no interfaces have a carrier
[ 56.338913][ T5437] 8021q: adding VLAN 0 to HW filter on device bond0
[ 56.349413][ T5437] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
syzkaller login: [ 92.058063][ T8] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts.
2026/09/16 22:15:52 parsed 1 programs
2026/09/16 22:15:52 serving rpc on tcp://33393
[ 240.181504][ T5817] cgroup: Unknown subsys name 'net'
[ 240.323897][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 241.986258][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 244.254685][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 244.262855][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 244.300521][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 244.308647][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 245.743097][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 245.751682][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 245.760102][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 245.768355][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 245.777717][ T5868] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 245.786997][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 246.270887][ T5882] chnl_net:caif_netlink_parms(): no params data found
[ 246.383971][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state
[ 246.391815][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[ 246.399081][ T5882] bridge_slave_0: entered allmulticast mode
[ 246.406324][ T5882] bridge_slave_0: entered promiscuous mode
[ 246.415591][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state
[ 246.422919][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[ 246.430372][ T5882] bridge_slave_1: entered allmulticast mode
[ 246.438140][ T5882] bridge_slave_1: entered promiscuous mode
[ 246.483862][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 246.495995][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 246.525310][ T5882] team0: Port device team_slave_0 added
[ 246.534386][ T5882] team0: Port device team_slave_1 added
[ 246.572404][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 246.579441][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 246.605432][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 246.621570][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 246.628656][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 246.654636][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 246.711827][ T5882] hsr_slave_0: entered promiscuous mode
[ 246.718920][ T5882] hsr_slave_1: entered promiscuous mode
[ 246.916304][ T5882] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 246.928886][ T5882] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 246.940798][ T5882] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 246.950973][ T5882] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 247.061536][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0
[ 247.080664][ T5882] 8021q: adding VLAN 0 to HW filter on device team0
[ 247.106962][ T31] bridge0: port 1(bridge_slave_0) entered blocking state
[ 247.114544][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 247.130452][ T31] bridge0: port 2(bridge_slave_1) entered blocking state
[ 247.137696][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 247.386913][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 247.432363][ T5882] veth0_vlan: entered promiscuous mode
[ 247.444799][ T5882] veth1_vlan: entered promiscuous mode
[ 247.479980][ T5882] veth0_macvtap: entered promiscuous mode
[ 247.494237][ T5882] veth1_macvtap: entered promiscuous mode
[ 247.516708][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 247.535035][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 247.549808][ T5882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 247.558887][ T5882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 247.567748][ T5882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 247.576679][ T5882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 247.705322][ T5882] syz-executor (5882) used greatest stack depth: 20808 bytes left
[ 247.955375][ T146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/09/16 22:16:03 executed programs: 0
[ 249.306231][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 249.314060][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 249.324400][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 249.333172][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 249.343838][ T5087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 249.351756][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 249.510153][ T5923] chnl_net:caif_netlink_parms(): no params data found
[ 249.577173][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state
[ 249.584418][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state
[ 249.592446][ T5923] bridge_slave_0: entered allmulticast mode
[ 249.599885][ T5923] bridge_slave_0: entered promiscuous mode
[ 249.608562][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state
[ 249.616166][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state
[ 249.623318][ T5923] bridge_slave_1: entered allmulticast mode
[ 249.631410][ T5923] bridge_slave_1: entered promiscuous mode
[ 249.660575][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 249.672633][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 249.703201][ T5923] team0: Port device team_slave_0 added
[ 249.713569][ T5923] team0: Port device team_slave_1 added
[ 249.739530][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 249.747692][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 249.773667][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 249.786790][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 249.793792][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 249.820932][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 249.869409][ T5923] hsr_slave_0: entered promiscuous mode
[ 249.877226][ T5923] hsr_slave_1: entered promiscuous mode
[ 249.883421][ T5923] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 249.891959][ T5923] Cannot create hsr debugfs directory
[ 250.198458][ T146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 251.416994][ T5868] Bluetooth: hci0: command tx timeout
[ 252.487421][ T146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 252.560754][ T146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 253.473096][ T5923] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 253.485190][ T5923] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 253.495814][ T5868] Bluetooth: hci0: command tx timeout
[ 253.507154][ T5923] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 253.528305][ T146] hsr_slave_0: left promiscuous mode
[ 253.534834][ T146] hsr_slave_1: left promiscuous mode
[ 253.541638][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 253.549186][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 253.557651][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 253.565074][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 253.573706][ T146] bridge_slave_1: left allmulticast mode
[ 253.586137][ T146] bridge_slave_1: left promiscuous mode
[ 253.592263][ T146] bridge0: port 2(bridge_slave_1) entered disabled state
[ 253.607909][ T146] bridge_slave_0: left allmulticast mode
[ 253.613623][ T146] bridge_slave_0: left promiscuous mode
[ 253.620595][ T146] bridge0: port 1(bridge_slave_0) entered disabled state
[ 253.652475][ T146] veth1_macvtap: left promiscuous mode
[ 253.658545][ T146] veth0_macvtap: left promiscuous mode
[ 253.664252][ T146] veth1_vlan: left promiscuous mode
[ 253.672479][ T146] veth0_vlan: left promiscuous mode
[ 254.137416][ T146] team0 (unregistering): Port device team_slave_1 removed
[ 254.171113][ T146] team0 (unregistering): Port device team_slave_0 removed
[ 254.202231][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 254.240990][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 254.465055][ T146] bond0 (unregistering): Released all slaves
[ 254.538119][ T5923] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 254.627427][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0
[ 254.657088][ T5923] 8021q: adding VLAN 0 to HW filter on device team0
[ 254.671743][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state
[ 254.678942][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 254.693860][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state
[ 254.701087][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 254.768797][ T5923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 254.960567][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 255.024937][ T5923] veth0_vlan: entered promiscuous mode
[ 255.050349][ T5923] veth1_vlan: entered promiscuous mode
[ 255.091743][ T5923] veth0_macvtap: entered promiscuous mode
[ 255.101737][ T5923] veth1_macvtap: entered promiscuous mode
[ 255.121012][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 255.134705][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 255.148626][ T5923] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 255.159366][ T5923] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 255.168444][ T5923] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 255.177385][ T5923] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 255.264407][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 255.274118][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/09/16 22:16:09 executed programs: 2
[ 255.316177][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 255.324073][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 255.576024][ T5868] Bluetooth: hci0: command tx timeout
[ 255.905489][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 255.914548][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 257.665898][ T5868] Bluetooth: hci0: command tx timeout
[ 317.339567][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 317.346172][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 375.735812][ T5087] Bluetooth: hci0: command 0x0406 tx timeout
[ 378.780243][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 378.789233][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 403.735884][ T29] INFO: task kworker/u4:2:31 blocked for more than 143 seconds.
[ 403.743782][ T29] Not tainted syzkaller #0
[ 403.748852][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 403.757648][ T29] task:kworker/u4:2 state:D stack:20504 pid:31 ppid:2 flags:0x00004000
[ 403.768060][ T29] Workqueue: writeback wb_workfn (flush-8:0)
[ 403.774243][ T29] Call Trace:
[ 403.777818][ T29]
[ 403.780862][ T29] __schedule+0x15ae/0x4660
[ 403.785577][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260
[ 403.793101][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260
[ 403.799448][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 403.805540][ T29] ? __lock_acquire+0x7d80/0x7d80
[ 403.811908][ T29] ? asan.module_dtor+0x20/0x20
[ 403.816912][ T29] ? blk_check_plugged+0x250/0x250
[ 403.822074][ T29] ? rq_wait_inc_below+0x11f/0x1a0
[ 403.828403][ T29] ? wq_worker_sleeping+0x63/0x240
[ 403.833609][ T29] schedule+0xbd/0x170
[ 403.837990][ T29] io_schedule+0x80/0xd0
[ 403.842306][ T29] rq_qos_wait+0x22b/0x360
[ 403.847097][ T29] ? wbt_inflight_cb+0x2f0/0x2f0
[ 403.852141][ T29] ? rq_depth_scale_down+0x2f0/0x2f0
[ 403.857548][ T29] ? rq_qos_wait+0x360/0x360
[ 403.862175][ T29] ? wbt_exit+0xb0/0xb0
[ 403.866514][ T29] ? seqcount_lockdep_reader_access+0x191/0x1d0
[ 403.872803][ T29] ? should_fail_request+0x70/0x70
[ 403.878000][ T29] wbt_wait+0x34a/0x580
[ 403.882265][ T29] ? rwb_trace_step+0x320/0x320
[ 403.887238][ T29] ? bio_integrity_prep+0x139/0x870
[ 403.892502][ T29] ? rwb_trace_step+0x320/0x320
[ 403.897521][ T29] __rq_qos_throttle+0x65/0xb0
[ 403.902516][ T29] blk_mq_submit_bio+0x8fb/0x2220
[ 403.907725][ T29] ? __lock_acquire+0x7d80/0x7d80
[ 403.912801][ T29] ? blk_mq_plug_issue_direct+0x550/0x550
[ 403.918602][ T29] ? seqcount_lockdep_reader_access+0x12b/0x1d0
[ 403.924883][ T29] ? lockdep_hardirqs_on+0x98/0x150
[ 403.930241][ T29] ? ktime_get+0x7f/0x280
[ 403.934626][ T29] ? seqcount_lockdep_reader_access+0x191/0x1d0
[ 403.940952][ T29] ? ktime_get_real_ts64+0x440/0x440
[ 403.946396][ T29] __submit_bio+0x12b/0x260
[ 403.950988][ T29] ? blk_free_queue_rcu+0x40/0x40
[ 403.956141][ T29] submit_bio_noacct_nocheck+0x742/0x9c0
[ 403.961887][ T29] ? jbd2_journal_stop+0x8e1/0xd20
[ 403.967127][ T29] ? should_fail_request+0x70/0x70
[ 403.972310][ T29] ext4_io_submit+0xdc/0x140
[ 403.977176][ T29] ext4_do_writepages+0x2864/0x3990
[ 403.982517][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240
[ 403.989499][ T29] ? rcu_read_lock_any_held+0xb4/0x140
[ 403.995090][ T29] ? __lock_acquire+0x1336/0x7d80
[ 404.000208][ T29] ext4_writepages+0x1dd/0x350
[ 404.005071][ T29] ? ext4_read_folio+0x2f0/0x2f0
[ 404.010110][ T29] ? reacquire_held_locks+0x31f/0x5c0
[ 404.015528][ T29] ? writeback_sb_inodes+0x35e/0x1020
[ 404.020992][ T29] ? ext4_read_folio+0x2f0/0x2f0
[ 404.026047][ T29] do_writepages+0x351/0x590
[ 404.030727][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0
[ 404.036535][ T29] ? writeback_sb_inodes+0x4bd/0x1020
[ 404.041986][ T29] ? __lock_acquire+0x7d80/0x7d80
[ 404.047194][ T29] ? do_raw_spin_lock+0x11f/0x2b0
[ 404.052274][ T29] __writeback_single_inode+0x14e/0xee0
[ 404.058036][ T29] writeback_sb_inodes+0x813/0x1020
[ 404.063303][ T29] ? queue_io+0x530/0x530
[ 404.067817][ T29] __writeback_inodes_wb+0x114/0x240
[ 404.073158][ T29] wb_writeback+0x472/0xbe0
[ 404.077740][ T29] ? queue_io+0x2d1/0x530
[ 404.082133][ T29] ? percpu_ref_tryget+0x250/0x250
[ 404.087437][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 404.093459][ T29] ? __lock_acquire+0x7d80/0x7d80
[ 404.098583][ T29] wb_workfn+0xad7/0xe60
[ 404.102882][ T29] ? inode_wait_for_writeback+0x230/0x230
[ 404.108711][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 404.114738][ T29] ? __lock_acquire+0x7d80/0x7d80
[ 404.119851][ T29] ? read_lock_is_recursive+0x20/0x20
[ 404.125310][ T29] ? _raw_spin_unlock_irq+0x23/0x50
[ 404.130665][ T29] ? process_scheduled_works+0x975/0x1600
[ 404.136442][ T29] ? process_scheduled_works+0x975/0x1600
[ 404.142178][ T29] process_scheduled_works+0xa60/0x1600
[ 404.147844][ T29] ? worker_attach_to_pool+0x370/0x370
[ 404.153384][ T29] ? assign_work+0x3cc/0x5d0
[ 404.158054][ T29] worker_thread+0xa5e/0xfe0
[ 404.162709][ T29] kthread+0x2fa/0x390
[ 404.166871][ T29] ? pr_cont_work+0x550/0x550
[ 404.171592][ T29] ? kthread_blkcg+0xd0/0xd0
[ 404.176253][ T29] ret_from_fork+0x48/0x80
[ 404.180750][ T29] ? kthread_blkcg+0xd0/0xd0
[ 404.185359][ T29] ret_from_fork_asm+0x11/0x20
[ 404.190258][ T29]
[ 404.193498][ T29] INFO: task syz.0.205:6156 blocked for more than 143 seconds.
[ 404.201784][ T29] Not tainted syzkaller #0
[ 404.206829][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 404.215521][ T29] task:syz.0.205 state:D stack:27560 pid:6156 ppid:5923 flags:0x00004004
[ 404.224834][ T29] Call Trace:
[ 404.228201][ T29]
[ 404.231166][ T29] __schedule+0x15ae/0x4660
[ 404.235764][ T29] ? mark_lock+0x94/0x320
[ 404.240132][ T29] ? asan.module_dtor+0x20/0x20
[ 404.245010][ T29] ? __lock_acquire+0x7d80/0x7d80
[ 404.250148][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 404.256109][ T29] ? lockdep_hardirqs_on+0x98/0x150
[ 404.261329][ T29] schedule+0xbd/0x170
[ 404.265431][ T29] io_schedule+0x80/0xd0
[ 404.269784][ T29] bit_wait_io+0x11/0xd0
[ 404.274088][ T29] __wait_on_bit+0x9f/0x2c0
[ 404.278707][ T29] ? bit_wait+0xd0/0xd0
[ 404.282980][ T29] out_of_line_wait_on_bit+0x13c/0x190
[ 404.288566][ T29] ? bit_wait+0xd0/0xd0
[ 404.292767][ T29] ? __wait_on_bit+0x2c0/0x2c0
[ 404.297619][ T29] ? do_raw_spin_lock+0x11f/0x2b0
[ 404.302691][ T29] ? bit_waitqueue+0x30/0x30
[ 404.307459][ T29] ? do_raw_spin_unlock+0x121/0x230
[ 404.312726][ T29] do_get_write_access+0x5c9/0xe00
[ 404.318049][ T29] jbd2_journal_get_write_access+0x10c/0x140
[ 404.324095][ T29] __ext4_journal_get_write_access+0x208/0x6d0
[ 404.330453][ T29] ? __ext4_journal_ensure_credits+0x450/0x450
[ 404.336686][ T29] ? __might_sleep+0xe0/0xe0
[ 404.341300][ T29] ext4_reserve_inode_write+0x205/0x2a0
[ 404.346972][ T29] __ext4_mark_inode_dirty+0x13f/0x720
[ 404.352562][ T29] ext4_dirty_inode+0xcb/0x110
[ 404.357408][ T29] ? __ext4_expand_extra_isize+0x400/0x400
[ 404.363271][ T29] __mark_inode_dirty+0x2cc/0xc90
[ 404.368431][ T29] file_update_time+0x187/0x1a0
[ 404.373334][ T29] ext4_page_mkwrite+0x1f9/0x11a0
[ 404.378543][ T29] ? filemap_fault+0x103c/0x1540
[ 404.383525][ T29] ? mapping_seek_hole_data+0x1330/0x1330
[ 404.389374][ T29] ? pte_alloc_one+0x3b6/0x540
[ 404.394202][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[ 404.400525][ T29] ? __lock_acquire+0x7d80/0x7d80
[ 404.405599][ T29] do_page_mkwrite+0x153/0x3f0
[ 404.410480][ T29] handle_mm_fault+0x1a2c/0x4a50
[ 404.415436][ T29] ? handle_mm_fault+0xe6/0x4a50
[ 404.420542][ T29] ? numa_migrate_prep+0x350/0x350
[ 404.425772][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0
[ 404.431134][ T29] do_user_addr_fault+0x736/0x12d0
[ 404.436379][ T29] exc_page_fault+0x64/0x100
[ 404.441032][ T29] ? clear_bhb_loop+0x40/0x90
[ 404.445922][ T29] asm_exc_page_fault+0x26/0x30
[ 404.450846][ T29] RIP: 0033:0x7f445006baa3
[ 404.455280][ T29] RSP: 002b:00007ffd48c2f480 EFLAGS: 00010246
[ 404.461536][ T29] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000
[ 404.469575][ T29] RDX: 0000001b2ed24000 RSI: 0000000000040000 RDI: 00007f44503e0708
[ 404.477617][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 404.485673][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 404.493671][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd48c2f710
[ 404.501828][ T29]
[ 404.504925][ T29]
[ 404.504925][ T29] Showing all locks held in the system:
[ 404.512743][ T29] 1 lock held by khungtaskd/29:
[ 404.517668][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[ 404.527728][ T29] 4 locks held by kworker/u4:2/31:
[ 404.532881][ T29] #0: ffff88801d654138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 404.544223][ T29] #1: ffffc90000a7fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 404.556852][ T29] #2: ffff88814dd360e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0
[ 404.567989][ T29] #3: ffff88814dd38c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[ 404.578625][ T29] 5 locks held by kworker/u4:11/3540:
[ 404.584047][ T29] 2 locks held by getty/5528:
[ 404.588803][ T29] #0: ffff88802d21c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 404.598696][ T29] #1: ffffc900032832f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[ 404.608887][ T29] 3 locks held by syz.0.205/6156:
[ 404.613937][ T29] #0: ffff888017c6f3a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[ 404.623963][ T29] #1: ffff88814dd36510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[ 404.633828][ T29] #2: ffff88814dd3a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[ 404.643719][ T29] 2 locks held by syz-executor/6157:
[ 404.649096][ T29] #0: ffff88814dd36418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 404.658367][ T29] #1: ffff888076e22c10 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450
[ 404.669112][ T29]
[ 404.671497][ T29] =============================================
[ 404.671497][ T29]
[ 404.680008][ T29] NMI backtrace for cpu 1
[ 404.684398][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 404.691615][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 404.701707][ T29] Call Trace:
[ 404.705003][ T29]
[ 404.707963][ T29] dump_stack_lvl+0x18c/0x250
[ 404.712682][ T29] ? __wake_up_klogd+0xd9/0x100
[ 404.717576][ T29] ? show_regs_print_info+0x20/0x20
[ 404.722893][ T29] ? load_image+0x420/0x420
[ 404.727437][ T29] nmi_cpu_backtrace+0x3a6/0x3e0
[ 404.732447][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[ 404.738642][ T29] ? load_image+0x420/0x420
[ 404.743200][ T29] ? wq_watchdog_touch+0xef/0x170
[ 404.748267][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 404.754426][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[ 404.760463][ T29] watchdog+0xf59/0xfa0
[ 404.764688][ T29] ? watchdog+0x1e1/0xfa0
[ 404.769060][ T29] kthread+0x2fa/0x390
[ 404.773153][ T29] ? hungtask_pm_notify+0x50/0x50
[ 404.778205][ T29] ? kthread_blkcg+0xd0/0xd0
[ 404.782844][ T29] ret_from_fork+0x48/0x80
[ 404.787290][ T29] ? kthread_blkcg+0xd0/0xd0
[ 404.791916][ T29] ret_from_fork_asm+0x11/0x20
[ 404.796737][ T29]
[ 404.800010][ T29] Sending NMI from CPU 1 to CPUs 0:
[ 404.805263][ C0] NMI backtrace for cpu 0
[ 404.805274][ C0] CPU: 0 PID: 3460 Comm: kworker/u4:10 Not tainted syzkaller #0
[ 404.805289][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 404.805298][ C0] Workqueue: events_unbound cfg80211_wiphy_work
[ 404.805430][ C0] RIP: 0010:unwind_next_frame+0x168d/0x2990
[ 404.805448][ C0] Code: ef e8 d7 4d a4 00 4c 89 7d 00 49 bf 00 00 00 00 00 fc ff df 42 0f b6 04 3b 84 c0 0f 85 d7 10 00 00 41 c6 06 00 48 8b 5c 24 20 <4c> 8b 74 24 40 48 8b 44 24 50 42 0f b6 04 38 84 c0 0f 85 58 0e 00
[ 404.805488][ C0] RSP: 0018:ffffc9000ca1ed78 EFLAGS: 00000246
[ 404.805501][ C0] RAX: ffffc9000ca1ee98 RBX: ffffffff8f137cc8 RCX: 0000000000000000
[ 404.805511][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ca1eea8
[ 404.805520][ C0] RBP: ffffc9000ca1ee98 R08: ffffc9000ca1eea7 R09: 0000000000000000
[ 404.805530][ C0] R10: ffffc9000ca1ee98 R11: fffff52001943dd5 R12: ffffc9000ca1eee0
[ 404.805541][ C0] R13: ffffc9000ca1ee48 R14: ffffffff81dfeb7e R15: dffffc0000000000
[ 404.805552][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 404.805564][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 404.805574][ C0] CR2: 000055923fa1f168 CR3: 000000000cf32000 CR4: 00000000003506f0
[ 404.805587][ C0] Call Trace:
[ 404.805592][ C0]
[ 404.805603][ C0] ? stack_trace_save+0xaa/0x100
[ 404.805628][ C0] ? stack_trace_save+0xaa/0x100
[ 404.805665][ C0] ? stack_trace_save+0x100/0x100
[ 404.805685][ C0] arch_stack_walk+0x144/0x190
[ 404.805705][ C0] ? kasan_set_track+0x4e/0x70
[ 404.805726][ C0] stack_trace_save+0xaa/0x100
[ 404.805746][ C0] ? stack_trace_snprint+0xf0/0xf0
[ 404.805771][ C0] kasan_set_track+0x4e/0x70
[ 404.805821][ C0] ? __kmem_cache_free+0xba/0x1f0
[ 404.805845][ C0] kasan_save_free_info+0x28/0x40
[ 404.805878][ C0] ____kasan_slab_free+0x126/0x1f0
[ 404.805897][ C0] slab_free_freelist_hook+0x130/0x1a0
[ 404.805934][ C0] ? ieee80211_inform_bss+0xb33/0xfd0
[ 404.805980][ C0] __kmem_cache_free+0xba/0x1f0
[ 404.806006][ C0] ieee80211_inform_bss+0xb33/0xfd0
[ 404.806028][ C0] ? ieee80211_rx_bss_put+0x60/0x60
[ 404.806057][ C0] ? do_raw_spin_lock+0x11f/0x2b0
[ 404.806081][ C0] ? ieee80211_rx_bss_put+0x60/0x60
[ 404.806097][ C0] rdev_inform_bss+0x106/0x410
[ 404.806138][ C0] cfg80211_inform_bss_frame_data+0xb22/0x1330
[ 404.806169][ C0] ? cfg80211_parse_ml_sta_data+0x1a80/0x1a80
[ 404.806211][ C0] ? ieee80211_bss_info_update+0x387/0x9f0
[ 404.806228][ C0] ? ieee80211_bss_info_update+0x387/0x9f0
[ 404.806247][ C0] ieee80211_bss_info_update+0x789/0x9f0
[ 404.806269][ C0] ? ieee80211_inform_bss+0xfd0/0xfd0
[ 404.806292][ C0] ? ieee80211_mandatory_rates+0x1cc/0x230
[ 404.806311][ C0] ieee80211_ibss_rx_queued_mgmt+0x18f5/0x2dc0
[ 404.806336][ C0] ? verify_lock_unused+0x140/0x140
[ 404.806362][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xecc/0x2dc0
[ 404.806386][ C0] ? ieee80211_ibss_rx_no_sta+0x790/0x790
[ 404.806414][ C0] ? mark_lock+0x94/0x320
[ 404.806433][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 404.806452][ C0] ? __lock_acquire+0x7d80/0x7d80
[ 404.806471][ C0] ? lock_chain_count+0x20/0x20
[ 404.806487][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 404.806512][ C0] ? kcov_remote_start+0x8b/0x810
[ 404.806533][ C0] ? skb_dequeue+0x124/0x160
[ 404.806593][ C0] ieee80211_iface_work+0x730/0xc90
[ 404.806641][ C0] cfg80211_wiphy_work+0x228/0x260
[ 404.806665][ C0] ? process_scheduled_works+0x975/0x1600
[ 404.806688][ C0] process_scheduled_works+0xa60/0x1600
[ 404.806723][ C0] ? worker_attach_to_pool+0x370/0x370
[ 404.806746][ C0] ? assign_work+0x3cc/0x5d0
[ 404.806769][ C0] worker_thread+0xa5e/0xfe0
[ 404.806795][ C0] ? _raw_spin_unlock+0x40/0x40
[ 404.806819][ C0] ? __kthread_parkme+0x71/0x1c0
[ 404.806839][ C0] kthread+0x2fa/0x390
[ 404.806865][ C0] ? pr_cont_work+0x550/0x550
[ 404.806885][ C0] ? kthread_blkcg+0xd0/0xd0
[ 404.806901][ C0] ret_from_fork+0x48/0x80
[ 404.806920][ C0] ? kthread_blkcg+0xd0/0xd0
[ 404.806936][ C0] ret_from_fork_asm+0x11/0x20
[ 404.806964][ C0]
[ 404.839729][ T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 404.839793][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 404.839844][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 404.839874][ T29] Call Trace:
[ 404.839893][ T29]
[ 404.839913][ T29] dump_stack_lvl+0x18c/0x250
[ 404.840014][ T29] ? show_regs_print_info+0x20/0x20
[ 404.840080][ T29] ? load_image+0x420/0x420
[ 404.840158][ T29] panic+0x2ca/0x720
[ 404.840224][ T29] ? bpf_jit_dump+0xd0/0xd0
[ 404.840273][ T29] ? __irq_work_queue_local+0x13a/0x3b0
[ 404.840358][ T29] ? preempt_schedule_thunk+0x1a/0x30
[ 404.840429][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[ 404.840515][ T29] watchdog+0xf98/0xfa0
[ 404.840583][ T29] ? watchdog+0x1e1/0xfa0
[ 404.840657][ T29] kthread+0x2fa/0x390
[ 404.840706][ T29] ? hungtask_pm_notify+0x50/0x50
[ 404.840765][ T29] ? kthread_blkcg+0xd0/0xd0
[ 404.840813][ T29] ret_from_fork+0x48/0x80
[ 404.840872][ T29] ? kthread_blkcg+0xd0/0xd0
[ 404.840920][ T29] ret_from_fork_asm+0x11/0x20
[ 404.841015][ T29]
[ 404.841994][ T29] Kernel Offset: disabled
[ 405.321147][ T29] Rebooting in 86400 seconds..