Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts.
2026/09/21 01:58:35 parsed 1 programs
2026/09/21 01:58:35 serving rpc on tcp://33951
[ 102.848509][ T4216] cgroup: Unknown subsys name 'net'
[ 102.980279][ T4216] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 104.444459][ T4216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 106.753524][ T4252] chnl_net:caif_netlink_parms(): no params data found
[ 106.816968][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.824676][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.833040][ T4252] device bridge_slave_0 entered promiscuous mode
[ 106.843625][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.850851][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state
[ 106.859262][ T4252] device bridge_slave_1 entered promiscuous mode
[ 106.885481][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 106.897836][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 106.930069][ T4252] team0: Port device team_slave_0 added
[ 106.938052][ T4252] team0: Port device team_slave_1 added
[ 106.960445][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 106.969598][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 106.995603][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 107.008664][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 107.015797][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 107.041751][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 107.080239][ T4252] device hsr_slave_0 entered promiscuous mode
[ 107.087282][ T4252] device hsr_slave_1 entered promiscuous mode
[ 107.219634][ T4252] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 107.232658][ T4252] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 107.243565][ T4252] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 107.253997][ T4252] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 107.282860][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.290099][ T4252] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 107.297990][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.305106][ T4252] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 107.365824][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0
[ 107.380547][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 107.392650][ T541] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.402056][ T541] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.411595][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 107.426156][ T4252] 8021q: adding VLAN 0 to HW filter on device team0
[ 107.438735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 107.448565][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.455690][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 107.476825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 107.487319][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.494390][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 107.513786][ T4252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 107.525997][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 107.541281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 107.550335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 107.558816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 107.568655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 107.577209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 107.585029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 107.719336][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 107.728196][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 107.737819][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 107.760376][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 107.773227][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 107.792440][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 107.801106][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 107.810229][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 107.818230][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 107.827955][ T4252] device veth0_vlan entered promiscuous mode
[ 107.839820][ T4252] device veth1_vlan entered promiscuous mode
[ 107.878092][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 107.886700][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 107.899825][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 107.909977][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 107.923112][ T4252] device veth0_macvtap entered promiscuous mode
[ 107.931910][ T4252] device veth1_macvtap entered promiscuous mode
[ 107.959189][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 107.967400][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 107.976289][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 107.984523][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 107.994215][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 108.011576][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 108.019520][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 108.028864][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 108.047354][ T4252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.056379][ T4252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.065976][ T4252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.074788][ T4252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.171334][ T4252] syz-executor (4252) used greatest stack depth: 20016 bytes left
[ 109.176432][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.184408][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.200774][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 109.226798][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 109.234644][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.243412][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/09/21 01:58:44 executed programs: 0
[ 110.487031][ T4311] chnl_net:caif_netlink_parms(): no params data found
[ 110.544378][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.551683][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.559618][ T4311] device bridge_slave_0 entered promiscuous mode
[ 110.567967][ T4311] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.576390][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state
[ 110.584081][ T4311] device bridge_slave_1 entered promiscuous mode
[ 110.606118][ T4311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 110.617210][ T4311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 110.640708][ T4311] team0: Port device team_slave_0 added
[ 110.649034][ T4311] team0: Port device team_slave_1 added
[ 110.670588][ T4311] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 110.677628][ T4311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 110.704206][ T4311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 110.716708][ T4311] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 110.723677][ T4311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 110.749968][ T4311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 110.783061][ T4311] device hsr_slave_0 entered promiscuous mode
[ 110.790367][ T4311] device hsr_slave_1 entered promiscuous mode
[ 110.797364][ T4311] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 110.805396][ T4311] Cannot create hsr debugfs directory
[ 110.892656][ T4311] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.405617][ T4275] Bluetooth: hci0: command 0x0409 tx timeout
[ 113.544600][ T4311] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.619432][ T4311] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.672188][ T4311] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 113.880910][ T4311] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 113.889808][ T4311] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 113.898809][ T4311] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 113.908629][ T4311] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 113.970847][ T4311] 8021q: adding VLAN 0 to HW filter on device bond0
[ 114.001698][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 114.010090][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 114.020350][ T4311] 8021q: adding VLAN 0 to HW filter on device team0
[ 114.033144][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 114.042131][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 114.050885][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.058021][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 114.068795][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 114.076939][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 114.089907][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 114.098956][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.106081][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 114.125831][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 114.136125][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 114.154634][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 114.164385][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 114.183023][ T4311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 114.194254][ T4311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 114.206700][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 114.215627][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 114.224360][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 114.232825][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 114.241938][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 114.251595][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 114.260152][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 114.268605][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 114.298111][ T9] device hsr_slave_0 left promiscuous mode
[ 114.305935][ T9] device hsr_slave_1 left promiscuous mode
[ 114.313251][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 114.324457][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 114.339384][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 114.346927][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 114.354453][ T9] device bridge_slave_1 left promiscuous mode
[ 114.361916][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 114.374266][ T9] device bridge_slave_0 left promiscuous mode
[ 114.381826][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 114.400408][ T9] device veth1_macvtap left promiscuous mode
[ 114.406968][ T9] device veth0_macvtap left promiscuous mode
[ 114.413045][ T9] device veth1_vlan left promiscuous mode
[ 114.419718][ T9] device veth0_vlan left promiscuous mode
[ 114.494962][ T13] Bluetooth: hci0: command 0x041b tx timeout
[ 114.569740][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 114.582857][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 114.598540][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 114.611187][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 114.661430][ T9] bond0 (unregistering): Released all slaves
[ 114.738285][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 114.746080][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 114.758779][ T4311] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 114.782194][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 114.791916][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 114.812930][ T4311] device veth0_vlan entered promiscuous mode
[ 114.821251][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 114.830772][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 114.840200][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 114.848428][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 114.859876][ T4311] device veth1_vlan entered promiscuous mode
[ 114.881774][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 114.890804][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 114.899275][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 114.908660][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 114.919797][ T4311] device veth0_macvtap entered promiscuous mode
[ 114.931001][ T4311] device veth1_macvtap entered promiscuous mode
[ 114.948016][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 114.962166][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 114.970823][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 114.979376][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 114.988516][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 115.000804][ T4311] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 115.012688][ T4311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.022119][ T4311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.031037][ T4311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.040326][ T4311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.050656][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 115.059630][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 115.117570][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.141333][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.160507][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 115.176386][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.184232][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.192608][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/09/21 01:58:49 executed programs: 3
[ 116.566352][ T7] Bluetooth: hci0: command 0x040f tx timeout
[ 118.655762][ T4275] Bluetooth: hci0: command 0x0419 tx timeout
[ 132.727504][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.734021][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[ 194.166169][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[ 194.172508][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[ 237.204866][ T4275] Bluetooth: hci0: command 0x0406 tx timeout
[ 255.606132][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[ 255.612464][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[ 266.495020][ T27] INFO: task syz.0.238:4549 blocked for more than 143 seconds.
[ 266.502750][ T27] Not tainted syzkaller #0
[ 266.507828][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 266.516548][ T27] task:syz.0.238 state:D stack:27696 pid: 4549 ppid: 4311 flags:0x00004004
[ 266.525803][ T27] Call Trace:
[ 266.529074][ T27]
[ 266.532000][ T27] __schedule+0x11c3/0x4350
[ 266.536567][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 266.542560][ T27] ? lock_chain_count+0x20/0x20
[ 266.547448][ T27] ? lockdep_hardirqs_off+0x70/0x100
[ 266.552748][ T27] ? release_firmware_map_entry+0x190/0x190
[ 266.558828][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 266.564759][ T27] ? lockdep_hardirqs_on+0x94/0x140
[ 266.569949][ T27] schedule+0x11b/0x1e0
[ 266.574187][ T27] io_schedule+0x7c/0xd0
[ 266.578471][ T27] bit_wait_io+0xd/0xc0
[ 266.582643][ T27] out_of_line_wait_on_bit+0x173/0x230
[ 266.588146][ T27] ? bit_wait+0xc0/0xc0
[ 266.592316][ T27] ? __wait_on_bit+0x170/0x170
[ 266.597102][ T27] ? do_raw_spin_lock+0x128/0x2f0
[ 266.602165][ T27] ? bit_waitqueue+0x30/0x30
[ 266.606781][ T27] ? do_raw_spin_unlock+0x11d/0x230
[ 266.612000][ T27] do_get_write_access+0x134/0xe40
[ 266.617162][ T27] jbd2_journal_get_write_access+0x108/0x140
[ 266.623157][ T27] __ext4_journal_get_write_access+0x24d/0x6e0
[ 266.629346][ T27] ? __ext4_journal_ensure_credits+0x450/0x450
[ 266.635603][ T27] ? slab_post_alloc_hook+0x68/0x380
[ 266.640907][ T27] ext4_reserve_inode_write+0x203/0x2e0
[ 266.646481][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0
[ 266.651958][ T27] ext4_dirty_inode+0xbf/0x100
[ 266.656755][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0
[ 266.662764][ T27] __mark_inode_dirty+0x2c8/0xc90
[ 266.667880][ T27] generic_update_time+0x1cd/0x1f0
[ 266.673017][ T27] file_update_time+0x3c0/0x440
[ 266.677911][ T27] ? file_remove_privs+0x5d0/0x5d0
[ 266.683037][ T27] ? mark_lock+0x94/0x320
[ 266.687469][ T27] ext4_page_mkwrite+0x1bc/0x1250
[ 266.692555][ T27] ? mapping_seek_hole_data+0x1300/0x1300
[ 266.698314][ T27] ? pte_alloc_one+0x287/0x310
[ 266.703095][ T27] ? ext4_change_inode_journal_flag+0x710/0x710
[ 266.709416][ T27] ? __rwlock_init+0x140/0x140
[ 266.714205][ T27] ? count_memcg_event_mm+0x324/0x370
[ 266.719615][ T27] ? do_raw_spin_unlock+0x11d/0x230
[ 266.724933][ T27] do_page_mkwrite+0x168/0x3c0
[ 266.729722][ T27] handle_mm_fault+0x1e47/0x4440
[ 266.734743][ T27] ? get_page+0xe0/0xe0
[ 266.738940][ T27] ? vmacache_find+0x4e3/0x590
[ 266.743825][ T27] ? vmacache_update+0xa0/0x100
[ 266.748728][ T27] ? find_vma+0x1df/0x230
[ 266.753083][ T27] do_user_addr_fault+0x494/0xc90
[ 266.758163][ T27] exc_page_fault+0x60/0x100
[ 266.762771][ T27] ? clear_bhb_loop+0x30/0x80
[ 266.767662][ T27] asm_exc_page_fault+0x22/0x30
[ 266.772642][ T27] RIP: 0033:0x7fbf08e02aa3
[ 266.777090][ T27] RSP: 002b:00007ffd44620360 EFLAGS: 00010246
[ 266.783172][ T27] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000
[ 266.791260][ T27] RDX: 0000001b32224000 RSI: 0000000000040000 RDI: 00007fbf09177708
[ 266.799359][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 266.807472][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 266.815494][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd446205f0
[ 266.823588][ T27]
[ 266.826705][ T27]
[ 266.826705][ T27] Showing all locks held in the system:
[ 266.834428][ T27] 1 lock held by khungtaskd/27:
[ 266.839399][ T27] #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[ 266.848817][ T27] 7 locks held by kworker/u4:1/144:
[ 266.854037][ T27] #0: ffff8880193d4938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[ 266.864677][ T27] #1: ffffc900016afd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[ 266.876644][ T27] #2: ffff88802cae00e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0
[ 266.886756][ T27] #3: ffff88802cae2c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2d40
[ 266.897328][ T27] #4: ffff88802cae4990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560
[ 266.907127][ T27] #5: ffff8880712e8278 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50
[ 266.916944][ T27] #6: ffffe8ffffd34668 (&lg->lg_mutex){+.+.}-{3:3}, at: ext4_mb_initialize_context+0x7f3/0xb80
[ 266.927591][ T27] 2 locks held by getty/3940:
[ 266.932486][ T27] #0: ffff88814cbe3098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[ 266.942286][ T27] #1: ffffc90002d032e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50
[ 266.952555][ T27] 3 locks held by syz.0.238/4549:
[ 266.957936][ T27] #0: ffff888077b8f128 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90
[ 266.968246][ T27] #1: ffff88802cae0558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250
[ 266.978336][ T27] #2: ffff88802cae4990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560
[ 266.988045][ T27] 3 locks held by syz-executor/4550:
[ 266.993331][ T27] #0: ffff88802cae0460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[ 267.002497][ T27] #1: ffff888074a43fc0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[ 267.013200][ T27] #2: ffff88802cae4990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560
[ 267.023091][ T27]
[ 267.025493][ T27] =============================================
[ 267.025493][ T27]
[ 267.033900][ T27] NMI backtrace for cpu 0
[ 267.038359][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[ 267.045567][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 267.055649][ T27] Call Trace:
[ 267.058964][ T27]
[ 267.061895][ T27] dump_stack_lvl+0x188/0x250
[ 267.066567][ T27] ? show_regs_print_info+0x20/0x20
[ 267.071762][ T27] ? load_image+0x410/0x410
[ 267.076345][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0
[ 267.081583][ T27] nmi_cpu_backtrace+0x3a2/0x3d0
[ 267.086532][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280
[ 267.092758][ T27] ? _printk+0xda/0x130
[ 267.096922][ T27] ? load_image+0x410/0x410
[ 267.101412][ T27] ? load_image+0x410/0x410
[ 267.105898][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 267.111952][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280
[ 267.117920][ T27] watchdog+0xe1b/0xe60
[ 267.122088][ T27] kthread+0x42e/0x520
[ 267.126157][ T27] ? hungtask_pm_notify+0x40/0x40
[ 267.131169][ T27] ? kthread_blkcg+0xd0/0xd0
[ 267.135753][ T27] ret_from_fork+0x1f/0x30
[ 267.140186][ T27]
[ 267.143400][ T27] Sending NMI from CPU 0 to CPUs 1:
[ 267.148739][ C1] NMI backtrace for cpu 1
[ 267.148749][ C1] CPU: 1 PID: 4274 Comm: kworker/u4:4 Not tainted syzkaller #0
[ 267.148765][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 267.148773][ C1] Workqueue: events_unbound cfg80211_wiphy_work
[ 267.148793][ C1] RIP: 0010:rcu_is_watching+0x40/0xa0
[ 267.148810][ C1] Code: 73 5c 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 20 f8 e3 8b 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 20 93 59 00 <48> c7 c3 08 b3 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38
[ 267.148821][ C1] RSP: 0018:ffffc9000307faa0 EFLAGS: 00000046
[ 267.148833][ C1] RAX: 1ffffffff17c7f05 RBX: 0000000000000001 RCX: e83863beac17ef00
[ 267.148843][ C1] RDX: 0000000000000000 RSI: ffffffff8a7a48a0 RDI: ffffffff8a7a4860
[ 267.148853][ C1] RBP: ffffc9000307fbd0 R08: ffffffff8d8b1eef R09: 1ffffffff1b163dd
[ 267.148863][ C1] R10: dffffc0000000000 R11: fffffbfff1b163de R12: 1ffff9200060ff64
[ 267.148873][ C1] R13: dffffc0000000000 R14: ffffffff8be3f828 R15: dffffc0000000000
[ 267.148883][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[ 267.148896][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 267.148905][ C1] CR2: 00007f8c28cc26c0 CR3: 000000007e707000 CR4: 00000000003506e0
[ 267.148920][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 267.148928][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 267.148937][ C1] Call Trace:
[ 267.148942][ C1]
[ 267.148948][ C1] lock_release+0xb5/0x8a0
[ 267.148965][ C1] ? __rwlock_init+0x140/0x140
[ 267.148978][ C1] ? cfg80211_wiphy_work+0x202/0x260
[ 267.148992][ C1] ? _raw_spin_lock_irq+0x86/0xf0
[ 267.149006][ C1] ? lockdep_hardirqs_off+0x70/0x100
[ 267.149022][ C1] ? __lock_acquire+0x7b50/0x7b50
[ 267.149046][ C1] ? _raw_spin_lock_irq+0xb7/0xf0
[ 267.149059][ C1] ? _raw_spin_lock_irqsave+0x100/0x100
[ 267.149072][ C1] ? read_lock_is_recursive+0x10/0x10
[ 267.149087][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 267.149103][ C1] _raw_spin_unlock_irq+0x12/0x40
[ 267.149158][ C1] cfg80211_wiphy_work+0x202/0x260
[ 267.149176][ C1] process_one_work+0x867/0xff0
[ 267.149197][ C1] ? worker_detach_from_pool+0x240/0x240
[ 267.149211][ C1] ? lockdep_hardirqs_off+0x70/0x100
[ 267.149227][ C1] ? _raw_spin_lock_irq+0xb7/0xf0
[ 267.149240][ C1] ? _raw_spin_lock_irqsave+0x100/0x100
[ 267.149255][ C1] ? wq_worker_running+0x97/0x170
[ 267.149269][ C1] worker_thread+0xad7/0x12a0
[ 267.149288][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120
[ 267.149302][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 267.149320][ C1] kthread+0x42e/0x520
[ 267.149332][ C1] ? rcu_lock_release+0x20/0x20
[ 267.149345][ C1] ? kthread_blkcg+0xd0/0xd0
[ 267.149358][ C1] ret_from_fork+0x1f/0x30
[ 267.149379][ C1]
[ 267.149808][ T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 267.432353][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[ 267.439561][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 267.449605][ T27] Call Trace:
[ 267.452899][ T27]
[ 267.455821][ T27] dump_stack_lvl+0x188/0x250
[ 267.460492][ T27] ? show_regs_print_info+0x20/0x20
[ 267.465690][ T27] ? load_image+0x410/0x410
[ 267.470200][ T27] panic+0x2f8/0x850
[ 267.474086][ T27] ? schedule_preempt_disabled+0x20/0x20
[ 267.479715][ T27] ? bpf_jit_dump+0xd0/0xd0
[ 267.484230][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280
[ 267.490394][ T27] watchdog+0xe5a/0xe60
[ 267.494547][ T27] kthread+0x42e/0x520
[ 267.498621][ T27] ? hungtask_pm_notify+0x40/0x40
[ 267.503631][ T27] ? kthread_blkcg+0xd0/0xd0
[ 267.508206][ T27] ret_from_fork+0x1f/0x30
[ 267.512618][ T27]
[ 267.515827][ T27] Kernel Offset: disabled
[ 267.520238][ T27] Rebooting in 86400 seconds..