Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. 1970/01/01 00:00:31 parsed 1 programs [ 32.175346][ T4325] cgroup: Unknown subsys name 'net' [ 32.455594][ T4325] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.740210][ T4325] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.706920][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 38.727826][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.729009][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.730837][ T4341] device bridge_slave_0 entered promiscuous mode [ 38.734405][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.735591][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.737080][ T4341] device bridge_slave_1 entered promiscuous mode [ 38.744007][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.746469][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.754514][ T4341] team0: Port device team_slave_0 added [ 38.756174][ T4341] team0: Port device team_slave_1 added [ 38.761366][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.763768][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.768111][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.773492][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.774597][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.779134][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.823631][ T4341] device hsr_slave_0 entered promiscuous mode [ 38.872695][ T4341] device hsr_slave_1 entered promiscuous mode [ 38.947679][ T4341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.965553][ T4341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.003655][ T4341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.045283][ T4341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.091638][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.092996][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.094474][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.095693][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.113489][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.116998][ T1656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.120350][ T1656] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.122186][ T1656] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.124894][ T1656] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 39.129482][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.133841][ T1656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.135308][ T1656] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.136464][ T1656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.139271][ T1656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.140941][ T1656] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.142189][ T1656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.150819][ T1656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.153372][ T1656] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.156770][ T1656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.160006][ T1656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.162831][ T1656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.165441][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.220008][ T1656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.221358][ T1656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.226462][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.233022][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.238809][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.240489][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.242019][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.246187][ T4341] device veth0_vlan entered promiscuous mode [ 39.249346][ T4341] device veth1_vlan entered promiscuous mode [ 39.256178][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.257772][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.259289][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.263539][ T4341] device veth0_macvtap entered promiscuous mode [ 39.266156][ T4341] device veth1_macvtap entered promiscuous mode [ 39.271698][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.273914][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.275844][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.279130][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.280546][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.284263][ T4341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.285739][ T4341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.287131][ T4341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.288568][ T4341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.853689][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.998464][ T4380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.000264][ T4380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.001644][ T4380] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.004132][ T4382] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.005641][ T4382] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.007021][ T4382] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.590027][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.591408][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.595366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.601181][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.602489][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.604031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:40 executed programs: 0 [ 40.949723][ T4382] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.951286][ T4382] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.953127][ T4382] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.955093][ T4382] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.956446][ T4382] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.957584][ T4382] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.003502][ T4419] chnl_net:caif_netlink_parms(): no params data found [ 41.018894][ T4419] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.020068][ T4419] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.021710][ T4419] device bridge_slave_0 entered promiscuous mode [ 41.024227][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.025385][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.026903][ T4419] device bridge_slave_1 entered promiscuous mode [ 41.033763][ T4419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.036487][ T4419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.044291][ T4419] team0: Port device team_slave_0 added [ 41.046119][ T4419] team0: Port device team_slave_1 added [ 41.051407][ T4419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.053318][ T4419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.057426][ T4419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.061123][ T4419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.062275][ T4419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.067124][ T4419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.123548][ T4419] device hsr_slave_0 entered promiscuous mode [ 41.172756][ T4419] device hsr_slave_1 entered promiscuous mode [ 41.222479][ T4419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.223929][ T4419] Cannot create hsr debugfs directory [ 42.473621][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.972711][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 45.024329][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.052890][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 45.114442][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.227864][ T4419] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.324527][ T4419] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.414273][ T4419] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.504587][ T4419] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.633509][ T4419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.637185][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.638844][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.641443][ T4419] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.645634][ T39] device hsr_slave_0 left promiscuous mode [ 46.672590][ T39] device hsr_slave_1 left promiscuous mode [ 46.752468][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.753711][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.755490][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.756688][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.758208][ T39] device bridge_slave_1 left promiscuous mode [ 46.759739][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.803091][ T39] device bridge_slave_0 left promiscuous mode [ 46.804236][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.932600][ T39] device veth1_macvtap left promiscuous mode [ 46.933669][ T39] device veth0_macvtap left promiscuous mode [ 46.934642][ T39] device veth1_vlan left promiscuous mode [ 46.935628][ T39] device veth0_vlan left promiscuous mode [ 47.132634][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 49.074616][ T39] team0 (unregistering): Port device team_slave_1 removed [ 49.212388][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 49.253055][ T39] team0 (unregistering): Port device team_slave_0 removed [ 49.422914][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.642859][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.153256][ T39] bond0 (unregistering): Released all slaves [ 51.463996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.465622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.467077][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.468213][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.469773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.471298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.473421][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.474560][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.475991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.477645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.479359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.481047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.482722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.484651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.486208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.487604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.489701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.491171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.496227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.497857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.500648][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.552785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.554107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.557499][ T4419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.565337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.567030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.572822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.574313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.575951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.577442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.579646][ T4419] device veth0_vlan entered promiscuous mode [ 51.584442][ T4419] device veth1_vlan entered promiscuous mode [ 51.590693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.592180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.594042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.595807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.598243][ T4419] device veth0_macvtap entered promiscuous mode [ 51.600547][ T4419] device veth1_macvtap entered promiscuous mode [ 51.608227][ T4419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.609558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.611142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.613277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.614908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.617863][ T4419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.619042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.620680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.624170][ T4419] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.625603][ T4419] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.626975][ T4419] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.628320][ T4419] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.653743][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.655026][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.656506][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.663087][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.664417][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.665811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:51 executed programs: 2 [ 76.122351][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz.0.102:4773] [ 76.123742][ C0] Modules linked in: [ 76.124378][ C0] irq event stamp: 5651 [ 76.125107][ C0] hardirqs last enabled at (5650): [] exit_to_kernel_mode+0xcc/0xfc [ 76.126731][ C0] hardirqs last disabled at (5651): [] el1_interrupt+0x24/0x54 [ 76.128218][ C0] softirqs last enabled at (1044): [] release_sock+0x16c/0x1bc [ 76.129784][ C0] softirqs last disabled at (1050): [] lock_sock_nested+0x88/0x130 [ 76.131295][ C0] CPU: 0 PID: 4773 Comm: syz.0.102 Not tainted syzkaller #0 [ 76.132402][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 76.133989][ C0] pstate: 02400005 (nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.135192][ C0] pc : queued_spin_lock_slowpath+0x138/0xc18 [ 76.136181][ C0] lr : queued_spin_lock_slowpath+0x144/0xc18 [ 76.137183][ C0] sp : ffff8000218a76c0 [ 76.137875][ C0] x29: ffff8000218a7760 x28: ffff800015173008 x27: 1fffe0001893c8d4 [ 76.139244][ C0] x26: 0000000000000001 x25: ffff0000db6a8000 x24: dfff800000000000 [ 76.140573][ C0] x23: ffff700004314edc x22: ffff700004314efc x21: ffff0000c49e46a0 [ 76.141936][ C0] x20: ffff0000c49e46a8 x19: ffff0000c49e4698 x18: 0000000000000000 [ 76.143321][ C0] x17: 0000000000000000 x16: ffff8000082eea88 x15: 0000000000000000 [ 76.144556][ C0] x14: 0000000000000001 x13: 1fffe0001893c8d3 x12: 0000000000000000 [ 76.145818][ C0] x11: 0000000000000000 x10: ffff60001893c8d4 x9 : 0000000000000000 [ 76.147164][ C0] x8 : 0000000000000101 x7 : ffff80000fd694c4 x6 : 0000000000000000 [ 76.148557][ C0] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800011b24db0 [ 76.149930][ C0] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 76.151260][ C0] Call trace: [ 76.151815][ C0] queued_spin_lock_slowpath+0x138/0xc18 [ 76.152780][ C0] do_raw_spin_lock+0x2f4/0x2f8 [ 76.153603][ C0] _raw_spin_lock_bh+0x5c/0x6c [ 76.154412][ C0] lock_sock_nested+0x88/0x130 [ 76.155241][ C0] tipc_sendstream+0x50/0x84 [ 76.156023][ C0] ____sys_sendmsg+0x5c8/0x938 [ 76.156806][ C0] __sys_sendmsg+0x288/0x374 [ 76.157538][ C0] __arm64_sys_sendmsg+0x80/0x94 [ 76.158326][ C0] invoke_syscall+0x98/0x2b4 [ 76.159053][ C0] el0_svc_common+0x138/0x258 [ 76.159829][ C0] do_el0_svc+0x58/0x130 [ 76.160509][ C0] el0_svc+0x58/0x128 [ 76.161174][ C0] el0t_64_sync_handler+0x84/0xf0 [ 76.162012][ C0] el0t_64_sync+0x18c/0x190 [ 76.162795][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 76.163876][ C0] CPU: 0 PID: 4773 Comm: syz.0.102 Tainted: G L syzkaller #0 [ 76.165250][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 76.166911][ C0] Call trace: [ 76.167447][ C0] dump_backtrace+0x1c0/0x1ec [ 76.168211][ C0] show_stack+0x2c/0x3c [ 76.168873][ C0] __dump_stack+0x30/0x40 [ 76.169566][ C0] dump_stack_lvl+0xf4/0x15c [ 76.170302][ C0] dump_stack+0x1c/0x5c [ 76.170954][ C0] panic+0x2f8/0x7ac [ 76.171564][ C0] softlockup_fn+0x0/0x120 [ 76.172267][ C0] __hrtimer_run_queues+0x408/0xc3c [ 76.173127][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 76.173926][ C0] arch_timer_handler_virt+0x74/0x88 [ 76.174757][ C0] handle_percpu_devid_irq+0x174/0x34c [ 76.175691][ C0] generic_handle_domain_irq+0xe0/0x140 [ 76.176634][ C0] gic_handle_irq+0x70/0x1d4 [ 76.177341][ C0] call_on_irq_stack+0x30/0x48 [ 76.178080][ C0] do_interrupt_handler+0xd4/0x138 [ 76.178885][ C0] el1_interrupt+0x34/0x54 [ 76.179570][ C0] el1h_64_irq_handler+0x18/0x24 [ 76.180377][ C0] el1h_64_irq+0x64/0x68 [ 76.181052][ C0] queued_spin_lock_slowpath+0x138/0xc18 [ 76.181967][ C0] do_raw_spin_lock+0x2f4/0x2f8 [ 76.182763][ C0] _raw_spin_lock_bh+0x5c/0x6c [ 76.183523][ C0] lock_sock_nested+0x88/0x130 [ 76.184327][ C0] tipc_sendstream+0x50/0x84 [ 76.185059][ C0] ____sys_sendmsg+0x5c8/0x938 [ 76.185866][ C0] __sys_sendmsg+0x288/0x374 [ 76.186636][ C0] __arm64_sys_sendmsg+0x80/0x94 [ 76.187471][ C0] invoke_syscall+0x98/0x2b4 [ 76.188260][ C0] el0_svc_common+0x138/0x258 [ 76.189021][ C0] do_el0_svc+0x58/0x130 [ 76.189742][ C0] el0_svc+0x58/0x128 [ 76.190394][ C0] el0t_64_sync_handler+0x84/0xf0 [ 76.191214][ C0] el0t_64_sync+0x18c/0x190 [ 76.191944][ C0] SMP: stopping secondary CPUs [ 76.192716][ C0] Kernel Offset: disabled [ 76.193442][ C0] CPU features: 0x080000,000f0097,a65bfea7 [ 76.194390][ C0] Memory Limit: none [ 76.200668][ C0] [ 76.201057][ C0] ================================ [ 76.201807][ C0] WARNING: inconsistent lock state [ 76.202572][ C0] syzkaller #0 Tainted: G L [ 76.203427][ C0] -------------------------------- [ 76.204161][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 76.205161][ C0] syz.0.102/4773 [HC1[1]:SC0[2]:HE0:SE0] takes: [ 76.206060][ C0] ffff8000152612f8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 76.207565][ C0] {HARDIRQ-ON-W} state was registered at: [ 76.208383][ C0] lock_acquire+0x20c/0x63c [ 76.209048][ C0] _raw_spin_lock+0x54/0x6c [ 76.209713][ C0] efi_call_rts+0x3c8/0x9d8 [ 76.210391][ C0] process_one_work+0x7f8/0x13a4 [ 76.211120][ C0] worker_thread+0x8c4/0xfec [ 76.211797][ C0] kthread+0x250/0x2d8 [ 76.212424][ C0] ret_from_fork+0x10/0x20 [ 76.213082][ C0] irq event stamp: 5651 [ 76.213672][ C0] hardirqs last enabled at (5650): [] exit_to_kernel_mode+0xcc/0xfc [ 76.215076][ C0] hardirqs last disabled at (5651): [] el1_interrupt+0x24/0x54 [ 76.216365][ C0] softirqs last enabled at (1044): [] release_sock+0x16c/0x1bc [ 76.217682][ C0] softirqs last disabled at (1050): [] lock_sock_nested+0x88/0x130 [ 76.219027][ C0] [ 76.219027][ C0] other info that might help us debug this: [ 76.220170][ C0] Possible unsafe locking scenario: [ 76.220170][ C0] [ 76.221224][ C0] CPU0 [ 76.221701][ C0] ---- [ 76.222165][ C0] lock(efi_rt_lock); [ 76.222750][ C0] [ 76.223248][ C0] lock(efi_rt_lock); [ 76.223877][ C0] [ 76.223877][ C0] *** DEADLOCK *** [ 76.223877][ C0] [ 76.225059][ C0] 4 locks held by syz.0.102/4773: [ 76.225851][ C0] #0: ffff0000c49e4730 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: tipc_sendstream+0x50/0x84 [ 76.227434][ C0] #1: ffff0000c49e46b0 (slock-AF_TIPC){+...}-{2:2}, at: lock_sock_nested+0x88/0x130 [ 76.229031][ C0] #2: ffff8000153f72c0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 76.230629][ C0] #3: ffff8000172c8648 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x180/0x820 [ 76.232200][ C0] [ 76.232200][ C0] stack backtrace: [ 76.233088][ C0] CPU: 0 PID: 4773 Comm: syz.0.102 Tainted: G L syzkaller #0 [ 76.234408][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 76.236088][ C0] Call trace: [ 76.236647][ C0] dump_backtrace+0x1c0/0x1ec [ 76.237422][ C0] show_stack+0x2c/0x3c [ 76.238120][ C0] __dump_stack+0x30/0x40 [ 76.238816][ C0] dump_stack_lvl+0xf4/0x15c [ 76.239535][ C0] dump_stack+0x1c/0x5c [ 76.240217][ C0] print_usage_bug+0x4c0/0x6d8 [ 76.240966][ C0] mark_lock_irq+0x850/0xab0 [ 76.241769][ C0] mark_lock+0x224/0x320 [ 76.242467][ C0] __lock_acquire+0xa4c/0x6800 [ 76.243237][ C0] lock_acquire+0x20c/0x63c [ 76.243971][ C0] _raw_spin_lock+0x54/0x6c [ 76.244726][ C0] virt_efi_set_variable_nonblocking+0x74/0x16c [ 76.245759][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 76.246687][ C0] efi_pstore_write+0x298/0x39c [ 76.247434][ C0] pstore_dump+0x5b0/0x820 [ 76.248130][ C0] kmsg_dump+0x170/0x260 [ 76.248833][ C0] panic+0x384/0x7ac [ 76.249500][ C0] softlockup_fn+0x0/0x120 [ 76.250234][ C0] __hrtimer_run_queues+0x408/0xc3c [ 76.251062][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 76.251846][ C0] arch_timer_handler_virt+0x74/0x88 [ 76.252675][ C0] handle_percpu_devid_irq+0x174/0x34c [ 76.253549][ C0] generic_handle_domain_irq+0xe0/0x140 [ 76.254427][ C0] gic_handle_irq+0x70/0x1d4 [ 76.255138][ C0] call_on_irq_stack+0x30/0x48 [ 76.255927][ C0] do_interrupt_handler+0xd4/0x138 [ 76.256748][ C0] el1_interrupt+0x34/0x54 [ 76.257470][ C0] el1h_64_irq_handler+0x18/0x24 [ 76.258268][ C0] el1h_64_irq+0x64/0x68 [ 76.258978][ C0] queued_spin_lock_slowpath+0x138/0xc18 [ 76.259884][ C0] do_raw_spin_lock+0x2f4/0x2f8 [ 76.260681][ C0] _raw_spin_lock_bh+0x5c/0x6c [ 76.261513][ C0] lock_sock_nested+0x88/0x130 [ 76.262260][ C0] tipc_sendstream+0x50/0x84 [ 76.262993][ C0] ____sys_sendmsg+0x5c8/0x938 [ 76.263779][ C0] __sys_sendmsg+0x288/0x374 [ 76.264543][ C0] __arm64_sys_sendmsg+0x80/0x94 [ 76.265379][ C0] invoke_syscall+0x98/0x2b4 [ 76.266144][ C0] el0_svc_common+0x138/0x258 [ 76.266898][ C0] do_el0_svc+0x58/0x130 [ 76.267595][ C0] el0_svc+0x58/0x128 [ 76.268236][ C0] el0t_64_sync_handler+0x84/0xf0 [ 76.269038][ C0] el0t_64_sync+0x18c/0x190 [ 76.419912][ C0] Rebooting in 86400 seconds..