Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. 2026/10/09 12:29:27 parsed 1 programs 2026/10/09 12:29:27 serving rpc on tcp://36655 [ 97.836372][ T9] cfg80211: failed to load regulatory.db [ 99.643859][ T5792] cgroup: Unknown subsys name 'net' [ 99.782245][ T5792] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.688090][ T5792] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.266978][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 105.351029][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.360917][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.370467][ T5835] bridge_slave_0: entered allmulticast mode [ 105.378155][ T5835] bridge_slave_0: entered promiscuous mode [ 105.390294][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.397971][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.406264][ T5835] bridge_slave_1: entered allmulticast mode [ 105.413738][ T5835] bridge_slave_1: entered promiscuous mode [ 105.451840][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.463769][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.510382][ T5835] team0: Port device team_slave_0 added [ 105.519752][ T5835] team0: Port device team_slave_1 added [ 105.543555][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.550949][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.578115][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.606869][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.614345][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.641422][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.685833][ T5835] hsr_slave_0: entered promiscuous mode [ 105.692715][ T5835] hsr_slave_1: entered promiscuous mode [ 105.894664][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.908194][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.920569][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.931079][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.978276][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.985745][ T5835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.994431][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.001987][ T5835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.062968][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.088501][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.106581][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.117080][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.139723][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.147609][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.168867][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.176171][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.371580][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.419132][ T5835] veth0_vlan: entered promiscuous mode [ 106.432734][ T5835] veth1_vlan: entered promiscuous mode [ 106.468129][ T5835] veth0_macvtap: entered promiscuous mode [ 106.478796][ T5835] veth1_macvtap: entered promiscuous mode [ 106.500401][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.521455][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.533419][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.543012][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.552215][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.561354][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.722366][ T1003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.246487][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.265618][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.274208][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.285202][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.293601][ T5862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.303440][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.562601][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.572779][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.610434][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.620978][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/10/09 12:29:38 executed programs: 0 [ 108.927164][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.938787][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.947063][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.957584][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.965588][ T5862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.973770][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.110194][ T5892] chnl_net:caif_netlink_parms(): no params data found [ 109.161942][ T1003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.207637][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.215575][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.223229][ T5892] bridge_slave_0: entered allmulticast mode [ 109.230736][ T5892] bridge_slave_0: entered promiscuous mode [ 109.238851][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.246721][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.254191][ T5892] bridge_slave_1: entered allmulticast mode [ 109.261623][ T5892] bridge_slave_1: entered promiscuous mode [ 109.290283][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.302300][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.332614][ T5892] team0: Port device team_slave_0 added [ 109.342576][ T5892] team0: Port device team_slave_1 added [ 109.367193][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.374465][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.401897][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.414525][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.422073][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.448633][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.497270][ T5892] hsr_slave_0: entered promiscuous mode [ 109.504166][ T5892] hsr_slave_1: entered promiscuous mode [ 109.512050][ T5892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.520462][ T5892] Cannot create hsr debugfs directory [ 111.035574][ T5862] Bluetooth: hci0: command tx timeout [ 111.626369][ T1003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.692789][ T1003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.738716][ T1003] hsr_slave_0: left promiscuous mode [ 112.751958][ T1003] hsr_slave_1: left promiscuous mode [ 112.762134][ T1003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.791161][ T1003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.809144][ T1003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.834787][ T1003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.848348][ T1003] bridge_slave_1: left allmulticast mode [ 112.854427][ T1003] bridge_slave_1: left promiscuous mode [ 112.863129][ T1003] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.876850][ T1003] bridge_slave_0: left allmulticast mode [ 112.886770][ T1003] bridge_slave_0: left promiscuous mode [ 112.893235][ T1003] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.919319][ T1003] veth1_macvtap: left promiscuous mode [ 112.926411][ T1003] veth0_macvtap: left promiscuous mode [ 112.932136][ T1003] veth1_vlan: left promiscuous mode [ 112.938554][ T1003] veth0_vlan: left promiscuous mode [ 113.117739][ T5862] Bluetooth: hci0: command tx timeout [ 113.524024][ T1003] team0 (unregistering): Port device team_slave_1 removed [ 113.564261][ T1003] team0 (unregistering): Port device team_slave_0 removed [ 113.601589][ T1003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.638978][ T1003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.906051][ T1003] bond0 (unregistering): Released all slaves [ 113.963801][ T5892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.974017][ T5892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.985879][ T5892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.996928][ T5892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.108210][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.124302][ T5892] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.153425][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.160637][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.178579][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.186077][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.247929][ T5892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.517588][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.582900][ T5892] veth0_vlan: entered promiscuous mode [ 114.595273][ T5892] veth1_vlan: entered promiscuous mode [ 114.628273][ T5892] veth0_macvtap: entered promiscuous mode [ 114.644275][ T5892] veth1_macvtap: entered promiscuous mode [ 114.662539][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.679276][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.692321][ T5892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.701888][ T5892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.710952][ T5892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.720417][ T5892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.837435][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.853810][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.910459][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.918963][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/10/09 12:29:44 executed programs: 2 [ 115.195540][ T5862] Bluetooth: hci0: command tx timeout [ 117.286604][ T5862] Bluetooth: hci0: command tx timeout [ 133.677234][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.683971][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.116966][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.123304][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 233.034685][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 256.557075][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.563454][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.594715][ T29] INFO: task kworker/u4:4:59 blocked for more than 143 seconds. [ 263.603173][ T29] Not tainted syzkaller #0 [ 263.608722][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.617559][ T29] task:kworker/u4:4 state:D stack:20904 pid:59 ppid:2 flags:0x00004000 [ 263.626938][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 263.633174][ T29] Call Trace: [ 263.636511][ T29] [ 263.639486][ T29] __schedule+0x15ae/0x4660 [ 263.644018][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 263.650498][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 263.656950][ T29] ? mark_lock+0x94/0x320 [ 263.661495][ T29] ? asan.module_dtor+0x20/0x20 [ 263.667169][ T29] ? blk_check_plugged+0x250/0x250 [ 263.672795][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 263.679105][ T29] ? wq_worker_sleeping+0x63/0x240 [ 263.684284][ T29] schedule+0xbd/0x170 [ 263.688863][ T29] io_schedule+0x80/0xd0 [ 263.693277][ T29] bit_wait_io+0x11/0xd0 [ 263.697736][ T29] __wait_on_bit+0x9f/0x2c0 [ 263.702614][ T29] ? bit_wait+0xd0/0xd0 [ 263.706908][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 263.712415][ T29] ? bit_wait+0xd0/0xd0 [ 263.716737][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 263.721535][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 263.726659][ T29] ? bit_waitqueue+0x30/0x30 [ 263.731318][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 263.736640][ T29] do_get_write_access+0x5c9/0xe00 [ 263.741899][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 263.748198][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 263.754497][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 263.760857][ T29] ext4_mb_mark_diskspace_used+0x1c3/0x14b0 [ 263.766873][ T29] ? ext4_discard_allocated_blocks+0x620/0x620 [ 263.773184][ T29] ? ext4_mb_new_blocks+0x1014/0x42f0 [ 263.778684][ T29] ? kmem_cache_free+0xf8/0x290 [ 263.783649][ T29] ext4_mb_new_blocks+0x105b/0x42f0 [ 263.788943][ T29] ? ext4_find_extent+0x1f5/0xcd0 [ 263.794091][ T29] ? rcu_is_watching+0x15/0xb0 [ 263.799048][ T29] ? ext4_mb_release_inode_pa+0xa30/0xa30 [ 263.805323][ T29] ? ext4_inode_to_goal_block+0x317/0x450 [ 263.811353][ T29] ext4_ext_map_blocks+0x1811/0x68c0 [ 263.816888][ T29] ? __might_sleep+0xe0/0xe0 [ 263.821610][ T29] ? ext4_ext_release+0x10/0x10 [ 263.826566][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 263.831654][ T29] ? ext4_es_lookup_extent+0x601/0x9f0 [ 263.837235][ T29] ext4_map_blocks+0x9db/0x1a90 [ 263.842129][ T29] ? ext4_issue_zeroout+0x250/0x250 [ 263.847430][ T29] ? rcu_is_watching+0x15/0xb0 [ 263.852246][ T29] ? ext4_inode_journal_mode+0x376/0x460 [ 263.859050][ T29] ext4_do_writepages+0x1463/0x3990 [ 263.864731][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 263.871820][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 263.877381][ T29] ? __lock_acquire+0x1431/0x7eb0 [ 263.882533][ T29] ext4_writepages+0x1dd/0x350 [ 263.887431][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 263.892446][ T29] ? __rwlock_init+0x150/0x150 [ 263.897340][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 263.902599][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 263.908063][ T29] do_writepages+0x351/0x590 [ 263.912721][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 263.918647][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 263.924075][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 263.929281][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 263.934717][ T29] __writeback_single_inode+0x14e/0xee0 [ 263.940314][ T29] writeback_sb_inodes+0x813/0x1020 [ 263.945658][ T29] ? queue_io+0x530/0x530 [ 263.950070][ T29] __writeback_inodes_wb+0x114/0x240 [ 263.955548][ T29] wb_writeback+0x472/0xbe0 [ 263.960129][ T29] ? queue_io+0x2c1/0x530 [ 263.964657][ T29] ? percpu_ref_tryget+0x250/0x250 [ 263.969847][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 263.976076][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 263.981150][ T29] wb_workfn+0xad7/0xe60 [ 263.985612][ T29] ? migrate_task_rq_fair+0x290/0x770 [ 263.991045][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 263.997121][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 264.003143][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 264.008718][ T29] ? read_lock_is_recursive+0x20/0x20 [ 264.014163][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 264.019488][ T29] ? process_scheduled_works+0x975/0x1600 [ 264.025309][ T29] ? process_scheduled_works+0x975/0x1600 [ 264.031056][ T29] process_scheduled_works+0xa60/0x1600 [ 264.036751][ T29] ? worker_attach_to_pool+0x370/0x370 [ 264.042252][ T29] ? assign_work+0x3cc/0x5d0 [ 264.046942][ T29] worker_thread+0xa5e/0xfe0 [ 264.051575][ T29] ? _raw_spin_unlock+0x40/0x40 [ 264.056512][ T29] ? __kthread_parkme+0x71/0x1c0 [ 264.061574][ T29] kthread+0x2fa/0x390 [ 264.065765][ T29] ? pr_cont_work+0x550/0x550 [ 264.070503][ T29] ? kthread_blkcg+0xd0/0xd0 [ 264.075182][ T29] ret_from_fork+0x48/0x80 [ 264.079634][ T29] ? kthread_blkcg+0xd0/0xd0 [ 264.084255][ T29] ret_from_fork_asm+0x11/0x20 [ 264.089255][ T29] [ 264.092705][ T29] INFO: task syz.0.125:6039 blocked for more than 143 seconds. [ 264.100337][ T29] Not tainted syzkaller #0 [ 264.105418][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 264.114435][ T29] task:syz.0.125 state:D stack:27536 pid:6039 ppid:5892 flags:0x00004004 [ 264.123983][ T29] Call Trace: [ 264.127370][ T29] [ 264.130338][ T29] __schedule+0x15ae/0x4660 [ 264.134982][ T29] ? mark_lock+0x94/0x320 [ 264.139480][ T29] ? asan.module_dtor+0x20/0x20 [ 264.144629][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 264.149911][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 264.156031][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 264.161314][ T29] schedule+0xbd/0x170 [ 264.165533][ T29] io_schedule+0x80/0xd0 [ 264.169861][ T29] bit_wait_io+0x11/0xd0 [ 264.174160][ T29] __wait_on_bit+0x9f/0x2c0 [ 264.178800][ T29] ? bit_wait+0xd0/0xd0 [ 264.183027][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 264.188675][ T29] ? bit_wait+0xd0/0xd0 [ 264.193027][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 264.197919][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 264.203031][ T29] ? bit_waitqueue+0x30/0x30 [ 264.207806][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 264.213398][ T29] do_get_write_access+0x5c9/0xe00 [ 264.218940][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 264.225333][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 264.231604][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 264.237938][ T29] ? __might_sleep+0xe0/0xe0 [ 264.242619][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 264.248346][ T29] __ext4_mark_inode_dirty+0x13f/0x720 [ 264.253946][ T29] ext4_dirty_inode+0xcb/0x110 [ 264.258793][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 264.264900][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 264.270074][ T29] file_update_time+0x187/0x1a0 [ 264.275008][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 264.280062][ T29] ? filemap_fault+0x103c/0x1540 [ 264.285177][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 264.290936][ T29] ? pte_alloc_one+0x3b6/0x540 [ 264.295879][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 264.302169][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 264.307325][ T29] do_page_mkwrite+0x153/0x3f0 [ 264.312235][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 264.318129][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 264.323167][ T29] ? numa_migrate_prep+0x350/0x350 [ 264.328440][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 264.333791][ T29] do_user_addr_fault+0x736/0x12d0 [ 264.339033][ T29] exc_page_fault+0x64/0x100 [ 264.343657][ T29] ? clear_bhb_loop+0x40/0x90 [ 264.348525][ T29] asm_exc_page_fault+0x26/0x30 [ 264.353526][ T29] RIP: 0033:0x7f707226bb23 [ 264.358037][ T29] RSP: 002b:00007fff72eb3c50 EFLAGS: 00010246 [ 264.364233][ T29] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 264.372529][ T29] RDX: 0000001b2cf24000 RSI: 0000000000040000 RDI: 00007f70725e2708 [ 264.380838][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 264.389062][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 264.397560][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff72eb3ee0 [ 264.405712][ T29] [ 264.408807][ T29] [ 264.408807][ T29] Showing all locks held in the system: [ 264.416587][ T29] 1 lock held by khungtaskd/29: [ 264.421835][ T29] #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 264.431914][ T29] 6 locks held by kworker/u4:4/59: [ 264.437100][ T29] #0: ffff888140058138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 264.448460][ T29] #1: ffffc900015a7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 264.461047][ T29] #2: ffff88814e2740e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 264.471982][ T29] #3: ffff88814e276c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 264.482560][ T29] #4: ffff8880329c0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 264.492473][ T29] #5: ffff888076d5b488 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 264.502745][ T29] 2 locks held by getty/5531: [ 264.507699][ T29] #0: ffff888032a180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 264.517752][ T29] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 264.528640][ T29] 3 locks held by syz.0.125/6039: [ 264.533696][ T29] #0: ffff88807e3f14a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 264.543784][ T29] #1: ffff88814e274510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 264.554166][ T29] #2: ffff8880329c0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 264.563991][ T29] [ 264.566519][ T29] ============================================= [ 264.566519][ T29] [ 264.575301][ T29] NMI backtrace for cpu 1 [ 264.579662][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 264.586971][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 264.597068][ T29] Call Trace: [ 264.600478][ T29] [ 264.603424][ T29] dump_stack_lvl+0x18c/0x250 [ 264.608232][ T29] ? __wake_up_klogd+0xd9/0x100 [ 264.613193][ T29] ? show_regs_print_info+0x20/0x20 [ 264.618409][ T29] ? load_image+0x420/0x420 [ 264.623045][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 264.628015][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 264.634184][ T29] ? load_image+0x420/0x420 [ 264.638710][ T29] ? wq_watchdog_touch+0xef/0x170 [ 264.643841][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 264.650018][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 264.656016][ T29] watchdog+0xf59/0xfa0 [ 264.660195][ T29] ? watchdog+0x1e1/0xfa0 [ 264.664576][ T29] kthread+0x2fa/0x390 [ 264.668712][ T29] ? hungtask_pm_notify+0x50/0x50 [ 264.673849][ T29] ? kthread_blkcg+0xd0/0xd0 [ 264.678457][ T29] ret_from_fork+0x48/0x80 [ 264.682892][ T29] ? kthread_blkcg+0xd0/0xd0 [ 264.687544][ T29] ret_from_fork_asm+0x11/0x20 [ 264.692336][ T29] [ 264.695870][ T29] Sending NMI from CPU 1 to CPUs 0: [ 264.701239][ C0] NMI backtrace for cpu 0 [ 264.701249][ C0] CPU: 0 PID: 3897 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 264.701265][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 264.701273][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 264.701294][ C0] RIP: 0010:check_preemption_disabled+0x56/0x110 [ 264.701316][ C0] Code: 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c <8f> 04 24 f7 04 24 00 02 00 00 74 cc 65 4c 8b 3d 06 97 70 75 41 f6 [ 264.701327][ C0] RSP: 0018:ffffc9000d6f7658 EFLAGS: 00000046 [ 264.701340][ C0] RAX: 0000000000000000 RBX: ffff88802fb9da00 RCX: 0000000080000000 [ 264.701350][ C0] RDX: ffff88802fb9da00 RSI: ffffffff8acadcc0 RDI: ffffffff8b1d5160 [ 264.701360][ C0] RBP: 00000000ffffffff R08: dffffc0000000000 R09: 1ffffffff23fe2a0 [ 264.701370][ C0] R10: dffffc0000000000 R11: fffffbfff23fe2a1 R12: 1ffff92001adeee4 [ 264.701380][ C0] R13: 0000000000000246 R14: ffffffff8df320e0 R15: 00000000ffffffff [ 264.701390][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 264.701403][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.701413][ C0] CR2: 000055c84346f660 CR3: 000000000dd32000 CR4: 00000000003506f0 [ 264.701428][ C0] Call Trace: [ 264.701434][ C0] [ 264.701442][ C0] lock_is_held_type+0x79/0x190 [ 264.701468][ C0] ? ieee80211_bss_info_update+0x387/0x9f0 [ 264.701488][ C0] ieee80211_bss_info_update+0x469/0x9f0 [ 264.701510][ C0] ? ieee80211_inform_bss+0xfd0/0xfd0 [ 264.701533][ C0] ? ieee80211_mandatory_rates+0x1cc/0x230 [ 264.701552][ C0] ieee80211_ibss_rx_queued_mgmt+0x18f5/0x2dc0 [ 264.701568][ C0] ? verify_lock_unused+0x140/0x140 [ 264.701592][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xecc/0x2dc0 [ 264.701608][ C0] ? ieee80211_ibss_rx_no_sta+0x790/0x790 [ 264.701626][ C0] ? mark_lock+0x94/0x320 [ 264.701644][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 264.701661][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 264.701677][ C0] ? lock_chain_count+0x20/0x20 [ 264.701691][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 264.701715][ C0] ? kcov_remote_start+0x8b/0x810 [ 264.701734][ C0] ? skb_dequeue+0x124/0x160 [ 264.701756][ C0] ieee80211_iface_work+0x730/0xc90 [ 264.701775][ C0] cfg80211_wiphy_work+0x228/0x260 [ 264.701791][ C0] ? process_scheduled_works+0x975/0x1600 [ 264.701811][ C0] process_scheduled_works+0xa60/0x1600 [ 264.701842][ C0] ? worker_attach_to_pool+0x370/0x370 [ 264.701863][ C0] ? assign_work+0x3cc/0x5d0 [ 264.701883][ C0] worker_thread+0xa5e/0xfe0 [ 264.701906][ C0] ? _raw_spin_unlock+0x40/0x40 [ 264.701924][ C0] ? __kthread_parkme+0x71/0x1c0 [ 264.701942][ C0] kthread+0x2fa/0x390 [ 264.701956][ C0] ? pr_cont_work+0x550/0x550 [ 264.701974][ C0] ? kthread_blkcg+0xd0/0xd0 [ 264.701988][ C0] ret_from_fork+0x48/0x80 [ 264.702005][ C0] ? kthread_blkcg+0xd0/0xd0 [ 264.702019][ C0] ret_from_fork_asm+0x11/0x20 [ 264.702045][ C0] [ 264.704580][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 264.704592][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 264.704608][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 264.704617][ T29] Call Trace: [ 264.704624][ T29] [ 264.704631][ T29] dump_stack_lvl+0x18c/0x250 [ 264.704657][ T29] ? show_regs_print_info+0x20/0x20 [ 264.704674][ T29] ? load_image+0x420/0x420 [ 264.704709][ T29] panic+0x2ca/0x720 [ 264.704736][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 264.704758][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 264.704780][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 264.704807][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 264.704833][ T29] watchdog+0xf98/0xfa0 [ 264.704858][ T29] ? watchdog+0x1e1/0xfa0 [ 264.704887][ T29] kthread+0x2fa/0x390 [ 264.704904][ T29] ? hungtask_pm_notify+0x50/0x50 [ 264.704928][ T29] ? kthread_blkcg+0xd0/0xd0 [ 264.704946][ T29] ret_from_fork+0x48/0x80 [ 264.704974][ T29] ? kthread_blkcg+0xd0/0xd0 [ 264.705010][ T29] ret_from_fork_asm+0x11/0x20 [ 264.705045][ T29] [ 264.709460][ T29] Kernel Offset: disabled [ 265.116385][ T29] Rebooting in 86400 seconds..