Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts.
2026/09/04 02:21:18 parsed 1 programs
2026/09/04 02:21:18 serving rpc on tcp://46321
[ 258.265339][ T5634] cgroup: Unknown subsys name 'net'
[ 258.476664][ T5634] cgroup: Unknown subsys name 'cpuset'
[ 258.551557][ T5634] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 260.449661][ T5634] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 263.146971][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[ 263.154931][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[ 266.218426][ T5665] bridge0: port 1(bridge_slave_0) entered blocking state
[ 266.219560][ T5665] bridge0: port 1(bridge_slave_0) entered disabled state
[ 266.219730][ T5665] bridge_slave_0: entered allmulticast mode
[ 266.223076][ T5665] bridge_slave_0: entered promiscuous mode
[ 266.229160][ T5665] bridge0: port 2(bridge_slave_1) entered blocking state
[ 266.229354][ T5665] bridge0: port 2(bridge_slave_1) entered disabled state
[ 266.229515][ T5665] bridge_slave_1: entered allmulticast mode
[ 266.234128][ T5665] bridge_slave_1: entered promiscuous mode
[ 266.304845][ T5665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 266.308958][ T5665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 266.349134][ T5665] team0: Port device team_slave_0 added
[ 266.359331][ T5665] team0: Port device team_slave_1 added
[ 266.387870][ T5665] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 266.387934][ T5665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 266.387959][ T5665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 266.391466][ T5665] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 266.391481][ T5665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 266.391503][ T5665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 266.485937][ T5665] hsr_slave_0: entered promiscuous mode
[ 266.487804][ T5665] hsr_slave_1: entered promiscuous mode
[ 266.988558][ T5665] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 267.028316][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 267.037469][ T5665] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 267.076144][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 267.079171][ T5665] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 267.121180][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 267.124224][ T5665] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 267.157984][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 267.289410][ T5665] 8021q: adding VLAN 0 to HW filter on device bond0
[ 267.319606][ T5665] 8021q: adding VLAN 0 to HW filter on device team0
[ 267.344250][ T41] bridge0: port 1(bridge_slave_0) entered blocking state
[ 267.344879][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 267.370302][ T143] bridge0: port 2(bridge_slave_1) entered blocking state
[ 267.370532][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 267.805371][ T5665] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 267.877755][ T5665] veth0_vlan: entered promiscuous mode
[ 267.896819][ T5665] veth1_vlan: entered promiscuous mode
[ 267.943323][ T5665] veth0_macvtap: entered promiscuous mode
[ 267.953613][ T5665] veth1_macvtap: entered promiscuous mode
[ 267.974876][ T5665] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 268.003682][ T5665] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 268.028001][ T143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 268.322045][ T143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 268.322155][ T143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 268.322191][ T143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 268.656706][ T2974] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 269.475322][ T2974] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 270.035018][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 270.057967][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 270.062806][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 270.077762][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 270.087127][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 270.422900][ T2974] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 271.066410][ T2974] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 271.901873][ T2974] bridge_slave_1: left allmulticast mode
[ 271.903265][ T2974] bridge_slave_1: left promiscuous mode
[ 271.904582][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state
[ 272.092978][ T2974] bridge_slave_0: left allmulticast mode
[ 272.098812][ T2974] bridge_slave_0: left promiscuous mode
[ 272.099092][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state
[ 272.892069][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 272.971664][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 272.993015][ T2974] bond0 (unregistering): Released all slaves
[ 273.038644][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1
[ 273.542381][ T2974] hsr_slave_0: left promiscuous mode
[ 273.581078][ T2974] hsr_slave_1: left promiscuous mode
[ 273.582515][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 273.582687][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 273.622097][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 273.622222][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 273.796418][ T2974] veth1_macvtap: left promiscuous mode
[ 273.803214][ T2974] veth0_macvtap: left promiscuous mode
[ 273.803520][ T2974] veth1_vlan: left promiscuous mode
[ 273.803813][ T2974] veth0_vlan: left promiscuous mode
[ 274.481599][ T2974] team0 (unregistering): Port device team_slave_1 removed
[ 274.541543][ T2974] team0 (unregistering): Port device team_slave_0 removed
[ 274.730452][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2
[ 274.926905][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 274.930395][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 275.063264][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 275.063353][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 276.105266][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3
[ 277.469845][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4
2026/09/04 02:21:41 executed programs: 0
[ 278.378329][ T4910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 278.393555][ T4910] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 278.411346][ T4910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 278.415682][ T4910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 278.417433][ T4910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 279.057449][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[ 279.057683][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[ 279.058166][ T5824] bridge_slave_0: entered allmulticast mode
[ 279.063083][ T5824] bridge_slave_0: entered promiscuous mode
[ 279.066612][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[ 279.066810][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[ 279.066959][ T5824] bridge_slave_1: entered allmulticast mode
[ 279.069543][ T5824] bridge_slave_1: entered promiscuous mode
[ 279.127278][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 279.141585][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 279.186612][ T5824] team0: Port device team_slave_0 added
[ 279.190326][ T5824] team0: Port device team_slave_1 added
[ 279.224897][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 279.224960][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 279.224996][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 279.227872][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 279.227885][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 279.227907][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 279.315821][ T5824] hsr_slave_0: entered promiscuous mode
[ 279.317171][ T5824] hsr_slave_1: entered promiscuous mode
[ 280.498302][ T59] Bluetooth: hci0: command tx timeout
[ 282.017886][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 282.069383][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 282.073426][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 282.108741][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 282.112760][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 282.145621][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 282.147662][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 282.220684][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 282.396779][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[ 282.436934][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[ 282.450207][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state
[ 282.450507][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 282.474700][ T88] bridge0: port 2(bridge_slave_1) entered blocking state
[ 282.474986][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 282.570972][ T59] Bluetooth: hci0: command tx timeout
[ 283.648796][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 283.792098][ T5824] veth0_vlan: entered promiscuous mode
[ 283.832520][ T5824] veth1_vlan: entered promiscuous mode
[ 283.923128][ T5824] veth0_macvtap: entered promiscuous mode
[ 283.944472][ T5824] veth1_macvtap: entered promiscuous mode
[ 283.978620][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 284.006813][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 284.151012][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 284.151501][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 284.151538][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 284.151571][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 284.568298][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 284.568904][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 284.652229][ T59] Bluetooth: hci0: command tx timeout
[ 284.663559][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 284.663632][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/09/04 02:21:48 executed programs: 2
[ 285.155790][ T5973] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[ 285.191084][ T5973] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[ 286.733332][ T59] Bluetooth: hci0: command tx timeout
[ 324.966848][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[ 324.977227][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[ 328.362851][ T4910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 328.678759][ T4910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 328.866783][ T4910] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 329.143918][ T4910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 329.376854][ T4910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 332.736005][ T59] Bluetooth: hci1: command tx timeout
[ 334.825091][ T59] Bluetooth: hci1: command tx timeout
[ 336.913706][ T59] Bluetooth: hci1: command tx timeout
[ 338.985462][ T59] Bluetooth: hci1: command tx timeout
[ 386.272140][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[ 386.283644][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[ 403.535212][ T59] Bluetooth: hci0: command 0x0406 tx timeout
[ 406.150413][ T5998] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 406.321327][ T5998] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 406.449838][ T5998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 407.092960][ T5998] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 407.437053][ T5998] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 431.160326][ T5998] Bluetooth: hci2: command tx timeout
[ 433.224914][ T5998] Bluetooth: hci2: command tx timeout
[ 435.294852][ T5998] Bluetooth: hci2: command tx timeout
[ 437.375213][ T5998] Bluetooth: hci2: command tx timeout
[ 447.764148][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[ 447.815675][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[ 477.456587][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 477.651117][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 477.726021][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 478.290732][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 478.529302][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 480.974875][ T5998] Bluetooth: hci3: command tx timeout
[ 483.064184][ T5998] Bluetooth: hci3: command tx timeout
[ 485.135159][ T5998] Bluetooth: hci3: command tx timeout
[ 487.226383][ T5998] Bluetooth: hci3: command tx timeout
[ 503.786905][ T37] INFO: task kworker/0:3:5699 blocked for more than 143 seconds.
[ 503.878000][ T37] Not tainted syzkaller #0
[ 503.888258][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 503.929160][ T37] task:kworker/0:3 state:D stack:22232 pid:5699 tgid:5699 ppid:2 task_flags:0x4208060 flags:0x00080000
[ 503.959820][ T37] Workqueue: events_power_efficient reg_check_chans_work
[ 503.994976][ T37] Call Trace:
[ 504.040472][ T37]
[ 504.048137][ T37] __schedule+0x16d9/0x5700
[ 504.072760][ T37] ? trace_event_buffer_commit+0x258/0x7a0
[ 504.118319][ T37] ? __pfx_trace_event_raw_event_lock+0x10/0x10
[ 504.138833][ T37] ? __pfx___schedule+0x10/0x10
[ 504.173303][ T37] ? rt_mutex_slowlock_block+0x33c/0x690
[ 504.225659][ T37] rt_mutex_schedule+0x76/0xf0
[ 504.239918][ T37] rt_mutex_slowlock_block+0x55e/0x690
[ 504.245316][ T37] ? rt_mutex_slowlock_block+0x33c/0x690
[ 504.245720][ T37] rt_mutex_slowlock+0x2d4/0x780
[ 504.246327][ T37] ? rt_mutex_slowlock+0x1f2/0x780
[ 504.246844][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 504.248393][ T37] ? reg_check_chans_work+0x1a1/0x1110
[ 504.249322][ T37] ? reg_check_chans_work+0x1a1/0x1110
[ 504.249539][ T37] mutex_lock_nested+0x168/0x1d0
[ 504.249882][ T37] ? reg_check_chans_work+0xac/0x1110
[ 504.250181][ T37] reg_check_chans_work+0x1a1/0x1110
[ 504.250634][ T37] ? trace_event_buffer_commit+0x258/0x7a0
[ 504.317865][ T37] ? __pfx_reg_check_chans_work+0x10/0x10
[ 504.334259][ T37] ? __pfx_reg_check_chans_work+0x10/0x10
[ 504.337741][ T37] ? lock_acquire+0x115/0x350
[ 504.338847][ T37] ? rcu_is_watching+0x16/0xb0
[ 504.349452][ T37] ? process_scheduled_works+0x97a/0x1630
[ 504.350028][ T37] process_scheduled_works+0xc3d/0x1630
[ 504.386795][ T37] ? __pfx_process_scheduled_works+0x10/0x10
[ 504.396725][ T37] ? assign_work+0x3cf/0x5d0
[ 504.397661][ T37] worker_thread+0xa47/0xfb0
[ 504.428307][ T37] kthread+0x38b/0x470
[ 504.428693][ T37] ? __pfx_worker_thread+0x10/0x10
[ 504.428905][ T37] ? __pfx_kthread+0x10/0x10
[ 504.439680][ T37] ret_from_fork+0x514/0xb70
[ 504.440654][ T37] ? __pfx_ret_from_fork+0x10/0x10
[ 504.450213][ T37] ? __switch_to+0xc89/0x1420
[ 504.453388][ T37] ? __pfx_kthread+0x10/0x10
[ 504.462931][ T37] ret_from_fork_asm+0x1a/0x30
[ 504.490277][ T37]
[ 504.490422][ T37]
[ 504.490422][ T37] Showing all locks held in the system:
[ 504.490474][ T37] locks held by pr/ttyS0/17: 5, last CPU#1:
[ 504.490533][ T37] #0: ffffffff8e09d578 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[ 504.504063][ T37] #1: ffffffff99e981f8 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x64c/0x880
[ 504.522225][ T37] #2: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400
[ 504.599202][ T37] #3: ffff8880b873c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[ 504.599543][ T37] #4: ffff8880b8728558 (hrtimer_bases.lock){-...}-{2:2}, at: __hrtimer_rearm_deferred+0x99/0x4d0
[ 504.600174][ T37] locks held by ksoftirqd/1/30: 8, last CPU#1:
[ 504.600296][ T37] #0: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420
[ 504.618435][ T37] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420
[ 504.619078][ T37] #2: ffff8880b87241a0 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600
[ 504.620117][ T37] #3: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400
[ 504.641499][ T37] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: ieee80211_rx_napi+0xd1/0x3d0
[ 504.662053][ T37] #5: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420
[ 504.662891][ T37] #6: ffff888038380228 (&rdev->bss_lock){+...}-{3:3}, at: cfg80211_inform_single_bss_data+0xc22/0x1bf0
[ 504.663623][ T37] #7: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400
[ 504.677207][ T37] locks held by khungtaskd/37: 1, last CPU#0:
[ 504.677381][ T37] #0: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 504.678019][ T37] locks held by kworker/u8:5/88: 8, last CPU#0:
[ 504.689395][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 504.690325][ T37] #1: ffffc9000158fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 504.705223][ T37] #2: ffffffff8e051e70 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20
[ 504.705857][ T37] #3: ffffffff8e2a11b8 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0
[ 504.707445][ T37] #4: ffffffff8e068718 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30
[ 504.707862][ T37] #5: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200
[ 504.708710][ T37] #6: ffff88813ff5bc58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[ 504.710006][ T37] #7: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400
[ 504.710374][ T37] locks held by kworker/u8:6/143: 6, last CPU#1:
[ 504.710460][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 504.755891][ T37] #1: ffffc900040dfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 504.756440][ T37] #2: ffff8880381208d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[ 504.779671][ T37] #3: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420
[ 504.780064][ T37] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420
[ 504.804511][ T37] #5: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400
[ 504.805009][ T37] locks held by kworker/u8:11/1003: 5, last CPU#0:
[ 504.805113][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 504.823591][ T37] #1: ffffc900063b7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 504.843662][ T37] #2: ffff88803ebd2310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0
[ 504.844928][ T37] #3: ffff888031ae3120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0
[ 504.856452][ T37] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400
[ 504.856745][ T37] locks held by kworker/1:2/1239: 3, last CPU#1:
[ 504.856818][ T37] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 504.872499][ T37] #1: ffffc90006ae7c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 504.873199][ T37] #2: ffffffff8ed0cb58 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x470
[ 504.889141][ T37] locks held by kworker/u8:16/2273: 5, last CPU#0:
[ 504.889199][ T37] #0: ffff8880323a3138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 504.889838][ T37] #1: ffffc90007a67c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 504.919683][ T37] #2: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420
[ 504.920406][ T37] #3: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420
[ 504.936434][ T37] #4: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[ 504.948712][ T37] locks held by kworker/u8:17/2974: 3, on CPU#0:
[ 504.948874][ T37] #0: ffff888031ecf938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 504.976989][ T37] #1: ffffc9000e5bfc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 504.977493][ T37] #2: ffffffff8f5d1cf8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[ 504.992523][ T37] locks held by kworker/u8:18/2998: 2, on CPU#0:
[ 504.992649][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 505.004514][ T37] #1: ffffc9000e65fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 505.004887][ T37] locks held by kworker/u8:20/3000: 8, last CPU#0:
[ 505.005215][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 505.026363][ T37] #1: ffffc9000e57fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 505.027134][ T37] #2: ffff8880383808d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[ 505.046574][ T37] #3: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[ 505.047649][ T37] #4: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[ 505.072956][ T37] #5: ffff8880b8624548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790
[ 505.073492][ T37] #6: ffff8880b8628558 (hrtimer_bases.lock){-...}-{2:2}, at: hrtimer_start_range_ns+0x8c/0x3f0
[ 505.102852][ T37] #7: ffffffff99b23748 (&____s->seqcount#2){--..}-{0:0}, at: ktime_get+0x45/0x220
[ 505.103642][ T37] locks held by kworker/u9:1/4910: 4, on CPU#0:
[ 505.103775][ T37] #0: ffff88803261f138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 505.133942][ T37] #1: ffffc90010acfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 505.135001][ T37] #2: ffff8880347fcf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0
[ 505.165741][ T37] #3: ffff8880347fc0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
[ 505.166575][ T37] locks held by klogd/4950: 2, on CPU#1:
[ 505.190047][ T37] #0: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420
[ 505.191003][ T37] #1: ffff8880b87241a0 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600
[ 505.227229][ T37] locks held by getty/5346: 2, on CPU#0:
[ 505.227352][ T37] #0: ffff888035bc20a0 (&tty->ldisc_sem){++++}-{0:0}, at:
** replaying previous printk message **
[ 505.227352][ T37] #0: ffff888035bc20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 505.228372][ T37] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[ 505.228735][ T37] locks held by syz-execprog/5627: 1, on CPU#0:
[ 505.258062][ T37] #0: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[ 505.258518][ T37] locks held by kworker/1:4/5688: 3, last CPU#1:
[ 505.258613][ T37] #0: ffff88803138a938 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 505.259416][ T37] #1: ffffc9000535fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 505.286187][ T37] #2: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420
[ 505.286979][ T37] locks held by kworker/0:3/5699: 4, on CPU#0:
[ 505.287134][ T37] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 505.318323][ T37] #1: ffffc900053efc40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 505.318643][ T37] #2: ffffffff8f5d1cf8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110
[ 505.319188][ T37] #3: ffff8880383808d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x1a1/0x1110
[ 505.364916][ T37] locks held by kworker/0:4/5700: 2, on CPU#0:
[ 505.365021][ T37] #0: ffff88813ff27938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 505.395689][ T37] #1: ffffc900053ffc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 505.396494][ T37] locks held by syz.0.17/5973: 5, last CPU#0:
[ 505.396639][ T37] #0: ffff88801af04510 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 505.424593][ T37] #1: ffffffff8e237818 (event_mutex){+.+.}-{4:4}, at: system_enable_write+0x25b/0x360
[ 505.425352][ T37] #2: ffffffff8e226478 (tracepoints_mutex){+.+.}-{4:4}, at: tracepoint_probe_register+0x3f/0x90
[ 505.426282][ T37] #3: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[ 505.427039][ T37] #4: ffff8880b8624548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790
[ 505.428039][ T37] locks held by syz-executor/5982: 1, on CPU#1:
[ 505.428202][ T37] #0: ffff88803f870f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[ 505.428763][ T37] locks held by kworker/1:5/5986: 1, last CPU#1:
[ 505.428823][ T37] #0: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630
[ 505.429369][ T37] locks held by dhcpcd/6005: 1, on CPU#0:
[ 505.429481][ T37] #0: ffff88802a0ec358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90
[ 505.430406][ T37] locks held by dhcpcd/6006: 1, on CPU#0:
[ 505.430568][ T37] #0: ffff88802969a358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90
[ 505.507857][ T37] locks held by dhcpcd/6008: 1, on CPU#0:
[ 505.507976][ T37] #0: ffff88802615c358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90
[ 505.508846][ T37] locks held by dhcpcd/6011: 1, on CPU#0:
[ 505.508987][ T37] #0: ffff88803d962358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90
[ 505.538566][ T37] locks held by dhcpcd/6012: 1, on CPU#1:
[ 505.538720][ T37] #0: ffff888054b66358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90
[ 505.572971][ T37] locks held by modprobe/6013: 2, last CPU#0:
[ 505.573168][ T37] #0: ffff8880389f47b0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0
[ 505.573593][ T37] #1: ffffffff8e310fb0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[ 505.593229][ T37] locks held by dhcpcd/6014: 1, on CPU#0:
[ 505.593343][ T37] #0: ffff88803a3cc358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90
[ 505.615249][ T37] locks held by udevd/6016: 1, last CPU#0:
[ 505.615319][ T37] #0: ffff88813ff6f2c0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430
[ 505.616041][ T37]
[ 505.616158][ T37] =============================================
[ 505.616158][ T37]
[ 505.616285][ T37] NMI backtrace for cpu 0
[ 505.616374][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 505.616472][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 505.616562][ T37] Call Trace:
[ 505.616771][ T37]
[ 505.616990][ T37] dump_stack_lvl+0xe8/0x150
[ 505.617261][ T37] nmi_cpu_backtrace+0x274/0x2d0
[ 505.617742][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 505.618253][ T37] nmi_trigger_cpumask_backtrace+0x17d/0x390
[ 505.618921][ T37] sys_info+0x135/0x170
[ 505.619023][ T37] watchdog+0xfd7/0x1030
[ 505.620030][ T37] ? watchdog+0x1c7/0x1030
[ 505.620944][ T37] kthread+0x38b/0x470
[ 505.621353][ T37] ? __pfx_watchdog+0x10/0x10
[ 505.621539][ T37] ? __pfx_kthread+0x10/0x10
[ 505.622311][ T37] ret_from_fork+0x514/0xb70
[ 505.622627][ T37] ? __pfx_ret_from_fork+0x10/0x10
[ 505.622954][ T37] ? __switch_to+0xc89/0x1420
[ 505.623863][ T37] ? __pfx_kthread+0x10/0x10
[ 505.624193][ T37] ret_from_fork_asm+0x1a/0x30
[ 505.625769][ T37]
[ 505.627104][ T37] Sending NMI from CPU 0 to CPUs 1:
[ 505.627171][ C1] NMI backtrace for cpu 1
[ 505.627220][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 505.627272][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 505.627317][ C1] RIP: 0010:io_serial_in+0x77/0xc0
[ 505.627527][ C1] Code: e8 ce cc 65 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6f 7b d1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07
[ 505.627582][ C1] RSP: 0000:ffffc900001678b8 EFLAGS: 00000202
[ 505.627685][ C1] RAX: 1ffffffff33d3000 RBX: 00000000000003fd RCX: 0000000000000000
[ 505.627744][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000
[ 505.627803][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[ 505.627864][ C1] R10: dffffc0000000000 R11: ffffffff8560aca0 R12: dffffc0000000000
[ 505.627928][ C1] R13: 0000000000000000 R14: ffffffff99e98220 R15: 0000000000000000
[ 505.628000][ C1] FS: 0000000000000000(0000) GS:ffff888125cd5000(0000) knlGS:0000000000000000
[ 505.628070][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 505.628107][ C1] CR2: 0000565438c71830 CR3: 00000000407b6000 CR4: 00000000003526f0
[ 505.628131][ C1] Call Trace:
[ 505.628157][ C1]
[ 505.628278][ C1] wait_for_lsr+0x190/0x300
[ 505.628854][ C1] __serial8250_console_fifo_write+0xd0/0x3f0
[ 505.629487][ C1] serial8250_console_write+0xac5/0x1230
[ 505.629609][ C1] ? ring_buffer_event_data+0x94/0x100
[ 505.630407][ C1] ? __pfx_serial8250_console_write+0x10/0x10
[ 505.630838][ C1] ? trace_event_raw_event_lock_acquire+0x1f7/0x2e0
[ 505.631676][ C1] nbcon_emit_next_record+0xef5/0x1a90
[ 505.632648][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10
[ 505.633095][ C1] ? nbcon_context_try_acquire+0x819/0xbd0
[ 505.634693][ C1] nbcon_kthread_func+0x679/0x880
[ 505.635224][ C1] ? nbcon_kthread_func+0x163/0x880
[ 505.635483][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10
[ 505.636030][ C1] ? __kthread_parkme+0x71/0x1f0
[ 505.636396][ C1] ? __kthread_parkme+0x199/0x1f0
[ 505.636946][ C1] kthread+0x38b/0x470
[ 505.637151][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10
[ 505.637250][ C1] ? __pfx_kthread+0x10/0x10
[ 505.637667][ C1] ret_from_fork+0x514/0xb70
[ 505.638034][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 505.638196][ C1] ? __switch_to+0xc89/0x1420
[ 505.638672][ C1] ? __pfx_kthread+0x10/0x10
[ 505.639066][ C1] ret_from_fork_asm+0x1a/0x30
[ 505.640165][ C1]
[ 505.996968][ T37] Kernel panic - not syncing: hung_task: blocked tasks
[ 506.790213][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 506.800303][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 506.811605][ T37] Call Trace:
[ 506.815103][ T37]
[ 506.819038][ T37] vpanic+0x56d/0xa60
[ 506.823445][ T37] ? __pfx___schedule+0x10/0x10
[ 506.828694][ T37] ? __pfx_vpanic+0x10/0x10
[ 506.834876][ T37] panic+0xc5/0xd0
[ 506.839000][ T37] ? __pfx_panic+0x10/0x10
[ 506.843610][ T37] ? preempt_schedule_common+0x7f/0xd0
[ 506.849385][ T37] ? preempt_schedule_thunk+0x16/0x40
[ 506.855567][ T37] ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[ 506.862653][ T37] ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[ 506.869305][ T37] watchdog+0x1030/0x1030
[ 506.875156][ T37] ? watchdog+0x1c7/0x1030
[ 506.880672][ T37] kthread+0x38b/0x470
[ 506.885415][ T37] ? __pfx_watchdog+0x10/0x10
[ 506.890527][ T37] ? __pfx_kthread+0x10/0x10
[ 506.895379][ T37] ret_from_fork+0x514/0xb70
[ 506.900534][ T37] ? __pfx_ret_from_fork+0x10/0x10
[ 506.906417][ T37] ? __switch_to+0xc89/0x1420
[ 506.911811][ T37] ? __pfx_kthread+0x10/0x10
[ 506.916949][ T37] ret_from_fork_asm+0x1a/0x30
[ 506.923553][ T37]
[ 506.926942][ T37] Kernel Offset: disabled
[ 506.931513][ T37] Rebooting in 86400 seconds..