Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. 2026/09/04 01:13:43 parsed 1 programs 2026/09/04 01:13:43 serving rpc on tcp://38255 Setting up swapspace version 1, size = 127995904 bytes [ 54.505336][ T3252] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.682567][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.691002][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.736475][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.744551][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.577197][ T3440] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.584799][ T3440] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.592509][ T3440] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.600416][ T3440] netdevsim netdevsim2 netdevsim3: renamed from eth3 2026/09/04 01:13:50 executed programs: 0 [ 64.100795][ T3867] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.111277][ T3867] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.122404][ T3867] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.130283][ T3857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.140298][ T3863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.147854][ T3867] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.160351][ T3857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.170950][ T3863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.184853][ T3863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.198389][ T3857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.206726][ T3863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.214880][ T3861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.225243][ T3857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.233841][ T3861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.250271][ T3861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.258006][ T3861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.983868][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.991763][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.010083][ T1376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.017958][ T1376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.084975][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.092880][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.151634][ T1542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.159493][ T1542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.191753][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/09/04 01:14:04 executed programs: 8 [ 74.199619][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.208092][ T1542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.216085][ T1542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.258935][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.264030][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.267034][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.274637][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/04 01:14:09 executed programs: 730 2026/09/04 01:14:14 executed programs: 1703 [ 87.297693][ T3857] syz-executor (3857) used greatest stack depth: 11016 bytes left 2026/09/04 01:14:19 executed programs: 2572 [ 235.660100][ T28] INFO: task syz-executor:10659 blocked for more than 143 seconds. [ 235.668296][ T28] Not tainted syzkaller #0 [ 235.673324][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.682066][ T28] task:syz-executor state:D stack:11832 pid:10659 ppid:1 flags:0x00004006 [ 235.691344][ T28] Call Trace: [ 235.694659][ T28] [ 235.697968][ T28] __schedule+0x68e/0x960 [ 235.702408][ T28] schedule+0x54/0xc0 [ 235.706424][ T28] schedule_timeout+0x47/0x1c0 [ 235.711260][ T28] ? wait_for_common+0xe6/0x1a0 [ 235.716338][ T28] wait_for_common+0xee/0x1a0 [ 235.721090][ T28] remove_one+0x9d/0xd0 [ 235.725271][ T28] ? debugfs_remove+0x70/0x70 [ 235.730008][ T28] simple_recursive_removal+0x319/0x3b0 [ 235.735596][ T28] ? debugfs_remove+0x70/0x70 [ 235.740336][ T28] ? nsim_bus_probe+0x20/0x20 [ 235.745056][ T28] debugfs_remove+0x56/0x70 [ 235.749609][ T28] nsim_drv_remove+0x4b/0xb0 [ 235.754301][ T28] device_release_driver_internal+0x201/0x360 [ 235.760443][ T28] bus_remove_device+0x234/0x290 [ 235.765409][ T28] ? device_remove_attrs+0x103/0x130 [ 235.770752][ T28] ? up_write+0x4b/0xb0 [ 235.774957][ T28] ? sysfs_kf_read+0x1a0/0x1a0 [ 235.779727][ T28] device_del+0x2cf/0x450 [ 235.784573][ T28] ? sysfs_kf_read+0x1a0/0x1a0 [ 235.789363][ T28] device_unregister+0x1e/0x80 [ 235.794249][ T28] del_device_store+0x13c/0x1a0 [ 235.799133][ T28] kernfs_fop_write_iter+0x25a/0x2d0 [ 235.804522][ T28] vfs_write+0x2da/0x660 [ 235.808785][ T28] ? do_sys_openat2+0xe9/0x110 [ 235.813596][ T28] ksys_write+0xc6/0x170 [ 235.817859][ T28] do_syscall_64+0x55/0xb0 [ 235.822322][ T28] ? clear_bhb_loop+0x40/0x90 [ 235.827029][ T28] ? clear_bhb_loop+0x40/0x90 [ 235.831748][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.837684][ T28] RIP: 0033:0x7f711f539197 [ 235.842258][ T28] RSP: 002b:00007ffede73ad60 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 235.851142][ T28] RAX: ffffffffffffffda RBX: 0000555585504500 RCX: 00007f711f539197 [ 235.859224][ T28] RDX: 0000000000000001 RSI: 00007ffede73add0 RDI: 0000000000000005 [ 235.867256][ T28] RBP: 00007f711f61588f R08: 0000000000000000 R09: 0000000000000000 [ 235.875389][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 235.883426][ T28] R13: 00007ffede73add0 R14: 00007f7120334620 R15: 0000000000000003 [ 235.891474][ T28] [ 235.894558][ T28] INFO: task syz.5.2605:11346 blocked for more than 143 seconds. [ 235.902497][ T28] Not tainted syzkaller #0 [ 235.907527][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.916545][ T28] task:syz.5.2605 state:D stack:14440 pid:11346 ppid:3867 flags:0x00004004 [ 235.925819][ T28] Call Trace: [ 235.929214][ T28] [ 235.932211][ T28] __schedule+0x68e/0x960 [ 235.936698][ T28] ? nsim_bus_dev_max_vfs_write+0x169/0x200 [ 235.942719][ T28] schedule+0x54/0xc0 [ 235.946747][ T28] schedule_preempt_disabled+0x32/0x50 [ 235.952339][ T28] __mutex_lock+0x46d/0x9f0 [ 235.956932][ T28] ? nsim_bus_dev_max_vfs_write+0x14a/0x200 [ 235.963003][ T28] nsim_bus_dev_max_vfs_write+0x169/0x200 [ 235.968764][ T28] full_proxy_write+0x87/0x110 [ 235.973599][ T28] ? full_proxy_read+0x110/0x110 [ 235.978571][ T28] vfs_write+0x21b/0x660 [ 235.983001][ T28] ? __fget_files+0x192/0x1d0 [ 235.987719][ T28] ksys_write+0xc6/0x170 [ 235.992047][ T28] do_syscall_64+0x55/0xb0 [ 235.996511][ T28] ? clear_bhb_loop+0x40/0x90 [ 236.001249][ T28] ? clear_bhb_loop+0x40/0x90 [ 236.006040][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.012071][ T28] RIP: 0033:0x7fa9b4aae019 [ 236.016529][ T28] RSP: 002b:00007fa9b490f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.025192][ T28] RAX: ffffffffffffffda RBX: 00007fa9b4d35fa0 RCX: 00007fa9b4aae019 [ 236.033449][ T28] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 236.041487][ T28] RBP: 00007fa9b4b4500c R08: 0000000000000000 R09: 0000000000000000 [ 236.049488][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.057675][ T28] R13: 00007fa9b4d36038 R14: 00007fa9b4d35fa0 R15: 00007fff114cbcc8 [ 236.065785][ T28] [ 236.068866][ T28] INFO: task syz.2.2606:11350 blocked for more than 143 seconds. [ 236.076682][ T28] Not tainted syzkaller #0 [ 236.081703][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.090392][ T28] task:syz.2.2606 state:D stack:14440 pid:11350 ppid:3863 flags:0x00004004 [ 236.099590][ T28] Call Trace: [ 236.102914][ T28] [ 236.105864][ T28] __schedule+0x68e/0x960 [ 236.110272][ T28] ? nsim_bus_dev_max_vfs_write+0x169/0x200 [ 236.116196][ T28] schedule+0x54/0xc0 [ 236.120236][ T28] schedule_preempt_disabled+0x32/0x50 [ 236.125755][ T28] __mutex_lock+0x46d/0x9f0 [ 236.130413][ T28] ? nsim_bus_dev_max_vfs_write+0x14a/0x200 [ 236.136355][ T28] nsim_bus_dev_max_vfs_write+0x169/0x200 [ 236.142162][ T28] full_proxy_write+0x87/0x110 [ 236.146981][ T28] ? full_proxy_read+0x110/0x110 [ 236.152021][ T28] vfs_write+0x21b/0x660 [ 236.156339][ T28] ? __fget_files+0x192/0x1d0 [ 236.161154][ T28] ksys_write+0xc6/0x170 [ 236.165445][ T28] do_syscall_64+0x55/0xb0 [ 236.169877][ T28] ? clear_bhb_loop+0x40/0x90 [ 236.174677][ T28] ? clear_bhb_loop+0x40/0x90 [ 236.179468][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.185456][ T28] RIP: 0033:0x7fca10a7e019 [ 236.190031][ T28] RSP: 002b:00007fca108df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.198940][ T28] RAX: ffffffffffffffda RBX: 00007fca10d05fa0 RCX: 00007fca10a7e019 [ 236.206994][ T28] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 236.215016][ T28] RBP: 00007fca10b1500c R08: 0000000000000000 R09: 0000000000000000 [ 236.223064][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.231549][ T28] R13: 00007fca10d06038 R14: 00007fca10d05fa0 R15: 00007ffd4bc23ae8 [ 236.239708][ T28] [ 236.242901][ T28] INFO: task syz.4.2607:11349 blocked for more than 143 seconds. [ 236.250699][ T28] Not tainted syzkaller #0 [ 236.255654][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.264361][ T28] task:syz.4.2607 state:D stack:14376 pid:11349 ppid:3861 flags:0x00004004 [ 236.273609][ T28] Call Trace: [ 236.277006][ T28] [ 236.280205][ T28] __schedule+0x68e/0x960 [ 236.284566][ T28] ? nsim_bus_dev_max_vfs_write+0x169/0x200 [ 236.290557][ T28] schedule+0x54/0xc0 [ 236.294655][ T28] schedule_preempt_disabled+0x32/0x50 [ 236.300213][ T28] __mutex_lock+0x46d/0x9f0 [ 236.304744][ T28] ? nsim_bus_dev_max_vfs_write+0x14a/0x200 [ 236.310725][ T28] nsim_bus_dev_max_vfs_write+0x169/0x200 [ 236.317163][ T28] full_proxy_write+0x87/0x110 [ 236.322190][ T28] ? full_proxy_read+0x110/0x110 [ 236.327350][ T28] vfs_write+0x21b/0x660 [ 236.331662][ T28] ? __fget_files+0x192/0x1d0 [ 236.336358][ T28] ksys_write+0xc6/0x170 [ 236.340649][ T28] do_syscall_64+0x55/0xb0 [ 236.345107][ T28] ? clear_bhb_loop+0x40/0x90 [ 236.349837][ T28] ? clear_bhb_loop+0x40/0x90 [ 236.354690][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.360647][ T28] RIP: 0033:0x7f6a1c7de019 [ 236.365078][ T28] RSP: 002b:00007f6a1c63f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.373564][ T28] RAX: ffffffffffffffda RBX: 00007f6a1ca65fa0 RCX: 00007f6a1c7de019 [ 236.381581][ T28] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 236.389576][ T28] RBP: 00007f6a1c87500c R08: 0000000000000000 R09: 0000000000000000 [ 236.397620][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.405673][ T28] R13: 00007f6a1ca66038 R14: 00007f6a1ca65fa0 R15: 00007ffed7f66228 [ 236.413719][ T28] [ 236.416926][ T28] [ 236.416926][ T28] Showing all locks held in the system: [ 236.424702][ T28] 1 lock held by khungtaskd/28: [ 236.429550][ T28] #0: ffffffff839aa0b8 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x2e/0x100 [ 236.439587][ T28] 2 locks held by getty/1904: [ 236.444367][ T28] #0: ffff8881102e70a0 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x50 [ 236.454371][ T28] #1: ffffc90003b9b2f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x23b/0xba0 [ 236.464438][ T28] 7 locks held by syz-executor/10659: [ 236.469843][ T28] #0: ffff8881027853f0 (sb_writers#8){....}-{0:0}, at: ksys_write+0xc6/0x170 [ 236.478809][ T28] #1: ffff88810d370888 (&of->mutex){....}-{3:3}, at: kernfs_fop_write_iter+0x128/0x2d0 [ 236.488627][ T28] #2: ffff88810e2b2960 (kn->active#46){....}-{0:0}, at: kernfs_fop_write_iter+0x14c/0x2d0 [ 236.498684][ T28] #3: ffffffff83adc928 (nsim_bus_dev_list_lock){....}-{3:3}, at: del_device_store+0x7d/0x1a0 [ 236.509054][ T28] #4: ffff88810cf22130 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0x5f/0x360 [ 236.519721][ T28] #5: ffff88810cf23250 (&devlink->lock_key#5){....}-{3:3}, at: nsim_drv_remove+0x28/0xb0 [ 236.529715][ T28] #6: ffff888114a205e0 (&sb->s_type->i_mutex_key#3/2){....}-{3:3}, at: simple_recursive_removal+0x1ce/0x3b0 [ 236.541367][ T28] 3 locks held by syz.5.2605/11346: [ 236.546575][ T28] #0: ffff88811d02d6c8 (&f->f_pos_lock){....}-{3:3}, at: __fdget_pos+0x154/0x170 [ 236.555882][ T28] #1: ffff888103a593f0 (sb_writers#9){....}-{0:0}, at: ksys_write+0xc6/0x170 [ 236.564957][ T28] #2: ffff88810cf23250 (&devlink->lock_key#5){....}-{3:3}, at: nsim_bus_dev_max_vfs_write+0x169/0x200 [ 236.576092][ T28] 3 locks held by syz.2.2606/11350: [ 236.581342][ T28] #0: ffff8881046b38c8 (&f->f_pos_lock){....}-{3:3}, at: __fdget_pos+0x154/0x170 [ 236.590916][ T28] #1: ffff888103a593f0 (sb_writers#9){....}-{0:0}, at: ksys_write+0xc6/0x170 [ 236.600041][ T28] #2: ffff88810cf23250 (&devlink->lock_key#5){....}-{3:3}, at: nsim_bus_dev_max_vfs_write+0x169/0x200 [ 236.611184][ T28] 3 locks held by syz.4.2607/11349: [ 236.616454][ T28] #0: ffff888102b8dcc8 (&f->f_pos_lock){....}-{3:3}, at: __fdget_pos+0x154/0x170 [ 236.625943][ T28] #1: ffff888103a593f0 (sb_writers#9){....}-{0:0}, at: ksys_write+0xc6/0x170 [ 236.635088][ T28] #2: ffff88810cf23250 (&devlink->lock_key#5){....}-{3:3}, at: nsim_bus_dev_max_vfs_write+0x169/0x200 [ 236.646287][ T28] 4 locks held by syz-executor/11446: [ 236.651721][ T28] #0: ffff8881027853f0 (sb_writers#8){....}-{0:0}, at: ksys_write+0xc6/0x170 [ 236.660925][ T28] #1: ffff888120143688 (&of->mutex){....}-{3:3}, at: kernfs_fop_write_iter+0x128/0x2d0 [ 236.670747][ T28] #2: ffff88810e2b2960 (kn->active#46){....}-{0:0}, at: kernfs_fop_write_iter+0x14c/0x2d0 [ 236.680858][ T28] #3: ffffffff83adc928 (nsim_bus_dev_list_lock){....}-{3:3}, at: del_device_store+0x7d/0x1a0 [ 236.691191][ T28] 4 locks held by syz-executor/11447: [ 236.696736][ T28] #0: ffff8881027853f0 (sb_writers#8){....}-{0:0}, at: ksys_write+0xc6/0x170 [ 236.705751][ T28] #1: ffff888120bcda88 (&of->mutex){....}-{3:3}, at: kernfs_fop_write_iter+0x128/0x2d0 [ 236.715568][ T28] #2: ffff88810e2b2960 (kn->active#46){....}-{0:0}, at: kernfs_fop_write_iter+0x14c/0x2d0 [ 236.725728][ T28] #3: ffffffff83adc928 (nsim_bus_dev_list_lock){....}-{3:3}, at: del_device_store+0x7d/0x1a0 [ 236.736180][ T28] 4 locks held by syz-executor/11449: [ 236.741701][ T28] #0: ffff8881027853f0 (sb_writers#8){....}-{0:0}, at: ksys_write+0xc6/0x170 [ 236.750755][ T28] #1: ffff888120bcdc88 (&of->mutex){....}-{3:3}, at: kernfs_fop_write_iter+0x128/0x2d0 [ 236.760662][ T28] #2: ffff88810e2b2960 (kn->active#46){....}-{0:0}, at: kernfs_fop_write_iter+0x14c/0x2d0 [ 236.770755][ T28] #3: ffffffff83adc928 (nsim_bus_dev_list_lock){....}-{3:3}, at: del_device_store+0x7d/0x1a0 [ 236.781088][ T28] 4 locks held by syz-executor/11730: [ 236.786678][ T28] #0: ffff8881027853f0 (sb_writers#8){....}-{0:0}, at: ksys_write+0xc6/0x170 [ 236.795859][ T28] #1: ffff888120143c88 (&of->mutex){....}-{3:3}, at: kernfs_fop_write_iter+0x128/0x2d0 [ 236.805774][ T28] #2: ffff88810e2b2960 (kn->active#46){....}-{0:0}, at: kernfs_fop_write_iter+0x14c/0x2d0 [ 236.816652][ T28] #3: ffffffff83adc928 (nsim_bus_dev_list_lock){....}-{3:3}, at: del_device_store+0x7d/0x1a0 [ 236.827102][ T28] 4 locks held by syz-executor/11827: [ 236.832533][ T28] #0: ffff8881027853f0 (sb_writers#8){....}-{0:0}, at: ksys_write+0xc6/0x170 [ 236.841538][ T28] #1: ffff888122952088 (&of->mutex){....}-{3:3}, at: kernfs_fop_write_iter+0x128/0x2d0 [ 236.851351][ T28] #2: ffff88810e2b2960 (kn->active#46){....}-{0:0}, at: kernfs_fop_write_iter+0x14c/0x2d0 [ 236.861449][ T28] #3: ffffffff83adc928 (nsim_bus_dev_list_lock){....}-{3:3}, at: del_device_store+0x7d/0x1a0 [ 236.871999][ T28] 4 locks held by syz-executor/11829: [ 236.877402][ T28] #0: ffff8881027853f0 (sb_writers#8){....}-{0:0}, at: ksys_write+0xc6/0x170 [ 236.886446][ T28] #1: ffff88812262b888 (&of->mutex){....}-{3:3}, at: kernfs_fop_write_iter+0x128/0x2d0 [ 236.896286][ T28] #2: ffff88810e2b2960 (kn->active#46){....}-{0:0}, at: kernfs_fop_write_iter+0x14c/0x2d0 [ 236.906366][ T28] #3: ffffffff83adc928 (nsim_bus_dev_list_lock){....}-{3:3}, at: del_device_store+0x7d/0x1a0 [ 236.916837][ T28] 4 locks held by syz-executor/11830: [ 236.922373][ T28] #0: ffff8881027853f0 (sb_writers#8){....}-{0:0}, at: ksys_write+0xc6/0x170 [ 236.931343][ T28] #1: ffff888122952488 (&of->mutex){....}-{3:3}, at: kernfs_fop_write_iter+0x128/0x2d0 [ 236.941163][ T28] #2: ffff88810e2b2960 (kn->active#46){....}-{0:0}, at: kernfs_fop_write_iter+0x14c/0x2d0 [ 236.951270][ T28] #3: ffffffff83adc928 (nsim_bus_dev_list_lock){....}-{3:3}, at: del_device_store+0x7d/0x1a0 [ 236.961695][ T28] 4 locks held by syz-executor/12111: [ 236.967116][ T28] #0: ffff8881027853f0 (sb_writers#8){....}-{0:0}, at: ksys_write+0xc6/0x170 [ 236.976163][ T28] #1: ffff888122952a88 (&of->mutex){....}-{3:3}, at: kernfs_fop_write_iter+0x128/0x2d0 [ 236.986159][ T28] #2: ffff88810e2b2960 (kn->active#46){....}-{0:0}, at: kernfs_fop_write_iter+0x14c/0x2d0 [ 236.996255][ T28] #3: ffffffff83adc928 (nsim_bus_dev_list_lock){....}-{3:3}, at: del_device_store+0x7d/0x1a0 [ 237.006598][ T28] 4 locks held by syz-executor/12207: [ 237.012026][ T28] #0: ffff8881027853f0 (sb_writers#8){....}-{0:0}, at: ksys_write+0xc6/0x170 [ 237.021028][ T28] #1: ffff88811f002c88 (&of->mutex){....}-{3:3}, at: kernfs_fop_write_iter+0x128/0x2d0 [ 237.030825][ T28] #2: ffff88810e2b2960 (kn->active#46){....}-{0:0}, at: kernfs_fop_write_iter+0x14c/0x2d0 [ 237.040917][ T28] #3: ffffffff83adc928 (nsim_bus_dev_list_lock){....}-{3:3}, at: del_device_store+0x7d/0x1a0 [ 237.051251][ T28] 4 locks held by syz-executor/12210: [ 237.056961][ T28] #0: ffff8881027853f0 (sb_writers#8){....}-{0:0}, at: ksys_write+0xc6/0x170 [ 237.065985][ T28] #1: ffff88810f73b888 (&of->mutex){....}-{3:3}, at: kernfs_fop_write_iter+0x128/0x2d0 [ 237.076062][ T28] #2: ffff88810e2b2960 (kn->active#46){....}-{0:0}, at: kernfs_fop_write_iter+0x14c/0x2d0 [ 237.086144][ T28] #3: ffffffff83adc928 (nsim_bus_dev_list_lock){....}-{3:3}, at: del_device_store+0x7d/0x1a0 [ 237.096497][ T28] 4 locks held by syz-executor/12211: [ 237.101920][ T28] #0: ffff8881027853f0 (sb_writers#8){....}-{0:0}, at: ksys_write+0xc6/0x170 [ 237.110937][ T28] #1: ffff88811f003088 (&of->mutex){....}-{3:3}, at: kernfs_fop_write_iter+0x128/0x2d0 [ 237.120747][ T28] #2: ffff88810e2b2960 (kn->active#46){....}-{0:0}, at: kernfs_fop_write_iter+0x14c/0x2d0 [ 237.130926][ T28] #3: ffffffff83adc928 (nsim_bus_dev_list_lock){....}-{3:3}, at: del_device_store+0x7d/0x1a0 [ 237.141420][ T28] [ 237.143779][ T28] ============================================= [ 237.143779][ T28] [ 237.152225][ T28] NMI backtrace for cpu 1 [ 237.156601][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 237.163797][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.173872][ T28] Call Trace: [ 237.177150][ T28] [ 237.180080][ T28] dump_stack_lvl+0xeb/0x180 [ 237.184672][ T28] nmi_cpu_backtrace+0x224/0x240 [ 237.189615][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 237.195682][ T28] nmi_trigger_cpumask_backtrace+0xea/0x1f0 [ 237.201755][ T28] watchdog+0x8d7/0x910 [ 237.205919][ T28] ? watchdog+0x126/0x910 [ 237.210271][ T28] kthread+0x114/0x140 [ 237.214357][ T28] ? hungtask_pm_notify+0x50/0x50 [ 237.219385][ T28] ? kthread_blkcg+0x60/0x60 [ 237.223994][ T28] ret_from_fork+0x48/0x60 [ 237.228408][ T28] ? kthread_blkcg+0x60/0x60 [ 237.232997][ T28] ret_from_fork_asm+0x11/0x20 [ 237.237788][ T28] [ 237.240864][ T28] Sending NMI from CPU 1 to CPUs 0: [ 237.246128][ C0] NMI backtrace for cpu 0 [ 237.246134][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 237.246147][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.246154][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 237.246178][ C0] Code: b7 94 00 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 21 ba 35 00 fb f4 66 0f 1f 00 50 8b 37 83 e6 fe 0f 01 f9 66 90 48 c1 e2 20 48 09 [ 237.246189][ C0] RSP: 0018:ffffffff83803e88 EFLAGS: 000002c2 [ 237.246198][ C0] RAX: 932d19e07fa09900 RBX: 0000000000000000 RCX: 932d19e07fa09900 [ 237.246206][ C0] RDX: 0000000000000000 RSI: ffffffff834eb768 RDI: ffffffff835f33ef [ 237.246214][ C0] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000003d49fbc9ee [ 237.246221][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 237.246228][ C0] R13: ffffffff8383a980 R14: 0000000000000000 R15: 0000000000000000 [ 237.246236][ C0] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 237.246246][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.246255][ C0] CR2: 00007f5a61514e9c CR3: 0000000102f93000 CR4: 00000000003506f0 [ 237.246267][ C0] Call Trace: [ 237.246271][ C0] [ 237.246275][ C0] default_idle+0x13/0x20 [ 237.246296][ C0] default_idle_call+0x35/0x50 [ 237.246316][ C0] do_idle+0x191/0x2d0 [ 237.246337][ C0] cpu_startup_entry+0x24/0x30 [ 237.246357][ C0] rest_init+0xce/0xd0 [ 237.246367][ C0] ? time_init+0x20/0x20 [ 237.246383][ C0] arch_call_rest_init+0x9/0x10 [ 237.246405][ C0] start_kernel+0x340/0x340 [ 237.246426][ C0] x86_64_start_reservations+0x2a/0x30 [ 237.246443][ C0] x86_64_start_kernel+0x5b/0x60 [ 237.246461][ C0] secondary_startup_64_no_verify+0x167/0x16b [ 237.246481][ C0] [ 237.247141][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 237.432843][ T28] Kernel Offset: disabled [ 237.437171][ T28] Rebooting in 86400 seconds..