Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts.
2026/09/01 21:17:21 parsed 1 programs
2026/09/01 21:17:21 serving rpc on tcp://43631
[ 134.626055][ T5619] cgroup: Unknown subsys name 'net'
[ 134.869306][ T5619] cgroup: Unknown subsys name 'cpuset'
[ 134.922774][ T5619] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 136.584462][ T5619] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 141.102771][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state
[ 141.104777][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state
[ 141.104982][ T5644] bridge_slave_0: entered allmulticast mode
[ 141.107668][ T5644] bridge_slave_0: entered promiscuous mode
[ 141.116086][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state
[ 141.116240][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state
[ 141.116466][ T5644] bridge_slave_1: entered allmulticast mode
[ 141.118939][ T5644] bridge_slave_1: entered promiscuous mode
[ 141.170140][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 141.177287][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 141.208662][ T5644] team0: Port device team_slave_0 added
[ 141.213339][ T5644] team0: Port device team_slave_1 added
[ 141.239371][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 141.239436][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 141.239457][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 141.246689][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 141.246705][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 141.246727][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 141.364424][ T5644] hsr_slave_0: entered promiscuous mode
[ 141.366373][ T5644] hsr_slave_1: entered promiscuous mode
[ 141.607841][ T5644] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 141.657467][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 141.667483][ T5644] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 141.697261][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 141.699615][ T5644] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 141.736456][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 141.741418][ T5644] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 141.777755][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 141.815827][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state
[ 141.819275][ T5644] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 141.820194][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state
[ 141.820343][ T5644] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 141.920645][ T44] bridge0: port 1(bridge_slave_0) entered disabled state
[ 141.952666][ T44] bridge0: port 2(bridge_slave_1) entered disabled state
[ 142.167952][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0
[ 142.204265][ T5644] 8021q: adding VLAN 0 to HW filter on device team0
[ 142.218346][ T44] bridge0: port 1(bridge_slave_0) entered blocking state
[ 142.218537][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 142.257615][ T44] bridge0: port 2(bridge_slave_1) entered blocking state
[ 142.257836][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 142.639910][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 142.714982][ T5644] veth0_vlan: entered promiscuous mode
[ 142.735061][ T5644] veth1_vlan: entered promiscuous mode
[ 142.786639][ T5644] veth0_macvtap: entered promiscuous mode
[ 142.800149][ T5644] veth1_macvtap: entered promiscuous mode
[ 142.828092][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 142.846605][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 142.988212][ T171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 143.152552][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 143.165860][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 143.165898][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 143.677270][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 144.685919][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 145.735495][ T5712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 145.760164][ T5712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 145.768259][ T5712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 145.769921][ T5712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 145.770644][ T5712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 146.017175][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 146.320775][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 146.982890][ T67] bridge_slave_1: left allmulticast mode
[ 146.984110][ T67] bridge_slave_1: left promiscuous mode
[ 146.990319][ T67] bridge0: port 2(bridge_slave_1) entered disabled state
[ 147.113220][ T67] bridge_slave_0: left allmulticast mode
[ 147.113298][ T67] bridge_slave_0: left promiscuous mode
[ 147.113532][ T67] bridge0: port 1(bridge_slave_0) entered disabled state
[ 147.882834][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 147.942746][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 147.984403][ T67] bond0 (unregistering): Released all slaves
[ 148.442254][ T67] hsr_slave_0: left promiscuous mode
[ 148.482994][ T67] hsr_slave_1: left promiscuous mode
[ 148.490595][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 148.490741][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 148.525425][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 148.537896][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 148.605339][ T67] veth1_macvtap: left promiscuous mode
[ 148.606442][ T67] veth0_macvtap: left promiscuous mode
[ 148.606723][ T67] veth1_vlan: left promiscuous mode
[ 148.606977][ T67] veth0_vlan: left promiscuous mode
[ 149.262925][ T67] team0 (unregistering): Port device team_slave_1 removed
[ 149.302696][ T67] team0 (unregistering): Port device team_slave_0 removed
[ 149.695655][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1
[ 150.008108][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 150.025543][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 150.149560][ T1317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 150.149630][ T1317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 150.495377][ T5247] 8021q: adding VLAN 0 to HW filter on device eth2
[ 151.617435][ T5247] 8021q: adding VLAN 0 to HW filter on device eth3
2026/09/01 21:17:41 executed programs: 0
[ 152.356832][ T5712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 152.373210][ T5712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 152.382654][ T5712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 152.384754][ T5712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 152.387553][ T5712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 152.886188][ T5247] 8021q: adding VLAN 0 to HW filter on device eth4
[ 153.657686][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state
[ 153.657929][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state
[ 153.658070][ T5802] bridge_slave_0: entered allmulticast mode
[ 153.660903][ T5802] bridge_slave_0: entered promiscuous mode
[ 153.671126][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state
[ 153.671238][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state
[ 153.671694][ T5802] bridge_slave_1: entered allmulticast mode
[ 153.684691][ T5802] bridge_slave_1: entered promiscuous mode
[ 153.731133][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 153.735714][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 153.777620][ T5802] team0: Port device team_slave_0 added
[ 153.780898][ T5802] team0: Port device team_slave_1 added
[ 153.821883][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 153.821952][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 153.821974][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 153.828312][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 153.828328][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 153.828349][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 153.921680][ T5802] hsr_slave_0: entered promiscuous mode
[ 153.923691][ T5802] hsr_slave_1: entered promiscuous mode
[ 154.455143][ T5712] Bluetooth: hci0: command tx timeout
[ 156.546005][ T5712] Bluetooth: hci0: command tx timeout
[ 156.866295][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 156.907004][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 156.914982][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 156.952193][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 156.954676][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 156.985961][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 156.987661][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 157.032874][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 157.218914][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0
[ 157.248680][ T5802] 8021q: adding VLAN 0 to HW filter on device team0
[ 157.267652][ T171] bridge0: port 1(bridge_slave_0) entered blocking state
[ 157.267893][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 157.276330][ T171] bridge0: port 2(bridge_slave_1) entered blocking state
[ 157.276530][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 157.930431][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 158.141875][ T5802] veth0_vlan: entered promiscuous mode
[ 158.204588][ T5802] veth1_vlan: entered promiscuous mode
[ 158.288042][ T5802] veth0_macvtap: entered promiscuous mode
[ 158.300364][ T5802] veth1_macvtap: entered promiscuous mode
[ 158.326825][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 158.349362][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 158.612240][ T5712] Bluetooth: hci0: command tx timeout
[ 159.019332][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 159.028093][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 159.112123][ T3332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 159.117719][ T3332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 159.117741][ T3332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 159.133985][ T171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 159.134027][ T171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 159.134058][ T171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/09/01 21:17:48 executed programs: 2
[ 159.452138][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[ 159.452230][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[ 160.723681][ T5712] Bluetooth: hci0: command tx timeout
[ 194.828291][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 194.874969][ T1331] ieee802154 phy1 wpan1: encryption failed: -22
[ 211.591422][ T4900] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 211.818812][ T4900] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 211.940104][ T4900] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 212.366918][ T4900] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 212.578371][ T4900] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 215.338906][ T4900] Bluetooth: hci1: command tx timeout
[ 217.454153][ T4900] Bluetooth: hci1: command tx timeout
[ 219.508142][ T4900] Bluetooth: hci1: command tx timeout
[ 221.576853][ T4900] Bluetooth: hci1: command tx timeout
[ 256.075322][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 256.081148][ T1331] ieee802154 phy1 wpan1: encryption failed: -22
[ 278.569437][ T5712] Bluetooth: hci0: command 0x0406 tx timeout
[ 282.473954][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 282.829522][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 283.033822][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 283.560573][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 283.835705][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 317.530043][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 317.540624][ T1331] ieee802154 phy1 wpan1: encryption failed: -22
[ 351.688013][ T5980] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 351.775754][ T5980] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 351.869837][ T5980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 352.213774][ T5980] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 352.532652][ T5980] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 378.974131][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 379.026794][ T1331] ieee802154 phy1 wpan1: encryption failed: -22
[ 380.006898][ T37] INFO: task kworker/1:2:1239 blocked for more than 143 seconds.
[ 380.122664][ T37] Not tainted syzkaller #0
[ 380.124104][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 380.125992][ T37] task:kworker/1:2 state:D stack:22688 pid:1239 tgid:1239 ppid:2 task_flags:0x4208060 flags:0x00080000
[ 380.126199][ T37] Workqueue: events_power_efficient reg_check_chans_work
[ 380.162097][ T37] Call Trace:
[ 380.162127][ T37]
[ 380.162366][ T37] __schedule+0x16d9/0x5700
[ 380.189742][ T37] ? pv_queued_spin_unlock_traced+0x5a/0x1b0
[ 380.209966][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 380.210654][ T37] ? __pfx___schedule+0x10/0x10
[ 380.236920][ T37] rt_mutex_schedule+0x76/0xf0
[ 380.259518][ T37] rt_mutex_slowlock_block+0x55e/0x690
[ 380.281534][ T37] ? rt_mutex_slowlock_block+0x33c/0x690
[ 380.311517][ T37] rt_mutex_slowlock+0x2d4/0x780
[ 380.337170][ T37] ? rt_mutex_slowlock+0x1f2/0x780
[ 380.355083][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 380.421379][ T37] ? reg_check_chans_work+0x1a1/0x1110
[ 380.470392][ T37] ? reg_check_chans_work+0x1a1/0x1110
[ 380.490307][ T37] mutex_lock_nested+0x168/0x1d0
[ 380.496776][ T37] reg_check_chans_work+0x1a1/0x1110
[ 380.498494][ T37] ? __pfx_reg_check_chans_work+0x10/0x10
[ 380.499400][ T37] ? lock_acquire+0x115/0x350
[ 380.500332][ T37] ? rcu_is_watching+0x16/0xb0
[ 380.501073][ T37] ? process_scheduled_works+0x97a/0x1630
[ 380.501373][ T37] process_scheduled_works+0xc3d/0x1630
[ 380.645488][ T37] ? __pfx_process_scheduled_works+0x10/0x10
[ 380.678187][ T37] ? assign_work+0x3cf/0x5d0
[ 380.703748][ T37] worker_thread+0xa47/0xfb0
[ 380.705973][ T37] ? __kthread_parkme+0x71/0x1f0
[ 380.707112][ T37] kthread+0x38b/0x470
[ 380.707622][ T37] ? __pfx_worker_thread+0x10/0x10
[ 380.707875][ T37] ? __pfx_kthread+0x10/0x10
[ 380.708316][ T37] ret_from_fork+0x514/0xb70
[ 380.708831][ T37] ? __pfx_ret_from_fork+0x10/0x10
[ 380.709285][ T37] ? __switch_to+0xc89/0x1420
[ 380.709981][ T37] ? __pfx_kthread+0x10/0x10
[ 380.710326][ T37] ret_from_fork_asm+0x1a/0x30
[ 380.835861][ T37]
[ 380.837881][ T37]
[ 380.837881][ T37] Showing all locks held in the system:
[ 380.837953][ T37] locks held by pr/ttyS0/17: 3, last CPU#1:
[ 380.838020][ T37] #0: ffffffff8e09d578 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[ 380.873985][ T37] #1: ffffffff99e971f8 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x64c/0x880
[ 380.874660][ T37] #2: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400
[ 380.906872][ T37] locks held by ksoftirqd/1/30: 5, last CPU#1:
[ 380.906931][ T37] #0: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420
[ 380.907484][ T37] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420
[ 380.939578][ T37] #2: ffff8880b87241a0 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600
[ 380.940161][ T37] #3: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400
[ 380.940712][ T37] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: ieee80211_rx_napi+0xd1/0x3d0
[ 380.977358][ T37] locks held by kworker/1:0/31: 2, on CPU#1:
[ 380.977463][ T37] #0: ffff88813ff27938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 380.978351][ T37] #1: ffffc90000a5fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 381.040121][ T37] locks held by khungtaskd/37: 1, last CPU#0:
[ 381.040168][ T37] #0: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 381.040697][ T37] locks held by kworker/u9:0/59: 4, on CPU#0:
[ 381.040806][ T37] #0: ffff888038a00938 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 381.173793][ T37] #1: ffffc9000125fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 381.228988][ T37] #2: ffff88803d6300b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950
[ 381.345338][ T37] #3: ffffffff8f754e18 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950
[ 381.431297][ T37] locks held by kworker/u8:5/146: 5, last CPU#0:
[ 381.466668][ T37] #0: ffff888032e89138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 381.569811][ T37] #1: ffffc900040afc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 381.663381][ T37] #2: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: raw_spin_rq_lock_nested+0x2d/0x160
[ 381.698354][ T37] #3: ffff8880b8624548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790
[ 381.699376][ T37] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400
[ 381.876049][ T37] locks held by kworker/u8:6/150: 2, on CPU#0:
[ 381.877669][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 382.001839][ T37] #1: ffffc9000405fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 382.005814][ T37] locks held by kworker/u8:7/159: 3, last CPU#0:
[ 382.060145][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 382.184769][ T37] #1: ffffc900040ffc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 382.329870][ T37] #2: ffff888038bb08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[ 382.522680][ T37] locks held by kworker/u8:8/160: 5, last CPU#0:
[ 382.523937][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 382.583041][ T37] #1: ffffc9000419fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 382.665360][ T37] #2: ffff888038d8a310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0
[ 382.801248][ T37] #3: ffff88803b997520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0
[ 382.928538][ T37] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400
[ 383.046540][ T37] locks held by kworker/0:2/985: 3, last CPU#0:
[ 383.048484][ T37] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 383.049137][ T37] #1: ffffc90005d5fc40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 383.164173][ T37] #2: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[ 383.166291][ T37] locks held by kworker/u8:12/1035: 3, on CPU#1:
[ 383.166382][ T37] #0: ffff888031cdd938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 383.213505][ T37] #1: ffffc90006207c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 383.342514][ T37] #2: ffffffff8f5d1c38 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[ 383.369561][ T37] locks held by kworker/1:2/1239: 4, on CPU#1:
[ 383.381195][ T37] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 383.475649][ T37] #1: ffffc90006927c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 383.630779][ T37] #2: ffffffff8f5d1c38 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110
[ 383.631754][ T37] #3: ffff888038bb08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x1a1/0x1110
[ 383.810373][ T37] locks held by kworker/0:3/1841: 3, last CPU#0:
[ 383.810436][ T37] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 383.811050][ T37] #1: ffffc90007307c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 383.933286][ T37] #2: ffffffff8ed0cad8 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: rt_spin_lock+0x1e2/0x400
[ 383.998169][ T37] locks held by kworker/u8:14/3332: 5, last CPU#0:
[ 384.000325][ T37] #0: ffff88801aeb5938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 384.007278][ T37] #1: ffffc9000e867c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 384.007719][ T37] #2: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: blk_mq_run_hw_queue+0x265/0x520
[ 384.008600][ T37] #3: ffff8880270f15c0 (&virtscsi_vq->vq_lock){+.+.}-{3:3}, at: virtscsi_add_cmd+0xac/0x670
[ 384.009869][ T37] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400
[ 384.010249][ T37] locks held by kworker/u9:1/4900: 4, on CPU#1:
[ 384.010325][ T37] #0: ffff888031048138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 384.011018][ T37] #1: ffffc900106afc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 384.091842][ T37] #2: ffff88803b828f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0
[ 384.093961][ T37] #3: ffff88803b8280b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
[ 384.095014][ T37] locks held by klogd/4941: 2, last CPU#0:
[ 384.095234][ T37] #0: ffff8880359bd608 (&u->lock){+.+.}-{3:3}, at: unix_dgram_sendmsg+0x899/0x17b0
[ 384.096223][ T37] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400
[ 384.096738][ T37] locks held by getty/5336: 2, on CPU#0:
[ 384.096846][ T37] #0: ffff888028d660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 384.097843][ T37] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[ 384.098981][ T37] locks held by kworker/1:3/5621: 2, last CPU#1:
[ 384.099016][ T37] #0: ffff88823be0cf38 ((wq_completion)mm_percpu_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 384.099443][ T37] #1: ffffc90004b0fc40 ((work_completion)(&(({ do { const void *__vpp_verify = (typeof((&vmstat_work) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((&vmstat_work))) *)(( unsigned long)((&vmstat_work)))))((unsigned long)((__typeof_unqual__(*((&vmstat_work))) *)(( unsigned long)((&vmstat_work)))) + (((__per_cpu_offset[(cpu)]))))); }))->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 384.100232][ T37] locks held by kworker/0:4/5677: 3, last CPU#0:
[ 384.100383][ T37] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 384.101328][ T37] #1: ffffc90004c9fc40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 384.101698][ T37] #2: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: raw_spin_rq_lock_nested+0x2d/0x160
[ 384.264298][ T37] locks held by kworker/u9:2/5712: 6, on CPU#1:
[ 384.264329][ T37] #0: ffff88803f86b138 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 384.288782][ T37] #1: ffffc9000499fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 384.289708][ T37] #2: ffff88803b1b80b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950
[ 384.325545][ T37] #3: ffffffff8f754e18 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950
[ 384.326131][ T37] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420
[ 384.395571][ T37] #5: ffff8880b87241a0 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600
[ 384.396018][ T37] locks held by syz.0.17/5962: 4, last CPU#1:
[ 384.396118][ T37] #0: ffff88801abb0510 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 384.397169][ T37] #1: ffffffff8e237818 (event_mutex){+.+.}-{4:4}, at: ftrace_set_clr_event+0x3ba/0x5c0
[ 384.423890][ T37] #2: ffffffff8e226478 (tracepoints_mutex){+.+.}-{4:4}, at: tracepoint_probe_register+0x3f/0x90
[ 384.424769][ T37] #3: ffffffff8e051e70 (cpu_hotplug_lock){++++}-{0:0}, at: __static_call_update+0x9b/0x620
[ 384.448688][ T37] locks held by syz-executor/5968: 1, on CPU#0:
[ 384.448805][ T37] #0: ffff88802b1acf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[ 384.476845][ T37] locks held by kworker/u9:3/5980: 4, on CPU#1:
[ 384.477013][ T37] #0: ffff8880389f7138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 384.477334][ T37] #1: ffffc9000159fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 384.504615][ T37] #2: ffff88803d630f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0
[ 384.505117][ T37] #3: ffff88803d6300b0 (&hdev->lock){+.+.}-{4:4}, at: hci_update_scan_sync+0x211/0x4f0
[ 384.566895][ T37] locks held by dhcpcd/5985: 1, on CPU#1:
[ 384.567021][ T37] #0: ffff888026208358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90
[ 384.568202][ T37] locks held by dhcpcd/5986: 1, on CPU#0:
[ 384.568274][ T37] #0: ffff8880273d6358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90
[ 384.568609][ T37] locks held by dhcpcd/5989: 1, on CPU#1:
[ 384.568693][ T37] #0: ffff888039e94358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90
[ 384.620006][ T37] locks held by dhcpcd/5990: 1, on CPU#1:
[ 384.620068][ T37] #0: ffff8880285f2358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90
[ 384.620601][ T37] locks held by dhcpcd/5991: 1, on CPU#0:
[ 384.620711][ T37] #0: ffff8880286e0358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90
[ 384.621647][ T37] locks held by dhcpcd/5992: 1, on CPU#0:
[ 384.655406][ T37] #0: ffff88803f894358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90
[ 384.656347][ T37] locks held by udevd/5999: 1, last CPU#0:
[ 384.656386][
** replaying previous printk message **
[ 384.656386][ T37] #0: ffff88803d56d530 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0
[ 384.656862][ T37] locks held by modprobe/6000: 2, last CPU#0:
[ 384.696475][ T37] #0: ffff88803d56c7b0 (&mm->mmap_lock){++++}-{4:4}, at: __vm_munmap+0x163/0x3e0
[ 384.697089][ T37] #1: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[ 384.698711][ T37]
[ 384.698766][ T37] =============================================
[ 384.698766][ T37]
[ 384.698841][ T37] NMI backtrace for cpu 0
[ 384.698903][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 384.699002][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 384.699052][ T37] Call Trace:
[ 384.699166][ T37]
[ 384.699293][ T37] dump_stack_lvl+0xe8/0x150
[ 384.699881][ T37] nmi_cpu_backtrace+0x274/0x2d0
[ 384.700463][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 384.700718][ T37] nmi_trigger_cpumask_backtrace+0x17d/0x390
[ 384.701154][ T37] sys_info+0x135/0x170
[ 384.701481][ T37] watchdog+0xfd7/0x1030
[ 384.702441][ T37] ? watchdog+0x1c7/0x1030
[ 384.703649][ T37] kthread+0x38b/0x470
[ 384.703935][ T37] ? __pfx_watchdog+0x10/0x10
[ 384.704011][ T37] ? __pfx_kthread+0x10/0x10
[ 384.704386][ T37] ret_from_fork+0x514/0xb70
[ 384.705164][ T37] ? __pfx_ret_from_fork+0x10/0x10
[ 384.705507][ T37] ? __switch_to+0xc89/0x1420
[ 384.705897][ T37] ? __pfx_kthread+0x10/0x10
[ 384.706458][ T37] ret_from_fork_asm+0x1a/0x30
[ 384.708454][ T37]
[ 384.709291][ T37] Sending NMI from CPU 0 to CPUs 1:
[ 384.709465][ C1] NMI backtrace for cpu 1
[ 384.709539][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 384.709617][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 384.709684][ C1] RIP: 0010:io_serial_in+0x77/0xc0
[ 384.709977][ C1] Code: e8 8e f4 65 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f a3 d1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07
[ 384.710058][ C1] RSP: 0018:ffffc900001678b8 EFLAGS: 00000202
[ 384.710153][ C1] RAX: 1ffffffff33d2e00 RBX: 00000000000003fd RCX: 0000000000000000
[ 384.710195][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000
[ 384.710214][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[ 384.710237][ C1] R10: dffffc0000000000 R11: ffffffff856084e0 R12: dffffc0000000000
[ 384.710262][ C1] R13: 0000000000000000 R14: ffffffff99e97220 R15: 0000000000000000
[ 384.710289][ C1] FS: 0000000000000000(0000) GS:ffff888125cd6000(0000) knlGS:0000000000000000
[ 384.710320][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 384.710352][ C1] CR2: 000008fedeb27010 CR3: 0000000034c74000 CR4: 00000000003526f0
[ 384.710388][ C1] Call Trace:
[ 384.710439][ C1]
[ 384.710661][ C1] wait_for_lsr+0x190/0x300
[ 384.711320][ C1] __serial8250_console_fifo_write+0xd0/0x3f0
[ 384.712018][ C1] serial8250_console_write+0xac5/0x1230
[ 384.712221][ C1] ? ring_buffer_event_data+0x94/0x100
[ 384.712860][ C1] ? __pfx_serial8250_console_write+0x10/0x10
[ 384.713584][ C1] ? trace_event_raw_event_lock_acquire+0x1f7/0x2e0
[ 384.714272][ C1] nbcon_emit_next_record+0xef5/0x1a90
[ 384.715248][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10
[ 384.715968][ C1] ? nbcon_context_try_acquire+0x819/0xbd0
[ 384.717395][ C1] nbcon_kthread_func+0x679/0x880
[ 384.718284][ C1] ? nbcon_kthread_func+0x163/0x880
[ 384.718372][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10
[ 384.719009][ C1] ? __kthread_parkme+0x71/0x1f0
[ 384.719501][ C1] ? __kthread_parkme+0x199/0x1f0
[ 384.719898][ C1] kthread+0x38b/0x470
[ 384.720245][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10
[ 384.720392][ C1] ? __pfx_kthread+0x10/0x10
[ 384.720760][ C1] ret_from_fork+0x514/0xb70
[ 384.721065][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 384.721375][ C1] ? __switch_to+0xc89/0x1420
[ 384.721953][ C1] ? __pfx_kthread+0x10/0x10
[ 384.722172][ C1] ret_from_fork_asm+0x1a/0x30
[ 384.723465][ C1]
[ 385.086297][ T37] Kernel panic - not syncing: hung_task: blocked tasks
[ 385.494783][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 385.504447][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 385.514550][ T37] Call Trace:
[ 385.517911][ T37]
[ 385.520934][ T37] vpanic+0x56d/0xa60
[ 385.525272][ T37] ? __pfx___schedule+0x10/0x10
[ 385.530540][ T37] ? __pfx_vpanic+0x10/0x10
[ 385.536306][ T37] panic+0xc5/0xd0
[ 385.540390][ T37] ? __pfx_panic+0x10/0x10
[ 385.544974][ T37] ? preempt_schedule_common+0x7f/0xd0
[ 385.550981][ T37] ? preempt_schedule_thunk+0x16/0x40
[ 385.556670][ T37] ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[ 385.563204][ T37] ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[ 385.570431][ T37] watchdog+0x1030/0x1030
[ 385.575560][ T37] ? watchdog+0x1c7/0x1030
[ 385.581130][ T37] kthread+0x38b/0x470
[ 385.585494][ T37] ? __pfx_watchdog+0x10/0x10
[ 385.590268][ T37] ? __pfx_kthread+0x10/0x10
[ 385.595453][ T37] ret_from_fork+0x514/0xb70
[ 385.600944][ T37] ? __pfx_ret_from_fork+0x10/0x10
[ 385.606198][ T37] ? __switch_to+0xc89/0x1420
[ 385.611449][ T37] ? __pfx_kthread+0x10/0x10
[ 385.616736][ T37] ret_from_fork_asm+0x1a/0x30
[ 385.623243][ T37]
[ 385.626658][ T37] Kernel Offset: disabled
[ 385.631034][ T37] Rebooting in 86400 seconds..