Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. 2026/08/09 05:05:00 parsed 1 programs 2026/08/09 05:05:00 serving rpc on tcp://44863 [ 82.706048][ T5789] cgroup: Unknown subsys name 'net' [ 82.830378][ T5789] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.606733][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.433615][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.446713][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.455510][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.468526][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.484495][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.493093][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.780574][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.793229][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.831964][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.840109][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.270267][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 89.348082][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.356963][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.364409][ T5860] bridge_slave_0: entered allmulticast mode [ 89.371301][ T5860] bridge_slave_0: entered promiscuous mode [ 89.381284][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.388551][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.395804][ T5860] bridge_slave_1: entered allmulticast mode [ 89.402623][ T5860] bridge_slave_1: entered promiscuous mode [ 89.432670][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.445253][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.480556][ T5860] team0: Port device team_slave_0 added [ 89.490204][ T5860] team0: Port device team_slave_1 added [ 89.520094][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.527245][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.553840][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.569217][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.577208][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.604123][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.654156][ T5860] hsr_slave_0: entered promiscuous mode [ 89.660675][ T5860] hsr_slave_1: entered promiscuous mode [ 89.839680][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.851044][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.868924][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.878469][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.959558][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.990090][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.003807][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.011276][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.031971][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.039135][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.252334][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.307761][ T5860] veth0_vlan: entered promiscuous mode [ 90.320437][ T5860] veth1_vlan: entered promiscuous mode [ 90.364326][ T5860] veth0_macvtap: entered promiscuous mode [ 90.375828][ T5860] veth1_macvtap: entered promiscuous mode [ 90.392639][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.417586][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.430394][ T5860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.439760][ T5860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.448713][ T5860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.457833][ T5860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.628182][ T5860] syz-executor (5860) used greatest stack depth: 20840 bytes left [ 90.917088][ T2918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/09 05:05:11 executed programs: 0 [ 91.977839][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.989205][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.997876][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.006566][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.015078][ T5087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.022554][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.099690][ T788] cfg80211: failed to load regulatory.db [ 92.165547][ T5892] chnl_net:caif_netlink_parms(): no params data found [ 92.232222][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.239433][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.246825][ T5892] bridge_slave_0: entered allmulticast mode [ 92.254269][ T5892] bridge_slave_0: entered promiscuous mode [ 92.263647][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.271410][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.278761][ T5892] bridge_slave_1: entered allmulticast mode [ 92.286279][ T5892] bridge_slave_1: entered promiscuous mode [ 92.317816][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.329538][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.361384][ T5892] team0: Port device team_slave_0 added [ 92.369119][ T5892] team0: Port device team_slave_1 added [ 92.391258][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.398280][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.430159][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.445299][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.452289][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.478250][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.516389][ T5892] hsr_slave_0: entered promiscuous mode [ 92.523429][ T5892] hsr_slave_1: entered promiscuous mode [ 92.529621][ T5892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.538444][ T5892] Cannot create hsr debugfs directory [ 93.085714][ T2918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.103476][ T5087] Bluetooth: hci0: command tx timeout [ 95.643360][ T2918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.717565][ T2918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.183658][ T5087] Bluetooth: hci0: command tx timeout [ 96.619492][ T5892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.637901][ T5892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.678626][ T5892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.693469][ T5892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.781844][ T2918] hsr_slave_0: left promiscuous mode [ 96.788955][ T2918] hsr_slave_1: left promiscuous mode [ 96.795406][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.802935][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.811160][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.819531][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.827524][ T2918] bridge_slave_1: left allmulticast mode [ 96.833443][ T2918] bridge_slave_1: left promiscuous mode [ 96.839824][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.850537][ T2918] bridge_slave_0: left allmulticast mode [ 96.857265][ T2918] bridge_slave_0: left promiscuous mode [ 96.863857][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.885324][ T2918] veth1_macvtap: left promiscuous mode [ 96.891061][ T2918] veth0_macvtap: left promiscuous mode [ 96.896868][ T2918] veth1_vlan: left promiscuous mode [ 96.902321][ T2918] veth0_vlan: left promiscuous mode [ 97.515009][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 97.558317][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 97.594385][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.634262][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.873451][ T2918] bond0 (unregistering): Released all slaves [ 97.990568][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.016184][ T5892] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.035820][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.043015][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.069146][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.076344][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.263468][ T5087] Bluetooth: hci0: command tx timeout [ 98.296876][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.357510][ T5892] veth0_vlan: entered promiscuous mode [ 98.372038][ T5892] veth1_vlan: entered promiscuous mode [ 98.401621][ T5892] veth0_macvtap: entered promiscuous mode [ 98.411889][ T5892] veth1_macvtap: entered promiscuous mode [ 98.436334][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.455649][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.482540][ T5892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.491603][ T5892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.502616][ T5892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.511582][ T5892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.604476][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.612361][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/09 05:05:17 executed programs: 2 [ 98.647139][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.658817][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.333650][ T5087] Bluetooth: hci0: command tx timeout [ 133.055801][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.062441][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.495691][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.502069][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.052741][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 246.332740][ T29] INFO: task kworker/u4:2:42 blocked for more than 143 seconds. [ 246.340504][ T29] Not tainted syzkaller #0 [ 246.345590][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.354393][ T29] task:kworker/u4:2 state:D stack:23472 pid:42 ppid:2 flags:0x00004000 [ 246.363708][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 246.369738][ T29] Call Trace: [ 246.373238][ T29] [ 246.376198][ T29] __schedule+0x15ae/0x4660 [ 246.380712][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 246.387003][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 246.393311][ T29] ? mark_lock+0x94/0x320 [ 246.397643][ T29] ? asan.module_dtor+0x20/0x20 [ 246.402498][ T29] ? blk_check_plugged+0x250/0x250 [ 246.407659][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 246.413636][ T29] ? wq_worker_sleeping+0x63/0x240 [ 246.418764][ T29] schedule+0xbd/0x170 [ 246.422896][ T29] io_schedule+0x80/0xd0 [ 246.427190][ T29] bit_wait_io+0x11/0xd0 [ 246.431436][ T29] __wait_on_bit+0x9f/0x2c0 [ 246.436221][ T29] ? bit_wait+0xd0/0xd0 [ 246.440411][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 246.445946][ T29] ? bit_wait+0xd0/0xd0 [ 246.450141][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 246.455725][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 246.460782][ T29] ? bit_waitqueue+0x30/0x30 [ 246.465450][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 246.470703][ T29] do_get_write_access+0x5c9/0xe00 [ 246.475956][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 246.481970][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 246.488183][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 246.494430][ T29] ext4_mb_mark_diskspace_used+0x1c3/0x14b0 [ 246.500354][ T29] ? ext4_discard_allocated_blocks+0x620/0x620 [ 246.506586][ T29] ? ext4_mb_new_blocks+0x1014/0x42f0 [ 246.511985][ T29] ? kmem_cache_free+0xf8/0x290 [ 246.516919][ T29] ext4_mb_new_blocks+0x105b/0x42f0 [ 246.522151][ T29] ? ext4_find_extent+0x1f5/0xcd0 [ 246.527243][ T29] ? rcu_is_watching+0x15/0xb0 [ 246.532041][ T29] ? ext4_mb_release_inode_pa+0xa30/0xa30 [ 246.538069][ T29] ? ext4_inode_to_goal_block+0x317/0x450 [ 246.543891][ T29] ext4_ext_map_blocks+0x1811/0x68c0 [ 246.549219][ T29] ? __might_sleep+0xe0/0xe0 [ 246.553897][ T29] ? ext4_ext_release+0x10/0x10 [ 246.558771][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 246.563861][ T29] ? ext4_es_lookup_extent+0x601/0x9f0 [ 246.569351][ T29] ext4_map_blocks+0x9db/0x1a90 [ 246.574343][ T29] ? ext4_issue_zeroout+0x250/0x250 [ 246.579603][ T29] ? rcu_is_watching+0x15/0xb0 [ 246.585007][ T29] ? ext4_inode_journal_mode+0x376/0x460 [ 246.590709][ T29] ext4_do_writepages+0x1463/0x3990 [ 246.596294][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 246.603262][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 246.608752][ T29] ? __lock_acquire+0x1336/0x7d80 [ 246.613868][ T29] ext4_writepages+0x1dd/0x350 [ 246.618677][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 246.623671][ T29] ? __rwlock_init+0x150/0x150 [ 246.628467][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 246.633762][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 246.638860][ T29] do_writepages+0x351/0x590 [ 246.643554][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 246.649307][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 246.654751][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 246.659801][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 246.664883][ T29] __writeback_single_inode+0x14e/0xee0 [ 246.670469][ T29] writeback_sb_inodes+0x813/0x1020 [ 246.675767][ T29] ? queue_io+0x530/0x530 [ 246.680144][ T29] __writeback_inodes_wb+0x114/0x240 [ 246.685522][ T29] wb_writeback+0x472/0xbe0 [ 246.690063][ T29] ? queue_io+0x391/0x530 [ 246.694473][ T29] ? percpu_ref_tryget+0x250/0x250 [ 246.699621][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 246.706729][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 246.711834][ T29] wb_workfn+0xad7/0xe60 [ 246.716241][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 246.722003][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 246.728045][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 246.733250][ T29] ? read_lock_is_recursive+0x20/0x20 [ 246.738658][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 246.744517][ T29] ? process_scheduled_works+0x975/0x1600 [ 246.750302][ T29] ? process_scheduled_works+0x975/0x1600 [ 246.756128][ T29] process_scheduled_works+0xa60/0x1600 [ 246.761720][ T29] ? worker_attach_to_pool+0x370/0x370 [ 246.767242][ T29] ? assign_work+0x3cc/0x5d0 [ 246.771901][ T29] worker_thread+0xa5e/0xfe0 [ 246.776652][ T29] kthread+0x2fa/0x390 [ 246.780765][ T29] ? pr_cont_work+0x550/0x550 [ 246.785532][ T29] ? kthread_blkcg+0xd0/0xd0 [ 246.790148][ T29] ret_from_fork+0x48/0x80 [ 246.794650][ T29] ? kthread_blkcg+0xd0/0xd0 [ 246.799263][ T29] ret_from_fork_asm+0x11/0x20 [ 246.804092][ T29] [ 246.807214][ T29] INFO: task syz.0.153:6070 blocked for more than 143 seconds. [ 246.814900][ T29] Not tainted syzkaller #0 [ 246.821345][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.830096][ T29] task:syz.0.153 state:D stack:27560 pid:6070 ppid:5892 flags:0x00004004 [ 246.839427][ T29] Call Trace: [ 246.843000][ T29] [ 246.845985][ T29] __schedule+0x15ae/0x4660 [ 246.850561][ T29] ? mark_lock+0x94/0x320 [ 246.854995][ T29] ? asan.module_dtor+0x20/0x20 [ 246.859880][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 246.864970][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 246.870922][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 246.876213][ T29] schedule+0xbd/0x170 [ 246.880313][ T29] io_schedule+0x80/0xd0 [ 246.884702][ T29] bit_wait_io+0x11/0xd0 [ 246.888976][ T29] __wait_on_bit+0x9f/0x2c0 [ 246.893583][ T29] ? bit_wait+0xd0/0xd0 [ 246.897770][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 246.903298][ T29] ? bit_wait+0xd0/0xd0 [ 246.907542][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 246.912320][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 246.917416][ T29] ? bit_waitqueue+0x30/0x30 [ 246.922048][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 246.927303][ T29] do_get_write_access+0x5c9/0xe00 [ 246.932451][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 246.938576][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 246.945028][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 246.951229][ T29] ? __might_sleep+0xe0/0xe0 [ 246.955924][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 246.961525][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 246.967074][ T29] ext4_dirty_inode+0xcb/0x110 [ 246.971877][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 246.977891][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 246.983018][ T29] file_update_time+0x187/0x1a0 [ 246.987985][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 246.993091][ T29] ? filemap_fault+0x103c/0x1540 [ 246.998059][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 247.003823][ T29] ? pte_alloc_one+0x3b6/0x540 [ 247.008637][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 247.014959][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 247.020011][ T29] do_page_mkwrite+0x153/0x3f0 [ 247.024826][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 247.029788][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 247.034822][ T29] ? numa_migrate_prep+0x350/0x350 [ 247.039969][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 247.045312][ T29] do_user_addr_fault+0x736/0x12d0 [ 247.050664][ T29] exc_page_fault+0x64/0x100 [ 247.055432][ T29] ? clear_bhb_loop+0x40/0x90 [ 247.060149][ T29] asm_exc_page_fault+0x26/0x30 [ 247.065149][ T29] RIP: 0033:0x7f011686ba23 [ 247.069597][ T29] RSP: 002b:00007fffff86eab0 EFLAGS: 00010246 [ 247.075727][ T29] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 247.083760][ T29] RDX: 0000001b2cf24000 RSI: 0000000000040000 RDI: 00007f0116be0708 [ 247.091829][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.099860][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 247.107897][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffff86ed40 [ 247.115972][ T29] [ 247.119065][ T29] [ 247.119065][ T29] Showing all locks held in the system: [ 247.126887][ T29] 1 lock held by khungtaskd/29: [ 247.131771][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 247.141764][ T29] 6 locks held by kworker/u4:2/42: [ 247.146946][ T29] #0: ffff888140058938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 247.158472][ T29] #1: ffffc90000b2fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 247.171022][ T29] #2: ffff88814e5380e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 247.181654][ T29] #3: ffff88814e53ac58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 247.192138][ T29] #4: ffff88814e53c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 247.201878][ T29] #5: ffff8880771bc888 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 247.211718][ T29] 2 locks held by getty/5536: [ 247.216467][ T29] #0: ffff88802c8f00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 247.227101][ T29] #1: ffffc900032832f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 247.237396][ T29] 2 locks held by kworker/0:4/5819: [ 247.242602][ T29] #0: ffff888017c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 247.253977][ T29] #1: ffffc900046a7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 247.266118][ T29] 3 locks held by syz.0.153/6070: [ 247.271158][ T29] #0: ffff88807c884da0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 247.281152][ T29] #1: ffff88814e538510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 247.290983][ T29] #2: ffff88814e53c990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 247.300727][ T29] 2 locks held by dhcpcd/6098: [ 247.305562][ T29] #0: ffff888021662130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 247.315290][ T29] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 247.326259][ T29] [ 247.328620][ T29] ============================================= [ 247.328620][ T29] [ 247.337124][ T29] NMI backtrace for cpu 1 [ 247.341465][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 247.348668][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.358722][ T29] Call Trace: [ 247.362009][ T29] [ 247.364937][ T29] dump_stack_lvl+0x18c/0x250 [ 247.369618][ T29] ? __wake_up_klogd+0xd9/0x100 [ 247.374467][ T29] ? show_regs_print_info+0x20/0x20 [ 247.379678][ T29] ? load_image+0x420/0x420 [ 247.384185][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 247.389118][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 247.395280][ T29] ? load_image+0x420/0x420 [ 247.399803][ T29] ? wq_watchdog_touch+0xef/0x170 [ 247.404841][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 247.410926][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 247.416921][ T29] watchdog+0xf59/0xfa0 [ 247.421095][ T29] ? watchdog+0x1e1/0xfa0 [ 247.425460][ T29] kthread+0x2fa/0x390 [ 247.429544][ T29] ? hungtask_pm_notify+0x50/0x50 [ 247.434589][ T29] ? kthread_blkcg+0xd0/0xd0 [ 247.439190][ T29] ret_from_fork+0x48/0x80 [ 247.443620][ T29] ? kthread_blkcg+0xd0/0xd0 [ 247.448222][ T29] ret_from_fork_asm+0x11/0x20 [ 247.453012][ T29] [ 247.456436][ T29] Sending NMI from CPU 1 to CPUs 0: [ 247.461928][ C0] NMI backtrace for cpu 0 [ 247.461939][ C0] CPU: 0 PID: 2939 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 247.461954][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.461962][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 247.461994][ C0] RIP: 0010:ieee80211_sta_active_ibss+0xc8/0x320 [ 247.462014][ C0] Code: eb 05 e8 9b 30 86 f7 e8 f6 c1 70 f7 48 8d 1d 00 00 00 00 48 c7 c7 a0 1d 13 8d 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 53 03 44 67 f7 48 83 c4 08 e8 6a aa 8b 00 89 c5 31 ff 89 c6 e8 0f [ 247.462025][ C0] RSP: 0000:ffffc9000bd1f970 EFLAGS: 00000246 [ 247.462037][ C0] RAX: 0000000000000001 RBX: ffffffff8a0140f1 RCX: 0000000000000002 [ 247.462047][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d131da0 [ 247.462056][ C0] RBP: ffffc9000bd1fb60 R08: 0000000000000000 R09: 0000000000000000 [ 247.462064][ C0] R10: dffffc0000000000 R11: fffff520017a3f29 R12: ffff88807a881838 [ 247.462074][ C0] R13: ffff88807f644d00 R14: dffffc0000000000 R15: ffff88807a880e80 [ 247.462084][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 247.462096][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.462107][ C0] CR2: 00007ffd081a3748 CR3: 000000001f36c000 CR4: 00000000003506f0 [ 247.462122][ C0] Call Trace: [ 247.462128][ C0] [ 247.462132][ C0] ? ieee80211_sta_active_ibss+0xb1/0x320 [ 247.462151][ C0] ieee80211_ibss_work+0x872/0x1100 [ 247.462172][ C0] ? _raw_spin_unlock+0x40/0x40 [ 247.462192][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x2dc0/0x2dc0 [ 247.462208][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 247.462229][ C0] ? skb_dequeue+0x124/0x160 [ 247.462245][ C0] ? ieee80211_iface_work+0x97c/0xc90 [ 247.462263][ C0] ? ieee80211_iface_work+0xbe4/0xc90 [ 247.462283][ C0] cfg80211_wiphy_work+0x228/0x260 [ 247.462300][ C0] ? process_scheduled_works+0x975/0x1600 [ 247.462318][ C0] process_scheduled_works+0xa60/0x1600 [ 247.462348][ C0] ? worker_attach_to_pool+0x370/0x370 [ 247.462368][ C0] ? assign_work+0x3cc/0x5d0 [ 247.462388][ C0] worker_thread+0xa5e/0xfe0 [ 247.462417][ C0] kthread+0x2fa/0x390 [ 247.462430][ C0] ? pr_cont_work+0x550/0x550 [ 247.462448][ C0] ? kthread_blkcg+0xd0/0xd0 [ 247.462461][ C0] ret_from_fork+0x48/0x80 [ 247.462478][ C0] ? kthread_blkcg+0xd0/0xd0 [ 247.462492][ C0] ret_from_fork_asm+0x11/0x20 [ 247.462525][ C0] [ 247.464975][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 247.464986][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 247.465002][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.465011][ T29] Call Trace: [ 247.465017][ T29] [ 247.465024][ T29] dump_stack_lvl+0x18c/0x250 [ 247.465048][ T29] ? show_regs_print_info+0x20/0x20 [ 247.465066][ T29] ? load_image+0x420/0x420 [ 247.465101][ T29] panic+0x2ca/0x720 [ 247.465127][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 247.465148][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 247.465169][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 247.465193][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 247.465218][ T29] watchdog+0xf98/0xfa0 [ 247.465240][ T29] ? watchdog+0x1e1/0xfa0 [ 247.465266][ T29] kthread+0x2fa/0x390 [ 247.465282][ T29] ? hungtask_pm_notify+0x50/0x50 [ 247.465303][ T29] ? kthread_blkcg+0xd0/0xd0 [ 247.465320][ T29] ret_from_fork+0x48/0x80 [ 247.465339][ T29] ? kthread_blkcg+0xd0/0xd0 [ 247.465355][ T29] ret_from_fork_asm+0x11/0x20 [ 247.465388][ T29] [ 247.467315][ T29] Kernel Offset: disabled [ 247.808930][ T29] Rebooting in 86400 seconds..