Warning: Permanently added '10.128.1.110' (ED25519) to the list of known hosts.
2026/08/16 16:14:45 parsed 1 programs
2026/08/16 16:14:45 serving rpc on tcp://34745
[ 170.608429][ T5810] cgroup: Unknown subsys name 'net'
[ 170.740496][ T5810] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 172.197539][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 176.004756][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 176.013060][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 176.029644][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 176.038014][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 176.046542][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 176.056111][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 176.311164][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 176.323689][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 176.362022][ T224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 176.369943][ T224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 176.622148][ T5879] chnl_net:caif_netlink_parms(): no params data found
[ 176.679968][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[ 176.688132][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[ 176.695426][ T5879] bridge_slave_0: entered allmulticast mode
[ 176.702206][ T5879] bridge_slave_0: entered promiscuous mode
[ 176.711077][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[ 176.718331][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[ 176.725798][ T5879] bridge_slave_1: entered allmulticast mode
[ 176.732761][ T5879] bridge_slave_1: entered promiscuous mode
[ 176.768131][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 176.779297][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 176.822317][ T5879] team0: Port device team_slave_0 added
[ 176.829976][ T5879] team0: Port device team_slave_1 added
[ 176.850010][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 176.857431][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 176.884068][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 176.896906][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 176.904893][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 176.931652][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 176.974606][ T5879] hsr_slave_0: entered promiscuous mode
[ 176.981099][ T5879] hsr_slave_1: entered promiscuous mode
[ 177.118363][ T5879] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 177.141809][ T5879] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 177.151968][ T5879] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 177.164212][ T5879] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 177.207867][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[ 177.215125][ T5879] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 177.222947][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[ 177.230144][ T5879] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 177.292593][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[ 177.311092][ T224] bridge0: port 1(bridge_slave_0) entered disabled state
[ 177.325527][ T224] bridge0: port 2(bridge_slave_1) entered disabled state
[ 177.341398][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[ 177.361079][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 177.368239][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 177.386182][ T224] bridge0: port 2(bridge_slave_1) entered blocking state
[ 177.393427][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 177.624069][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 177.676789][ T5879] veth0_vlan: entered promiscuous mode
[ 177.689867][ T5879] veth1_vlan: entered promiscuous mode
[ 177.735970][ T5879] veth0_macvtap: entered promiscuous mode
[ 177.749292][ T5879] veth1_macvtap: entered promiscuous mode
[ 177.771173][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 177.787431][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 177.800535][ T5879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 177.810517][ T5879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 177.819937][ T5879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 177.829018][ T5879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 177.958530][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/08/16 16:14:54 executed programs: 0
[ 178.694205][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 178.702387][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 178.710417][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 178.719420][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 178.729084][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 178.736624][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 178.860042][ T5914] chnl_net:caif_netlink_parms(): no params data found
[ 178.917790][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state
[ 178.925935][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state
[ 178.933122][ T5914] bridge_slave_0: entered allmulticast mode
[ 178.940117][ T5914] bridge_slave_0: entered promiscuous mode
[ 178.948557][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state
[ 178.955850][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state
[ 178.962987][ T5914] bridge_slave_1: entered allmulticast mode
[ 178.970328][ T5914] bridge_slave_1: entered promiscuous mode
[ 179.000064][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 179.011941][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 179.044668][ T5914] team0: Port device team_slave_0 added
[ 179.053419][ T5914] team0: Port device team_slave_1 added
[ 179.079957][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 179.087345][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 179.114338][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 179.127446][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 179.134471][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 179.160598][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 179.205075][ T5914] hsr_slave_0: entered promiscuous mode
[ 179.211993][ T5914] hsr_slave_1: entered promiscuous mode
[ 179.218511][ T5914] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 179.226486][ T5914] Cannot create hsr debugfs directory
[ 180.376415][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 180.755512][ T5088] Bluetooth: hci0: command tx timeout
[ 182.833942][ T5088] Bluetooth: hci0: command tx timeout
[ 182.930091][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 182.975587][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 183.860122][ T5914] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 183.870265][ T5914] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 183.879540][ T5914] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 183.890746][ T5914] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 183.912616][ T62] hsr_slave_0: left promiscuous mode
[ 183.918696][ T62] hsr_slave_1: left promiscuous mode
[ 183.925209][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 183.932676][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 183.940877][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 183.949288][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 183.960984][ T62] bridge_slave_1: left allmulticast mode
[ 183.967123][ T62] bridge_slave_1: left promiscuous mode
[ 183.973553][ T62] bridge0: port 2(bridge_slave_1) entered disabled state
[ 183.985114][ T62] bridge_slave_0: left allmulticast mode
[ 183.990797][ T62] bridge_slave_0: left promiscuous mode
[ 183.997892][ T62] bridge0: port 1(bridge_slave_0) entered disabled state
[ 184.016605][ T62] veth1_macvtap: left promiscuous mode
[ 184.022385][ T62] veth0_macvtap: left promiscuous mode
[ 184.028840][ T62] veth1_vlan: left promiscuous mode
[ 184.034792][ T62] veth0_vlan: left promiscuous mode
[ 184.427801][ T62] team0 (unregistering): Port device team_slave_1 removed
[ 184.459599][ T62] team0 (unregistering): Port device team_slave_0 removed
[ 184.490592][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 184.524166][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 184.740252][ T62] bond0 (unregistering): Released all slaves
[ 184.867034][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0
[ 184.885515][ T5914] 8021q: adding VLAN 0 to HW filter on device team0
[ 184.906693][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 184.913914][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 184.927389][ T5088] Bluetooth: hci0: command tx timeout
[ 184.938444][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state
[ 184.945615][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 184.997702][ T5914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 185.162827][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 185.198247][ T5914] veth0_vlan: entered promiscuous mode
[ 185.210071][ T5914] veth1_vlan: entered promiscuous mode
[ 185.242555][ T5914] veth0_macvtap: entered promiscuous mode
[ 185.280369][ T5914] veth1_macvtap: entered promiscuous mode
[ 185.307357][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 185.328501][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 185.347660][ T5914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 185.356572][ T5914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 185.366253][ T5914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 185.375280][ T5914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 185.449167][ T224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 185.461856][ T224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/08/16 16:15:01 executed programs: 2
[ 185.496280][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 185.504967][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 186.999178][ T5088] Bluetooth: hci0: command tx timeout
2026/08/16 16:15:06 executed programs: 209
[ 194.516361][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 194.522889][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 255.955419][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 255.961737][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 304.113314][ T51] Bluetooth: hci0: command 0x0406 tx timeout
[ 317.395884][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 317.402240][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 334.033418][ T29] INFO: task syz.0.225:6165 blocked for more than 143 seconds.
[ 334.041374][ T29] Not tainted syzkaller #0
[ 334.046485][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 334.055274][ T29] task:syz.0.225 state:D stack:27536 pid:6165 ppid:5914 flags:0x00004004
[ 334.064577][ T29] Call Trace:
[ 334.067855][ T29]
[ 334.070798][ T29] __schedule+0x15ae/0x4660
[ 334.075460][ T29] ? mark_lock+0x94/0x320
[ 334.079815][ T29] ? asan.module_dtor+0x20/0x20
[ 334.084764][ T29] ? __lock_acquire+0x7d80/0x7d80
[ 334.090111][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 334.096094][ T29] ? lockdep_hardirqs_on+0x98/0x150
[ 334.101351][ T29] schedule+0xbd/0x170
[ 334.105560][ T29] io_schedule+0x80/0xd0
[ 334.110058][ T29] bit_wait_io+0x11/0xd0
[ 334.114468][ T29] __wait_on_bit+0x9f/0x2c0
[ 334.119004][ T29] ? bit_wait+0xd0/0xd0
[ 334.123247][ T29] out_of_line_wait_on_bit+0x13c/0x190
[ 334.128780][ T29] ? bit_wait+0xd0/0xd0
[ 334.132934][ T29] ? __wait_on_bit+0x2c0/0x2c0
[ 334.137902][ T29] ? do_raw_spin_lock+0x11f/0x2b0
[ 334.143174][ T29] ? bit_waitqueue+0x30/0x30
[ 334.147989][ T29] ? do_raw_spin_unlock+0x121/0x230
[ 334.153653][ T29] do_get_write_access+0x5c9/0xe00
[ 334.158816][ T29] jbd2_journal_get_write_access+0x10c/0x140
[ 334.164951][ T29] __ext4_journal_get_write_access+0x208/0x6d0
[ 334.171152][ T29] ? __ext4_journal_ensure_credits+0x450/0x450
[ 334.177951][ T29] ? __might_sleep+0xe0/0xe0
[ 334.182575][ T29] ext4_reserve_inode_write+0x205/0x2a0
[ 334.188193][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0
[ 334.193797][ T29] ext4_dirty_inode+0xcb/0x110
[ 334.198623][ T29] ? __ext4_expand_extra_isize+0x400/0x400
[ 334.204524][ T29] __mark_inode_dirty+0x2cc/0xc90
[ 334.209858][ T29] file_update_time+0x187/0x1a0
[ 334.214865][ T29] ext4_page_mkwrite+0x1f9/0x11a0
[ 334.220080][ T29] ? filemap_fault+0x103c/0x1540
[ 334.225206][ T29] ? mapping_seek_hole_data+0x1330/0x1330
[ 334.230974][ T29] ? pte_alloc_one+0x3b6/0x540
[ 334.235827][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[ 334.242234][ T29] ? __lock_acquire+0x7d80/0x7d80
[ 334.247360][ T29] do_page_mkwrite+0x153/0x3f0
[ 334.252343][ T29] handle_mm_fault+0x1a2c/0x4a50
[ 334.257388][ T29] ? handle_mm_fault+0xe6/0x4a50
[ 334.262357][ T29] ? numa_migrate_prep+0x350/0x350
[ 334.267620][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0
[ 334.272947][ T29] do_user_addr_fault+0x736/0x12d0
[ 334.278261][ T29] exc_page_fault+0x64/0x100
[ 334.282881][ T29] ? clear_bhb_loop+0x40/0x90
[ 334.287618][ T29] asm_exc_page_fault+0x26/0x30
[ 334.292495][ T29] RIP: 0033:0x7f3d87e6ba23
[ 334.296985][ T29] RSP: 002b:00007fffec0e61b0 EFLAGS: 00010246
[ 334.303233][ T29] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000
[ 334.312005][ T29] RDX: 0000001b2e524000 RSI: 0000000000040000 RDI: 00007f3d881e0708
[ 334.320319][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 334.328370][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 334.337072][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffec0e6440
[ 334.345307][ T29]
[ 334.348374][ T29]
[ 334.348374][ T29] Showing all locks held in the system:
[ 334.356209][ T29] 1 lock held by khungtaskd/29:
[ 334.361071][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[ 334.371048][ T29] 6 locks held by kworker/u4:6/224:
[ 334.376325][ T29] #0: ffff888142655938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 334.387731][ T29] #1: ffffc90002f4fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 334.400291][ T29] #2: ffff88814dace0e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0
[ 334.410891][ T29] #3: ffff888031b28c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[ 334.421455][ T29] #4: ffff888031b2a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[ 334.431216][ T29] #5: ffff88807724f088 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90
[ 334.441145][ T29] 2 locks held by getty/5528:
[ 334.446149][ T29] #0: ffff8880319900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 334.456011][ T29] #1: ffffc900032832f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[ 334.466218][ T29] 3 locks held by syz.0.225/6165:
[ 334.471255][ T29] #0: ffff888017c6e0a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[ 334.481257][ T29] #1: ffff88814dace510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[ 334.491083][ T29] #2: ffff888031b2a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[ 334.500911][ T29]
[ 334.503318][ T29] =============================================
[ 334.503318][ T29]
[ 334.511755][ T29] NMI backtrace for cpu 1
[ 334.516184][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 334.523373][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 334.533437][ T29] Call Trace:
[ 334.536710][ T29]
[ 334.539633][ T29] dump_stack_lvl+0x18c/0x250
[ 334.544314][ T29] ? __wake_up_klogd+0xd9/0x100
[ 334.549187][ T29] ? show_regs_print_info+0x20/0x20
[ 334.554381][ T29] ? load_image+0x420/0x420
[ 334.558893][ T29] nmi_cpu_backtrace+0x3a6/0x3e0
[ 334.563840][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[ 334.569984][ T29] ? load_image+0x420/0x420
[ 334.574475][ T29] ? wq_watchdog_touch+0xef/0x170
[ 334.579505][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 334.586203][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[ 334.592193][ T29] watchdog+0xf59/0xfa0
[ 334.596355][ T29] ? watchdog+0x1e1/0xfa0
[ 334.600699][ T29] kthread+0x2fa/0x390
[ 334.604762][ T29] ? hungtask_pm_notify+0x50/0x50
[ 334.609784][ T29] ? kthread_blkcg+0xd0/0xd0
[ 334.614367][ T29] ret_from_fork+0x48/0x80
[ 334.618782][ T29] ? kthread_blkcg+0xd0/0xd0
[ 334.623368][ T29] ret_from_fork_asm+0x11/0x20
[ 334.628135][ T29]
[ 334.631525][ T29] Sending NMI from CPU 1 to CPUs 0:
[ 334.636854][ C0] NMI backtrace for cpu 0
[ 334.636864][ C0] CPU: 0 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0
[ 334.636879][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 334.636888][ C0] Workqueue: events_unbound cfg80211_wiphy_work
[ 334.636911][ C0] RIP: 0010:fs_reclaim_acquire+0xe/0x100
[ 334.636929][ C0] Code: 48 89 fe 48 c7 c7 40 6e 21 8d e9 0d 48 95 ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 55 53 65 48 8b 1d 42 f8 2f 7e <48> 83 c3 2c 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f
[ 334.636941][ C0] RSP: 0018:ffffc90000b2f500 EFLAGS: 00000202
[ 334.636953][ C0] RAX: 23f2dc4601a78e00 RBX: ffff8880196a9e00 RCX: 0000000000000001
[ 334.636969][ C0] RDX: ffffc90000b2f570 RSI: 0000000000000000 RDI: 0000000000000920
[ 334.636978][ C0] RBP: 0000000000000920 R08: 0000000000000920 R09: 0000000000000000
[ 334.636987][ C0] R10: ffffc90000b2fa50 R11: fffff52000165f4e R12: 0000000000000000
[ 334.636997][ C0] R13: 00000000ffffffff R14: ffff888017c41dc0 R15: 0000000000000001
[ 334.637008][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 334.637020][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 334.637030][ C0] CR2: 0000555dc9375168 CR3: 000000000cf32000 CR4: 00000000003506f0
[ 334.637044][ C0] Call Trace:
[ 334.637050][ C0]
[ 334.637056][ C0] slab_pre_alloc_hook+0x2a/0x300
[ 334.637080][ C0] ? ieee802_11_parse_elems_full+0xb9/0x20c0
[ 334.637097][ C0] ? ieee802_11_parse_elems_full+0xb9/0x20c0
[ 334.637112][ C0] __kmem_cache_alloc_node+0x53/0x250
[ 334.637136][ C0] ? ieee802_11_parse_elems_full+0xb9/0x20c0
[ 334.637151][ C0] __kmalloc+0xa7/0x240
[ 334.637174][ C0] ieee802_11_parse_elems_full+0xb9/0x20c0
[ 334.637192][ C0] ? trace_raw_output_contention_end+0xd0/0xd0
[ 334.637210][ C0] ? rcu_is_watching+0x15/0xb0
[ 334.637229][ C0] ? trace_contention_end+0x39/0xe0
[ 334.637265][ C0] ? __mutex_lock+0x30d/0xc80
[ 334.637288][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x123/0x2dc0
[ 334.637307][ C0] ? mutex_lock_nested+0x20/0x20
[ 334.637327][ C0] ? ieee80211_queue_delayed_work+0x150/0x150
[ 334.637347][ C0] ieee80211_ibss_rx_queued_mgmt+0x4b7/0x2dc0
[ 334.637366][ C0] ? verify_lock_unused+0x140/0x140
[ 334.637384][ C0] ? verify_lock_unused+0x140/0x140
[ 334.637406][ C0] ? ieee80211_ibss_rx_no_sta+0x790/0x790
[ 334.637428][ C0] ? mark_lock+0x94/0x320
[ 334.637445][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 334.637462][ C0] ? __lock_acquire+0x7d80/0x7d80
[ 334.637479][ C0] ? lock_chain_count+0x20/0x20
[ 334.637494][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 334.637519][ C0] ? lockdep_hardirqs_on+0x98/0x150
[ 334.637541][ C0] ? skb_dequeue+0x124/0x160
[ 334.637560][ C0] ieee80211_iface_work+0x730/0xc90
[ 334.637582][ C0] cfg80211_wiphy_work+0x228/0x260
[ 334.637600][ C0] ? process_scheduled_works+0x975/0x1600
[ 334.637621][ C0] process_scheduled_works+0xa60/0x1600
[ 334.637652][ C0] ? worker_attach_to_pool+0x370/0x370
[ 334.637673][ C0] ? assign_work+0x3cc/0x5d0
[ 334.637693][ C0] worker_thread+0xa5e/0xfe0
[ 334.637723][ C0] kthread+0x2fa/0x390
[ 334.637737][ C0] ? pr_cont_work+0x550/0x550
[ 334.637755][ C0] ? kthread_blkcg+0xd0/0xd0
[ 334.637769][ C0] ret_from_fork+0x48/0x80
[ 334.637787][ C0] ? kthread_blkcg+0xd0/0xd0
[ 334.637807][ C0] ret_from_fork_asm+0x11/0x20
[ 334.637833][ C0]
[ 334.639444][ T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 334.977734][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 334.984930][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 334.995271][ T29] Call Trace:
[ 334.998545][ T29]
[ 335.001463][ T29] dump_stack_lvl+0x18c/0x250
[ 335.006134][ T29] ? show_regs_print_info+0x20/0x20
[ 335.011326][ T29] ? load_image+0x420/0x420
[ 335.015846][ T29] panic+0x2ca/0x720
[ 335.019750][ T29] ? bpf_jit_dump+0xd0/0xd0
[ 335.024249][ T29] ? __irq_work_queue_local+0x13a/0x3b0
[ 335.029792][ T29] ? preempt_schedule_thunk+0x1a/0x30
[ 335.035166][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[ 335.041343][ T29] watchdog+0xf98/0xfa0
[ 335.045499][ T29] ? watchdog+0x1e1/0xfa0
[ 335.049850][ T29] kthread+0x2fa/0x390
[ 335.053904][ T29] ? hungtask_pm_notify+0x50/0x50
[ 335.058920][ T29] ? kthread_blkcg+0xd0/0xd0
[ 335.063506][ T29] ret_from_fork+0x48/0x80
[ 335.067933][ T29] ? kthread_blkcg+0xd0/0xd0
[ 335.072514][ T29] ret_from_fork_asm+0x11/0x20
[ 335.077283][ T29]
[ 335.080524][ T29] Kernel Offset: disabled
[ 335.084870][ T29] Rebooting in 86400 seconds..