no interfaces have a carrier [ 47.269927][ T5280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.285978][ T5280] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller syzkaller login: [ 86.812718][ T990] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. 2026/09/22 15:20:14 parsed 1 programs 2026/09/22 15:20:14 serving rpc on tcp://33273 [ 306.867283][ T5671] cgroup: Unknown subsys name 'net' [ 306.963190][ T5671] cgroup: Unknown subsys name 'cpuset' [ 306.965897][ T5671] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 308.373618][ T5671] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 311.431909][ T5683] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 311.689654][ T5700] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.698385][ T5700] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.699283][ T5700] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.717889][ T5700] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.718769][ T5700] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 313.935956][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.935980][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.198400][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.198420][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.721178][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.722390][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.722542][ T5739] bridge_slave_0: entered allmulticast mode [ 314.724447][ T5739] bridge_slave_0: entered promiscuous mode [ 314.756628][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.756808][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.756930][ T5739] bridge_slave_1: entered allmulticast mode [ 314.758705][ T5739] bridge_slave_1: entered promiscuous mode [ 314.818588][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.831948][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.873730][ T5739] team0: Port device team_slave_0 added [ 314.875581][ T5739] team0: Port device team_slave_1 added [ 314.897123][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.897135][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.897152][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.898964][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.898977][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.898997][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.946157][ T5739] hsr_slave_0: entered promiscuous mode [ 314.947358][ T5739] hsr_slave_1: entered promiscuous mode [ 315.129196][ T5739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 315.141890][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.143231][ T5739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 315.146975][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.148077][ T5739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 315.151607][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.152718][ T5739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 315.162337][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.247224][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.264850][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.271915][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.272050][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.284966][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.285068][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.576127][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.615927][ T5739] veth0_vlan: entered promiscuous mode [ 315.624568][ T5739] veth1_vlan: entered promiscuous mode [ 315.651804][ T5739] veth0_macvtap: entered promiscuous mode [ 315.656452][ T5739] veth1_macvtap: entered promiscuous mode [ 315.683251][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.688585][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 2026/09/22 15:20:26 executed programs: 0 [ 315.742591][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.743429][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.743462][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.743491][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.958612][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.968227][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.970968][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.978690][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.978800][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.979991][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.981287][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.982077][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.985082][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.985465][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.989001][ T5700] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.989946][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.992028][ T5700] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.992377][ T5700] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.016452][ T5700] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.171780][ T4935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.177622][ T5700] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.179155][ T5700] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.181031][ T5700] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.181740][ T5700] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.231989][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.249691][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.251194][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.268719][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.269323][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.779058][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.216425][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.216498][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.933526][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.933707][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.933830][ T5808] bridge_slave_0: entered allmulticast mode [ 317.935921][ T5808] bridge_slave_0: entered promiscuous mode [ 317.983089][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.011412][ T5798] Bluetooth: hci2: command tx timeout [ 318.011419][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.011816][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.011939][ T5808] bridge_slave_1: entered allmulticast mode [ 318.013300][ T5808] bridge_slave_1: entered promiscuous mode [ 318.091326][ T5798] Bluetooth: hci0: command tx timeout [ 318.144442][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.170638][ T5798] Bluetooth: hci1: command tx timeout [ 318.179789][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.180039][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.180152][ T5796] bridge_slave_0: entered allmulticast mode [ 318.181836][ T5796] bridge_slave_0: entered promiscuous mode [ 318.184696][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.184788][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.184899][ T5796] bridge_slave_1: entered allmulticast mode [ 318.186506][ T5796] bridge_slave_1: entered promiscuous mode [ 318.220199][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.223158][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.250160][ T5798] Bluetooth: hci3: command tx timeout [ 318.268207][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.298097][ T5796] team0: Port device team_slave_0 added [ 318.330069][ T5798] Bluetooth: hci4: command tx timeout [ 318.335946][ T5808] team0: Port device team_slave_0 added [ 318.362257][ T5796] team0: Port device team_slave_1 added [ 318.377196][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.377355][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.378250][ T5810] bridge_slave_0: entered allmulticast mode [ 318.380520][ T5810] bridge_slave_0: entered promiscuous mode [ 318.387366][ T5808] team0: Port device team_slave_1 added [ 318.417014][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.457399][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.457485][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.457589][ T5810] bridge_slave_1: entered allmulticast mode [ 318.459002][ T5810] bridge_slave_1: entered promiscuous mode [ 318.487165][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.487253][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.487333][ T5794] bridge_slave_0: entered allmulticast mode [ 318.488444][ T5794] bridge_slave_0: entered promiscuous mode [ 318.492807][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.492990][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.493368][ T5794] bridge_slave_1: entered allmulticast mode [ 318.504246][ T5794] bridge_slave_1: entered promiscuous mode [ 318.527351][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.527367][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.527387][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.530734][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.530747][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.530767][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.561798][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.561814][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.561834][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.567597][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.642361][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.642376][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.642397][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.656398][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.717483][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.748875][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.754969][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.819042][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.819180][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.819292][ T5797] bridge_slave_0: entered allmulticast mode [ 318.821875][ T5797] bridge_slave_0: entered promiscuous mode [ 318.851764][ T5796] hsr_slave_0: entered promiscuous mode [ 318.852400][ T5796] hsr_slave_1: entered promiscuous mode [ 318.852852][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 318.852925][ T5796] Cannot create hsr debugfs directory [ 318.866798][ T5794] team0: Port device team_slave_0 added [ 318.875432][ T5810] team0: Port device team_slave_0 added [ 318.875639][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.875788][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.875908][ T5797] bridge_slave_1: entered allmulticast mode [ 318.878529][ T5797] bridge_slave_1: entered promiscuous mode [ 318.925435][ T5794] team0: Port device team_slave_1 added [ 318.928228][ T5810] team0: Port device team_slave_1 added [ 318.947413][ T5808] hsr_slave_0: entered promiscuous mode [ 318.948192][ T5808] hsr_slave_1: entered promiscuous mode [ 318.948655][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 318.948672][ T5808] Cannot create hsr debugfs directory [ 319.025856][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.059771][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.059788][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.059806][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.107234][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.107250][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.107263][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.115896][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.179711][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.179728][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.179748][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.234972][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.234987][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.235005][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.430695][ T5794] hsr_slave_0: entered promiscuous mode [ 319.431642][ T5794] hsr_slave_1: entered promiscuous mode [ 319.432307][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 319.432325][ T5794] Cannot create hsr debugfs directory [ 319.467605][ T5797] team0: Port device team_slave_0 added [ 319.474995][ T5797] team0: Port device team_slave_1 added [ 319.695083][ T5810] hsr_slave_0: entered promiscuous mode [ 319.696225][ T5810] hsr_slave_1: entered promiscuous mode [ 319.696967][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 319.696985][ T5810] Cannot create hsr debugfs directory [ 319.717112][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.717128][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.717147][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.774597][ T13] bridge_slave_1: left allmulticast mode [ 319.774631][ T13] bridge_slave_1: left promiscuous mode [ 319.776012][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.779172][ T13] bridge_slave_0: left allmulticast mode [ 319.779189][ T13] bridge_slave_0: left promiscuous mode [ 319.779312][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.012116][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.014429][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.015585][ T13] bond0 (unregistering): Released all slaves [ 320.042830][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 320.055625][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.055641][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.055661][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.100240][ T5798] Bluetooth: hci2: command tx timeout [ 320.181487][ T5798] Bluetooth: hci0: command tx timeout [ 320.251806][ T5798] Bluetooth: hci1: command tx timeout [ 320.330193][ T5798] Bluetooth: hci3: command tx timeout [ 320.343838][ T5797] hsr_slave_0: entered promiscuous mode [ 320.344958][ T5797] hsr_slave_1: entered promiscuous mode [ 320.345677][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 320.345695][ T5797] Cannot create hsr debugfs directory [ 320.410050][ T5798] Bluetooth: hci4: command tx timeout [ 320.564560][ T13] hsr_slave_0: left promiscuous mode [ 320.565283][ T13] hsr_slave_1: left promiscuous mode [ 320.566533][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.566559][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.568000][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.568016][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.592017][ T13] veth1_macvtap: left promiscuous mode [ 320.592074][ T13] veth0_macvtap: left promiscuous mode [ 320.592179][ T13] veth1_vlan: left promiscuous mode [ 320.592296][ T13] veth0_vlan: left promiscuous mode [ 320.931217][ T13] team0 (unregistering): Port device team_slave_1 removed [ 320.952533][ T13] team0 (unregistering): Port device team_slave_0 removed [ 321.099574][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 321.135875][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 321.139468][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.190379][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 321.193267][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.194154][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 321.198002][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.232033][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 321.237047][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.400427][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 321.413344][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.416867][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 321.444766][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.447154][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 321.452087][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.475336][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 321.497276][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.684832][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.695218][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.703540][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.717047][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.717894][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 321.723524][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.742429][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 321.747168][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.827697][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.838960][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 321.894206][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 321.899432][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.923799][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.945498][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 321.948608][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.949125][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 321.963681][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.964625][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 321.992141][ T5810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.065945][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.066041][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.080660][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.119690][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.119813][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.170021][ T5798] Bluetooth: hci2: command tx timeout [ 322.208916][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.250278][ T5798] Bluetooth: hci0: command tx timeout [ 322.285523][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.285630][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.326232][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.326348][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.333661][ T5798] Bluetooth: hci1: command tx timeout [ 322.398876][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.410145][ T5798] Bluetooth: hci3: command tx timeout [ 322.490178][ T5798] Bluetooth: hci4: command tx timeout [ 322.516467][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.620164][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.620262][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.671972][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 322.682164][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 322.696207][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 322.703964][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 322.704754][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 322.717183][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 322.721977][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.722070][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.748682][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 322.761494][ T5797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.868711][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.006953][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.071399][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.071511][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.180907][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.181001][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.466747][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.486135][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.555837][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.629320][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.629431][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.684276][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.684379][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.779792][ T5796] veth0_vlan: entered promiscuous mode [ 323.843266][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.895713][ T5796] veth1_vlan: entered promiscuous mode [ 324.093539][ T5796] veth0_macvtap: entered promiscuous mode [ 324.116906][ T5796] veth1_macvtap: entered promiscuous mode [ 324.250388][ T5798] Bluetooth: hci2: command tx timeout [ 324.256316][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.305358][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.331515][ T5798] Bluetooth: hci0: command tx timeout [ 324.410482][ T5798] Bluetooth: hci1: command tx timeout [ 324.490295][ T5798] Bluetooth: hci3: command tx timeout [ 324.502472][ T143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.503120][ T143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.503156][ T143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.503187][ T143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.575915][ T5798] Bluetooth: hci4: command tx timeout [ 324.627874][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.726556][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.739305][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.739325][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.862480][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.862502][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/22 15:20:35 executed programs: 10 [ 324.971955][ T5794] veth0_vlan: entered promiscuous mode [ 325.054503][ T5794] veth1_vlan: entered promiscuous mode [ 325.092631][ T5810] veth0_vlan: entered promiscuous mode [ 325.139144][ T5808] veth0_vlan: entered promiscuous mode [ 325.445410][ T5808] veth1_vlan: entered promiscuous mode [ 325.458170][ T5810] veth1_vlan: entered promiscuous mode [ 325.494652][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.569089][ T5794] veth0_macvtap: entered promiscuous mode [ 325.609109][ T5794] veth1_macvtap: entered promiscuous mode [ 325.671549][ T5808] veth0_macvtap: entered promiscuous mode [ 325.715473][ T5810] veth0_macvtap: entered promiscuous mode [ 325.732308][ T5808] veth1_macvtap: entered promiscuous mode [ 325.813295][ T5797] veth0_vlan: entered promiscuous mode [ 325.818025][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.819126][ T5810] veth1_macvtap: entered promiscuous mode [ 325.899549][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.914180][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.994954][ T5797] veth1_vlan: entered promiscuous mode [ 326.017033][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.082349][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.820623][ C1] sched: DL replenish lagged too much [ 379.162117][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.177453][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.310739][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.323022][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.369323][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 446.369373][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 446.369401][ T5803] Bluetooth: hci4: command 0x0406 tx timeout [ 446.598295][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 449.258443][ T6065] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.853233][ T6065] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.297205][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.396812][ T6069] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.503451][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.503523][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.503559][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.503599][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.050035][ T32] INFO: task kworker/u8:7:149 blocked for more than 151 seconds. [ 485.050061][ T32] Not tainted syzkaller #0 [ 485.050071][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.050079][ T32] task:kworker/u8:7 state:D stack:24264 pid:149 tgid:149 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 485.050141][ T32] Workqueue: events_unbound linkwatch_event [ 485.050379][ T32] Call Trace: [ 485.050442][ T32] [ 485.050517][ T32] __schedule+0x17db/0x58f0 [ 485.050726][ T32] ? __pfx___schedule+0x10/0x10 [ 485.050763][ T32] ? schedule+0x90/0x2b0 [ 485.050786][ T32] schedule+0x164/0x2b0 [ 485.050809][ T32] schedule_preempt_disabled+0x13/0x30 [ 485.050829][ T32] __mutex_lock+0x7c1/0x1550 [ 485.050856][ T32] ? __mutex_lock+0x5d4/0x1550 [ 485.050881][ T32] ? linkwatch_event+0xe/0x60 [ 485.050909][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 485.050932][ T32] ? lock_acquire+0x115/0x350 [ 485.050996][ T32] ? rcu_is_watching+0x16/0xb0 [ 485.051024][ T32] ? process_scheduled_works+0x97a/0x1630 [ 485.051058][ T32] linkwatch_event+0xe/0x60 [ 485.051083][ T32] process_scheduled_works+0xc3d/0x1630 [ 485.051144][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 485.051187][ T32] ? assign_work+0x3cf/0x5d0 [ 485.051216][ T32] worker_thread+0xa47/0xfb0 [ 485.051267][ T32] kthread+0x38b/0x480 [ 485.051294][ T32] ? __pfx_worker_thread+0x10/0x10 [ 485.051317][ T32] ? __pfx_kthread+0x10/0x10 [ 485.051343][ T32] ret_from_fork+0x514/0xb70 [ 485.051371][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 485.051389][ T32] ? __switch_to+0xc89/0x1420 [ 485.051439][ T32] ? __pfx_kthread+0x10/0x10 [ 485.051459][ T32] ret_from_fork_asm+0x1a/0x30 [ 485.051513][ T32] [ 485.051632][ T32] INFO: task syz-executor:5810 blocked for more than 151 seconds. [ 485.051647][ T32] Not tainted syzkaller #0 [ 485.051655][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.051663][ T32] task:syz-executor state:D stack:21864 pid:5810 tgid:5810 ppid:5800 task_flags:0x400140 flags:0x00080000 [ 485.051707][ T32] Call Trace: [ 485.051713][ T32] [ 485.051724][ T32] __schedule+0x17db/0x58f0 [ 485.051772][ T32] ? __pfx___schedule+0x10/0x10 [ 485.051801][ T32] ? schedule+0x90/0x2b0 [ 485.051824][ T32] schedule+0x164/0x2b0 [ 485.051847][ T32] schedule_preempt_disabled+0x13/0x30 [ 485.051867][ T32] __mutex_lock+0x7c1/0x1550 [ 485.051894][ T32] ? __mutex_lock+0x5d4/0x1550 [ 485.051919][ T32] ? rtnl_newlink+0xc10/0x1c30 [ 485.051944][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 485.051973][ T32] ? ns_capable+0x89/0xe0 [ 485.052003][ T32] ? rtnl_nets_add+0x16c/0x300 [ 485.052024][ T32] ? refcount_inc+0x46/0x70 [ 485.052044][ T32] rtnl_newlink+0xc10/0x1c30 [ 485.052077][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 485.052105][ T32] ? finish_task_switch+0x40e/0xc60 [ 485.052132][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 485.052184][ T32] ? rcu_is_watching+0x16/0xb0 [ 485.052205][ T32] ? trace_sched_exit_tp+0x3a/0x130 [ 485.052227][ T32] ? __schedule+0x17f1/0x58f0 [ 485.052265][ T32] ? kasan_quarantine_put+0xbb/0x1f0 [ 485.052314][ T32] ? __pfx___schedule+0x10/0x10 [ 485.052331][ T32] ? nlmon_xmit+0xb0/0x100 [ 485.052450][ T32] ? __lock_acquire+0x747/0x2de0 [ 485.052472][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 485.052494][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 485.052521][ T32] ? __local_bh_enable_ip+0xe9/0x140 [ 485.052543][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 485.052623][ T32] ? __dev_queue_xmit+0x1edc/0x3820 [ 485.052647][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.052687][ T32] ? lock_acquire+0x115/0x350 [ 485.052706][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 485.052739][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 485.052757][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 485.052782][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 485.052804][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 485.052840][ T32] ? ref_tracker_free+0x689/0x830 [ 485.052928][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 485.052958][ T32] netlink_rcv_skb+0x226/0x4a0 [ 485.053055][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 485.053079][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 485.053138][ T32] netlink_unicast+0x7bd/0x940 [ 485.053182][ T32] netlink_sendmsg+0x813/0xb40 [ 485.053219][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.053254][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 485.053322][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.053348][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 485.053401][ T32] __sys_sendto+0x408/0x5a0 [ 485.053429][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 485.053449][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 485.053482][ T32] ? fput_close_sync+0x11f/0x240 [ 485.053520][ T32] ? kmem_cache_free+0x471/0x650 [ 485.053553][ T32] ? __pfx_fput_close_sync+0x10/0x10 [ 485.053585][ T32] __x64_sys_sendto+0xde/0x100 [ 485.053611][ T32] do_syscall_64+0x166/0x520 [ 485.053663][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.053682][ T32] ? clear_bhb_loop+0x70/0xc0 [ 485.053705][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.053724][ T32] RIP: 0033:0x7fd5ba95e98e [ 485.053750][ T32] RSP: 002b:00007fff24c33af8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 485.053799][ T32] RAX: ffffffffffffffda RBX: 0000555573561500 RCX: 00007fd5ba95e98e [ 485.053813][ T32] RDX: 000000000000002c RSI: 00007fd5bb754670 RDI: 0000000000000003 [ 485.053825][ T32] RBP: 0000000000000001 R08: 00007fff24c33b74 R09: 000000000000000c [ 485.053836][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 485.053847][ T32] R13: 0000000000000000 R14: 00007fd5bb754670 R15: 0000000000000000 [ 485.053875][ T32] [ 485.053944][ T32] [ 485.053944][ T32] Showing all locks held in the system: [ 485.053953][ T32] locks held by kthreadd/2: 2, last CPU#1: [ 485.054031][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 485.054165][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 485.054225][ T32] locks held by kworker/1:1/30: 3, last CPU#1: [ 485.054238][ T32] #0: ffff88806951f140 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.054298][ T32] #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.054357][ T32] #2: ffff88805a916640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 485.054470][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 485.054484][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 485.054540][ T32] locks held by kworker/u8:2/43: 3, last CPU#1: [ 485.054552][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.054600][ T32] #1: ffffc90000b37c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.054648][ T32] #2: ffff88806a630800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 485.054745][ T32] locks held by kworker/u8:3/50: 3, on CPU#1: [ 485.054758][ T32] #0: ffff88802b94e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.054807][ T32] #1: ffffc90000bb7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.054856][ T32] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 485.054955][ T32] locks held by kworker/u8:4/59: 3, last CPU#1: [ 485.054967][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.055015][ T32] #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.055064][ T32] #2: ffff88806a620800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 485.055114][ T32] locks held by kworker/u8:5/69: 2, last CPU#1: [ 485.055127][ T32] #0: ffff888029a5c140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.055174][ T32] #1: ffffc9000202fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.055226][ T32] locks held by kworker/u8:6/143: 5, last CPU#1: [ 485.055239][ T32] #0: ffff888020aee140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.055287][ T32] #1: ffffc90002597c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.055337][ T32] #2: ffff888034ce60e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 485.055391][ T32] #3: ffff888034ce4c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 485.055456][ T32] #4: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 485.055500][ T32] locks held by kworker/u8:7/149: 3, on CPU#1: [ 485.055512][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.055560][ T32] #1: ffffc90002e3fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.055606][ T32] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 485.055660][ T32] locks held by kworker/1:2/990: 2, last CPU#1: [ 485.055673][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.055722][ T32] #1: ffffc90004e47c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.055775][ T32] locks held by kworker/0:3/2248: 4, last CPU#0: [ 485.055787][ T32] #0: ffff888069527140 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.055832][ T32] #1: ffffc90006c97c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.055879][ T32] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 485.055993][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 485.056101][ T32] locks held by kworker/1:3/3218: 5, last CPU#1: [ 485.056114][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.056162][ T32] #1: ffffc9000e177c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.056214][ T32] #2: ffff88807c8a0250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 485.056352][ T32] #3: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 485.056396][ T32] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 485.056442][ T32] locks held by kworker/u8:10/4325: 4, last CPU#1: [ 485.056455][ T32] #0: ffff888029c6e140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.056503][ T32] #1: ffffc90010087c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.056553][ T32] #2: ffff888034cb1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 485.056605][ T32] #3: ffff88805a915c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 485.056659][ T32] locks held by kworker/u9:1/4935: 5, on CPU#1: [ 485.056672][ T32] #0: ffff888035a3a140 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.056720][ T32] #1: ffffc9000ebd7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.056769][ T32] #2: ffff888059d38ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 485.056858][ T32] #3: ffff888059d380b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 485.056935][ T32] #4: ffffffff903da2c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 485.057024][ T32] locks held by jbd2/sda1-8/4947: 2, last CPU#1: [ 485.057037][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 485.057079][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0 [ 485.057137][ T32] locks held by klogd/4974: 2, last CPU#1: [ 485.057150][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 485.057192][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 485.057238][ T32] locks held by udevd/4985: 3, last CPU#1: [ 485.057250][ T32] #0: ffff88807f41c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 485.057305][ T32] #1: ffff88823bf28d00 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 485.057361][ T32] #2: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 485.057406][ T32] locks held by getty/5373: 2, on CPU#0: [ 485.057418][ T32] #0: ffff888029d8d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 485.057546][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 485.057596][ T32] locks held by kworker/0:0/5771: 3, last CPU#0: [ 485.057609][ T32] #0: ffff88806951f140 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.057660][ T32] #1: ffffc90003bcfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.057720][ T32] #2: ffff88805a917028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 485.057774][ T32] locks held by kworker/0:2/5789: 4, last CPU#0: [ 485.057786][ T32] #0: ffff888069527540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.057839][ T32] #1: ffffc9000372fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.057898][ T32] #2: ffff888034cb1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 485.057951][ T32] #3: ffff88805a915270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 485.058005][ T32] locks held by syz-executor/5794: 1, on CPU#1: [ 485.058017][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 485.058124][ T32] locks held by syz-executor/5796: 3, on CPU#0: [ 485.058137][ T32] #0: ffff888059d64ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x232/0x5c0 [ 485.058181][ T32] #1: ffff888059d640b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x616/0x10c0 [ 485.058230][ T32] #2: ffffffff903da2c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 [ 485.058310][ T32] locks held by syz-executor/5797: 1, last CPU#1: [ 485.058322][ T32] #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 485.058365][ T32] locks held by kworker/u9:3/5798: 5, on CPU#0: [ 485.058377][ T32] #0: ffff88807ca11140 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.058426][ T32] #1: ffffc900040dfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.058476][ T32] #2: ffff888059d4cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 485.058518][ T32] #3: ffff888059d4c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 485.058567][ T32] #4: ffffffff8ed62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 485.058624][ T32] locks held by kworker/u9:5/5804: 7, on CPU#0: [ 485.058637][ T32] #0: ffff88807f5e9940 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.058689][ T32] #1: ffffc900035afc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.058738][ T32] #2: ffff888059d60ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 485.058781][ T32] #3: ffff888059d600b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 485.058829][ T32] #4: ffffffff903da2c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 485.058875][ T32] #5: ffff88802b5f62f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 485.058984][ T32] #6: ffffffff8ed62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 485.059035][ T32] locks held by syz-executor/5808: 3, last CPU#1: [ 485.059047][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 485.059105][ T32] #1: ffffffff90338e08 ((inetaddr_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 485.059147][ T32] #2: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 485.059190][ T32] locks held by syz-executor/5810: 1, on CPU#1: [ 485.059203][ T32] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 485.059253][ T32] locks held by kworker/0:5/5939: 3, last CPU#0: [ 485.059266][ T32] #0: ffff88806953bd40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.059316][ T32] #1: ffffc9000351fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.059375][ T32] #2: ffff8880694a1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x22d/0xbd0 [ 485.059431][ T32] locks held by kworker/0:6/5947: 2, last CPU#0: [ 485.059444][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.059491][ T32] #1: ffffc900034afc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.059539][ T32] locks held by kworker/1:6/6000: 3, on CPU#1: [ 485.059552][ T32] #0: ffff888069527540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.059604][ T32] #1: ffffc90002e7fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.059663][ T32] #2: ffff88805a915270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 485.059716][ T32] locks held by dhcpcd-run-hook/6061: 2, last CPU#1: [ 485.059728][ T32] #0: ffffffff8f4f1938 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 490.292033][ T32] #1: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 490.292105][ T32] locks held by kworker/u8:8/6065: 4, last CPU#0: [ 490.292120][ T32] #0: ffff888031e57940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 490.292171][ T32] #1: ffffc900038afc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 490.292220][ T32] #2: ffff8880694a1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 490.292273][ T32] #3: ffff88805a913ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 490.292343][ T32] locks held by kworker/u8:9/6066: 3, last CPU#0: [ 490.292355][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 490.292404][ T32] #1: ffffc9000394fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 490.292453][ T32] #2: ffff888035cc2258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 490.292511][ T32] locks held by kworker/u8:11/6067: 6, last CPU#1: [ 490.292524][ T32] #0: ffff888031e57940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 490.292572][ T32] #1: ffffc9000395fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 490.292620][ T32] #2: ffff8880694a1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 490.292672][ T32] #3: ffff88805a914888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 490.292724][ T32] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 490.292770][ T32] #5: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 490.292817][ T32] locks held by kworker/u8:12/6068: 2, last CPU#0: [ 490.292829][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 490.292877][ T32] #1: ffffc900030bfc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 490.292926][ T32] locks held by kworker/u8:13/6069: 3, last CPU#0: [ 490.292939][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 490.292986][ T32] #1: ffffc9000410fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 490.311012][ T32] #2: ffff888021ef0258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 490.311074][ T32] locks held by syz-executor/6071: 3, last CPU#0: [ 490.311096][ T32] #0: ffff88803027c720 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590 [ 490.311149][ T32] #1: ffffffff8f4f1938 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_bprm_check_security+0xef/0x180 [ 490.311200][ T32] #2: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 490.311245][ T32] locks held by kworker/u8:14/6072: 3, last CPU#0: [ 490.311257][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 490.311306][ T32] #1: ffffc900030afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 490.311355][ T32] #2: ffff888034778258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 490.311452][ T32] [ 490.311458][ T32] ============================================= [ 490.311458][ T32] [ 490.311486][ T32] NMI backtrace for cpu 0 [ 490.311569][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 490.311588][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.311599][ T32] Call Trace: [ 490.311605][ T32] [ 490.311614][ T32] dump_stack_lvl+0xe8/0x150 [ 490.311642][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 490.311742][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 490.311772][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 490.311802][ T32] sys_info+0x135/0x170 [ 490.311826][ T32] watchdog+0xfd7/0x1030 [ 490.311871][ T32] ? watchdog+0x1c7/0x1030 [ 490.311894][ T32] kthread+0x38b/0x480 [ 490.311913][ T32] ? __pfx_watchdog+0x10/0x10 [ 490.311928][ T32] ? __pfx_kthread+0x10/0x10 [ 490.311947][ T32] ret_from_fork+0x514/0xb70 [ 490.311967][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 490.311984][ T32] ? __switch_to+0xc89/0x1420 [ 490.312011][ T32] ? __pfx_kthread+0x10/0x10 [ 490.312030][ T32] ret_from_fork_asm+0x1a/0x30 [ 490.312070][ T32] [ 490.312085][ T32] Sending NMI from CPU 0 to CPUs 1: [ 490.312151][ C1] NMI backtrace for cpu 1 [ 490.312164][ C1] CPU: 1 UID: 0 PID: 6067 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 490.312183][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.312195][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 490.312220][ C1] RIP: 0010:match_held_lock+0x2/0x120 [ 490.312243][ C1] Code: 0f b9 3a 90 31 db 48 89 d8 5b 41 5e 41 5f e9 05 00 03 00 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 <41> 56 53 bb 01 00 00 00 48 39 77 10 0f 84 c6 00 00 00 0f b7 47 22 [ 490.312290][ C1] RSP: 0018:ffffc90000a17e88 EFLAGS: 00000006 [ 490.312305][ C1] RAX: 0000000000000007 RBX: 000000000000001e RCX: 8000000000000101 [ 490.312317][ C1] RDX: ffffc90000a17f01 RSI: ffffffff8ed5c8e0 RDI: ffff88806a7cabe0 [ 490.312347][ C1] RBP: ffff88806a7cabe0 R08: ffffc9000395fad0 R09: 0000000000000000 [ 490.312360][ C1] R10: ffffc90000a17ff8 R11: fffff52000143001 R12: 0000000000000006 [ 490.312372][ C1] R13: 0000000000000006 R14: ffffffff8ed5c8e0 R15: ffff88806a7c9f40 [ 490.312384][ C1] FS: 0000000000000000(0000) GS:ffff888124dce000(0000) knlGS:0000000000000000 [ 490.312399][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.312411][ C1] CR2: 00007ffbafa490c0 CR3: 0000000072ea6000 CR4: 00000000003526f0 [ 490.312426][ C1] Call Trace: [ 490.312433][ C1] [ 490.312440][ C1] lock_release+0x10c/0x3c0 [ 490.312459][ C1] ? unwind_next_frame+0x8f/0x2550 [ 490.312480][ C1] ? unwind_next_frame+0x8f/0x2550 [ 490.312500][ C1] unwind_next_frame+0x1baa/0x2550 [ 490.312522][ C1] ? wg_packet_handshake_send_worker+0x18c/0x370 [ 490.312542][ C1] ? unwind_next_frame+0x8f/0x2550 [ 490.312563][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 490.312607][ C1] arch_stack_walk+0x11b/0x150 [ 490.312628][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 490.312653][ C1] stack_trace_save+0xa9/0x100 [ 490.312669][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 490.312688][ C1] kasan_save_stack+0x3e/0x60 [ 490.312706][ C1] ? kasan_save_stack+0x3e/0x60 [ 490.312722][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 490.312747][ C1] ? call_rcu+0xee/0x8b0 [ 490.312767][ C1] ? skb_release_head_state+0x71/0x370 [ 490.312820][ C1] ? __kfree_skb+0x24/0x210 [ 490.312840][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 490.312899][ C1] ? nft_synproxy_do_eval+0x389/0x5d0 [ 490.312920][ C1] ? nft_do_chain+0x48d/0x1b10 [ 490.312989][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 490.313056][ C1] ? nf_hook_slow+0xc5/0x220 [ 490.313099][ C1] ? NF_HOOK+0x21f/0x3c0 [ 490.313120][ C1] ? NF_HOOK+0x336/0x3c0 [ 490.313140][ C1] ? process_backlog+0xa6b/0x18b0 [ 490.313160][ C1] ? __napi_poll+0xaa/0x330 [ 490.313176][ C1] ? net_rx_action+0x61d/0xf50 [ 490.313194][ C1] ? handle_softirqs+0x226/0x860 [ 490.313217][ C1] ? do_softirq+0x77/0xd0 [ 490.313237][ C1] ? __local_bh_enable_ip+0x100/0x140 [ 490.313259][ C1] ? blake2s_compress+0xfa/0x1c00 [ 490.313347][ C1] ? blake2s_update+0x140/0x450 [ 490.313371][ C1] ? hmac+0x1f4/0x3b0 [ 490.313395][ C1] ? message_ephemeral+0x255/0x310 [ 490.313419][ C1] ? wg_noise_handshake_create_initiation+0x24f/0x810 [ 490.313446][ C1] ? wg_packet_handshake_send_worker+0x18c/0x370 [ 490.313479][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 490.313505][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 490.313520][ C1] call_rcu+0xee/0x8b0 [ 490.313542][ C1] ? dst_release+0x126/0x1b0 [ 490.313558][ C1] skb_release_head_state+0x71/0x370 [ 490.313587][ C1] __kfree_skb+0x24/0x210 [ 490.313609][ C1] nft_synproxy_eval_v4+0x36a/0x4e0 [ 490.313633][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 490.313657][ C1] ? nf_ip_checksum+0x13c/0x510 [ 490.313681][ C1] nft_synproxy_do_eval+0x389/0x5d0 [ 490.313705][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 490.313726][ C1] ? __lock_acquire+0x747/0x2de0 [ 490.313746][ C1] ? __lock_acquire+0x747/0x2de0 [ 490.313765][ C1] nft_do_chain+0x48d/0x1b10 [ 490.313793][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 490.313818][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 490.313886][ C1] nft_do_chain_inet+0x360/0x4b0 [ 490.313909][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 490.313931][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 490.313954][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 490.314007][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 490.314029][ C1] nf_hook_slow+0xc5/0x220 [ 490.314049][ C1] NF_HOOK+0x21f/0x3c0 [ 490.314071][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 490.314094][ C1] ? NF_HOOK+0x9e/0x3c0 [ 490.314115][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 490.314137][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 490.314162][ C1] ? ip_local_deliver+0x113/0x190 [ 490.314185][ C1] NF_HOOK+0x336/0x3c0 [ 490.314207][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 490.314228][ C1] ? NF_HOOK+0x9e/0x3c0 [ 490.314249][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 490.314271][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 490.314293][ C1] ? ip_rcv_core+0x88d/0xd50 [ 490.314316][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 490.314337][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 490.314358][ C1] process_backlog+0xa6b/0x18b0 [ 490.314380][ C1] ? process_backlog+0x3de/0x18b0 [ 490.314404][ C1] __napi_poll+0xaa/0x330 [ 490.314423][ C1] net_rx_action+0x61d/0xf50 [ 490.314447][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 490.314477][ C1] handle_softirqs+0x226/0x860 [ 490.314500][ C1] ? do_softirq+0x77/0xd0 [ 490.314523][ C1] ? kernel_fpu_end+0x62/0x80 [ 490.314544][ C1] do_softirq+0x77/0xd0 [ 490.314566][ C1] [ 490.314571][ C1] [ 490.314584][ C1] __local_bh_enable_ip+0x100/0x140 [ 490.314607][ C1] blake2s_compress+0xfa/0x1c00 [ 490.314635][ C1] ? unwind_next_frame+0x8f/0x2550 [ 490.314656][ C1] ? unwind_next_frame+0x8f/0x2550 [ 490.314675][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 490.314696][ C1] ? __asan_memset+0x22/0x50 [ 490.314723][ C1] ? kernel_fpu_begin_mask+0x2bb/0x380 [ 490.314746][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 490.314771][ C1] ? kernel_fpu_end+0x62/0x80 [ 490.314793][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 490.314816][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 490.314836][ C1] ? kernel_fpu_end+0x62/0x80 [ 490.314856][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 490.314883][ C1] ? blake2s_compress+0x1b4d/0x1c00 [ 490.314911][ C1] blake2s_update+0x140/0x450 [ 490.314938][ C1] hmac+0x1f4/0x3b0 [ 490.314963][ C1] ? __pfx_hmac+0x10/0x10 [ 490.314991][ C1] ? curve25519_generate_public+0x2fed/0x3050 [ 490.315016][ C1] ? __asan_memset+0x22/0x50 [ 490.315044][ C1] message_ephemeral+0x255/0x310 [ 490.315071][ C1] ? __pfx_message_ephemeral+0x10/0x10 [ 490.315108][ C1] ? down_read+0x2be/0x330 [ 490.315159][ C1] wg_noise_handshake_create_initiation+0x24f/0x810 [ 490.315188][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 490.315216][ C1] ? __lock_acquire+0x747/0x2de0 [ 490.315239][ C1] ? __lock_acquire+0x747/0x2de0 [ 490.315258][ C1] ? lock_acquire+0x115/0x350 [ 490.315277][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 490.315307][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 490.315327][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 490.315346][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 490.315365][ C1] wg_packet_handshake_send_worker+0x18c/0x370 [ 490.315387][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 490.315406][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 490.315438][ C1] ? rcu_is_watching+0x16/0xb0 [ 490.315459][ C1] ? process_scheduled_works+0x97a/0x1630 [ 490.315482][ C1] process_scheduled_works+0xc3d/0x1630 [ 490.315516][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 490.315541][ C1] ? assign_work+0x3cf/0x5d0 [ 490.315565][ C1] worker_thread+0xa47/0xfb0 [ 490.315604][ C1] kthread+0x38b/0x480 [ 490.315620][ C1] ? __pfx_worker_thread+0x10/0x10 [ 490.315642][ C1] ? __pfx_kthread+0x10/0x10 [ 490.315659][ C1] ret_from_fork+0x514/0xb70 [ 490.315676][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 490.315691][ C1] ? __switch_to+0xc89/0x1420 [ 490.315717][ C1] ? __pfx_kthread+0x10/0x10 [ 490.315733][ C1] ret_from_fork_asm+0x1a/0x30 [ 490.315766][ C1] [ 490.316134][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 493.227552][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 493.236668][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 493.246734][ T32] Call Trace: [ 493.250018][ T32] [ 493.252952][ T32] vpanic+0x56d/0xa60 [ 493.256957][ T32] ? __pfx_vpanic+0x10/0x10 [ 493.261476][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 493.267067][ T32] panic+0xc5/0xd0 [ 493.270808][ T32] ? __pfx_panic+0x10/0x10 [ 493.275238][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 493.280275][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 493.286450][ T32] watchdog+0x1030/0x1030 [ 493.290795][ T32] ? watchdog+0x1c7/0x1030 [ 493.295224][ T32] kthread+0x38b/0x480 [ 493.299300][ T32] ? __pfx_watchdog+0x10/0x10 [ 493.303978][ T32] ? __pfx_kthread+0x10/0x10 [ 493.308581][ T32] ret_from_fork+0x514/0xb70 [ 493.313187][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 493.318304][ T32] ? __switch_to+0xc89/0x1420 [ 493.323000][ T32] ? __pfx_kthread+0x10/0x10 [ 493.327596][ T32] ret_from_fork_asm+0x1a/0x30 [ 493.332387][ T32] [ 493.335754][ T32] Kernel Offset: disabled [ 493.340072][ T32] Rebooting in 86400 seconds..