no interfaces have a carrier
[ 45.462995][ T3934] 8021q: adding VLAN 0 to HW filter on device bond0
[ 45.485964][ T3934] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
syzkaller login: [ 86.780243][ T7] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts.
2026/08/11 10:51:49 parsed 1 programs
2026/08/11 10:51:49 serving rpc on tcp://44081
[ 140.911272][ T4307] cgroup: Unknown subsys name 'net'
[ 141.014829][ T4307] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 142.347032][ T4307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 144.049409][ T4320] chnl_net:caif_netlink_parms(): no params data found
[ 144.096481][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 144.104333][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state
[ 144.112297][ T4320] device bridge_slave_0 entered promiscuous mode
[ 144.121919][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 144.129360][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state
[ 144.137093][ T4320] device bridge_slave_1 entered promiscuous mode
[ 144.161395][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 144.172930][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 144.196267][ T4320] team0: Port device team_slave_0 added
[ 144.204717][ T4320] team0: Port device team_slave_1 added
[ 144.221820][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 144.229324][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 144.255578][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 144.270311][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 144.277309][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 144.303605][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 144.336150][ T4320] device hsr_slave_0 entered promiscuous mode
[ 144.343357][ T4320] device hsr_slave_1 entered promiscuous mode
[ 144.431797][ T4320] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 144.442576][ T4320] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 144.453065][ T4320] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 144.465433][ T4320] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 144.487699][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 144.494922][ T4320] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 144.503170][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 144.510379][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 144.575909][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0
[ 144.592323][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 144.603432][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state
[ 144.612278][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state
[ 144.620935][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 144.635487][ T4320] 8021q: adding VLAN 0 to HW filter on device team0
[ 144.647061][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 144.656819][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state
[ 144.663976][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 144.676252][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 144.685000][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state
[ 144.692131][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 144.713776][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 144.722577][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 144.733863][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 144.746579][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 144.758052][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 144.770365][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 144.907944][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 144.915952][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 144.930981][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 144.951035][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 144.972292][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 144.982240][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 144.990816][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 145.001499][ T4320] device veth0_vlan entered promiscuous mode
[ 145.013783][ T4320] device veth1_vlan entered promiscuous mode
[ 145.021472][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 145.042156][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 145.051864][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 145.063679][ T4320] device veth0_macvtap entered promiscuous mode
[ 145.074184][ T4320] device veth1_macvtap entered promiscuous mode
[ 145.090074][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 145.097744][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 145.108314][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 145.118235][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 145.127198][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 145.141122][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 145.148846][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 145.157650][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 145.171548][ T4320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.181272][ T4320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.193506][ T4320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.203266][ T4320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.317941][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 147.297500][ T4377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 147.305472][ T4377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 147.313835][ T4377] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 147.321792][ T4377] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 147.330064][ T4377] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 147.337476][ T4377] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 147.531249][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 147.541569][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 147.553175][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 147.572525][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 147.580769][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 147.589940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/08/11 10:51:58 executed programs: 0
[ 147.905861][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 147.914620][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 147.922903][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 147.931533][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 147.940059][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 147.947765][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 148.054605][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 148.072167][ T4390] chnl_net:caif_netlink_parms(): no params data found
[ 148.112973][ T4390] bridge0: port 1(bridge_slave_0) entered blocking state
[ 148.120480][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state
[ 148.128543][ T4390] device bridge_slave_0 entered promiscuous mode
[ 148.137142][ T4390] bridge0: port 2(bridge_slave_1) entered blocking state
[ 148.145773][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state
[ 148.154068][ T4390] device bridge_slave_1 entered promiscuous mode
[ 148.173834][ T4390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 148.185187][ T4390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 148.206489][ T4390] team0: Port device team_slave_0 added
[ 148.214455][ T4390] team0: Port device team_slave_1 added
[ 148.231446][ T4390] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 148.238739][ T4390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 148.264784][ T4390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 148.277633][ T4390] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 148.284839][ T4390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 148.317764][ T4390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 148.351078][ T4390] device hsr_slave_0 entered promiscuous mode
[ 148.359869][ T4390] device hsr_slave_1 entered promiscuous mode
[ 148.366547][ T4390] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 148.374764][ T4390] Cannot create hsr debugfs directory
[ 149.979811][ T4377] Bluetooth: hci0: command 0x0409 tx timeout
[ 150.549779][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 150.619478][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 151.502443][ T4390] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 151.520608][ T4390] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 151.530602][ T4390] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 151.540824][ T4390] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 151.574325][ T9] device hsr_slave_0 left promiscuous mode
[ 151.582338][ T9] device hsr_slave_1 left promiscuous mode
[ 151.590486][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 151.597980][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 151.606160][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 151.613847][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 151.621708][ T9] device bridge_slave_1 left promiscuous mode
[ 151.628665][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 151.640479][ T9] device bridge_slave_0 left promiscuous mode
[ 151.646729][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 151.665184][ T9] device veth1_macvtap left promiscuous mode
[ 151.671715][ T9] device veth0_macvtap left promiscuous mode
[ 151.677796][ T9] device veth1_vlan left promiscuous mode
[ 151.683854][ T9] device veth0_vlan left promiscuous mode
[ 151.981274][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 152.011386][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 152.038063][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 152.064351][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 152.070764][ T49] Bluetooth: hci0: command 0x041b tx timeout
[ 152.246452][ T9] bond0 (unregistering): Released all slaves
[ 152.346434][ T4390] 8021q: adding VLAN 0 to HW filter on device bond0
[ 152.363516][ T4390] 8021q: adding VLAN 0 to HW filter on device team0
[ 152.374843][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 152.386493][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 152.405401][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 152.418003][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 152.429755][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state
[ 152.440501][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 152.451130][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 152.486688][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 152.495628][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 152.506333][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state
[ 152.513548][ T4397] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 152.522732][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 152.543152][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 152.552589][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 152.571041][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 152.580200][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 152.589619][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 152.598215][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 152.611623][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 152.620634][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 152.636034][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 152.646600][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 152.657114][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 152.872909][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 152.881702][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 152.901713][ T4390] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 152.926074][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 152.940537][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 152.965384][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 152.978762][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 152.993762][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 153.002060][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 153.015042][ T4390] device veth0_vlan entered promiscuous mode
[ 153.031787][ T4390] device veth1_vlan entered promiscuous mode
[ 153.052459][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 153.065196][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 153.075529][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 153.087944][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 153.100231][ T4390] device veth0_macvtap entered promiscuous mode
[ 153.112875][ T4390] device veth1_macvtap entered promiscuous mode
[ 153.152543][ T4390] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 153.161885][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 153.171937][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 153.182373][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 153.192026][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 153.211618][ T4390] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 153.220632][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 153.231480][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 153.242225][ T4390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 153.251694][ T4390] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 153.260729][ T4390] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 153.269586][ T4390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 153.320352][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 153.328223][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 153.340562][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 153.360713][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
2026/08/11 10:52:03 executed programs: 2
[ 153.369891][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 153.377373][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 154.158039][ T49] Bluetooth: hci0: command 0x040f tx timeout
[ 156.218556][ T49] Bluetooth: hci0: command 0x0419 tx timeout
2026/08/11 10:52:08 executed programs: 236
[ 194.300380][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 194.306893][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 255.739947][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 255.746312][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 273.178628][ T4377] Bluetooth: hci0: command 0x0406 tx timeout
[ 304.378741][ T28] INFO: task syz.0.251:4688 blocked for more than 143 seconds.
[ 304.386595][ T28] Not tainted syzkaller #0
[ 304.396132][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 304.404940][ T28] task:syz.0.251 state:D stack:27632 pid:4688 ppid:4390 flags:0x00004004
[ 304.414254][ T28] Call Trace:
[ 304.417526][ T28]
[ 304.420492][ T28] __schedule+0x107f/0x4030
[ 304.425033][ T28] ? mark_lock+0x94/0x320
[ 304.429479][ T28] ? __lock_acquire+0x7c40/0x7c40
[ 304.434509][ T28] ? __sched_text_start+0x8/0x8
[ 304.439416][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 304.445331][ T28] ? lockdep_hardirqs_on+0x94/0x140
[ 304.450634][ T28] schedule+0xb9/0x180
[ 304.454723][ T28] io_schedule+0x7c/0xd0
[ 304.459059][ T28] bit_wait_io+0xd/0xc0
[ 304.463342][ T28] __wait_on_bit+0x9b/0x2c0
[ 304.467872][ T28] ? bit_wait+0xc0/0xc0
[ 304.472097][ T28] out_of_line_wait_on_bit+0x138/0x190
[ 304.477579][ T28] ? bit_wait+0xc0/0xc0
[ 304.481885][ T28] ? __wait_on_bit+0x2c0/0x2c0
[ 304.486670][ T28] ? do_raw_spin_lock+0x128/0x2f0
[ 304.492268][ T28] ? bit_waitqueue+0x30/0x30
[ 304.496892][ T28] ? do_raw_spin_unlock+0x11d/0x230
[ 304.502187][ T28] do_get_write_access+0x605/0xf20
[ 304.507327][ T28] jbd2_journal_get_write_access+0x108/0x140
[ 304.513373][ T28] __ext4_journal_get_write_access+0x24b/0x6e0
[ 304.519594][ T28] ? __ext4_journal_ensure_credits+0x450/0x450
[ 304.525795][ T28] ? rcu_is_watching+0x11/0xa0
[ 304.530645][ T28] ext4_reserve_inode_write+0x201/0x290
[ 304.536212][ T28] __ext4_mark_inode_dirty+0x161/0x760
[ 304.541753][ T28] ext4_dirty_inode+0xbf/0x100
[ 304.546536][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0
[ 304.552446][ T28] __mark_inode_dirty+0x2e7/0xe80
[ 304.557487][ T28] __file_update_time+0x21d/0x240
[ 304.562626][ T28] file_update_time+0x2f3/0x370
[ 304.567548][ T28] ? __file_remove_privs+0x5f0/0x5f0
[ 304.573010][ T28] ext4_page_mkwrite+0x1a9/0x10d0
[ 304.578052][ T28] ? pte_alloc_one+0x287/0x310
[ 304.582880][ T28] ? ext4_change_inode_journal_flag+0x710/0x710
[ 304.589299][ T28] do_page_mkwrite+0x16b/0x5c0
[ 304.594089][ T28] handle_mm_fault+0x199c/0x3d40
[ 304.599112][ T28] ? mt_find+0x157/0x830
[ 304.603370][ T28] ? numa_migrate_prep+0x250/0x250
[ 304.608548][ T28] ? lock_chain_count+0x20/0x20
[ 304.613441][ T28] ? lock_mm_and_find_vma+0xae/0x2f0
[ 304.618817][ T28] do_user_addr_fault+0x58e/0xb20
[ 304.623894][ T28] exc_page_fault+0x60/0x100
[ 304.628578][ T28] ? clear_bhb_loop+0x60/0xb0
[ 304.633284][ T28] asm_exc_page_fault+0x22/0x30
[ 304.638187][ T28] RIP: 0033:0x7f62e946ba23
[ 304.642732][ T28] RSP: 002b:00007ffc178c6140 EFLAGS: 00010246
[ 304.648887][ T28] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000
[ 304.656857][ T28] RDX: 0000001b2f124000 RSI: 0000000000040000 RDI: 00007f62e97e0708
[ 304.664889][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 304.672935][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 304.680961][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc178c63d0
[ 304.688984][ T28]
[ 304.692098][ T28]
[ 304.692098][ T28] Showing all locks held in the system:
[ 304.699969][ T28] 1 lock held by rcu_tasks_kthre/12:
[ 304.705258][ T28] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[ 304.715796][ T28] 1 lock held by rcu_tasks_trace/13:
[ 304.721154][ T28] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[ 304.732185][ T28] 1 lock held by khungtaskd/28:
[ 304.737049][ T28] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[ 304.747080][ T28] 7 locks held by kworker/u4:3/47:
[ 304.752262][ T28] #0: ffff888141689138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[ 304.762935][ T28] #1: ffffc90000b87d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[ 304.774835][ T28] #2: ffff88814d3800e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0
[ 304.784825][ T28] #3: ffff88814d382c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70
[ 304.795441][ T28] #4: ffff88814d384990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[ 304.805209][ T28] #5: ffff888074ad8288 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90
[ 304.815130][ T28] #6: ffffe8ffffd33e68 (&lg->lg_mutex){+.+.}-{3:3}, at: ext4_mb_initialize_context+0x7f0/0xb80
[ 304.825742][ T28] 2 locks held by getty/4032:
[ 304.830474][ T28] #0: ffff88814d05b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[ 304.840271][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360
[ 304.850442][ T28] 3 locks held by syz.0.251/4688:
[ 304.855655][ T28] #0: ffff88803022f1d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[ 304.865895][ T28] #1: ffff88814d380558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[ 304.875855][ T28] #2: ffff88814d384990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[ 304.885658][ T28] 2 locks held by syz-executor/4694:
[ 304.891001][ T28] #0: ffff88814d380460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[ 304.900210][ T28] #1: ffff88807498ca38 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[ 304.910903][ T28]
[ 304.913228][ T28] =============================================
[ 304.913228][ T28]
[ 304.921783][ T28] NMI backtrace for cpu 0
[ 304.926135][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[ 304.933324][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 304.943369][ T28] Call Trace:
[ 304.946639][ T28]
[ 304.949573][ T28] dump_stack_lvl+0x188/0x24e
[ 304.954242][ T28] ? preempt_schedule_thunk+0x16/0x18
[ 304.959611][ T28] ? show_regs_print_info+0x12/0x12
[ 304.964797][ T28] ? load_image+0x410/0x410
[ 304.969303][ T28] ? vprintk_emit+0x59f/0x6a0
[ 304.973994][ T28] ? printk_sprint+0x460/0x460
[ 304.978783][ T28] nmi_cpu_backtrace+0x3e6/0x460
[ 304.983742][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450
[ 304.990005][ T28] ? _printk+0xda/0x130
[ 304.994176][ T28] ? load_image+0x410/0x410
[ 304.998692][ T28] ? load_image+0x410/0x410
[ 305.003200][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[ 305.009375][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 305.015575][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450
[ 305.021667][ T28] watchdog+0xf0e/0xf50
[ 305.025836][ T28] ? watchdog+0x1ed/0xf50
[ 305.030257][ T28] kthread+0x29d/0x330
[ 305.034316][ T28] ? hungtask_pm_notify+0x40/0x40
[ 305.039335][ T28] ? kthread_blkcg+0xd0/0xd0
[ 305.043932][ T28] ret_from_fork+0x1f/0x30
[ 305.048355][ T28]
[ 305.052166][ T28] Sending NMI from CPU 0 to CPUs 1:
[ 305.057500][ C1] NMI backtrace for cpu 1
[ 305.057512][ C1] CPU: 1 PID: 1127 Comm: kworker/u4:4 Not tainted syzkaller #0
[ 305.057527][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 305.057553][ C1] Workqueue: events_unbound toggle_allocation_gate
[ 305.057579][ C1] RIP: 0010:insn_decode+0x37e/0x520
[ 305.057603][ C1] Code: 0f b6 03 0f b6 d8 31 ff 89 de e8 5d e6 5d f7 84 db 74 4f e8 f4 e3 5d f7 31 c0 eb 50 e8 eb e3 5d f7 eb 44 e8 e4 e3 5d f7 eb 3d <48> 89 df e8 1a dc ff ff 89 c5 31 ff 89 c6 e8 2f e7 5d f7 85 ed 74
[ 305.057615][ C1] RSP: 0018:ffffc90004f0f8e8 EFLAGS: 00000246
[ 305.057626][ C1] RAX: ffffffff8a2448f6 RBX: ffffc90004f0f960 RCX: 0000000000000000
[ 305.057637][ C1] RDX: ffff888026ef1e00 RSI: 0000000000000000 RDI: 0000000000000000
[ 305.057646][ C1] RBP: 0000000000000000 R08: ffffc90004f0f9b7 R09: ffffc90004f0f960
[ 305.057656][ C1] R10: dffffc0000000000 R11: fffff520009e1f37 R12: dffffc0000000000
[ 305.057666][ C1] R13: 1ffff920009e1f36 R14: ffffc90004f0f9b2 R15: ffffc90004f0f99c
[ 305.057677][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 305.057688][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 305.057698][ C1] CR2: 000055a2452da168 CR3: 000000000c88e000 CR4: 00000000003506e0
[ 305.057711][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 305.057719][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 305.057727][ C1] Call Trace:
[ 305.057733][ C1]
[ 305.057745][ C1] ? kmem_cache_alloc+0x62/0x2f0
[ 305.057761][ C1] __jump_label_patch+0x105/0x450
[ 305.057780][ C1] ? arch_jump_label_transform_queue+0xd0/0xd0
[ 305.057799][ C1] ? kmem_cache_alloc+0x62/0x2f0
[ 305.057813][ C1] ? kmem_cache_alloc+0x71/0x2f0
[ 305.057826][ C1] ? kmem_cache_alloc+0x62/0x2f0
[ 305.057840][ C1] ? static_key_disable_cpuslocked+0x89/0x1a0
[ 305.057857][ C1] ? mutex_lock_nested+0x10/0x10
[ 305.057880][ C1] arch_jump_label_transform_queue+0x48/0xd0
[ 305.057897][ C1] __jump_label_update+0x18a/0x3c0
[ 305.057913][ C1] ? process_one_work+0x7b4/0x1160
[ 305.057932][ C1] static_key_disable_cpuslocked+0xc1/0x1a0
[ 305.057948][ C1] static_key_disable+0x16/0x20
[ 305.057961][ C1] toggle_allocation_gate+0x3d1/0x470
[ 305.057977][ C1] ? show_object+0xa0/0xa0
[ 305.057992][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 305.058013][ C1] ? __lock_acquire+0x7c40/0x7c40
[ 305.058032][ C1] ? read_lock_is_recursive+0x10/0x10
[ 305.058050][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 305.058066][ C1] ? _raw_spin_unlock+0x40/0x40
[ 305.058082][ C1] ? _raw_spin_unlock_irq+0x1f/0x40
[ 305.058098][ C1] ? process_one_work+0x7b4/0x1160
[ 305.058114][ C1] process_one_work+0x8ab/0x1160
[ 305.058136][ C1] ? worker_detach_from_pool+0x240/0x240
[ 305.058154][ C1] ? _raw_spin_lock_irq+0xb7/0xf0
[ 305.058169][ C1] ? _raw_spin_lock_irqsave+0x100/0x100
[ 305.058185][ C1] ? wq_worker_running+0x97/0x190
[ 305.058208][ C1] worker_thread+0xaf5/0x12a0
[ 305.058235][ C1] kthread+0x29d/0x330
[ 305.058247][ C1] ? worker_clr_flags+0x1a0/0x1a0
[ 305.058262][ C1] ? kthread_blkcg+0xd0/0xd0
[ 305.058274][ C1] ret_from_fork+0x1f/0x30
[ 305.058298][ C1]
[ 305.059660][ T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 305.059671][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[ 305.059687][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 305.059695][ T28] Call Trace:
[ 305.059701][ T28]
[ 305.059707][ T28] dump_stack_lvl+0x188/0x24e
[ 305.059735][ T28] ? memcpy+0x3c/0x60
[ 305.059751][ T28] ? show_regs_print_info+0x12/0x12
[ 305.059771][ T28] ? load_image+0x410/0x410
[ 305.059799][ T28] panic+0x2d3/0x710
[ 305.059814][ T28] ? schedule_preempt_disabled+0x20/0x20
[ 305.059839][ T28] ? bpf_jit_dump+0xd0/0xd0
[ 305.059854][ T28] ? __irq_work_queue_local+0x12c/0x190
[ 305.059881][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[ 305.059904][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450
[ 305.059926][ T28] watchdog+0xf4d/0xf50
[ 305.059947][ T28] ? watchdog+0x1ed/0xf50
[ 305.059968][ T28] kthread+0x29d/0x330
[ 305.059982][ T28] ? hungtask_pm_notify+0x40/0x40
[ 305.059999][ T28] ? kthread_blkcg+0xd0/0xd0
[ 305.060014][ T28] ret_from_fork+0x1f/0x30
[ 305.060044][ T28]
[ 305.063016][ T28] Kernel Offset: disabled
[ 305.487577][ T28] Rebooting in 86400 seconds..