last executing test programs: 39.675087845s ago: executing program 3 (id=6694): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d469e7000905", @ANYRES32], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 38.739119676s ago: executing program 1 (id=6700): r0 = socket(0x2, 0x3, 0xff) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000980)) 38.412450482s ago: executing program 1 (id=6704): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x12, 0xfffffffffffffffe, &(0x7f0000000040)=0x3a) 37.989000459s ago: executing program 1 (id=6706): r0 = socket(0x2, 0x80805, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000011c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x0, 0x220, 0x308, 0x308, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@multicast, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0x4}}}, {{@arp={@multicast2, @empty, 0xffffffff, 0xff000000, 0x1, 0x5, {@empty, {[0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x6, 0x401, 0x5, 0x1ff, 0x1, 0x1, 'bond0\x00', 'wg1\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0xc7af274}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 37.719361431s ago: executing program 0 (id=6707): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x810, 0x0, 0x230, 0xf0, 0x230, 0x230, 0x740, 0x740, 0x740, 0x740, 0x740, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x800}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x870) 37.680190148s ago: executing program 1 (id=6709): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080)=0xff, 0x4) 37.657557752s ago: executing program 2 (id=6710): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') getdents64(r0, 0x0, 0x0) 37.439820725s ago: executing program 0 (id=6712): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_mmap={0x4, 0x3, 0x4, 0x20, 0x9e6, {}, {0x3, 0x0, 0x8, 0x1, 0xe6, 0x3, "963beba9"}, 0xdb, 0x1, {0x0}, 0x1}) 37.414924656s ago: executing program 2 (id=6713): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x52, 0x1, 0xfffffffc, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xfeffffff}]}, 0x1c}}, 0x0) 37.366502969s ago: executing program 1 (id=6714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) 37.265005679s ago: executing program 3 (id=6715): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x3, 0xc8, 0x9, 0x1b00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}}}}]}, 0x38}}, 0x0) 37.214627007s ago: executing program 0 (id=6716): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x2, 0x1}}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) 37.066485185s ago: executing program 4 (id=6717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x70bd29, 0x0, {0x2, 0x0, 0x28, 0x0, 0xfd, 0x4, 0x0, 0x8}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_SRH={0xc, 0x2, {0x33, 0x0, 0x4, 0x0, 0xc1}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2090) 36.906554806s ago: executing program 3 (id=6718): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x3, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af4ff00000000bfa20000000000000702000000feffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 36.904792774s ago: executing program 2 (id=6719): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f1050002"], 0x3c}}, 0x0) 36.834923951s ago: executing program 0 (id=6720): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) 36.806138548s ago: executing program 4 (id=6721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x20, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4010) 36.571443594s ago: executing program 1 (id=6722): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 36.425520313s ago: executing program 0 (id=6723): r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000000)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14_|¯#X³d#>zž^a¨' [ 581.934952][T18911] ALSA: mixer_oss: invalid OSS volume '*‹Ümo‹É×G%BuZkÂÄ@¤ª–m¸Iv¯Ó /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 773.654336][ T31] task:kworker/1:3 state:D stack:19360 pid:6130 tgid:6130 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 773.654403][ T31] Workqueue: events switchdev_deferred_process_work [ 773.654469][ T31] Call Trace: [ 773.654485][ T31] [ 773.654503][ T31] __schedule+0x15dd/0x52d0 [ 773.654550][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 773.654591][ T31] ? __pfx___schedule+0x10/0x10 [ 773.654637][ T31] ? schedule+0x90/0x360 [ 773.654670][ T31] schedule+0x164/0x360 [ 773.654703][ T31] schedule_preempt_disabled+0x13/0x30 [ 773.654732][ T31] __mutex_lock+0x7fe/0x1300 [ 773.654787][ T31] ? __mutex_lock+0x5ac/0x1300 [ 773.654824][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 773.654861][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 773.654907][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 773.654937][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 773.654976][ T31] switchdev_deferred_process_work+0xe/0x20 [ 773.655008][ T31] process_scheduled_works+0xb6e/0x18c0 [ 773.655070][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 773.655109][ T31] ? assign_work+0x3d5/0x5e0 [ 773.655144][ T31] worker_thread+0xa53/0xfc0 [ 773.655203][ T31] kthread+0x388/0x470 [ 773.655228][ T31] ? __pfx_worker_thread+0x10/0x10 [ 773.655258][ T31] ? __pfx_kthread+0x10/0x10 [ 773.655283][ T31] ret_from_fork+0x51e/0xb90 [ 773.655317][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 773.655347][ T31] ? __switch_to+0xc7d/0x1450 [ 773.655378][ T31] ? __pfx_kthread+0x10/0x10 [ 773.655404][ T31] ret_from_fork_asm+0x1a/0x30 [ 773.655455][ T31] [ 773.655498][ T31] [ 773.655498][ T31] Showing all locks held in the system: [ 773.655509][ T31] 1 lock held by kthreadd/2: [ 773.655525][ T31] 3 locks held by kworker/0:1/10: [ 773.655541][ T31] 3 locks held by kworker/u8:0/12: [ 773.655556][ T31] 1 lock held by khungtaskd/31: [ 773.655570][ T31] #0: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 773.655644][ T31] 3 locks held by kworker/u8:2/36: [ 773.655661][ T31] 3 locks held by kworker/u8:3/49: [ 773.655675][ T31] 4 locks held by kworker/u8:4/58: [ 773.655689][ T31] 4 locks held by kworker/u8:5/75: [ 773.655706][ T31] 3 locks held by kworker/u8:7/150: [ 773.655736][ T31] 3 locks held by kworker/R-ipv6_/3185: [ 773.655749][ T31] #0: ffff888031f86948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 773.655817][ T31] #1: ffffc9000d5ffc00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 773.655886][ T31] #2: ffffffff8fbd0a88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 773.655950][ T31] 2 locks held by kworker/R-bat_e/3410: [ 773.655973][ T31] 3 locks held by kworker/u8:11/3568: [ 773.655988][ T31] 2 locks held by klogd/5184: [ 773.656002][ T31] 2 locks held by udevd/5196: [ 773.656016][ T31] 2 locks held by dhcpcd/5490: [ 773.656030][ T31] 1 lock held by dhcpcd/5491: [ 773.656044][ T31] 2 locks held by crond/5568: [ 773.656058][ T31] 2 locks held by getty/5581: [ 773.656071][ T31] #0: ffff8880337130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 773.656132][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 773.656201][ T31] 1 lock held by syz-executor/5813: [ 773.656216][ T31] 2 locks held by udevd/6047: [ 773.656231][ T31] 5 locks held by kworker/0:3/6052: [ 773.656245][ T31] 4 locks held by kworker/0:4/6072: [ 773.656259][ T31] 2 locks held by syz-executor/6074: [ 773.656274][ T31] 1 lock held by syz-executor/6075: [ 773.656288][ T31] 2 locks held by syz-executor/6076: [ 773.656302][ T31] 1 lock held by syz-executor/6078: [ 773.656319][ T31] 3 locks held by kworker/0:6/6122: [ 773.656352][ T31] 3 locks held by kworker/1:3/6130: [ 773.656366][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 773.656449][ T31] #1: ffffc900045c7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 773.656515][ T31] #2: ffffffff8fbd0a88 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 773.656583][ T31] 3 locks held by kworker/1:4/6143: [ 773.656597][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 773.656663][ T31] #1: ffffc900048b7c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 773.656732][ T31] #2: ffffffff8ff4ce28 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 773.656794][ T31] 4 locks held by kworker/1:5/6144: [ 773.656807][ T31] #0: ffff88802de5d548 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 773.670427][ T31] #1: ffffc900048c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 773.670523][ T31] #2: ffff888033fd9388 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a1/0x9a0 [ 773.670607][ T31] #3: ffff888056421708 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x58b/0x9a0 [ 773.670706][ T31] 3 locks held by kworker/1:6/6147: [ 773.670722][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 773.670790][ T31] #1: ffffc900048f7c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 773.670866][ T31] #2: ffffffff8ff4ce28 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 773.670934][ T31] 3 locks held by kworker/1:7/6421: [ 773.670949][ T31] #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 773.671025][ T31] #1: ffffc90006087c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 773.671093][ T31] #2: ffffffff8fbd0a88 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa5/0xfe0 [ 773.671162][ T31] 5 locks held by kworker/u8:1/15323: [ 773.671180][ T31] 2 locks held by syz.0.6729/19665: [ 773.671196][ T31] 4 locks held by kworker/u8:6/19676: [ 773.671210][ T31] 4 locks held by kworker/u8:8/19677: [ 773.671225][ T31] 3 locks held by kworker/u8:9/19678: [ 773.671240][ T31] 3 locks held by kworker/u8:10/19679: [ 773.671255][ T31] 4 locks held by kworker/u8:12/19680: [ 773.671270][ T31] #0: ffff888057cd2148 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 773.671346][ T31] #1: ffffc9001045fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 773.671416][ T31] #2: ffff888033fd9388 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830 [ 773.671486][ T31] #3: ffff888056421708 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830 [ 773.671557][ T31] 4 locks held by kworker/u8:13/19681: [ 773.671573][ T31] [ 773.671582][ T31] ============================================= [ 773.671582][ T31] [ 773.671606][ T31] NMI backtrace for cpu 0 [ 773.671629][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 773.671653][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 773.671667][ T31] Call Trace: [ 773.671676][ T31] [ 773.671686][ T31] dump_stack_lvl+0xe8/0x150 [ 773.671719][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 773.671743][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 773.671775][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 773.671802][ T31] sys_info+0x135/0x170 [ 773.671835][ T31] watchdog+0xfd9/0x1030 [ 773.671862][ T31] ? watchdog+0x21a/0x1030 [ 773.671891][ T31] kthread+0x388/0x470 [ 773.671913][ T31] ? __pfx_watchdog+0x10/0x10 [ 773.671932][ T31] ? __pfx_kthread+0x10/0x10 [ 773.671962][ T31] ret_from_fork+0x51e/0xb90 [ 773.671995][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 773.672023][ T31] ? __switch_to+0xc7d/0x1450 [ 773.672052][ T31] ? __pfx_kthread+0x10/0x10 [ 773.672076][ T31] ret_from_fork_asm+0x1a/0x30 [ 773.672125][ T31] [ 773.672134][ T31] Sending NMI from CPU 0 to CPUs 1: [ 773.672171][ C1] NMI backtrace for cpu 1 [ 773.672185][ C1] CPU: 1 UID: 0 PID: 15323 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 773.672205][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 773.672219][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 773.672247][ C1] RIP: 0010:ip6_ignore_linkdown+0x9b/0x140 [ 773.672275][ C1] Code: 85 ed 74 44 e8 d6 02 6e f7 48 85 db 0f 84 8a 00 00 00 e8 c8 02 6e f7 48 81 c3 58 06 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 30 <84> c0 75 77 8b 1b 31 ff 89 de e8 e6 06 6e f7 85 db 0f 95 c0 5b 41 [ 773.672292][ C1] RSP: 0018:ffffc90000a07818 EFLAGS: 00000a02 [ 773.672307][ C1] RAX: 0000000000000000 RBX: ffff888035252658 RCX: ffff88802e1b5b80 [ 773.672320][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 773.672332][ C1] RBP: 0000000000000001 R08: ffffc90000a07b40 R09: ffffc90000a07b50 [ 773.672345][ C1] R10: ffffc90000a079a0 R11: fffff52000140f36 R12: 0000000000000003 [ 773.672358][ C1] R13: ffff88805779e8c8 R14: dffffc0000000000 R15: 0000000000000001 [ 773.672372][ C1] FS: 0000000000000000(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 773.672387][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 773.672400][ C1] CR2: 00007fa5fbe00218 CR3: 000000004f6ce000 CR4: 00000000003526f0 [ 773.672417][ C1] Call Trace: [ 773.672424][ C1] [ 773.672434][ C1] find_match+0x9c/0xb40 [ 773.672464][ C1] __find_rr_leaf+0x248/0x760 [ 773.672496][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 773.672522][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 773.672551][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 773.672581][ C1] fib6_table_lookup+0x3b4/0xa80 [ 773.672612][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 773.672636][ C1] ip6_pol_route+0x228/0x13d0 [ 773.672653][ C1] ? ip6_pol_route+0x160/0x13d0 [ 773.672673][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 773.672691][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 773.672727][ C1] ? net_generic+0x1e/0x240 [ 773.672751][ C1] ? net_generic+0x1e/0x240 [ 773.672776][ C1] ? net_generic+0x1e/0x240 [ 773.672806][ C1] fib6_rule_lookup+0x556/0x730 [ 773.672825][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 773.672844][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 773.672864][ C1] ? NF_HOOK+0xa2/0x3f0 [ 773.672890][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 773.672916][ C1] ? NF_HOOK+0x369/0x3f0 [ 773.672946][ C1] ip6_route_input+0x730/0xad0 [ 773.672969][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 773.672991][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 773.673021][ C1] ? ip6_parse_tlv+0x18b5/0x1f10 [ 773.673043][ C1] ? ip6_rcv_finish_core+0x222/0x420 [ 773.673069][ C1] ip6_rcv_finish+0x141/0x280 [ 773.673093][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 773.673115][ C1] ip_sabotage_in+0x1e1/0x270 [ 773.673142][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 773.673171][ C1] nf_hook_slow+0xc5/0x220 [ 773.673194][ C1] NF_HOOK+0x21f/0x3c0 [ 773.673216][ C1] ? skb_orphan+0xaf/0xd0 [ 773.673241][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 773.673264][ C1] ? NF_HOOK+0x9e/0x3c0 [ 773.673286][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 773.673311][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 773.673338][ C1] ? netif_receive_skb+0x102/0xc50 [ 773.673366][ C1] netif_receive_skb+0x278/0xc50 [ 773.673397][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 773.673428][ C1] ? br_netif_receive_skb+0x126/0x190 [ 773.673447][ C1] NF_HOOK+0xa4/0x3a0 [ 773.673462][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 773.673479][ C1] ? NF_HOOK+0xfa/0x3a0 [ 773.673495][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 773.673512][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 773.673533][ C1] ? br_pass_frame_up+0x275/0x420 [ 773.673586][ C1] br_handle_frame_finish+0x14e2/0x1bb0 [ 773.673622][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 773.673660][ C1] ? nf_hook_slow+0x176/0x220 [ 773.673682][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 773.673715][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 773.673748][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 773.673774][ C1] ? nft_do_chain_inet+0x29d/0x380 [ 773.673799][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 773.673827][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 773.673850][ C1] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 773.673868][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 773.673903][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 773.673922][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 773.673940][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 773.673960][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 773.673979][ C1] ? br_nf_pre_routing+0x75f/0x14c0 [ 773.674011][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 773.674038][ C1] br_handle_frame+0x1277/0x1510 [ 773.674060][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 773.674078][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 773.674112][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 773.674129][ C1] __netif_receive_skb_core+0x98f/0x31a0 [ 773.674149][ C1] ? ip6_mc_input+0x8de/0xbd0 [ 773.674176][ C1] ? ip6_mc_input+0x8de/0xbd0 [ 773.674202][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 773.674228][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 773.674246][ C1] ? ip6_rcv_finish+0x265/0x280 [ 773.674270][ C1] ? NF_HOOK+0x336/0x3c0 [ 773.674299][ C1] ? lock_acquire+0xf0/0x2e0 [ 773.674324][ C1] ? process_backlog+0x3eb/0x1950 [ 773.674343][ C1] ? process_backlog+0x3eb/0x1950 [ 773.674363][ C1] ? process_backlog+0x3eb/0x1950 [ 773.674382][ C1] process_backlog+0x76d/0x1950 [ 773.674412][ C1] __napi_poll+0xae/0x340 [ 773.674428][ C1] ? skb_defer_free_flush+0x233/0x260 [ 773.674449][ C1] net_rx_action+0x627/0xf70 [ 773.674477][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 773.674502][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 773.674524][ C1] ? try_to_wake_up+0x7fc/0x1390 [ 773.674548][ C1] handle_softirqs+0x22a/0x870 [ 773.674574][ C1] ? do_softirq+0x76/0xd0 [ 773.674601][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1ac7/0x2cd0 [ 773.674630][ C1] do_softirq+0x76/0xd0 [ 773.674652][ C1] [ 773.674659][ C1] [ 773.674666][ C1] __local_bh_enable_ip+0xf8/0x130 [ 773.674690][ C1] ieee80211_ibss_rx_queued_mgmt+0x1ac7/0x2cd0 [ 773.674731][ C1] ? kthread+0x388/0x470 [ 773.674747][ C1] ? ret_from_fork+0x51e/0xb90 [ 773.674772][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2cd0 [ 773.674802][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 773.674843][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 773.674867][ C1] ? kcov_remote_start+0x17f/0x7a0 [ 773.674900][ C1] ieee80211_iface_work+0x84e/0x1340 [ 773.674924][ C1] cfg80211_wiphy_work+0x2ab/0x4a0 [ 773.674943][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 773.674969][ C1] process_scheduled_works+0xb6e/0x18c0 [ 773.675009][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 773.675037][ C1] ? assign_work+0x3d5/0x5e0 [ 773.675063][ C1] worker_thread+0xa53/0xfc0 [ 773.675102][ C1] kthread+0x388/0x470 [ 773.675120][ C1] ? __pfx_worker_thread+0x10/0x10 [ 773.675143][ C1] ? __pfx_kthread+0x10/0x10 [ 773.675161][ C1] ret_from_fork+0x51e/0xb90 [ 773.675191][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 773.675220][ C1] ? __switch_to+0xc7d/0x1450 [ 773.675241][ C1] ? __pfx_kthread+0x10/0x10 [ 773.675259][ C1] ret_from_fork_asm+0x1a/0x30 [ 773.675300][ C1] [ 773.676182][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 773.676203][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 773.676229][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 773.676243][ T31] Call Trace: [ 773.676253][ T31] [ 773.676263][ T31] vpanic+0x56c/0xa60 [ 773.676300][ T31] ? __pfx_vpanic+0x10/0x10 [ 773.676341][ T31] panic+0xc5/0xd0 [ 773.676372][ T31] ? __pfx_panic+0x10/0x10 [ 773.676400][ T31] ? printk_trigger_flush+0x13d/0x180 [ 773.676428][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 773.676467][ T31] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 773.676496][ T31] watchdog+0x1023/0x1030 [ 773.676524][ T31] ? watchdog+0x21a/0x1030 [ 773.676560][ T31] kthread+0x388/0x470 [ 773.676584][ T31] ? __pfx_watchdog+0x10/0x10 [ 773.676603][ T31] ? __pfx_kthread+0x10/0x10 [ 773.676628][ T31] ret_from_fork+0x51e/0xb90 [ 773.676662][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 773.676690][ T31] ? __switch_to+0xc7d/0x1450 [ 773.676721][ T31] ? __pfx_kthread+0x10/0x10 [ 773.676745][ T31] ret_from_fork_asm+0x1a/0x30 [ 773.676799][ T31] [ 773.677417][ T31] Kernel Offset: disabled