Warning: Permanently added '10.128.10.8' (ED25519) to the list of known hosts. 2026/09/15 04:39:51 parsed 1 programs 2026/09/15 04:39:51 serving rpc on tcp://46527 [ 138.828002][ T4306] cgroup: Unknown subsys name 'net' [ 138.972072][ T4306] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 140.305418][ T4306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 142.079393][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 142.133079][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.141103][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.149153][ T4327] device bridge_slave_0 entered promiscuous mode [ 142.159840][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.167070][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.174710][ T4327] device bridge_slave_1 entered promiscuous mode [ 142.192399][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.205055][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.239029][ T4327] team0: Port device team_slave_0 added [ 142.251789][ T4327] team0: Port device team_slave_1 added [ 142.266593][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.273697][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.299640][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.311758][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.318819][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.344874][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.377161][ T4327] device hsr_slave_0 entered promiscuous mode [ 142.384099][ T4327] device hsr_slave_1 entered promiscuous mode [ 142.466124][ T4327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.481121][ T4327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.490151][ T4327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.500110][ T4327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.520359][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.527569][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.535270][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.542626][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.589169][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.606337][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.617411][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.625509][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.634820][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 142.648048][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.664741][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.674023][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.681187][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.692129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.700992][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.708104][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.731587][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.741073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.752698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.763441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.779087][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.790634][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.951172][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.959706][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.983636][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.005082][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.040873][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.050630][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.059821][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.071295][ T4327] device veth0_vlan entered promiscuous mode [ 143.084106][ T4327] device veth1_vlan entered promiscuous mode [ 143.109500][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.137630][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.148932][ T4327] device veth0_macvtap entered promiscuous mode [ 143.159482][ T4327] device veth1_macvtap entered promiscuous mode [ 143.178351][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.185922][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.195168][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.204864][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.213847][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.228229][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.236624][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.245686][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.269907][ T4327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.279705][ T4327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.288704][ T4327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.297624][ T4327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.407067][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.631604][ T4370] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.642158][ T4370] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.649910][ T4370] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.658680][ T4370] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.666435][ T4370] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.674380][ T4370] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.843894][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.853032][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.863995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.881436][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.889433][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.897151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/09/15 04:39:59 executed programs: 0 [ 145.375876][ T4370] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.383963][ T4370] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.391792][ T4370] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.400331][ T4370] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.408996][ T4370] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.416747][ T4370] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.510375][ T4389] chnl_net:caif_netlink_parms(): no params data found [ 145.548202][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.555359][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.564227][ T4389] device bridge_slave_0 entered promiscuous mode [ 145.572768][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.580078][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.587937][ T4389] device bridge_slave_1 entered promiscuous mode [ 145.607944][ T4389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.620973][ T4389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.641423][ T4389] team0: Port device team_slave_0 added [ 145.648949][ T4389] team0: Port device team_slave_1 added [ 145.664068][ T4389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.671103][ T4389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.697220][ T4389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.709451][ T4389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.716402][ T4389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.742611][ T4389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.770329][ T4389] device hsr_slave_0 entered promiscuous mode [ 145.777093][ T4389] device hsr_slave_1 entered promiscuous mode [ 145.783563][ T4389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.791574][ T4389] Cannot create hsr debugfs directory [ 146.147057][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.437568][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 148.475613][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.558031][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.363419][ T57] device hsr_slave_0 left promiscuous mode [ 149.372414][ T57] device hsr_slave_1 left promiscuous mode [ 149.379481][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.389283][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.398188][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.405773][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.413790][ T57] device bridge_slave_1 left promiscuous mode [ 149.420726][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.431135][ T57] device bridge_slave_0 left promiscuous mode [ 149.438240][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.455785][ T57] device veth1_macvtap left promiscuous mode [ 149.462277][ T57] device veth0_macvtap left promiscuous mode [ 149.468466][ T57] device veth1_vlan left promiscuous mode [ 149.474372][ T57] device veth0_vlan left promiscuous mode [ 149.517011][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 149.758534][ T57] team0 (unregistering): Port device team_slave_1 removed [ 149.783331][ T57] team0 (unregistering): Port device team_slave_0 removed [ 149.808025][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.835165][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.984512][ T57] bond0 (unregistering): Released all slaves [ 150.065422][ T4389] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 150.074638][ T4389] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.083263][ T4389] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.094495][ T4389] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.149188][ T4389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.171958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.180014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.190814][ T4389] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.200778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.210240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.218755][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.225931][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.234212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.251128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.269342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.278282][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.285354][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.294644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.305950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.321073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.331139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.341145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.351882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.360671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.371270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.385035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.407097][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.418596][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.429638][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.616030][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.627337][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.639211][ T4389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.660585][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.669426][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.694617][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.703134][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.711738][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.726803][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.738997][ T4389] device veth0_vlan entered promiscuous mode [ 150.754184][ T4389] device veth1_vlan entered promiscuous mode [ 150.782732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.794811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.803885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.813571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.824690][ T4389] device veth0_macvtap entered promiscuous mode [ 150.844006][ T4389] device veth1_macvtap entered promiscuous mode [ 150.869435][ T4389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.876788][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.885665][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.893830][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.902995][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.914651][ T4389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.923719][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.932216][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.944130][ T4389] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.953389][ T4389] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.962256][ T4389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.970994][ T4389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.013099][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.024499][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.033714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.051037][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/09/15 04:40:04 executed programs: 2 [ 151.058981][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.066744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.597794][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 153.686964][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 194.158486][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.165138][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.608925][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.615257][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.916963][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 302.316983][ T28] INFO: task syz.0.261:4697 blocked for more than 143 seconds. [ 302.324698][ T28] Not tainted syzkaller #0 [ 302.329752][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.338493][ T28] task:syz.0.261 state:D stack:27632 pid:4697 ppid:4389 flags:0x00004004 [ 302.347815][ T28] Call Trace: [ 302.351098][ T28] [ 302.354019][ T28] __schedule+0x107f/0x4030 [ 302.358676][ T28] ? mark_lock+0x94/0x320 [ 302.363041][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 302.368128][ T28] ? release_firmware_map_entry+0x187/0x187 [ 302.374074][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 302.380027][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 302.385241][ T28] schedule+0xb9/0x180 [ 302.389352][ T28] io_schedule+0x7c/0xd0 [ 302.393719][ T28] bit_wait_io+0xd/0xc0 [ 302.398007][ T28] __wait_on_bit+0x9b/0x2c0 [ 302.402550][ T28] ? bit_wait+0xc0/0xc0 [ 302.406724][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 302.412235][ T28] ? bit_wait+0xc0/0xc0 [ 302.416429][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 302.421304][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 302.426338][ T28] ? bit_waitqueue+0x30/0x30 [ 302.430997][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 302.436200][ T28] do_get_write_access+0x605/0xf20 [ 302.441381][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 302.447465][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 302.453630][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 302.459831][ T28] ? rcu_is_watching+0x11/0xa0 [ 302.464615][ T28] ext4_reserve_inode_write+0x201/0x290 [ 302.470213][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 302.475687][ T28] ext4_dirty_inode+0xbf/0x100 [ 302.484231][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 302.490148][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 302.495323][ T28] __file_update_time+0x21d/0x240 [ 302.500432][ T28] file_update_time+0x2f3/0x370 [ 302.505314][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 302.510661][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 302.515705][ T28] ? pte_alloc_one+0x287/0x310 [ 302.520518][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 302.526855][ T28] do_page_mkwrite+0x16b/0x5c0 [ 302.531649][ T28] handle_mm_fault+0x199c/0x3d40 [ 302.536593][ T28] ? mt_find+0x157/0x830 [ 302.540903][ T28] ? numa_migrate_prep+0x250/0x250 [ 302.546048][ T28] ? lock_chain_count+0x20/0x20 [ 302.550980][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 302.556289][ T28] do_user_addr_fault+0x58e/0xb20 [ 302.561396][ T28] exc_page_fault+0x60/0x100 [ 302.566079][ T28] ? clear_bhb_loop+0x60/0xb0 [ 302.570969][ T28] asm_exc_page_fault+0x22/0x30 [ 302.575889][ T28] RIP: 0033:0x7f437406baa3 [ 302.580420][ T28] RSP: 002b:00007fff2b59d4d0 EFLAGS: 00010246 [ 302.586530][ T28] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 302.594578][ T28] RDX: 0000001b2f024000 RSI: 0000000000040000 RDI: 00007f43743e0708 [ 302.602725][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.610764][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 302.618798][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff2b59d760 [ 302.626849][ T28] [ 302.629895][ T28] [ 302.629895][ T28] Showing all locks held in the system: [ 302.637764][ T28] 7 locks held by kworker/u4:0/9: [ 302.642798][ T28] #0: ffff88801a6a0938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 302.653584][ T28] #1: ffffc900000e7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 302.665541][ T28] #2: ffff88814dd120e0 (&type->s_umount_key#31){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 302.675531][ T28] #3: ffff88814dd14c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 302.686172][ T28] #4: ffff88814dd16990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 302.695902][ T28] #5: ffff888074a034b0 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90 [ 302.705884][ T28] #6: ffffe8ffffc33e68 (&lg->lg_mutex){+.+.}-{3:3}, at: ext4_mb_initialize_context+0x7f0/0xb80 [ 302.716550][ T28] 1 lock held by rcu_tasks_kthre/12: [ 302.722160][ T28] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 302.732735][ T28] 1 lock held by rcu_tasks_trace/13: [ 302.738080][ T28] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 302.749110][ T28] 1 lock held by khungtaskd/28: [ 302.753965][ T28] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 302.763906][ T28] 1 lock held by klogd/3628: [ 302.768524][ T28] #0: ffff8880b8e3acd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 302.778477][ T28] 2 locks held by getty/4029: [ 302.783157][ T28] #0: ffff88807e2f8098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 302.792972][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 302.803560][ T28] 4 locks held by kworker/0:4/4337: [ 302.808831][ T28] 3 locks held by syz.0.261/4697: [ 302.813866][ T28] #0: ffff888077b9b5d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 302.823862][ T28] #1: ffff88814dd12558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 302.833659][ T28] #2: ffff88814dd16990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 302.843398][ T28] 3 locks held by syz-executor/4704: [ 302.848708][ T28] #0: ffff88814dd12460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 302.857934][ T28] #1: ffff888072070e08 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 302.868650][ T28] #2: ffff88814dd16990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 302.878389][ T28] [ 302.880711][ T28] ============================================= [ 302.880711][ T28] [ 302.889189][ T28] NMI backtrace for cpu 1 [ 302.893547][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 302.900753][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.910822][ T28] Call Trace: [ 302.914092][ T28] [ 302.917011][ T28] dump_stack_lvl+0x188/0x24e [ 302.921679][ T28] ? show_regs_print_info+0x12/0x12 [ 302.926881][ T28] ? load_image+0x410/0x410 [ 302.931370][ T28] ? vprintk_emit+0x59f/0x6a0 [ 302.936051][ T28] ? printk_sprint+0x460/0x460 [ 302.940804][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 302.945753][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 302.951913][ T28] ? _printk+0xda/0x130 [ 302.956071][ T28] ? load_image+0x410/0x410 [ 302.960573][ T28] ? load_image+0x410/0x410 [ 302.965072][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 302.971131][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 302.977193][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 302.983170][ T28] watchdog+0xf0e/0xf50 [ 302.987331][ T28] ? watchdog+0x1ed/0xf50 [ 302.991666][ T28] kthread+0x29d/0x330 [ 302.995749][ T28] ? hungtask_pm_notify+0x40/0x40 [ 303.000781][ T28] ? kthread_blkcg+0xd0/0xd0 [ 303.005389][ T28] ret_from_fork+0x1f/0x30 [ 303.009815][ T28] [ 303.013039][ T28] Sending NMI from CPU 1 to CPUs 0: [ 303.018365][ C0] NMI backtrace for cpu 0 [ 303.018375][ C0] CPU: 0 PID: 3628 Comm: klogd Not tainted syzkaller #0 [ 303.018388][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.018395][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x3a/0xe0 [ 303.018417][ C0] Code: ca 0f 86 c3 00 00 00 f3 48 0f bc c8 48 83 c1 fd 48 83 f9 03 0f 87 b0 00 00 00 48 8b 06 48 85 c0 0f 84 a4 00 00 00 41 57 41 56 <41> 54 53 48 8d 4c 09 01 48 8b 54 24 20 65 4c 8b 05 b1 37 80 7e 45 [ 303.018428][ C0] RSP: 0018:ffffc900032d7818 EFLAGS: 00000206 [ 303.018440][ C0] RAX: 0000000000000012 RBX: ffff0a1000000609 RCX: 0000000000000000 [ 303.018450][ C0] RDX: 000000000000000f RSI: ffffffff8e09c440 RDI: 0000000000000009 [ 303.018458][ C0] RBP: ffffffff8a8cdf8b R08: ffff88807c1dbc00 R09: 0000000000000006 [ 303.018467][ C0] R10: 000000000000007a R11: 0000000000000000 R12: 0000000000000009 [ 303.018475][ C0] R13: ffffc900032d7b0a R14: 0000000000000005 R15: ffffffff8a8cdf86 [ 303.018484][ C0] FS: 00007fdad481ec80(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 303.018496][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.018505][ C0] CR2: 000055a72eccb168 CR3: 000000007e062000 CR4: 00000000003506f0 [ 303.018517][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 303.018525][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 303.018533][ C0] Call Trace: [ 303.018541][ C0] [ 303.018546][ C0] vsnprintf+0x10e/0x1c20 [ 303.018570][ C0] sprintf+0xe4/0x140 [ 303.018589][ C0] ? vsprintf+0x30/0x30 [ 303.018607][ C0] ? desc_read+0x1cf/0x3d0 [ 303.018621][ C0] info_print_prefix+0x168/0x360 [ 303.018643][ C0] ? msg_add_dict_text+0x3d0/0x3d0 [ 303.018670][ C0] record_print_text+0x17e/0x4a0 [ 303.018691][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 303.018709][ C0] ? kmsg_dump_get_line+0x3e0/0x3e0 [ 303.018730][ C0] ? __might_fault+0xa6/0x120 [ 303.018744][ C0] ? __might_fault+0xc2/0x120 [ 303.018756][ C0] ? __might_fault+0xa6/0x120 [ 303.018771][ C0] syslog_print+0x3c7/0x630 [ 303.018794][ C0] ? do_syslog+0x900/0x900 [ 303.018814][ C0] ? apparmor_socket_sendmsg+0x8a/0x330 [ 303.018835][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 303.018848][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 303.018868][ C0] ? wake_bit_function+0x200/0x200 [ 303.018887][ C0] ? bpf_lsm_capable+0x5/0x10 [ 303.018903][ C0] ? security_capable+0x85/0xb0 [ 303.018918][ C0] do_syslog+0x817/0x900 [ 303.018936][ C0] ? log_buf_vmcoreinfo_setup+0x450/0x450 [ 303.018961][ C0] ? lock_chain_count+0x20/0x20 [ 303.018982][ C0] __x64_sys_syslog+0x78/0x90 [ 303.019000][ C0] do_syscall_64+0x4c/0xa0 [ 303.019014][ C0] ? clear_bhb_loop+0x60/0xb0 [ 303.019028][ C0] ? clear_bhb_loop+0x60/0xb0 [ 303.019041][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.019062][ C0] RIP: 0033:0x7fdad49e8a37 [ 303.019073][ C0] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 303.019083][ C0] RSP: 002b:00007ffe1e353048 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 303.019095][ C0] RAX: ffffffffffffffda RBX: 00007fdad4b88490 RCX: 00007fdad49e8a37 [ 303.019105][ C0] RDX: 00000000000003ff RSI: 00007fdad4b88490 RDI: 0000000000000002 [ 303.019113][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.019120][ C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007fdad4b88490 [ 303.019129][ C0] R13: 00007fdad4b65dfe R14: 00007fdad4b884c2 R15: 00007fdad4b884c2 [ 303.019144][ C0] [ 303.020366][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 303.376408][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 303.383695][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.393751][ T28] Call Trace: [ 303.397022][ T28] [ 303.399942][ T28] dump_stack_lvl+0x188/0x24e [ 303.404614][ T28] ? memcpy+0x3c/0x60 [ 303.408615][ T28] ? show_regs_print_info+0x12/0x12 [ 303.413810][ T28] ? load_image+0x410/0x410 [ 303.418345][ T28] panic+0x2d3/0x710 [ 303.422246][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 303.427876][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 303.432374][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 303.437921][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 303.444070][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 303.450223][ T28] watchdog+0xf4d/0xf50 [ 303.454380][ T28] ? watchdog+0x1ed/0xf50 [ 303.458710][ T28] kthread+0x29d/0x330 [ 303.462771][ T28] ? hungtask_pm_notify+0x40/0x40 [ 303.467792][ T28] ? kthread_blkcg+0xd0/0xd0 [ 303.472405][ T28] ret_from_fork+0x1f/0x30 [ 303.476828][ T28] [ 303.480146][ T28] Kernel Offset: disabled [ 303.484490][ T28] Rebooting in 86400 seconds..