Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. 2026/10/25 02:58:01 parsed 1 programs 2026/10/25 02:58:01 serving rpc on tcp://35059 [ 252.299773][ T5679] cgroup: Unknown subsys name 'net' [ 252.395203][ T5679] cgroup: Unknown subsys name 'cpuset' [ 252.404671][ T5679] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 253.727459][ T5679] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 255.765053][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.765124][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.548470][ T5692] br_netfilter no longer supported in user namespaces [ 256.943248][ T5691] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 256.980824][ T5691] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 257.012344][ T5691] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 257.013421][ T5691] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 257.068907][ T5691] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 258.657202][ T5759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 258.661393][ T5759] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 258.679786][ T5759] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 258.690976][ T5759] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 258.699532][ T5759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.294195][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.296674][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.296819][ T5729] bridge_slave_0: entered allmulticast mode [ 259.299766][ T5729] bridge_slave_0: entered promiscuous mode [ 259.341827][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.341938][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.342217][ T5729] bridge_slave_1: entered allmulticast mode [ 259.345993][ T5729] bridge_slave_1: entered promiscuous mode [ 259.375307][ T3329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.375329][ T3329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.571611][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.577707][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.666120][ T5729] team0: Port device team_slave_0 added [ 259.671677][ T5729] team0: Port device team_slave_1 added [ 259.677812][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.677828][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.791027][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.791044][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.791066][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.846088][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.846104][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.846140][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.018075][ T5729] hsr_slave_0: entered promiscuous mode [ 260.018763][ T5729] hsr_slave_1: entered promiscuous mode [ 260.316806][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 260.331371][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 260.342816][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 260.346941][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 260.347907][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 260.377045][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 260.378470][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 260.381969][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 260.508194][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.536732][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.554261][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.554453][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.559876][ T207] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.559934][ T207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.631823][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.672465][ T5729] veth0_vlan: entered promiscuous mode [ 260.678111][ T5729] veth1_vlan: entered promiscuous mode [ 260.708952][ T5729] veth0_macvtap: entered promiscuous mode [ 260.712952][ T5729] veth1_macvtap: entered promiscuous mode [ 260.723638][ T53] Bluetooth: hci0: command tx timeout [ 260.729122][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.745356][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.762700][ T1123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.776122][ T207] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.776659][ T207] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.776726][ T207] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 2026/10/25 02:58:12 executed programs: 0 [ 260.997599][ T5759] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.014097][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.027337][ T4954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.029639][ T4954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 261.030544][ T4954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.031775][ T4954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.034201][ T4954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.034869][ T4954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.045357][ T4954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 261.052929][ T4954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 261.058140][ T4954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.066951][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 261.074353][ T4954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.074521][ T4954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.075807][ T4954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.141662][ T1123] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.328007][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.329901][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.330480][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.342567][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.344313][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.344814][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.347409][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.348875][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.352704][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.353347][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.441871][ T1123] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.524659][ T1123] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.621365][ T1123] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.269845][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.269949][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.270065][ T5819] bridge_slave_0: entered allmulticast mode [ 262.272104][ T5819] bridge_slave_0: entered promiscuous mode [ 262.325853][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.325952][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.326066][ T5819] bridge_slave_1: entered allmulticast mode [ 262.327951][ T5819] bridge_slave_1: entered promiscuous mode [ 262.458318][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.459881][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.459975][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.460347][ T5820] bridge_slave_0: entered allmulticast mode [ 262.463036][ T5820] bridge_slave_0: entered promiscuous mode [ 262.466428][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.466534][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.466646][ T5820] bridge_slave_1: entered allmulticast mode [ 262.468524][ T5820] bridge_slave_1: entered promiscuous mode [ 262.519920][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.520016][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.520179][ T5826] bridge_slave_0: entered allmulticast mode [ 262.523514][ T5826] bridge_slave_0: entered promiscuous mode [ 262.526287][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.526380][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.526516][ T5826] bridge_slave_1: entered allmulticast mode [ 262.529620][ T5826] bridge_slave_1: entered promiscuous mode [ 262.557445][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.572512][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.572608][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.572746][ T5821] bridge_slave_0: entered allmulticast mode [ 262.574504][ T5821] bridge_slave_0: entered promiscuous mode [ 262.638313][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.638536][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.638717][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.639084][ T5821] bridge_slave_1: entered allmulticast mode [ 262.640158][ T5821] bridge_slave_1: entered promiscuous mode [ 262.661275][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.661374][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.663337][ T5827] bridge_slave_0: entered allmulticast mode [ 262.666624][ T5827] bridge_slave_0: entered promiscuous mode [ 262.678735][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.686343][ T5819] team0: Port device team_slave_0 added [ 262.690131][ T5819] team0: Port device team_slave_1 added [ 262.728486][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.742777][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.742903][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.742988][ T5827] bridge_slave_1: entered allmulticast mode [ 262.744120][ T5827] bridge_slave_1: entered promiscuous mode [ 262.761770][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.826846][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.826863][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.826884][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.829120][ T5826] team0: Port device team_slave_0 added [ 262.847290][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.856635][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.858767][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.858779][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.858801][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.862001][ T5820] team0: Port device team_slave_0 added [ 262.867926][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.870474][ T5826] team0: Port device team_slave_1 added [ 262.875069][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.889267][ T5820] team0: Port device team_slave_1 added [ 262.997975][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.997991][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.998011][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.000207][ T5827] team0: Port device team_slave_0 added [ 263.003220][ T5827] team0: Port device team_slave_1 added [ 263.003947][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.003958][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.003979][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.008634][ T5821] team0: Port device team_slave_0 added [ 263.010173][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.010185][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.010207][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.085341][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.085356][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.085378][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.087701][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.087713][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.087742][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.090798][ T5821] team0: Port device team_slave_1 added [ 263.136853][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.136868][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.136890][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.143425][ T53] Bluetooth: hci3: command tx timeout [ 263.143469][ T5814] Bluetooth: hci2: command tx timeout [ 263.143902][ T4954] Bluetooth: hci1: command tx timeout [ 263.187890][ T5819] hsr_slave_0: entered promiscuous mode [ 263.189280][ T5819] hsr_slave_1: entered promiscuous mode [ 263.190033][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 263.190146][ T5819] Cannot create hsr debugfs directory [ 263.215503][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.215517][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.215538][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.252844][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.252858][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.252881][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.269690][ T5820] hsr_slave_0: entered promiscuous mode [ 263.270704][ T5820] hsr_slave_1: entered promiscuous mode [ 263.271383][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 263.271400][ T5820] Cannot create hsr debugfs directory [ 263.281858][ T5826] hsr_slave_0: entered promiscuous mode [ 263.284560][ T5826] hsr_slave_1: entered promiscuous mode [ 263.285268][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 263.285284][ T5826] Cannot create hsr debugfs directory [ 263.362291][ T4954] Bluetooth: hci0: command tx timeout [ 263.442281][ T4954] Bluetooth: hci4: command tx timeout [ 263.459555][ T5827] hsr_slave_0: entered promiscuous mode [ 263.460600][ T5827] hsr_slave_1: entered promiscuous mode [ 263.461299][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 263.461316][ T5827] Cannot create hsr debugfs directory [ 263.534706][ T5821] hsr_slave_0: entered promiscuous mode [ 263.535360][ T5821] hsr_slave_1: entered promiscuous mode [ 263.535778][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 263.535795][ T5821] Cannot create hsr debugfs directory [ 263.967434][ T1123] bridge_slave_1: left allmulticast mode [ 263.967470][ T1123] bridge_slave_1: left promiscuous mode [ 263.968102][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.979438][ T1123] bridge_slave_0: left allmulticast mode [ 263.979459][ T1123] bridge_slave_0: left promiscuous mode [ 263.980336][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.105901][ T1123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.111268][ T1123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.117538][ T1123] bond0 (unregistering): Released all slaves [ 264.186988][ T1123] hsr_slave_0: left promiscuous mode [ 264.187835][ T1123] hsr_slave_1: left promiscuous mode [ 264.188703][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.188730][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.189715][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.189732][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.214631][ T1123] veth1_macvtap: left promiscuous mode [ 264.214677][ T1123] veth0_macvtap: left promiscuous mode [ 264.214778][ T1123] veth1_vlan: left promiscuous mode [ 264.214854][ T1123] veth0_vlan: left promiscuous mode [ 264.544688][ T1123] team0 (unregistering): Port device team_slave_1 removed [ 264.569914][ T1123] team0 (unregistering): Port device team_slave_0 removed [ 264.760414][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1 [ 265.024088][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.050304][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.060476][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.072835][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 265.075221][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 265.081227][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.094685][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 265.105244][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.202184][ T5814] Bluetooth: hci2: command tx timeout [ 265.202271][ T4954] Bluetooth: hci1: command tx timeout [ 265.212292][ T4954] Bluetooth: hci3: command tx timeout [ 265.444136][ T5814] Bluetooth: hci0: command tx timeout [ 265.523467][ T4954] Bluetooth: hci4: command tx timeout [ 265.527771][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 265.540006][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.540861][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 265.548391][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 265.550660][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 265.567729][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.589877][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 265.610264][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.830994][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.850082][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.867688][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.884981][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 265.885801][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.901778][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.920547][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.935792][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 266.094267][ T5827] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 266.105812][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.106750][ T5827] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.130952][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 266.156202][ T5827] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 266.170286][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 266.171098][ T5827] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 266.183319][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 266.230052][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.460115][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.497999][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.509528][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.513038][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.533278][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 266.549995][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.557780][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 266.558562][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.579211][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 266.597211][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.597318][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.677476][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.697136][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.697237][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.794116][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.834492][ T4097] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.834593][ T4097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.871661][ T4097] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.871764][ T4097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.883215][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.977090][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.999878][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.054296][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.055986][ T207] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.056083][ T207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.085485][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.085584][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.139781][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.181946][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.182110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.214186][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.267270][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.267390][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.287659][ T5814] Bluetooth: hci1: command tx timeout [ 267.287671][ T53] Bluetooth: hci2: command tx timeout [ 267.287739][ T4954] Bluetooth: hci3: command tx timeout [ 267.349376][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.374768][ T5819] veth0_vlan: entered promiscuous mode [ 267.401074][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.414570][ T207] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.414676][ T207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.435998][ T207] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.436097][ T207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.445776][ T5819] veth1_vlan: entered promiscuous mode [ 267.505474][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.525056][ T4954] Bluetooth: hci0: command tx timeout [ 267.579074][ T5819] veth0_macvtap: entered promiscuous mode [ 267.594310][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.601508][ T5819] veth1_macvtap: entered promiscuous mode [ 267.602349][ T4954] Bluetooth: hci4: command tx timeout [ 267.627457][ T5820] veth0_vlan: entered promiscuous mode [ 267.655126][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.660129][ T5820] veth1_vlan: entered promiscuous mode [ 267.680907][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.685410][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.721036][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.750335][ T5826] veth0_vlan: entered promiscuous mode [ 267.774068][ T5826] veth1_vlan: entered promiscuous mode [ 267.821325][ T5827] veth0_vlan: entered promiscuous mode [ 267.827754][ T5820] veth0_macvtap: entered promiscuous mode [ 267.843133][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.855721][ T5820] veth1_macvtap: entered promiscuous mode [ 267.892556][ T1123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.892598][ T1123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.892631][ T1123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.929013][ T5821] veth0_vlan: entered promiscuous mode [ 267.937117][ T207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.937136][ T207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.950549][ T5827] veth1_vlan: entered promiscuous mode [ 267.962607][ T5826] veth0_macvtap: entered promiscuous mode [ 267.985401][ T5821] veth1_vlan: entered promiscuous mode [ 268.005913][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.005932][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.011416][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.016721][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.044067][ T5826] veth1_macvtap: entered promiscuous mode [ 268.100486][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 2026/10/25 02:58:20 executed programs: 10 [ 268.147836][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.177540][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.189089][ T5827] veth0_macvtap: entered promiscuous mode [ 268.213836][ T207] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.213987][ T207] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.214130][ T207] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.214254][ T207] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.214552][ T207] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.232156][ T1123] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.235491][ T5827] veth1_macvtap: entered promiscuous mode [ 268.238709][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.238724][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.249559][ T5969] bridge0: port 3(veth1_to_bridge) entered blocking state [ 268.253866][ T5969] bridge0: port 3(veth1_to_bridge) entered disabled state [ 268.254060][ T5969] veth1_to_bridge: entered allmulticast mode [ 268.259593][ T5969] veth1_to_bridge: entered promiscuous mode [ 268.259748][ T5969] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 268.267464][ T5969] bridge0: port 3(veth1_to_bridge) entered blocking state [ 268.267585][ T5969] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 268.305494][ T207] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.511749][ T53] Bluetooth: hci1: command tx timeout [ 269.511787][ T53] Bluetooth: hci2: command tx timeout [ 269.511839][ T4954] Bluetooth: hci3: command tx timeout [ 269.710390][ T5814] Bluetooth: hci4: command tx timeout [ 269.710442][ T4954] Bluetooth: hci0: command tx timeout [ 273.302055][ C0] sched: DL replenish lagged too much [ 277.587087][ T5821] veth0_macvtap: entered promiscuous mode [ 318.097124][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.104412][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.783667][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.797667][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.338898][ T4954] Bluetooth: hci4: command 0x0406 tx timeout [ 410.338939][ T4954] Bluetooth: hci2: command 0x0406 tx timeout [ 410.338962][ T4954] Bluetooth: hci3: command 0x0406 tx timeout [ 424.195580][ T32] INFO: task kworker/u8:2:43 blocked for more than 148 seconds. [ 424.195621][ T32] Not tainted syzkaller #0 [ 424.195631][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.195639][ T32] task:kworker/u8:2 state:D stack:24200 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 424.195702][ T32] Workqueue: ipv6_addrconf addrconf_dad_work [ 424.195748][ T32] Call Trace: [ 424.195755][ T32] [ 424.195769][ T32] __schedule+0x17dd/0x5820 [ 424.195827][ T32] ? __pfx___schedule+0x10/0x10 [ 424.195865][ T32] ? schedule+0x90/0x2b0 [ 424.195894][ T32] schedule+0x164/0x2b0 [ 424.195923][ T32] schedule_preempt_disabled+0x13/0x30 [ 424.195950][ T32] __mutex_lock+0x7c4/0x15a0 [ 424.195976][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 424.196000][ T32] ? addrconf_dad_work+0x116/0x15c0 [ 424.196022][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 424.196063][ T32] addrconf_dad_work+0x116/0x15c0 [ 424.196093][ T32] ? __pfx_addrconf_dad_work+0x10/0x10 [ 424.196122][ T32] ? rcu_is_watching+0x16/0xb0 [ 424.196150][ T32] ? process_scheduled_works+0x97a/0x1630 [ 424.196176][ T32] process_scheduled_works+0xc3d/0x1630 [ 424.196233][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 424.196266][ T32] ? assign_work+0x3cf/0x5d0 [ 424.196297][ T32] worker_thread+0xa47/0xfb0 [ 424.196337][ T32] ? __kthread_parkme+0x71/0x1f0 [ 424.196373][ T32] kthread+0x38b/0x480 [ 424.196393][ T32] ? __pfx_worker_thread+0x10/0x10 [ 424.196417][ T32] ? __pfx_kthread+0x10/0x10 [ 424.196438][ T32] ret_from_fork+0x514/0xb70 [ 424.196461][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 424.196481][ T32] ? __switch_to+0xc78/0x1410 [ 424.196511][ T32] ? __pfx_kthread+0x10/0x10 [ 424.196532][ T32] ret_from_fork_asm+0x1a/0x30 [ 424.196569][ T32] [ 424.196684][ T32] INFO: task syz-executor:5820 blocked for more than 148 seconds. [ 424.196698][ T32] Not tainted syzkaller #0 [ 424.196707][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.196714][ T32] task:syz-executor state:D stack:21632 pid:5820 tgid:5820 ppid:5811 task_flags:0x400140 flags:0x08080000 [ 424.196760][ T32] Call Trace: [ 424.196766][ T32] [ 424.196778][ T32] __schedule+0x17dd/0x5820 [ 424.196834][ T32] ? __pfx___schedule+0x10/0x10 [ 424.196870][ T32] ? schedule+0x90/0x2b0 [ 424.196900][ T32] schedule+0x164/0x2b0 [ 424.196929][ T32] schedule_preempt_disabled+0x13/0x30 [ 424.196955][ T32] __mutex_lock+0x7c4/0x15a0 [ 424.196979][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 424.197003][ T32] ? ieee80211_register_hw+0x3da2/0x4b30 [ 424.197033][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 424.197050][ T32] ? _raw_spin_unlock+0x28/0x50 [ 424.197077][ T32] ? __debugfs_create_file+0x34f/0x400 [ 424.197107][ T32] ? debugfs_create_file_full+0x3f/0x60 [ 424.197134][ T32] ieee80211_register_hw+0x3da2/0x4b30 [ 424.197170][ T32] ? ieee80211_register_hw+0x1a01/0x4b30 [ 424.197220][ T32] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 424.197250][ T32] ? __asan_memset+0x22/0x50 [ 424.197269][ T32] ? __hrtimer_setup+0x1b7/0x260 [ 424.197287][ T32] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 424.197314][ T32] mac80211_hwsim_new_radio+0x32f1/0x5990 [ 424.197368][ T32] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 424.197391][ T32] ? trace_kmalloc+0x2a/0xf0 [ 424.197418][ T32] hwsim_new_radio_nl+0xd8b/0xf90 [ 424.197456][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 424.197484][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 424.197517][ T32] ? bpf_lsm_capable+0x9/0x20 [ 424.197541][ T32] ? security_capable+0x7e/0x2c0 [ 424.197567][ T32] genl_rcv_msg+0x614/0x7a0 [ 424.197592][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.197610][ T32] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 424.197636][ T32] ? __asan_memcpy+0x40/0x70 [ 424.197661][ T32] netlink_rcv_skb+0x226/0x4a0 [ 424.197693][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.197714][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.197753][ T32] ? down_read+0x2b9/0x320 [ 424.197779][ T32] genl_rcv+0x28/0x40 [ 424.197796][ T32] netlink_unicast+0x8ef/0xa80 [ 424.197836][ T32] netlink_sendmsg+0x7f0/0xb20 [ 424.197865][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.197893][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 424.197919][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 424.197948][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.197971][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 424.197998][ T32] __sys_sendto+0x408/0x5a0 [ 424.198030][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 424.198093][ T32] __ia32_compat_sys_socketcall+0x44f/0xa50 [ 424.198124][ T32] ? fput_close_sync+0x11f/0x240 [ 424.198149][ T32] ? kmem_cache_free+0x471/0x650 [ 424.198168][ T32] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 424.198197][ T32] ? fput_close_sync+0x11f/0x240 [ 424.198226][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 424.198249][ T32] ? asm_int80_emulation+0x1a/0x20 [ 424.198274][ T32] do_int80_emulation+0x198/0x500 [ 424.198295][ T32] ? asm_int80_emulation+0x1a/0x20 [ 424.198312][ T32] ? clear_bhb_loop+0x70/0xc0 [ 424.198330][ T32] ? clear_bhb_loop+0x70/0xc0 [ 424.198354][ T32] asm_int80_emulation+0x1a/0x20 [ 424.198372][ T32] RIP: 0023:0xf71d77ab [ 424.198395][ T32] RSP: 002b:00000000f75cfdcc EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 424.198413][ T32] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f75cfe74 [ 424.198427][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 424.198437][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 424.198448][ T32] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 424.198459][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 424.198489][ T32] [ 424.198498][ T32] INFO: task syz-executor:5827 blocked for more than 148 seconds. [ 424.198512][ T32] Not tainted syzkaller #0 [ 424.198521][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.198528][ T32] task:syz-executor state:D stack:21768 pid:5827 tgid:5827 ppid:5822 task_flags:0x400140 flags:0x08080000 [ 424.198573][ T32] Call Trace: [ 424.198579][ T32] [ 424.198590][ T32] __schedule+0x17dd/0x5820 [ 424.198631][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 424.198654][ T32] ? __lock_acquire+0x650/0x2de0 [ 424.198691][ T32] ? __pfx___schedule+0x10/0x10 [ 424.198728][ T32] ? schedule+0x90/0x2b0 [ 424.198758][ T32] schedule+0x164/0x2b0 [ 424.198788][ T32] schedule_preempt_disabled+0x13/0x30 [ 424.198814][ T32] __mutex_lock+0x7c4/0x15a0 [ 424.198837][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 424.198861][ T32] ? inet6_rtm_newaddr+0x669/0xe10 [ 424.198888][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 424.198909][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 424.198938][ T32] ? nla_memcmp+0x62/0x90 [ 424.198966][ T32] inet6_rtm_newaddr+0x669/0xe10 [ 424.198999][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 424.199020][ T32] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 424.199077][ T32] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 424.199101][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 424.199132][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 424.199159][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.199188][ T32] ? __copy_skb_header+0xa3/0x4a0 [ 424.199209][ T32] ? __asan_memcpy+0x40/0x70 [ 424.199234][ T32] netlink_rcv_skb+0x226/0x4a0 [ 424.199260][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.199289][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.199326][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.199350][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.199379][ T32] netlink_unicast+0x8ef/0xa80 [ 424.199419][ T32] netlink_sendmsg+0x7f0/0xb20 [ 424.199450][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.199478][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 424.199503][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 424.199532][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.199555][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 424.199580][ T32] __sys_sendto+0x408/0x5a0 [ 424.199603][ T32] ? fput_close_sync+0x11f/0x240 [ 424.199634][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 424.199702][ T32] __ia32_compat_sys_socketcall+0x44f/0xa50 [ 424.199727][ T32] ? fput_close_sync+0x11f/0x240 [ 424.199760][ T32] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 424.199783][ T32] ? fput_close_sync+0x11f/0x240 [ 424.199826][ T32] ? asm_int80_emulation+0x1a/0x20 [ 424.199849][ T32] do_int80_emulation+0x198/0x500 [ 424.199870][ T32] ? asm_int80_emulation+0x1a/0x20 [ 424.199887][ T32] ? clear_bhb_loop+0x70/0xc0 [ 424.199905][ T32] ? clear_bhb_loop+0x70/0xc0 [ 424.199927][ T32] asm_int80_emulation+0x1a/0x20 [ 424.199945][ T32] RIP: 0023:0xf71977ab [ 424.199960][ T32] RSP: 002b:00000000f758f71c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 424.199978][ T32] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f758f7c4 [ 424.199991][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 424.200002][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 424.200013][ T32] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 424.200024][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 424.200052][ T32] [ 424.200071][ T32] INFO: task kworker/1:4:5863 blocked for more than 148 seconds. [ 424.200084][ T32] Not tainted syzkaller #0 [ 424.200093][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.200100][ T32] task:kworker/1:4 state:D stack:24520 pid:5863 tgid:5863 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 424.200150][ T32] Workqueue: events switchdev_deferred_process_work [ 424.200171][ T32] Call Trace: [ 424.200177][ T32] [ 424.200189][ T32] __schedule+0x17dd/0x5820 [ 424.200236][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 424.200261][ T32] ? __pfx___schedule+0x10/0x10 [ 424.200298][ T32] ? schedule+0x90/0x2b0 [ 424.200328][ T32] schedule+0x164/0x2b0 [ 424.200357][ T32] schedule_preempt_disabled+0x13/0x30 [ 424.200384][ T32] __mutex_lock+0x7c4/0x15a0 [ 424.200407][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 424.200431][ T32] ? switchdev_deferred_process_work+0xe/0x20 [ 424.200455][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 424.200475][ T32] ? lock_acquire+0x115/0x350 [ 424.200505][ T32] ? rcu_is_watching+0x16/0xb0 [ 424.200532][ T32] ? process_scheduled_works+0x97a/0x1630 [ 424.200558][ T32] switchdev_deferred_process_work+0xe/0x20 [ 424.200579][ T32] process_scheduled_works+0xc3d/0x1630 [ 424.200636][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 424.200675][ T32] ? assign_work+0x3cf/0x5d0 [ 424.200706][ T32] worker_thread+0xa47/0xfb0 [ 424.200746][ T32] ? __kthread_parkme+0x71/0x1f0 [ 424.200783][ T32] kthread+0x38b/0x480 [ 424.200804][ T32] ? __pfx_worker_thread+0x10/0x10 [ 424.200828][ T32] ? __pfx_kthread+0x10/0x10 [ 424.200849][ T32] ret_from_fork+0x514/0xb70 [ 424.200873][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 424.200892][ T32] ? __switch_to+0xc78/0x1410 [ 424.200922][ T32] ? __pfx_kthread+0x10/0x10 [ 424.200944][ T32] ret_from_fork_asm+0x1a/0x30 [ 424.200980][ T32] [ 424.201001][ T32] INFO: task syz.0.22:5971 blocked for more than 148 seconds. [ 424.201014][ T32] Not tainted syzkaller #0 [ 424.201023][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.201030][ T32] task:syz.0.22 state:D stack:27480 pid:5971 tgid:5970 ppid:5819 task_flags:0x400140 flags:0x08080002 [ 424.201080][ T32] Call Trace: [ 424.201086][ T32] [ 424.201098][ T32] __schedule+0x17dd/0x5820 [ 424.201141][ T32] ? kernel_text_address+0xa5/0xe0 [ 424.201165][ T32] ? unwind_get_return_address+0x4d/0x90 [ 424.201195][ T32] ? __pfx___schedule+0x10/0x10 [ 424.201231][ T32] ? schedule+0x90/0x2b0 [ 424.201260][ T32] schedule+0x164/0x2b0 [ 424.201290][ T32] schedule_preempt_disabled+0x13/0x30 [ 424.201316][ T32] __mutex_lock+0x7c4/0x15a0 [ 424.201339][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 424.201362][ T32] ? br_ioctl_stub+0x1a8/0xd60 [ 424.201382][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 424.201417][ T32] ? get_user_ifreq+0xf4/0x180 [ 424.201440][ T32] br_ioctl_stub+0x1a8/0xd60 [ 424.201458][ T32] ? trace_contention_end+0x3d/0x140 [ 424.201486][ T32] ? __mutex_lock+0x305/0x15a0 [ 424.201506][ T32] ? __pfx_br_ioctl_stub+0x10/0x10 [ 424.201525][ T32] ? kasan_quarantine_put+0xbb/0x1f0 [ 424.201549][ T32] ? sock_ioctl+0x4b8/0x7e0 [ 424.201576][ T32] ? tomoyo_path_number_perm+0x219/0x5f0 [ 424.201607][ T32] ? do_vfs_ioctl+0x116f/0x1530 [ 424.201633][ T32] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 424.201653][ T32] ? inet_compat_ioctl+0x1dc/0x400 [ 424.201681][ T32] ? __pfx_br_ioctl_stub+0x10/0x10 [ 424.201698][ T32] sock_ioctl+0x4e1/0x7e0 [ 424.201723][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 424.201760][ T32] compat_sock_ioctl+0x289/0xcc0 [ 424.201788][ T32] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 424.201811][ T32] ? __fget_files+0x2a/0x420 [ 424.201828][ T32] ? __fget_files+0x3a2/0x420 [ 424.201845][ T32] ? __fget_files+0x2a/0x420 [ 424.201867][ T32] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 424.201895][ T32] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 424.201922][ T32] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 424.201953][ T32] ? lock_acquire+0x115/0x350 [ 424.201989][ T32] ? __might_fault+0xaf/0x130 [ 424.202020][ T32] __do_fast_syscall_32+0x28b/0x6c0 [ 428.029171][ T32] ? do_fast_syscall_32+0x33/0x70 [ 428.029206][ T32] ? irqentry_exit+0x10f/0x9b0 [ 428.029224][ T32] ? trace_irq_disable+0x3b/0x140 [ 428.029251][ T32] do_fast_syscall_32+0x33/0x70 [ 428.029270][ T32] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 428.029293][ T32] RIP: 0023:0xf7f48f1c [ 428.029309][ T32] RSP: 002b:00000000f67fe50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 428.029329][ T32] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089a2 [ 428.029342][ T32] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 428.029353][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 428.029364][ T32] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 428.029375][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 428.029404][ T32] [ 428.029438][ T32] [ 428.029438][ T32] Showing all locks held in the system: [ 428.029446][ T32] locks held by kthreadd/2: 2, last CPU#0: [ 428.029459][ T32] #0: ffffffff8feb1130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 428.029508][ T32] #1: ffffffff8fd5a360 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 428.029558][ T32] locks held by kworker/u8:1/13: 3, last CPU#0: [ 428.029571][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.029621][ T32] #1: ffffc90000127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.029671][ T32] #2: ffff8880133d4258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 428.029730][ T32] locks held by kworker/1:0/24: 3, on CPU#1: [ 428.029742][ T32] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.029791][ T32] #1: ffffc900001e7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.029839][ T32] #2: ffffffff91280320 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x209/0x780 [ 428.029885][ T32] locks held by pr/ttyS0/31: 1, last CPU#0: [ 428.029898][ T32] #0: ffffffff8fc33e18 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 428.029945][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 428.029957][ T32] #0: ffffffff8fd5a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 428.030003][ T32] locks held by kworker/u8:2/43: 3, on CPU#1: [ 428.030016][ T32] #0: ffff88801e769148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.030070][ T32] #1: ffffc90000b37c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.030128][ T32] #2: ffffffff91280320 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 428.030173][ T32] locks held by kworker/u8:3/50: 3, last CPU#1: [ 428.030186][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.030234][ T32] #1: ffffc90000ba7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.030283][ T32] #2: ffff888022692258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 428.030340][ T32] locks held by kworker/u9:0/53: 5, on CPU#0: [ 428.030352][ T32] #0: ffff88802d2c9148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.030401][ T32] #1: ffffc90000bd7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.030457][ T32] #2: ffff88805a324ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 428.030502][ T32] #3: ffff88805a3240b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 428.030551][ T32] #4: ffffffff8fd609e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 428.030605][ T32] locks held by kworker/u8:5/63: 2, last CPU#1: [ 428.030617][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.030667][ T32] #1: ffffc9000205fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.030720][ T32] locks held by kworker/u8:6/207: 3, last CPU#1: [ 428.030733][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.030781][ T32] #1: ffffc9000301fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.030831][ T32] #2: ffff88807a3e6258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 428.030890][ T32] locks held by kworker/u8:7/1123: 7, last CPU#0: [ 428.030903][ T32] #0: ffff888020aed948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.030950][ T32] #1: ffffc900051b7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.031000][ T32] #2: ffff888037a0c0e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 428.031055][ T32] #3: ffff888037a1ccd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 428.031103][ T32] #4: ffff88802be7c938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 428.031149][ T32] #5: ffff888035d465c8 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x77d/0x12c0 [ 428.031195][ T32] #6: ffffffff8feb1130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 428.031238][ T32] locks held by kworker/u8:8/1138: 3, last CPU#1: [ 428.031251][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.031300][ T32] #1: ffffc90004ef7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.031350][ T32] #2: ffff888079f3e258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 428.031405][ T32] locks held by kworker/u8:9/1142: 4, last CPU#1: [ 428.031424][ T32] #0: ffff88802cb52148 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.031473][ T32] #1: ffffc90004e77c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.031523][ T32] #2: ffff88802ae29480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 428.031575][ T32] #3: ffff8880247034b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 428.031637][ T32] locks held by kworker/u8:11/3329: 2, last CPU#1: [ 428.031650][ T32] #0: ffff88803392b148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.031699][ T32] #1: ffffc9000e5e7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.031750][ T32] locks held by kworker/u8:12/3381: 3, last CPU#1: [ 428.031762][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.031811][ T32] #1: ffffc9000e857c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.031861][ T32] #2: ffff8880777e0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 428.031906][ T32] locks held by kworker/u8:13/4097: 3, last CPU#1: [ 428.031918][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.031966][ T32] #1: ffffc9000f7a7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.032014][ T32] #2: ffff88805a3f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 428.047526][ T32] locks held by klogd/4992: 1, last CPU#0: [ 428.047540][ T32] #0: ffffffff8feb1130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 428.047585][ T32] locks held by udevd/5003: 2, last CPU#1: [ 428.047596][ T32] #0: ffffffff8feb1130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 428.047638][ T32] #1: ffffffff8fd5a360 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 428.047685][ T32] locks held by dhcpcd/5297: 3, last CPU#1: [ 428.047698][ T32] #0: ffffffff904fc7d8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 428.047750][ T32] #1: ffffffff8feb1130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 428.047792][ T32] #2: ffffffff8fd5a360 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0 [ 428.047843][ T32] locks held by dhcpcd/5298: 4, last CPU#1: [ 428.047856][ T32] #0: ffffffff8fe3a150 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x470 [ 428.047902][ T32] #1: ffff888037324cc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 428.047952][ T32] #2: ffff88807f098340 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 428.048006][ T32] #3: ffffffff8feb1130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 428.048051][ T32] locks held by getty/5390: 2, on CPU#1: [ 428.048063][ T32] #0: ffff88802b9e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 428.048108][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 428.048161][ T32] locks held by syz-executor/5679: 1, last CPU#1: [ 428.048174][ T32] #0: ffffffff8feb1130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 428.048216][ T32] locks held by kworker/u9:2/5759: 3, on CPU#1: [ 428.048228][ T32] #0: ffff88802d2ca148 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.048282][ T32] #1: ffffc90003dffc40 ((work_completion)(&hdev->cmd_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.048332][ T32] #2: ffff88805a3240b8 (&hdev->lock){+.+.}-{4:4}, at: hci_cmd_work+0xa0/0x850 [ 428.048376][ T32] locks held by kworker/1:3/5760: 2, last CPU#1: [ 428.048388][ T32] #0: ffff888058057d48 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.048449][ T32] #1: ffffc90003e0fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.048511][ T32] locks held by kworker/0:3/5803: 2, last CPU#0: [ 428.048524][ T32] #0: ffff88805b999948 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.048574][ T32] #1: ffffc900037efc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.048637][ T32] locks held by kworker/u9:3/5814: 7, on CPU#1: [ 428.048649][ T32] #0: ffff8880348f7148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.048698][ T32] #1: ffffc90003d3fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.048747][ T32] #2: ffff88805a1e0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 428.048791][ T32] #3: ffff88805a1e00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 428.048841][ T32] #4: ffffffff913fbc60 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 428.048888][ T32] #5: ffff8880348f22f8 (_T->lock#5){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x630 [ 428.048934][ T32] #6: ffffffff8fd609e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 428.048985][ T32] locks held by kworker/u9:4/5816: 3, on CPU#0: [ 428.048997][ T32] #0: ffff8880348f7948 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.049050][ T32] #1: ffffc900037afc40 ((work_completion)(&hdev->cmd_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.049099][ T32] #2: ffff88805a1e00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_cmd_work+0xa0/0x850 [ 428.049141][ T32] locks held by kworker/u9:5/5818: 5, on CPU#0: [ 428.049154][ T32] #0: ffff88807a8c0948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.049203][ T32] #1: ffffc9000379fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.049253][ T32] #2: ffff88805bda0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 428.049297][ T32] #3: ffff88805bda00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x9d1/0x1170 [ 428.049368][ T32] #4: ffffffff913fbc60 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 428.049438][ T32] locks held by syz-executor/5820: 6, last CPU#0: [ 428.049451][ T32] #0: ffffffff912e45c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 428.049493][ T32] #1: ffffffff912e4400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 428.049534][ T32] #2: ffffffff91280320 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x3da2/0x4b30 [ 428.049584][ T32] #3: ffff88805b360800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_register_hw+0x3dc0/0x4b30 [ 428.049634][ T32] #4: ffffffff8feb1130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 428.049676][ T32] #5: ffffffff8fd5a360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 428.049724][ T32] locks held by syz-executor/5821: 1, on CPU#0: [ 428.049737][ T32] #0: ffffffff91280320 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 428.049788][ T32] locks held by syz-executor/5826: 3, last CPU#0: [ 428.049801][ T32] #0: ffff88807c503440 (&mm->mmap_lock){++++}-{4:4}, at: task_numa_work+0x393/0x15a0 [ 428.049843][ T32] #1: ffffffff8feb1130 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 428.049885][ T32] #2: ffffffff8fd5a360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 428.049932][ T32] locks held by syz-executor/5827: 1, on CPU#1: [ 428.049944][ T32] #0: ffffffff91280320 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x669/0xe10 [ 428.049997][ T32] locks held by kworker/1:4/5863: 3, on CPU#1: [ 428.050010][ T32] #0: ffff88801c06ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.050060][ T32] #1: ffffc9000348fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.050109][ T32] #2: ffffffff91280320 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 428.050157][ T32] locks held by kworker/0:5/5949: 6, last CPU#0: [ 428.050170][ T32] #0: ffff88807968f148 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.050223][ T32] #1: ffffc90002567c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.050284][ T32] #2: ffff8880317ed480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 428.050335][ T32] #3: ffff88807703f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 428.050385][ T32] #4: ffffffff8fd5a360 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 428.050441][ T32] #5: ffffffff8fd5a360 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 428.050488][ T32] locks held by kworker/0:7/5953: 4, on CPU#0: [ 428.050500][ T32] #0: ffff888079625148 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.050553][ T32] #1: ffffc900024ffc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.050616][ T32] #2: ffff88802c555480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 428.050672][ T32] #3: ffff88807703c888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 428.050722][ T32] locks held by syz.0.22/5971: 2, on CPU#0: [ 428.050735][ T32] #0: ffffffff91260ec0 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4b8/0x7e0 [ 428.050779][ T32] #1: ffffffff91280320 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60 [ 428.050820][ T32] locks held by syz-executor/5972: 1, last CPU#1: [ 428.050833][ T32] #0: ffff888073489088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 428.050882][ T32] locks held by kworker/1:6/5973: 3, last CPU#1: [ 428.050895][ T32] #0: ffff888079625148 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.050948][ T32] #1: ffffc90003defc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 428.051010][ T32] #2: ffff88807703c888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 428.051060][ T32] [ 428.051065][ T32] ============================================= [ 428.051065][ T32] [ 428.051088][ T32] NMI backtrace for cpu 1 [ 428.051112][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 428.051135][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 428.051146][ T32] Call Trace: [ 428.051153][ T32] [ 428.051161][ T32] dump_stack_lvl+0xe8/0x150 [ 428.051189][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 428.051215][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 428.051237][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 428.051266][ T32] sys_info+0x135/0x170 [ 428.051287][ T32] watchdog+0xfd2/0x1030 [ 428.051317][ T32] ? watchdog+0x1c7/0x1030 [ 428.051346][ T32] kthread+0x38b/0x480 [ 428.051365][ T32] ? __pfx_watchdog+0x10/0x10 [ 428.051385][ T32] ? __pfx_kthread+0x10/0x10 [ 428.051405][ T32] ret_from_fork+0x514/0xb70 [ 428.051434][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 428.051453][ T32] ? __switch_to+0xc78/0x1410 [ 428.051482][ T32] ? __pfx_kthread+0x10/0x10 [ 428.051502][ T32] ret_from_fork_asm+0x1a/0x30 [ 428.051537][ T32] [ 428.051544][ T32] Sending NMI from CPU 1 to CPUs 0: [ 428.051577][ C0] NMI backtrace for cpu 0 [ 428.051589][ C0] CPU: 0 UID: 0 PID: 5949 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 428.051610][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 428.051622][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 428.051645][ C0] RIP: 0010:kasan_check_range+0x93/0x2c0 [ 428.051671][ C0] Code: 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb <41> 80 3b 00 0f 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 [ 428.051686][ C0] RSP: 0018:ffffc900000076e8 EFLAGS: 00000286 [ 428.051702][ C0] RAX: ffff88802a6da001 RBX: ffffffffffffffff RCX: ffffffff8ac80bac [ 428.051717][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802a6da028 [ 428.051729][ C0] RBP: ffffc90000007890 R08: ffff88802a6da02f R09: 1ffff110054db405 [ 428.051743][ C0] R10: dffffc0000000000 R11: ffffed10054db405 R12: 0000000000000001 [ 428.051756][ C0] R13: ffff8880518f1500 R14: ffffed10054db406 R15: 1ffff110054db405 [ 428.051771][ C0] FS: 0000000000000000(0000) GS:ffff888123a48000(0000) knlGS:0000000000000000 [ 428.051786][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.051799][ C0] CR2: 00000000f731b00c CR3: 000000007e22c000 CR4: 00000000003526f0 [ 428.051815][ C0] Call Trace: [ 428.051822][ C0] [ 428.051831][ C0] br_handle_frame_finish+0x37c/0x1ae0 [ 428.051861][ C0] ? __lock_acquire+0x747/0x2de0 [ 428.051885][ C0] ? kasan_save_track+0x4f/0x80 [ 428.051904][ C0] ? kasan_save_track+0x3e/0x80 [ 428.051929][ C0] ? kasan_save_free_info+0x40/0x50 [ 428.051956][ C0] ? __kasan_slab_free+0x5c/0x80 [ 428.051976][ C0] ? kmem_cache_free+0x182/0x650 [ 428.051995][ C0] ? ip6_mc_input+0x878/0xc80 [ 428.052020][ C0] ? NF_HOOK+0x336/0x3c0 [ 428.052045][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 428.052070][ C0] ? handle_softirqs+0x265/0x8d0 [ 428.052092][ C0] ? __local_bh_enable_ip+0x100/0x140 [ 428.052115][ C0] ? blake2s_compress+0xfa/0x1c00 [ 428.052145][ C0] ? blake2s_update+0x140/0x450 [ 428.052172][ C0] ? wg_noise_handshake_create_response+0x467/0x9f0 [ 428.052200][ C0] ? wg_packet_send_handshake_response+0x110/0x2d0 [ 428.052220][ C0] ? wg_packet_handshake_receive_worker+0x6a9/0x10b0 [ 428.052241][ C0] ? worker_thread+0xa47/0xfb0 [ 428.052267][ C0] ? kthread+0x38b/0x480 [ 428.052286][ C0] ? ret_from_fork+0x514/0xb70 [ 428.052304][ C0] ? __switch_to_asm+0x53/0x70 [ 428.052328][ C0] br_handle_frame+0x92e/0x1600 [ 428.052365][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 428.052397][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 428.052417][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 428.052440][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 428.052469][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 428.052506][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 428.052532][ C0] ? ip6_rcv_finish+0x265/0x280 [ 428.052560][ C0] ? NF_HOOK+0x336/0x3c0 [ 428.052589][ C0] ? lock_acquire+0x115/0x350 [ 428.052617][ C0] ? process_backlog+0x3de/0x18b0 [ 428.052644][ C0] ? process_backlog+0x3de/0x18b0 [ 428.052674][ C0] process_backlog+0x727/0x18b0 [ 428.052704][ C0] ? call_timer_fn+0xd5/0x5f0 [ 428.052732][ C0] ? process_backlog+0x3de/0x18b0 [ 428.052767][ C0] __napi_poll+0xaa/0x330 [ 428.052793][ C0] net_rx_action+0x61d/0xf50 [ 428.052827][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 428.052853][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 428.052877][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 428.052909][ C0] handle_softirqs+0x265/0x8d0 [ 428.052947][ C0] ? kernel_fpu_end+0x62/0x80 [ 428.052973][ C0] do_softirq+0x77/0xd0 [ 428.052997][ C0] [ 428.053004][ C0] [ 428.053011][ C0] __local_bh_enable_ip+0x100/0x140 [ 428.053036][ C0] blake2s_compress+0xfa/0x1c00 [ 428.053075][ C0] ? hmac+0x30c/0x3b0 [ 428.053105][ C0] ? __crypto_memneq+0x2fe/0x470 [ 428.053129][ C0] ? curve25519+0x514f/0x51a0 [ 428.053149][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 428.053184][ C0] ? __pfx_curve25519+0x10/0x10 [ 428.053211][ C0] blake2s_update+0x140/0x450 [ 428.053243][ C0] hmac+0x2d1/0x3b0 [ 428.053270][ C0] ? __pfx_hmac+0x10/0x10 [ 428.053318][ C0] wg_noise_handshake_create_response+0x467/0x9f0 [ 428.053350][ C0] ? __pfx_wg_noise_handshake_create_response+0x10/0x10 [ 428.053382][ C0] ? rcu_is_watching+0x16/0xb0 [ 428.053414][ C0] ? down_write_trylock+0x3f0/0x400 [ 428.053449][ C0] ? wg_noise_handshake_consume_initiation+0x70c/0x9b0 [ 428.053481][ C0] ? __lock_acquire+0x747/0x2de0 [ 428.053511][ C0] ? __asan_memset+0x22/0x50 [ 428.053530][ C0] ? blake2s_final+0x145/0x270 [ 428.053563][ C0] ? lock_acquire+0x115/0x350 [ 428.053593][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 428.053612][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 428.053639][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 428.053666][ C0] wg_packet_send_handshake_response+0x110/0x2d0 [ 428.053690][ C0] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 428.053710][ C0] ? wg_socket_set_peer_endpoint_from_skb+0xd7/0x130 [ 428.053740][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 428.053768][ C0] wg_packet_handshake_receive_worker+0x6a9/0x10b0 [ 428.053790][ C0] ? look_up_lock_class+0x57/0x110 [ 428.053817][ C0] ? wg_packet_handshake_receive_worker+0x72f/0x10b0 [ 428.053839][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 428.053861][ C0] ? trace_hrtimer_start+0x82/0x200 [ 428.053886][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 428.053926][ C0] ? lock_acquire+0x115/0x350 [ 428.053961][ C0] ? rcu_is_watching+0x16/0xb0 [ 428.053989][ C0] ? process_scheduled_works+0x97a/0x1630 [ 428.054018][ C0] process_scheduled_works+0xc3d/0x1630 [ 428.054067][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 428.054099][ C0] ? assign_work+0x3cf/0x5d0 [ 428.054129][ C0] worker_thread+0xa47/0xfb0 [ 428.054165][ C0] ? __kthread_parkme+0x71/0x1f0 [ 428.054201][ C0] kthread+0x38b/0x480 [ 428.054222][ C0] ? __pfx_worker_thread+0x10/0x10 [ 428.054250][ C0] ? __pfx_kthread+0x10/0x10 [ 428.054271][ C0] ret_from_fork+0x514/0xb70 [ 428.054293][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 428.054313][ C0] ? __switch_to+0xc78/0x1410 [ 428.054344][ C0] ? __pfx_kthread+0x10/0x10 [ 428.054365][ C0] ret_from_fork_asm+0x1a/0x30 [ 428.054393][ C0] [ 431.009960][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 434.047760][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 434.056870][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 434.066944][ T32] Call Trace: [ 434.070223][ T32] [ 434.073160][ T32] vpanic+0x56d/0xa60 [ 434.077148][ T32] ? __pfx___schedule+0x10/0x10 [ 434.082010][ T32] ? __pfx_vpanic+0x10/0x10 [ 434.086523][ T32] panic+0xc5/0xd0 [ 434.090243][ T32] ? __pfx_panic+0x10/0x10 [ 434.094654][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 434.100124][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 434.105505][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 434.111675][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 434.117846][ T32] watchdog+0x102b/0x1030 [ 434.122190][ T32] ? watchdog+0x1c7/0x1030 [ 434.126620][ T32] kthread+0x38b/0x480 [ 434.130691][ T32] ? __pfx_watchdog+0x10/0x10 [ 434.135403][ T32] ? __pfx_kthread+0x10/0x10 [ 434.140030][ T32] ret_from_fork+0x514/0xb70 [ 434.144627][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 434.149742][ T32] ? __switch_to+0xc78/0x1410 [ 434.154432][ T32] ? __pfx_kthread+0x10/0x10 [ 434.159027][ T32] ret_from_fork_asm+0x1a/0x30 [ 434.163806][ T32] [ 434.167103][ T32] Kernel Offset: disabled [ 434.171424][ T32] Rebooting in 86400 seconds..