Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. 2026/09/17 20:33:18 parsed 1 programs 2026/09/17 20:33:18 serving rpc on tcp://43491 [ 88.259691][ T5629] cgroup: Unknown subsys name 'net' [ 88.367475][ T5629] cgroup: Unknown subsys name 'cpuset' [ 88.371578][ T5629] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.047908][ T5629] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.986628][ T25] cfg80211: failed to load regulatory.db [ 93.411549][ T5645] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.914451][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.915145][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.915647][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.916655][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.917560][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.300807][ T5710] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.301524][ T5710] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.301669][ T5710] bridge_slave_0: entered allmulticast mode [ 97.303882][ T5710] bridge_slave_0: entered promiscuous mode [ 97.320917][ T5710] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.321392][ T5710] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.321824][ T5710] bridge_slave_1: entered allmulticast mode [ 97.327207][ T5710] bridge_slave_1: entered promiscuous mode [ 97.375983][ T5710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.378626][ T5710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.416419][ T5710] team0: Port device team_slave_0 added [ 97.420321][ T5710] team0: Port device team_slave_1 added [ 97.451855][ T5710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.451869][ T5710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.451888][ T5710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.461709][ T5710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.461775][ T5710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.461855][ T5710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.573019][ T5710] hsr_slave_0: entered promiscuous mode [ 97.573910][ T5710] hsr_slave_1: entered promiscuous mode [ 97.741578][ T5710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.754947][ T5710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.756980][ T5710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.762746][ T5710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.766243][ T5710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.779221][ T5710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.801180][ T5710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.811490][ T5710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.896610][ T5710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.921893][ T5710] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.936588][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.936697][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.950903][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.951513][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.344288][ T5710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.397612][ T5710] veth0_vlan: entered promiscuous mode [ 98.409678][ T5710] veth1_vlan: entered promiscuous mode [ 98.444701][ T5710] veth0_macvtap: entered promiscuous mode [ 98.448873][ T5710] veth1_macvtap: entered promiscuous mode [ 98.480121][ T5710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.493351][ T5710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.564247][ T99] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.564298][ T99] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.564334][ T99] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.564370][ T99] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.705385][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.771546][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.838898][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.874938][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.874965][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.929103][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.950342][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.950366][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/17 20:33:34 executed programs: 0 [ 99.598057][ T4934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.600083][ T4934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.600851][ T4934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.601787][ T4934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.602404][ T4934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.142452][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.142596][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.142687][ T5756] bridge_slave_0: entered allmulticast mode [ 100.150483][ T5756] bridge_slave_0: entered promiscuous mode [ 100.158361][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.158648][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.159739][ T5756] bridge_slave_1: entered allmulticast mode [ 100.166867][ T5756] bridge_slave_1: entered promiscuous mode [ 100.224641][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.229585][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.266755][ T5756] team0: Port device team_slave_0 added [ 100.269077][ T5756] team0: Port device team_slave_1 added [ 100.300239][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.300253][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.300272][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.301958][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.301972][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.302000][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.414707][ T5756] hsr_slave_0: entered promiscuous mode [ 100.415463][ T5756] hsr_slave_1: entered promiscuous mode [ 100.416052][ T5756] debugfs: 'hsr0' already exists in 'hsr' [ 100.416121][ T5756] Cannot create hsr debugfs directory [ 101.090695][ T59] bridge_slave_1: left allmulticast mode [ 101.090824][ T59] bridge_slave_1: left promiscuous mode [ 101.091514][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.120528][ T59] bridge_slave_0: left allmulticast mode [ 101.120555][ T59] bridge_slave_0: left promiscuous mode [ 101.122399][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.270235][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.276523][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.291500][ T59] bond0 (unregistering): Released all slaves [ 101.371904][ T59] hsr_slave_0: left promiscuous mode [ 101.372683][ T59] hsr_slave_1: left promiscuous mode [ 101.386868][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.386905][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.389439][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.389458][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.432231][ T59] veth1_macvtap: left promiscuous mode [ 101.432296][ T59] veth0_macvtap: left promiscuous mode [ 101.432408][ T59] veth1_vlan: left promiscuous mode [ 101.432498][ T59] veth0_vlan: left promiscuous mode [ 101.663847][ T4934] Bluetooth: hci0: command tx timeout [ 101.784388][ T59] team0 (unregistering): Port device team_slave_1 removed [ 101.807296][ T59] team0 (unregistering): Port device team_slave_0 removed [ 102.004513][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 102.328252][ T5756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.350243][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.352682][ T5756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.370885][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.378029][ T5756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.391388][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.392512][ T5756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.415628][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.785335][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.830585][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.845411][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.845548][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.890809][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.890886][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.491843][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.569077][ T5756] veth0_vlan: entered promiscuous mode [ 103.585820][ T5756] veth1_vlan: entered promiscuous mode [ 103.626867][ T5756] veth0_macvtap: entered promiscuous mode [ 103.632228][ T5756] veth1_macvtap: entered promiscuous mode [ 103.666310][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.685753][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.725463][ T99] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.725512][ T99] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.725547][ T99] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.725592][ T99] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.746138][ T4934] Bluetooth: hci0: command tx timeout [ 103.846067][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.846092][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.907296][ T365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.907328][ T365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.976343][ T5844] bridge0: port 3(veth1_to_bridge) entered blocking state [ 103.976537][ T5844] bridge0: port 3(veth1_to_bridge) entered disabled state [ 103.976984][ T5844] veth1_to_bridge: entered allmulticast mode [ 104.012080][ T5844] veth1_to_bridge: entered promiscuous mode [ 104.015706][ T5844] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 104.025840][ T5844] bridge0: port 3(veth1_to_bridge) entered blocking state [ 104.026560][ T5844] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 105.909893][ T4934] Bluetooth: hci0: command tx timeout [ 108.089896][ T4934] Bluetooth: hci0: command tx timeout [ 108.762899][ C0] sched: DL replenish lagged too much 2026/09/17 20:33:42 executed programs: 4 [ 126.733573][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.772553][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.621556][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.819225][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.882448][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.551152][ T4934] Bluetooth: hci1: command tx timeout [ 133.342084][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.355566][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.478476][ T4934] Bluetooth: hci1: command tx timeout [ 136.562312][ T4934] Bluetooth: hci1: command tx timeout [ 138.686145][ T4934] Bluetooth: hci1: command tx timeout [ 194.612446][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.734069][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.892770][ T32] INFO: task kworker/u8:12:3350 blocked for more than 146 seconds. [ 255.907468][ T32] Not tainted syzkaller #0 [ 255.907488][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.907499][ T32] task:kworker/u8:12 state:D stack:25704 pid:3350 tgid:3350 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 255.907577][ T32] Workqueue: ipv6_addrconf addrconf_dad_work [ 255.907628][ T32] Call Trace: [ 255.907640][ T32] [ 255.907656][ T32] __schedule+0x17db/0x58f0 [ 255.907714][ T32] ? __pfx___schedule+0x10/0x10 [ 255.907748][ T32] ? schedule+0x90/0x2b0 [ 255.907785][ T32] schedule+0x164/0x2b0 [ 255.907812][ T32] schedule_preempt_disabled+0x13/0x30 [ 255.907836][ T32] __mutex_lock+0x7c1/0x1550 [ 255.907862][ T32] ? __lock_acquire+0x747/0x2de0 [ 255.907890][ T32] ? __mutex_lock+0x5d4/0x1550 [ 255.907921][ T32] ? addrconf_dad_work+0x116/0x15c0 [ 255.907946][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 255.907995][ T32] addrconf_dad_work+0x116/0x15c0 [ 255.908019][ T32] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 255.908051][ T32] ? __pfx_addrconf_dad_work+0x10/0x10 [ 255.908083][ T32] ? rcu_is_watching+0x16/0xb0 [ 255.908114][ T32] ? process_scheduled_works+0x97a/0x1630 [ 255.908145][ T32] process_scheduled_works+0xc3d/0x1630 [ 255.908209][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 255.908247][ T32] ? assign_work+0x3cf/0x5d0 [ 255.908283][ T32] worker_thread+0xa47/0xfb0 [ 255.908329][ T32] ? __kthread_parkme+0x71/0x1f0 [ 255.908374][ T32] kthread+0x38b/0x480 [ 255.908397][ T32] ? __pfx_worker_thread+0x10/0x10 [ 255.908427][ T32] ? __pfx_kthread+0x10/0x10 [ 255.908452][ T32] ret_from_fork+0x514/0xb70 [ 255.908477][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 255.908513][ T32] ? __switch_to+0xc89/0x1420 [ 255.908548][ T32] ? __pfx_kthread+0x10/0x10 [ 255.908573][ T32] ret_from_fork_asm+0x1a/0x30 [ 255.908625][ T32] [ 255.908696][ T32] [ 255.908696][ T32] Showing all locks held in the system: [ 255.908708][ T32] locks held by kworker/0:1/10: 3, last CPU#0: [ 255.908725][ T32] #0: ffff888025d89d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.908829][ T32] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.908910][ T32] #2: ffff888033bd1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 255.908985][ T32] locks held by kworker/1:0/25: 2, last CPU#1: [ 255.909002][ T32] #0: ffff88802683e940 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.909066][ T32] #1: ffffc900001f7c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.909134][ T32] locks held by kworker/1:1/30: 4, last CPU#1: [ 255.909150][ T32] #0: ffff88802683d140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.909221][ T32] #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.909300][ T32] #2: ffff888033515440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 255.909371][ T32] #3: ffff8880253c2ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 255.909441][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 255.909457][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 255.909515][ T32] locks held by kworker/u8:2/38: 4, last CPU#0: [ 255.909532][ T32] #0: ffff888029a79140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.909596][ T32] #1: ffffc90000ae7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.909661][ T32] #2: ffff8880355dd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 255.909731][ T32] #3: ffff8880253c3ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 255.909811][ T32] locks held by kworker/u8:3/49: 3, last CPU#0: [ 255.909827][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.909892][ T32] #1: ffffc90000ba7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.909959][ T32] #2: ffff88802b732258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 255.910036][ T32] locks held by kworker/u8:5/99: 3, last CPU#0: [ 255.910052][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.910116][ T32] #1: ffffc90002547c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.910181][ T32] #2: ffff88805ad40800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 255.910254][ T32] locks held by kworker/u8:7/283: 3, last CPU#0: [ 255.910271][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.910335][ T32] #1: ffffc900031ffc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.910400][ T32] #2: ffff88805ad70800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 255.910470][ T32] locks held by kworker/0:2/989: 2, last CPU#0: [ 255.910487][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.910551][ T32] #1: ffffc900048bfc40 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.910618][ T32] locks held by kworker/1:2/1220: 3, on CPU#1: [ 255.910635][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.910700][ T32] #1: ffffc90005197c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.910770][ T32] #2: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80 [ 255.910831][ T32] locks held by kworker/u8:11/1311: 6, last CPU#1: [ 255.910847][ T32] #0: ffff88803242c140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.910910][ T32] #1: ffffc900053d7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.910972][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 255.911031][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 255.911092][ T32] #4: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0 [ 255.911147][ T32] #5: ffffffff9abeb1b0 (&obj_hash[i].lock){-.-.}-{2:2}, at: ebt_do_table+0xec/0x27c0 [ 255.911217][ T32] locks held by kworker/u8:12/3350: 3, on CPU#0: [ 255.911234][ T32] #0: ffff88803203f140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.911299][ T32] #1: ffffc9000ee0fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.911364][ T32] #2: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 255.911421][ T32] locks held by udevd/4985: 4, last CPU#0: [ 255.911437][ T32] #0: ffffffff8ee36330 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 255.911501][ T32] #1: ffff88807f7dd038 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 255.911567][ T32] #2: ffff8880322cc378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 255.911640][ T32] #3: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 255.911697][ T32] locks held by dhcpcd/5280: 4, last CPU#0: [ 255.911713][ T32] #0: ffffffff8ee36330 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 255.911783][ T32] #1: ffff88807b599d38 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 255.911850][ T32] #2: ffff888076dc9078 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 255.911922][ T32] #3: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 255.911979][ T32] locks held by crond/5357: 1, last CPU#0: [ 255.911995][ T32] #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 255.912051][ T32] locks held by getty/5374: 2, on CPU#1: [ 255.912067][ T32] #0: ffff888028d290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 255.912134][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 255.912198][ T32] locks held by kworker/1:3/5630: 4, on CPU#1: [ 255.912214][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.912279][ T32] #1: ffffc90003a8fc40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.912342][ T32] #2: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0xa40 [ 255.912399][ T32] #3: ffff88805ad40800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x8d/0x160 [ 255.912461][ T32] locks held by syz-executor/5847: 1, on CPU#1: [ 255.912477][ T32] #0: ffffffff90252740 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 255.912535][ T32] locks held by kworker/1:4/5848: 1, last CPU#1: [ 255.912551][ T32] #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 255.912608][ T32] locks held by kworker/1:5/5856: 3, last CPU#1: [ 255.912624][ T32] #0: ffff88806f9d9540 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.912694][ T32] #1: ffffc90002f2fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.912783][ T32] #2: ffff8880355dd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 255.928365][ T32] locks held by kworker/1:6/5859: 3, last CPU#1: [ 255.928383][ T32] #0: ffff888025d89d40 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.928454][ T32] #1: ffffc9000367fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.928535][ T32] #2: ffff888033bd1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 255.928606][ T32] locks held by kworker/0:6/5860: 4, on CPU#0: [ 255.928622][ T32] #0: ffff88802683d140 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.928691][ T32] #1: ffffc90002f0fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 255.928780][ T32] #2: ffff888033515440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 255.928849][ T32] #3: ffff8880253c2ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 255.928920][ T32] locks held by udevd/5866: 3, last CPU#0: [ 255.928936][ T32] #0: ffffffff8f4f0f78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 255.928993][ T32] #1: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 255.929048][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 255.929109][ T32] locks held by syz-executor/5867: 4, last CPU#0: [ 255.929125][ T32] #0: ffff88802ac6f110 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x33/0x6f0 [ 255.929188][ T32] #1: ffffffff8ebf9080 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 255.929243][ T32] #2: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 255.929298][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 255.929358][ T32] [ 255.929364][ T32] ============================================= [ 255.929364][ T32] [ 255.929387][ T32] NMI backtrace for cpu 0 [ 255.929415][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 255.929454][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.929467][ T32] Call Trace: [ 255.929477][ T32] [ 255.929486][ T32] dump_stack_lvl+0xe8/0x150 [ 255.929521][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 255.929557][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 255.929595][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 255.929632][ T32] sys_info+0x135/0x170 [ 255.929661][ T32] watchdog+0xfd7/0x1030 [ 255.929692][ T32] ? watchdog+0x1c7/0x1030 [ 255.929721][ T32] kthread+0x38b/0x480 [ 255.929744][ T32] ? __pfx_watchdog+0x10/0x10 [ 255.929772][ T32] ? __pfx_kthread+0x10/0x10 [ 255.929795][ T32] ret_from_fork+0x514/0xb70 [ 255.929820][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 255.929855][ T32] ? __switch_to+0xc89/0x1420 [ 255.929889][ T32] ? __pfx_kthread+0x10/0x10 [ 255.929913][ T32] ret_from_fork_asm+0x1a/0x30 [ 255.929963][ T32] [ 255.929972][ T32] Sending NMI from CPU 0 to CPUs 1: [ 255.930016][ C1] NMI backtrace for cpu 1 [ 255.930030][ C1] CPU: 1 UID: 0 PID: 1311 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 255.930052][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.930064][ C1] Workqueue: bat_events batadv_dat_purge [ 255.930094][ C1] RIP: 0010:unwind_next_frame+0x46e/0x2550 [ 255.930118][ C1] Code: d1 48 89 15 44 3c 21 12 48 85 d2 0f 84 2e 02 00 00 48 8d 5a 04 48 89 54 24 18 4c 8d 6a 05 48 89 d8 48 c1 e8 03 42 0f b6 04 20 <84> c0 0f 85 b4 19 00 00 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 [ 255.930133][ C1] RSP: 0018:ffffc90000a17dc8 EFLAGS: 00000a07 [ 255.930149][ C1] RAX: 0000000000000000 RBX: ffffffff9111fb2c RCX: ffffffff90935038 [ 255.930163][ C1] RDX: ffffffff9111fb28 RSI: ffffffff9111faf8 RDI: ffffffff8c6d9c20 [ 255.930177][ C1] RBP: ffffffff81781c5c R08: 0000000000000009 R09: 0000000000000000 [ 255.930189][ C1] R10: ffffc90000a17ec8 R11: fffff52000142fe5 R12: dffffc0000000000 [ 255.930203][ C1] R13: ffffffff9111fb2d R14: ffffc90000a17ec8 R15: ffffffff90935038 [ 255.930218][ C1] FS: 0000000000000000(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 255.930233][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.930246][ C1] CR2: 00007fe8fd9ec2fc CR3: 0000000074152000 CR4: 00000000003526f0 [ 255.930270][ C1] Call Trace: [ 255.930277][ C1] [ 255.930287][ C1] ? __unwind_start+0xed/0x660 [ 255.930308][ C1] ? get_stack_info_noinstr+0x45/0x130 [ 255.930335][ C1] ? unwind_next_frame+0x8f/0x2550 [ 255.930359][ C1] __unwind_start+0x514/0x660 [ 255.930382][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 255.930401][ C1] arch_stack_walk+0xe3/0x150 [ 255.930424][ C1] ? __unwind_start+0xed/0x660 [ 255.930447][ C1] stack_trace_save+0xa9/0x100 [ 255.930476][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 255.930505][ C1] ? __switchdev_handle_fdb_event_to_device+0x456/0x4c0 [ 255.930528][ C1] ? __pfx_dsa_foreign_dev_check+0x10/0x10 [ 255.930547][ C1] ? __pfx_dsa_user_dev_check+0x10/0x10 [ 255.930573][ C1] kasan_save_track+0x3e/0x80 [ 255.930620][ C1] __kasan_slab_alloc+0x6c/0x80 [ 255.930641][ C1] kmem_cache_alloc_node_noprof+0x354/0x610 [ 255.930672][ C1] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 255.930700][ C1] ? __alloc_skb+0x1db/0x7a0 [ 255.930720][ C1] ? __alloc_skb+0x1db/0x7a0 [ 255.930743][ C1] __alloc_skb+0x1db/0x7a0 [ 255.930767][ C1] fdb_notify+0xa6/0x160 [ 255.930788][ C1] br_fdb_update+0x4e6/0x6c0 [ 255.930811][ C1] ? __pfx_br_fdb_update+0x10/0x10 [ 255.930831][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 255.930856][ C1] br_handle_frame_finish+0x600/0x1950 [ 255.930889][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 255.930915][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 255.930935][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 255.930954][ C1] ? nf_hook_slow+0x176/0x220 [ 255.930974][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 255.931000][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 255.931026][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 255.931058][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 255.931084][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 255.931110][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 255.931137][ C1] ? lock_acquire+0x115/0x350 [ 255.931158][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 255.931186][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 255.931216][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 255.931244][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 255.931298][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 255.931327][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 255.931355][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 255.931385][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 255.931410][ C1] br_handle_frame+0x1329/0x1600 [ 255.931443][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 255.931470][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 255.931496][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 255.931514][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 255.931537][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 255.931562][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 255.931591][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 255.931609][ C1] ? ip6_rcv_finish+0x265/0x280 [ 255.931634][ C1] ? NF_HOOK+0x336/0x3c0 [ 255.931660][ C1] ? lock_acquire+0x115/0x350 [ 255.931682][ C1] ? process_backlog+0x3de/0x18b0 [ 255.931701][ C1] ? process_backlog+0x3de/0x18b0 [ 255.931723][ C1] process_backlog+0x727/0x18b0 [ 255.931743][ C1] ? call_timer_fn+0xd5/0x5f0 [ 255.931766][ C1] ? process_backlog+0x3de/0x18b0 [ 255.931793][ C1] __napi_poll+0xaa/0x330 [ 255.931812][ C1] net_rx_action+0x61d/0xf50 [ 255.931838][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 255.931857][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 255.931881][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 255.931908][ C1] handle_softirqs+0x226/0x860 [ 255.931935][ C1] ? do_softirq+0x77/0xd0 [ 255.931960][ C1] ? batadv_dat_purge+0x2d7/0x3c0 [ 255.931986][ C1] do_softirq+0x77/0xd0 [ 255.932009][ C1] [ 255.932015][ C1] [ 255.932022][ C1] __local_bh_enable_ip+0x100/0x140 [ 255.932046][ C1] batadv_dat_purge+0x2d7/0x3c0 [ 255.932075][ C1] ? process_scheduled_works+0x97a/0x1630 [ 255.932099][ C1] process_scheduled_works+0xc3d/0x1630 [ 255.932140][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 255.932167][ C1] ? assign_work+0x3cf/0x5d0 [ 255.932193][ C1] worker_thread+0xa47/0xfb0 [ 255.932225][ C1] ? __kthread_parkme+0x71/0x1f0 [ 255.932263][ C1] kthread+0x38b/0x480 [ 255.932281][ C1] ? __pfx_worker_thread+0x10/0x10 [ 255.932305][ C1] ? __pfx_kthread+0x10/0x10 [ 255.932323][ C1] ret_from_fork+0x514/0xb70 [ 255.932341][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 255.932369][ C1] ? __switch_to+0xc89/0x1420 [ 255.932396][ C1] ? __pfx_kthread+0x10/0x10 [ 255.932414][ C1] ret_from_fork_asm+0x1a/0x30 [ 255.932450][ C1] [ 255.981341][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 257.922237][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 257.931404][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.941504][ T32] Call Trace: [ 257.944828][ T32] [ 257.947812][ T32] vpanic+0x56d/0xa60 [ 257.951870][ T32] ? __pfx___schedule+0x10/0x10 [ 257.956775][ T32] ? __pfx_vpanic+0x10/0x10 [ 257.961357][ T32] panic+0xc5/0xd0 [ 257.965143][ T32] ? __pfx_panic+0x10/0x10 [ 257.969625][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 257.975142][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 257.980568][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 257.986805][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 257.993034][ T32] watchdog+0x1030/0x1030 [ 257.997514][ T32] ? watchdog+0x1c7/0x1030 [ 258.002003][ T32] kthread+0x38b/0x480 [ 258.006123][ T32] ? __pfx_watchdog+0x10/0x10 [ 258.010851][ T32] ? __pfx_kthread+0x10/0x10 [ 258.015501][ T32] ret_from_fork+0x514/0xb70 [ 258.020147][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 258.025322][ T32] ? __switch_to+0xc89/0x1420 [ 258.030071][ T32] ? __pfx_kthread+0x10/0x10 [ 258.034721][ T32] ret_from_fork_asm+0x1a/0x30 [ 258.039576][ T32] [ 258.043273][ T32] Kernel Offset: disabled [ 258.047630][ T32] Rebooting in 86400 seconds..