Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. 2026/08/06 13:16:48 parsed 1 programs 2026/08/06 13:16:48 serving rpc on tcp://37309 [ 81.910985][ T4283] cgroup: Unknown subsys name 'net' [ 82.020283][ T4283] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.630726][ T4283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 87.026025][ T4325] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.033794][ T4325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.041582][ T4325] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.057778][ T4325] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.065549][ T4325] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.072956][ T4325] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.876173][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 87.941715][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.951258][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.960555][ T4341] device bridge_slave_0 entered promiscuous mode [ 87.979730][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.987047][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.996718][ T4341] device bridge_slave_1 entered promiscuous mode [ 88.020809][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.032408][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.056092][ T4341] team0: Port device team_slave_0 added [ 88.063860][ T4341] team0: Port device team_slave_1 added [ 88.082969][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.090043][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.116071][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.128688][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.135731][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.162100][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.202796][ T4341] device hsr_slave_0 entered promiscuous mode [ 88.209737][ T4341] device hsr_slave_1 entered promiscuous mode [ 88.331000][ T4341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.341270][ T4341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.352165][ T4341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.362197][ T4341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.451593][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.466528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 88.478962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.488017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.511892][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.522929][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.532494][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.542700][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.550071][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.576017][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.584866][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.595958][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.606259][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.613448][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.636469][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.646829][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.660466][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.672318][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.692933][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.704887][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.928974][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.937871][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.953212][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.971563][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.993744][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.002457][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.010553][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.021890][ T4341] device veth0_vlan entered promiscuous mode [ 89.036036][ T4341] device veth1_vlan entered promiscuous mode [ 89.058501][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.067664][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.078637][ T4341] device veth0_macvtap entered promiscuous mode [ 89.089463][ T4341] device veth1_macvtap entered promiscuous mode [ 89.105733][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.113205][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.121711][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.131125][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.139827][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.155714][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.165106][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.174043][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.185332][ T4341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.195305][ T4341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.205535][ T4341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.214704][ T4341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.338062][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.836700][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.847378][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.860534][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.881221][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.889405][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.898104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/08/06 13:16:59 executed programs: 0 [ 90.433939][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.441718][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.450673][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.459206][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.467869][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.476883][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.607016][ T4381] chnl_net:caif_netlink_parms(): no params data found [ 90.661005][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.668465][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.676695][ T4381] device bridge_slave_0 entered promiscuous mode [ 90.685548][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.692684][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.701075][ T4381] device bridge_slave_1 entered promiscuous mode [ 90.724572][ T4381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.735654][ T4381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.761434][ T4381] team0: Port device team_slave_0 added [ 90.769310][ T4381] team0: Port device team_slave_1 added [ 90.789106][ T4381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.796544][ T4381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.822740][ T4381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.835798][ T4381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.842767][ T4381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.869070][ T4381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.901610][ T4381] device hsr_slave_0 entered promiscuous mode [ 90.908350][ T4381] device hsr_slave_1 entered promiscuous mode [ 90.915147][ T4381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.923046][ T4381] Cannot create hsr debugfs directory [ 91.695480][ T7] cfg80211: failed to load regulatory.db [ 92.100650][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.504354][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 94.283911][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.356860][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.573827][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 95.172127][ T4381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.183930][ T4381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.194083][ T4381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.210523][ T30] device hsr_slave_0 left promiscuous mode [ 95.226416][ T30] device hsr_slave_1 left promiscuous mode [ 95.233167][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.243427][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.252289][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.262063][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.270165][ T30] device bridge_slave_1 left promiscuous mode [ 95.277995][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.290054][ T30] device bridge_slave_0 left promiscuous mode [ 95.297432][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.323495][ T30] device veth1_macvtap left promiscuous mode [ 95.330369][ T30] device veth0_macvtap left promiscuous mode [ 95.337553][ T30] device veth1_vlan left promiscuous mode [ 95.343885][ T30] device veth0_vlan left promiscuous mode [ 95.755365][ T30] team0 (unregistering): Port device team_slave_1 removed [ 95.783614][ T30] team0 (unregistering): Port device team_slave_0 removed [ 95.808957][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.836584][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.019389][ T30] bond0 (unregistering): Released all slaves [ 96.082638][ T4381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.156012][ T4381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.169033][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.178852][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.203841][ T4381] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.213398][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.224888][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.233315][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.240496][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.248540][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.259806][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.269188][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.277809][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.284957][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.299713][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.326987][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.336353][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.346997][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.355962][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.375173][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.385058][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.396735][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.406154][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.422127][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.431815][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.441435][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.653860][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 96.682993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.690853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.705822][ T4381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.728987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.738287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.765684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.775756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.785705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.793603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.802432][ T4381] device veth0_vlan entered promiscuous mode [ 96.813888][ T4381] device veth1_vlan entered promiscuous mode [ 96.839142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.848239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.857002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.866980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.878021][ T4381] device veth0_macvtap entered promiscuous mode [ 96.897453][ T4381] device veth1_macvtap entered promiscuous mode [ 96.925589][ T4381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.932901][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.943420][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.951816][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.960957][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.991839][ T4381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.999899][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.012889][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.027797][ T4381] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.037010][ T4381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.047454][ T4381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.060611][ T4381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.193281][ T4425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.214787][ T4425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.235146][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/08/06 13:17:06 executed programs: 2 [ 97.279586][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.287673][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.296361][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.735301][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 132.665515][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.672050][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.095394][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.101756][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.653663][ T4325] Bluetooth: hci0: command 0x0406 tx timeout [ 245.303958][ T28] INFO: task syz.0.207:4616 blocked for more than 143 seconds. [ 245.311751][ T28] Not tainted syzkaller #0 [ 245.316929][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.325821][ T28] task:syz.0.207 state:D stack:27632 pid:4616 ppid:4381 flags:0x00004004 [ 245.335196][ T28] Call Trace: [ 245.338508][ T28] [ 245.341445][ T28] __schedule+0x107f/0x4030 [ 245.346057][ T28] ? mark_lock+0x94/0x320 [ 245.350439][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 245.355543][ T28] ? __sched_text_start+0x8/0x8 [ 245.360437][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 245.366404][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 245.371682][ T28] schedule+0xb9/0x180 [ 245.375830][ T28] io_schedule+0x7c/0xd0 [ 245.380117][ T28] bit_wait_io+0xd/0xc0 [ 245.384347][ T28] __wait_on_bit+0x9b/0x2c0 [ 245.389095][ T28] ? bit_wait+0xc0/0xc0 [ 245.393486][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 245.399077][ T28] ? bit_wait+0xc0/0xc0 [ 245.403276][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 245.408161][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 245.413242][ T28] ? bit_waitqueue+0x30/0x30 [ 245.417939][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 245.423175][ T28] do_get_write_access+0x605/0xf20 [ 245.428379][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 245.434476][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 245.440654][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 245.446888][ T28] ? rcu_is_watching+0x11/0xa0 [ 245.451706][ T28] ext4_reserve_inode_write+0x201/0x290 [ 245.457568][ T28] __ext4_mark_inode_dirty+0x161/0x760 [ 245.463122][ T28] ext4_dirty_inode+0xbf/0x100 [ 245.467970][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 245.473841][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 245.478900][ T28] __file_update_time+0x21d/0x240 [ 245.484011][ T28] file_update_time+0x2f3/0x370 [ 245.489001][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 245.494390][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 245.499627][ T28] ? pte_alloc_one+0x287/0x310 [ 245.504514][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 245.510806][ T28] do_page_mkwrite+0x16b/0x5c0 [ 245.515694][ T28] handle_mm_fault+0x199c/0x3d40 [ 245.520677][ T28] ? mt_find+0x157/0x830 [ 245.525028][ T28] ? numa_migrate_prep+0x250/0x250 [ 245.530375][ T28] ? lock_chain_count+0x20/0x20 [ 245.535403][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 245.540728][ T28] do_user_addr_fault+0x58e/0xb20 [ 245.545921][ T28] exc_page_fault+0x60/0x100 [ 245.550617][ T28] ? clear_bhb_loop+0x60/0xb0 [ 245.555392][ T28] asm_exc_page_fault+0x22/0x30 [ 245.560310][ T28] RIP: 0033:0x7f1bf186ba23 [ 245.564940][ T28] RSP: 002b:00007ffe23d52380 EFLAGS: 00010246 [ 245.571057][ T28] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 245.579334][ T28] RDX: 0000001b2e824000 RSI: 0000000000040000 RDI: 00007f1bf1be0708 [ 245.587410][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.595453][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 245.603646][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe23d52610 [ 245.611670][ T28] [ 245.614913][ T28] [ 245.614913][ T28] Showing all locks held in the system: [ 245.622693][ T28] 1 lock held by rcu_tasks_kthre/12: [ 245.628101][ T28] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 245.638758][ T28] 1 lock held by rcu_tasks_trace/13: [ 245.644121][ T28] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 245.655278][ T28] 1 lock held by khungtaskd/28: [ 245.660166][ T28] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 245.670332][ T28] 6 locks held by kworker/u4:3/47: [ 245.675532][ T28] #0: ffff88801ae80938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 245.686251][ T28] #1: ffffc90000b87d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 245.698283][ T28] #2: ffff88807f6620e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 245.708503][ T28] #3: ffff88807f664c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 245.719204][ T28] #4: ffff88807f666990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 245.728980][ T28] #5: ffff888074340c90 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90 [ 245.738843][ T28] 2 locks held by getty/4029: [ 245.743592][ T28] #0: ffff88814d732098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 245.753477][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 245.763833][ T28] 3 locks held by syz.0.207/4616: [ 245.768893][ T28] #0: ffff88807a1144d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 245.778941][ T28] #1: ffff88807f662558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 245.788792][ T28] #2: ffff88807f666990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 245.798588][ T28] [ 245.800950][ T28] ============================================= [ 245.800950][ T28] [ 245.809622][ T28] NMI backtrace for cpu 0 [ 245.814004][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 245.821224][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.831285][ T28] Call Trace: [ 245.834604][ T28] [ 245.837558][ T28] dump_stack_lvl+0x188/0x24e [ 245.842258][ T28] ? irq_work_queue+0xb8/0x140 [ 245.847068][ T28] ? show_regs_print_info+0x12/0x12 [ 245.852290][ T28] ? load_image+0x410/0x410 [ 245.856814][ T28] ? vprintk_emit+0x59f/0x6a0 [ 245.861589][ T28] ? printk_sprint+0x460/0x460 [ 245.866374][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 245.871329][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 245.877499][ T28] ? _printk+0xda/0x130 [ 245.881664][ T28] ? load_image+0x410/0x410 [ 245.886178][ T28] ? load_image+0x410/0x410 [ 245.890689][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 245.896773][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 245.902853][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 245.908858][ T28] watchdog+0xf0e/0xf50 [ 245.913042][ T28] ? watchdog+0x1ed/0xf50 [ 245.917404][ T28] kthread+0x29d/0x330 [ 245.921491][ T28] ? hungtask_pm_notify+0x40/0x40 [ 245.926544][ T28] ? kthread_blkcg+0xd0/0xd0 [ 245.931164][ T28] ret_from_fork+0x1f/0x30 [ 245.935614][ T28] [ 245.938896][ T28] Sending NMI from CPU 0 to CPUs 1: [ 245.944321][ C1] NMI backtrace for cpu 1 [ 245.944331][ C1] CPU: 1 PID: 3620 Comm: syslogd Not tainted syzkaller #0 [ 245.944346][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.944355][ C1] RIP: 0010:unwind_next_frame+0x1ef/0x1fd0 [ 245.944380][ C1] Code: 00 00 45 8b 45 00 41 ff c0 4b 8d 04 64 48 8d 94 00 64 f5 9a 8e 4b 8d 04 40 48 8d 84 00 64 f5 9a 8e 48 3d 9c de 3f 8f 0f 97 c0 <48> 81 fa 9c de 3f 8f 0f 83 67 16 00 00 84 c0 0f 85 69 16 00 00 45 [ 245.944393][ C1] RSP: 0018:ffffc90003277540 EFLAGS: 00000283 [ 245.944407][ C1] RAX: ffffffff8f18a100 RBX: ffffc900032775e8 RCX: ffffffff96c17100 [ 245.944420][ C1] RDX: ffffffff8f18a1b2 RSI: 000000000009607a RDI: ffffffff8138fb37 [ 245.944432][ C1] RBP: dffffc0000000000 R08: 000000000014f214 R09: 0000000000000006 [ 245.944442][ C1] R10: dffffc0000000000 R11: fffff5200064eec9 R12: 000000000014f20d [ 245.944454][ C1] R13: ffffffff8f5c9018 R14: ffffffff882c5e19 R15: 0000000000072c5e [ 245.944465][ C1] FS: 00007f0bbffbac80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 245.944479][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.944490][ C1] CR2: 000055c13c50c168 CR3: 000000007f509000 CR4: 00000000003506e0 [ 245.944505][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 245.944514][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 245.944523][ C1] Call Trace: [ 245.944528][ C1] [ 245.944536][ C1] ? sock_read_iter+0x2da/0x3a0 [ 245.944555][ C1] ? stack_trace_save+0xf0/0xf0 [ 245.944576][ C1] arch_stack_walk+0x10c/0x140 [ 245.944598][ C1] ? sock_read_iter+0x2da/0x3a0 [ 245.944615][ C1] stack_trace_save+0xa6/0xf0 [ 245.944635][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 245.944655][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 245.944676][ C1] ? __unix_dgram_recvmsg+0x9f9/0xd90 [ 245.944694][ C1] ? sock_read_iter+0x2da/0x3a0 [ 245.944708][ C1] ? vfs_read+0x471/0x960 [ 245.944734][ C1] kasan_set_track+0x4b/0x70 [ 245.944755][ C1] ? kasan_set_track+0x4b/0x70 [ 245.944776][ C1] ? kasan_save_free_info+0x27/0x40 [ 245.944790][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 245.944812][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 245.944832][ C1] ? kmem_cache_free+0xf7/0x2a0 [ 245.944848][ C1] ? __unix_dgram_recvmsg+0x9f9/0xd90 [ 245.944865][ C1] ? sock_read_iter+0x2da/0x3a0 [ 245.944900][ C1] ? skb_release_data+0x5e9/0x7e0 [ 245.944923][ C1] ? kmem_cache_free+0xf7/0x2a0 [ 245.944940][ C1] kasan_save_free_info+0x27/0x40 [ 245.944955][ C1] ____kasan_slab_free+0x126/0x1f0 [ 245.944979][ C1] slab_free_freelist_hook+0x133/0x1b0 [ 245.945001][ C1] ? __unix_dgram_recvmsg+0x9f9/0xd90 [ 245.945019][ C1] kmem_cache_free+0xf7/0x2a0 [ 245.945039][ C1] __unix_dgram_recvmsg+0x9f9/0xd90 [ 245.945067][ C1] ? unix_unhash+0x10/0x10 [ 245.945086][ C1] ? aa_af_perm+0x340/0x340 [ 245.945103][ C1] ? aa_file_perm+0x3ea/0xf00 [ 245.945129][ C1] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 245.945145][ C1] ? security_socket_recvmsg+0x85/0xb0 [ 245.945166][ C1] ? unix_dgram_recvmsg+0xa9/0xd0 [ 245.945188][ C1] sock_read_iter+0x2da/0x3a0 [ 245.945204][ C1] ? kernel_sock_ip_overhead+0x590/0x590 [ 245.945225][ C1] ? common_file_perm+0x171/0x1c0 [ 245.945251][ C1] vfs_read+0x471/0x960 [ 245.945276][ C1] ? kernel_read+0x1e0/0x1e0 [ 245.945298][ C1] ? rcu_is_watching+0x11/0xa0 [ 245.945330][ C1] ? __fdget_pos+0x1d4/0x360 [ 245.945355][ C1] ksys_read+0x14d/0x260 [ 245.945379][ C1] ? vfs_write+0x9a0/0x9a0 [ 245.945404][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 245.945422][ C1] do_syscall_64+0x4c/0xa0 [ 245.945443][ C1] ? clear_bhb_loop+0x60/0xb0 [ 245.945465][ C1] ? clear_bhb_loop+0x60/0xb0 [ 245.945487][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.945507][ C1] RIP: 0033:0x7f0bc010a407 [ 245.945519][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 245.945532][ C1] RSP: 002b:00007ffd06ebca40 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 245.945547][ C1] RAX: ffffffffffffffda RBX: 00007f0bbffbac80 RCX: 00007f0bc010a407 [ 245.945563][ C1] RDX: 00000000000000ff RSI: 0000563e333b3950 RDI: 0000000000000000 [ 245.945573][ C1] RBP: 0000563e333b3910 R08: 0000000000000000 R09: 0000000000000000 [ 245.945583][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563e333b399e [ 245.945593][ C1] R13: 0000000000000000 R14: 0000563e333b3950 R15: 0000563e0fe8cd98 [ 245.945610][ C1] [ 245.947557][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 246.395807][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 246.403053][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.413128][ T28] Call Trace: [ 246.416427][ T28] [ 246.419400][ T28] dump_stack_lvl+0x188/0x24e [ 246.424129][ T28] ? memcpy+0x3c/0x60 [ 246.428148][ T28] ? show_regs_print_info+0x12/0x12 [ 246.433371][ T28] ? load_image+0x410/0x410 [ 246.437914][ T28] panic+0x2d3/0x710 [ 246.441830][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 246.447491][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 246.452018][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 246.457597][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 246.463787][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 246.469969][ T28] watchdog+0xf4d/0xf50 [ 246.474153][ T28] ? watchdog+0x1ed/0xf50 [ 246.478522][ T28] kthread+0x29d/0x330 [ 246.482616][ T28] ? hungtask_pm_notify+0x40/0x40 [ 246.487666][ T28] ? kthread_blkcg+0xd0/0xd0 [ 246.492277][ T28] ret_from_fork+0x1f/0x30 [ 246.496730][ T28] [ 246.500343][ T28] Kernel Offset: disabled [ 246.504676][ T28] Rebooting in 86400 seconds..