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.821844][ T5702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.822389][ T5702] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.822617][ T5702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.887254][ T5702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.907357][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.915299][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.933937][ T5702] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.943880][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.944005][ T4173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.964462][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.964593][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.314824][ T5702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.360179][ T5702] veth0_vlan: entered promiscuous mode [ 101.370182][ T5702] veth1_vlan: entered promiscuous mode [ 101.407737][ T5702] veth0_macvtap: entered promiscuous mode [ 101.414385][ T5702] veth1_macvtap: entered promiscuous mode [ 101.432364][ T5702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.438983][ T5702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.492152][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.495021][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.495069][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.495101][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.663361][ T4173] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.761399][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.771489][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.789508][ T4173] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.828712][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.828770][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.863302][ T4173] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.939358][ T4173] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/09/05 16:48:51 executed programs: 0 [ 102.916958][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.926898][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.935810][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.938017][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.938586][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.417187][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.417358][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.417494][ T5753] bridge_slave_0: entered allmulticast mode [ 103.419370][ T5753] bridge_slave_0: entered promiscuous mode [ 103.422478][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.422672][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.422808][ T5753] bridge_slave_1: entered allmulticast mode [ 103.424797][ T5753] bridge_slave_1: entered promiscuous mode [ 103.470191][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.482876][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.515300][ T5753] team0: Port device team_slave_0 added [ 103.518258][ T5753] team0: Port device team_slave_1 added [ 103.543000][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.543055][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.543434][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.546705][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.546724][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.546748][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.606037][ T5753] hsr_slave_0: entered promiscuous mode [ 103.607363][ T5753] hsr_slave_1: entered promiscuous mode [ 103.608396][ T5753] debugfs: 'hsr0' already exists in 'hsr' [ 103.608489][ T5753] Cannot create hsr debugfs directory [ 103.887016][ T4173] bridge_slave_1: left allmulticast mode [ 103.896018][ T4173] bridge_slave_1: left promiscuous mode [ 103.897440][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.913279][ T4173] bridge_slave_0: left allmulticast mode [ 103.913334][ T4173] bridge_slave_0: left promiscuous mode [ 103.916342][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.051876][ T4173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.063931][ T4173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.079350][ T4173] bond0 (unregistering): Released all slaves [ 104.176671][ T4173] hsr_slave_0: left promiscuous mode [ 104.192594][ T4173] hsr_slave_1: left promiscuous mode [ 104.193684][ T4173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.193748][ T4173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.218241][ T4173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.225982][ T4173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.243707][ T4173] veth1_macvtap: left promiscuous mode [ 104.251783][ T4173] veth0_macvtap: left promiscuous mode [ 104.259564][ T4173] veth1_vlan: left promiscuous mode [ 104.266336][ T4173] veth0_vlan: left promiscuous mode [ 104.652195][ T4173] team0 (unregistering): Port device team_slave_1 removed [ 104.679882][ T4173] team0 (unregistering): Port device team_slave_0 removed [ 104.861170][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 104.986656][ T52] Bluetooth: hci0: command tx timeout [ 105.387402][ T5753] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.428091][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.697386][ T5753] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.713779][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.727941][ T5753] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.744304][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.753466][ T5753] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.772654][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.039955][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.119979][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.136708][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.136825][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.171344][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.171473][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.798301][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.872459][ T5753] veth0_vlan: entered promiscuous mode [ 106.884054][ T5753] veth1_vlan: entered promiscuous mode [ 106.935601][ T5753] veth0_macvtap: entered promiscuous mode [ 106.940593][ T5753] veth1_macvtap: entered promiscuous mode [ 106.968281][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.979891][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.065776][ T52] Bluetooth: hci0: command tx timeout [ 107.069521][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.070660][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.093958][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.094030][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.142410][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.142468][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.191741][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.191915][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.306399][ T5842] bridge0: port 3(veth1_to_bridge) entered blocking state [ 107.316445][ T5842] bridge0: port 3(veth1_to_bridge) entered disabled state [ 107.316644][ T5842] veth1_to_bridge: entered allmulticast mode [ 107.323170][ T5842] veth1_to_bridge: entered promiscuous mode [ 107.323382][ T5842] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.324026][ T5842] bridge0: port 3(veth1_to_bridge) entered blocking state [ 107.324126][ T5842] bridge0: port 3(veth1_to_bridge) entered forwarding state 2026/09/05 16:48:56 executed programs: 7 [ 109.647675][ T52] Bluetooth: hci0: command tx timeout [ 112.251551][ T52] Bluetooth: hci0: command tx timeout [ 112.494011][ C1] sched: DL replenish lagged too much 2026/09/05 16:49:09 executed programs: 8 [ 135.752354][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.767167][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.265406][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.281130][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.348182][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.511202][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.723641][ T31] INFO: task kworker/0:0:9 blocked for more than 145 seconds. [ 278.741008][ T31] Not tainted syzkaller #0 [ 278.757399][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.774511][ T31] task:kworker/0:0 state:D stack:25288 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 278.809437][ T31] Workqueue: events reg_todo [ 278.843171][ T31] Call Trace: [ 278.862334][ T31] [ 278.881297][ T31] __schedule+0x17db/0x58f0 [ 278.899286][ T31] ? update_protect_slice+0x128/0x210 [ 278.917639][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 278.935310][ T31] ? __pfx___schedule+0x10/0x10 [ 278.953141][ T31] ? schedule+0x90/0x2b0 [ 278.971936][ T31] schedule+0x164/0x2b0 [ 278.989774][ T31] schedule_preempt_disabled+0x13/0x30 [ 279.007668][ T31] __mutex_lock+0x7c1/0x1550 [ 279.025833][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 279.044330][ T31] ? __mutex_lock+0x5d4/0x1550 [ 279.078639][ T31] ? reg_process_self_managed_hints+0x8d/0x160 [ 279.097080][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 279.114947][ T31] ? reg_todo+0x8da/0xa40 [ 279.132205][ T31] reg_process_self_managed_hints+0x8d/0x160 [ 279.150340][ T31] reg_todo+0x8df/0xa40 [ 279.167228][ T31] ? process_scheduled_works+0x97a/0x1630 [ 279.184337][ T31] process_scheduled_works+0xc3d/0x1630 [ 279.218778][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.235620][ T31] ? assign_work+0x3cf/0x5d0 [ 279.253470][ T31] worker_thread+0xa47/0xfb0 [ 280.351354][ T31] kthread+0x38b/0x480 [ 282.688800][ T31] ? __pfx_worker_thread+0x10/0x10 [ 282.708844][ T31] ? __pfx_kthread+0x10/0x10 [ 282.728064][ T31] ret_from_fork+0x514/0xb70 [ 282.746807][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 282.765196][ T31] ? __switch_to+0xc89/0x1420 [ 282.783304][ T31] ? __pfx_kthread+0x10/0x10 [ 282.801505][ T31] ret_from_fork_asm+0x1a/0x30 [ 282.819709][ T31] [ 282.837799][ T31] INFO: task kworker/u8:5:82 blocked for more than 149 seconds. [ 282.855635][ T31] Not tainted syzkaller #0 [ 282.873374][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.891675][ T31] task:kworker/u8:5 state:D stack:24712 pid:82 tgid:82 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 282.927182][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 282.963749][ T31] Call Trace: [ 285.016126][ T31] [ 285.579861][ T31] __schedule+0x17db/0x58f0 [ 285.597050][ T31] ? __pfx___schedule+0x10/0x10 [ 285.613317][ T31] ? schedule+0x90/0x2b0 [ 285.630075][ T31] schedule+0x164/0x2b0 [ 285.649216][ T31] schedule_preempt_disabled+0x13/0x30 [ 285.666873][ T31] __mutex_lock+0x7c1/0x1550 [ 287.522289][ T31] ? __mutex_lock+0x5d4/0x1550 [ 287.538416][ T31] ? addrconf_dad_work+0x116/0x15c0 [ 287.554980][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 287.555050][ T31] addrconf_dad_work+0x116/0x15c0 [ 287.555093][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 287.555131][ T31] ? rcu_is_watching+0x16/0xb0 [ 287.555160][ T31] ? process_scheduled_works+0x97a/0x1630 [ 287.555187][ T31] process_scheduled_works+0xc3d/0x1630 [ 287.555247][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.555281][ T31] ? assign_work+0x3cf/0x5d0 [ 287.555313][ T31] worker_thread+0xa47/0xfb0 [ 287.555368][ T31] kthread+0x38b/0x480 [ 287.555390][ T31] ? __pfx_worker_thread+0x10/0x10 [ 287.555415][ T31] ? __pfx_kthread+0x10/0x10 [ 287.555438][ T31] ret_from_fork+0x514/0xb70 [ 287.555462][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.555494][ T31] ? __switch_to+0xc89/0x1420 [ 287.555522][ T31] ? __pfx_kthread+0x10/0x10 [ 287.555545][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.555593][ T31] [ 287.555701][ T31] INFO: task kworker/0:3:5011 blocked for more than 154 seconds. [ 287.555720][ T31] Not tainted syzkaller #0 [ 287.555731][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.555741][ T31] task:kworker/0:3 state:D stack:25120 pid:5011 tgid:5011 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 287.555808][ T31] Workqueue: events_power_efficient crda_timeout_work [ 287.555841][ T31] Call Trace: [ 287.555849][ T31] [ 287.555862][ T31] __schedule+0x17db/0x58f0 [ 287.555912][ T31] ? update_protect_slice+0x128/0x210 [ 287.555968][ T31] ? __pfx___schedule+0x10/0x10 [ 287.556006][ T31] ? schedule+0x90/0x2b0 [ 287.556037][ T31] schedule+0x164/0x2b0 [ 287.556067][ T31] schedule_preempt_disabled+0x13/0x30 [ 287.556094][ T31] __mutex_lock+0x7c1/0x1550 [ 287.556131][ T31] ? __mutex_lock+0x5d4/0x1550 [ 287.556163][ T31] ? crda_timeout_work+0x16/0x80 [ 287.556193][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 287.556240][ T31] ? rcu_is_watching+0x16/0xb0 [ 287.556264][ T31] ? process_scheduled_works+0x97a/0x1630 [ 287.556291][ T31] crda_timeout_work+0x16/0x80 [ 287.556320][ T31] process_scheduled_works+0xc3d/0x1630 [ 287.556378][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.556423][ T31] ? assign_work+0x3cf/0x5d0 [ 287.556455][ T31] worker_thread+0xa47/0xfb0 [ 287.556509][ T31] ? __kthread_parkme+0x71/0x1f0 [ 287.556558][ T31] kthread+0x38b/0x480 [ 287.556580][ T31] ? __pfx_worker_thread+0x10/0x10 [ 287.556605][ T31] ? __pfx_kthread+0x10/0x10 [ 287.556627][ T31] ret_from_fork+0x514/0xb70 [ 287.556650][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.556681][ T31] ? __switch_to+0xc89/0x1420 [ 287.556712][ T31] ? __pfx_kthread+0x10/0x10 [ 287.556734][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.556782][ T31] [ 287.556881][ T31] [ 287.556881][ T31] Showing all locks held in the system: [ 287.556892][ T31] locks held by kworker/0:0/9: 4, on CPU#0: [ 287.556908][ T31] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.556967][ T31] #1: ffffc900000e7c40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.557022][ T31] #2: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0xa40 [ 287.557078][ T31] #3: ffff8880734407a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x8d/0x160 [ 287.557136][ T31] locks held by kworker/u8:0/12: 2, last CPU#1: [ 287.557150][ T31] #0: ffff88803253d140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.557205][ T31] #1: ffffc90000117c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.557261][ T31] locks held by pr/ttyS0/16: 2, last CPU#0: [ 287.557275][ T31] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 287.557325][ T31] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 287.557383][ T31] locks held by kworker/1:0/25: 3, last CPU#1: [ 287.557397][ T31] #0: ffff888074b46d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.557458][ T31] #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.557526][ T31] #2: ffff88807bc05270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 287.557586][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 287.557600][ T31] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 287.557649][ T31] locks held by kworker/u8:2/40: 3, last CPU#1: [ 287.557663][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.557718][ T31] #1: ffffc90000b07c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.557774][ T31] #2: ffff888072a907a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 287.557828][ T31] locks held by kworker/1:1/44: 3, last CPU#1: [ 287.557841][ T31] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.557906][ T31] #1: ffffc90000b47c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.557961][ T31] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 [ 287.558014][ T31] locks held by kworker/u8:3/50: 3, last CPU#1: [ 287.558028][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.558082][ T31] #1: ffffc90000bb7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.558135][ T31] #2: ffff8880734407a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 287.558190][ T31] locks held by kworker/u8:5/82: 3, on CPU#0: [ 287.558203][ T31] #0: ffff8880316c2140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.558258][ T31] #1: ffffc9000204fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.558313][ T31] #2: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 287.558376][ T31] locks held by kworker/0:2/2035: 4, on CPU#0: [ 287.558390][ T31] #0: ffff888073f2a940 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.558450][ T31] #1: ffffc9000669fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.558518][ T31] #2: ffff8880798b5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 287.558575][ T31] #3: ffff88807bc034b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 287.558640][ T31] locks held by kworker/u8:9/4160: 2, last CPU#1: [ 287.558654][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.558708][ T31] #1: ffffc9000ef7fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.558763][ T31] locks held by klogd/4972: 1, last CPU#1: [ 287.558776][ T31] #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 287.558835][ T31] locks held by udevd/4983: 2, last CPU#1: [ 287.558849][ T31] #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 287.558915][ T31] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 287.558968][ T31] locks held by kworker/0:3/5011: 3, on CPU#0: [ 287.558981][ T31] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.574753][ T31] #1: ffffc90003287c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.574814][ T31] #2: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80 [ 287.574867][ T31] locks held by dhcpcd/5278: 2, last CPU#1: [ 287.574880][ T31] #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 287.574931][ T31] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 287.574978][ T31] locks held by dhcpcd/5279: 4, last CPU#1: [ 287.574990][ T31] #0: ffffffff8ee35c10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 287.575040][ T31] #1: ffff88801b0936b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 287.575098][ T31] #2: ffff888033d3e9b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 287.575161][ T31] #3: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 287.575221][ T31] locks held by getty/5371: 2, on CPU#1: [ 287.575235][ T31] #0: ffff888035bdc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.575290][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 287.575343][ T31] locks held by kworker/0:4/5724: 3, on CPU#0: [ 287.575357][ T31] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.575413][ T31] #1: ffffc90003877c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.575468][ T31] #2: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 287.575525][ T31] locks held by kworker/1:3/5725: 3, last CPU#1: [ 287.575539][ T31] #0: ffff888073f2a940 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.575599][ T31] #1: ffffc90003897c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.575666][ T31] #2: ffff88807bc034b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 287.575723][ T31] locks held by syz-executor/5753: 1, on CPU#1: [ 287.575737][ T31] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 287.575806][ T31] locks held by syz-executor/5851: 1, last CPU#1: [ 287.575821][ T31] #0: ffff888021e84ef0 (&sig->exec_update_lock){++++}-{4:4}, at: proc_pid_readlink+0x10f/0x3d0 [ 287.575875][ T31] locks held by kworker/0:7/5853: 3, on CPU#0: [ 287.575889][ T31] #0: ffff888074b46d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.575949][ T31] #1: ffffc900035f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 287.576017][ T31] #2: ffff88807bc05270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 287.576076][ T31] [ 287.576082][ T31] ============================================= [ 287.576082][ T31] [ 287.576092][ T31] NMI backtrace for cpu 1 [ 287.576171][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 287.576195][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.576207][ T31] Call Trace: [ 287.576215][ T31] [ 287.576224][ T31] dump_stack_lvl+0xe8/0x150 [ 287.576256][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 287.576281][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.576314][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 287.576342][ T31] sys_info+0x135/0x170 [ 287.576364][ T31] watchdog+0xfd7/0x1030 [ 287.576392][ T31] ? watchdog+0x1c7/0x1030 [ 287.576417][ T31] kthread+0x38b/0x480 [ 287.576438][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.576455][ T31] ? __pfx_kthread+0x10/0x10 [ 287.576476][ T31] ret_from_fork+0x514/0xb70 [ 287.576499][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.576530][ T31] ? __switch_to+0xc89/0x1420 [ 287.576560][ T31] ? __pfx_kthread+0x10/0x10 [ 287.576581][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.576627][ T31] [ 287.576635][ T31] Sending NMI from CPU 1 to CPUs 0: [ 287.576665][ C0] NMI backtrace for cpu 0 [ 287.576679][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 287.576699][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.576709][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x75/0x80 [ 287.576738][ C0] Code: 10 17 00 00 83 fa 02 75 21 48 8b 91 18 17 00 00 48 8b 32 48 8d 7e 01 8b 89 14 17 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 06 8d 1f 0a cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 [ 287.576753][ C0] RSP: 0018:ffffc90000006e18 EFLAGS: 00000246 [ 287.576770][ C0] RAX: ffffffff8ab6d0fe RBX: ffff888036af9288 RCX: ffff88801e2a0000 [ 287.576784][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 000000000000dd86 [ 287.576796][ C0] RBP: ffffc90000007430 R08: ffff88801e2a0000 R09: 0000000000000002 [ 287.576809][ C0] R10: 000000000000dd86 R11: 0000000000000100 R12: 1ffff1100d43ee66 [ 287.576821][ C0] R13: ffff88806a1f7334 R14: ffffc900000074e0 R15: ffff88803506a1b0 [ 287.576835][ C0] FS: 0000000000000000(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 287.576850][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.576863][ C0] CR2: 00007fe9fd358700 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 287.576881][ C0] Call Trace: [ 287.576888][ C0] [ 287.576894][ C0] br_multicast_rcv+0x43e/0x77c0 [ 287.576915][ C0] ? arch_stack_walk+0x11b/0x150 [ 287.576938][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 287.576966][ C0] ? stack_trace_save+0xa9/0x100 [ 287.576992][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 287.577018][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 287.577045][ C0] ? __lock_acquire+0x6df/0x2e50 [ 287.577063][ C0] ? __pfx_br_multicast_rcv+0x10/0x10 [ 287.577081][ C0] ? kasan_save_track+0x4f/0x80 [ 287.577097][ C0] ? kasan_save_track+0x3e/0x80 [ 287.577112][ C0] ? kasan_save_free_info+0x40/0x50 [ 287.577134][ C0] ? __kasan_slab_free+0x5c/0x80 [ 287.577152][ C0] ? kmem_cache_free+0x182/0x650 [ 287.577168][ C0] ? netlink_broadcast_filtered+0xd9d/0xea0 [ 287.577187][ C0] ? nlmsg_notify+0xe3/0x1a0 [ 287.577207][ C0] ? br_fdb_update+0x4e6/0x6c0 [ 287.577234][ C0] ? __lock_acquire+0x6df/0x2e50 [ 287.577251][ C0] ? irq_exit_rcu+0x9/0x30 [ 287.577282][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.577301][ C0] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 287.577324][ C0] ? nbcon_kthread_func+0x6c4/0x880 [ 287.577341][ C0] ? kthread+0x38b/0x480 [ 287.577356][ C0] ? ret_from_fork+0x514/0xb70 [ 287.577371][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 287.577405][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 287.577432][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 287.577456][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 287.577479][ C0] ? __wake_up_common_lock+0x195/0x1f0 [ 287.577504][ C0] ? consume_skb+0x89/0xb0 [ 287.577522][ C0] ? netlink_broadcast_filtered+0xe27/0xea0 [ 287.577542][ C0] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 287.577574][ C0] ? nlmsg_notify+0xe3/0x1a0 [ 287.577593][ C0] ? nlmsg_notify+0x142/0x1a0 [ 287.577614][ C0] ? br_fdb_update+0x4e6/0x6c0 [ 287.577641][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 287.577667][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 287.577696][ C0] br_handle_frame_finish+0x807/0x1950 [ 287.577722][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 287.577743][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 287.577782][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 287.577806][ C0] ? nf_hook_slow+0x176/0x220 [ 287.577831][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 287.577851][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 287.577871][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 287.577897][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 287.577918][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 287.577939][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 287.577960][ C0] ? lock_acquire+0x115/0x350 [ 287.577979][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 287.578002][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 287.578025][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 287.578048][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 287.578070][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 287.578093][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 287.578114][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 287.578138][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 287.578158][ C0] br_handle_frame+0x127f/0x1510 [ 287.578182][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 287.578204][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 287.578223][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 287.578248][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 287.578282][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 287.578302][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 287.578334][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 287.578357][ C0] ? ip6_rcv_finish+0x265/0x280 [ 287.578376][ C0] ? NF_HOOK+0x336/0x3c0