[ 116.224790][ T198] hsr_slave_0: left promiscuous mode
[ 116.264751][ T198] hsr_slave_1: left promiscuous mode
[ 116.265632][ T198] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 116.265653][ T198] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 116.315690][ T198] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 116.315716][ T198] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 116.407469][ T198] veth1_macvtap: left promiscuous mode
[ 116.407549][ T198] veth0_macvtap: left promiscuous mode
[ 116.407687][ T198] veth1_vlan: left promiscuous mode
[ 116.407786][ T198] veth0_vlan: left promiscuous mode
[ 117.065199][ T198] team0 (unregistering): Port device team_slave_1 removed
[ 117.105476][ T198] team0 (unregistering): Port device team_slave_0 removed
[ 117.279182][ T5261] 8021q: adding VLAN 0 to HW filter on device eth8
Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts.
[*] Starting reproducer for sb_start_write hang
[+] Reduced hung task timeout to 15 seconds.
[+] open / successful.
[+] ioctl FIFREEZE successful.
[*] Parent waiting for hung task watchdog to trigger (sleeping 60s)...
[*] Child attempting to open O_TMPFILE on frozen fs...
[ 132.930464][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.930519][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[ 152.124815][ T38] INFO: task syz-executor328:5959 blocked for more than 15 seconds.
[ 152.124836][ T38] Not tainted syzkaller #0
[ 152.124842][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 152.124846][ T38] task:syz-executor328 state:D stack:28328 pid:5959 tgid:5959 ppid:5947 task_flags:0x400040 flags:0x00080000
[ 152.124893][ T38] Call Trace:
[ 152.124900][ T38]
[ 152.124912][ T38] __schedule+0x16dc/0x5500
[ 152.124955][ T38] ? lockdep_hardirqs_on+0x7a/0x110
[ 152.124967][ T38] ? rt_mutex_slowunlock+0x4ee/0xa20
[ 152.124983][ T38] ? __pfx___schedule+0x10/0x10
[ 152.125002][ T38] ? schedule+0x90/0x2b0
[ 152.125018][ T38] schedule+0x164/0x2b0
[ 152.125033][ T38] ? percpu_rwsem_wait+0x2d5/0x4a0
[ 152.125049][ T38] percpu_rwsem_wait+0x32d/0x4a0
[ 152.125065][ T38] ? __pfx_percpu_rwsem_wait+0x10/0x10
[ 152.125080][ T38] ? __pfx_percpu_rwsem_wake_function+0x10/0x10
[ 152.125098][ T38] ? rcu_is_watching+0x15/0xb0
[ 152.125113][ T38] __percpu_down_read+0xf8/0x140
[ 152.125127][ T38] sb_start_write+0x18e/0x1c0
[ 152.125141][ T38] mnt_want_write+0x41/0x90
[ 152.125154][ T38] do_tmpfile+0x6c/0x240
[ 152.125169][ T38] path_openat+0x3095/0x3850
[ 152.125185][ T38] ? kasan_save_track+0x3e/0x80
[ 152.125194][ T38] ? __kasan_slab_alloc+0x6c/0x80
[ 152.125204][ T38] ? kmem_cache_alloc_noprof+0x355/0x650
[ 152.125219][ T38] ? do_getname+0x2e/0x250
[ 152.125233][ T38] ? do_sys_openat2+0xcc/0x200
[ 152.125242][ T38] ? __x64_sys_openat+0x138/0x170
[ 152.125251][ T38] ? do_syscall_64+0x174/0x580
[ 152.125260][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 152.125281][ T38] do_file_open+0x23e/0x4a0
[ 152.125292][ T38] ? lockdep_hardirqs_on+0x7a/0x110
[ 152.125307][ T38] ? __pfx_do_file_open+0x10/0x10
[ 152.125331][ T38] ? alloc_fd+0x654/0x6d0
[ 152.125362][ T38] do_sys_openat2+0x115/0x200
[ 152.125377][ T38] ? __pfx_do_sys_openat2+0x10/0x10
[ 152.125405][ T38] ? ksys_write+0x202/0x270
[ 152.125418][ T38] ? __pfx_ksys_write+0x10/0x10
[ 152.125432][ T38] __x64_sys_openat+0x138/0x170
[ 152.125444][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 152.125455][ T38] do_syscall_64+0x174/0x580
[ 152.125465][ T38] ? trace_irq_disable+0x3b/0x140
[ 152.125481][ T38] ? clear_bhb_loop+0x70/0xc0
[ 152.125494][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 152.125505][ T38] RIP: 0033:0x7f3fb490aaf7
[ 152.125518][ T38] RSP: 002b:00007fff7f2f6f10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 152.125529][ T38] RAX: ffffffffffffffda RBX: 0000555578a51400 RCX: 00007f3fb490aaf7
[ 152.125538][ T38] RDX: 0000000000410001 RSI: 00007f3fb494a764 RDI: ffffffffffffff9c
[ 152.125550][ T38] RBP: 00007f3fb494a764 R08: 0000000000000000 R09: 0000000000000000
[ 152.125560][ T38] R10: 00000000000001b6 R11: 0000000000000202 R12: 00007fff7f2f70d8
[ 152.125569][ T38] R13: 0000000000000002 R14: 00007f3fb4970c80 R15: 0000000000000002
[ 152.125585][ T38]
[ 152.125595][ T38]
[ 152.125595][ T38] Showing all locks held in the system:
[ 152.125606][ T38] 1 lock held by khungtaskd/38:
[ 152.125612][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 152.125669][ T38] 2 locks held by getty/5356:
[ 152.125675][ T38] #0: ffff88803688d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 152.125702][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[ 152.125733][ T38] 1 lock held by syz-executor328/5959:
[ 152.125739][ T38] #0: ffff888035a88500 (sb_writers#4){++++}-{0:0}, at: mnt_want_write+0x41/0x90
[ 152.125766][ T38]
[ 152.125769][ T38] =============================================
[ 152.125769][ T38]
[ 152.125774][ T38] NMI backtrace for cpu 1
[ 152.125787][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 152.125803][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 152.125810][ T38] Call Trace:
[ 152.125815][ T38]
[ 152.125819][ T38] dump_stack_lvl+0xe8/0x150
[ 152.125835][ T38] nmi_cpu_backtrace+0x274/0x2d0
[ 152.125849][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 152.125866][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380
[ 152.125881][ T38] sys_info+0x135/0x170
[ 152.125895][ T38] watchdog+0xfd7/0x1030
[ 152.125913][ T38] ? watchdog+0x1c7/0x1030
[ 152.125938][ T38] kthread+0x388/0x470
[ 152.125952][ T38] ? __pfx_watchdog+0x10/0x10
[ 152.125966][ T38] ? __pfx_kthread+0x10/0x10
[ 152.125980][ T38] ret_from_fork+0x514/0xb70
[ 152.125997][ T38] ? __pfx_ret_from_fork+0x10/0x10
[ 152.126011][ T38] ? __switch_to+0xc89/0x1420
[ 152.126025][ T38] ? __pfx_kthread+0x10/0x10
[ 152.126039][ T38] ret_from_fork_asm+0x1a/0x30
[ 152.126056][ T38]
[ 152.126063][ T38] Sending NMI from CPU 1 to CPUs 0:
[ 152.126103][ C0] NMI backtrace for cpu 0
[ 152.126122][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 152.126139][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 152.126147][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 152.126173][ C0] Code: cb 6e 02 e9 13 cf 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 44 24 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 152.126185][ C0] RSP: 0018:ffffffff8de07de0 EFLAGS: 00000242
[ 152.126199][ C0] RAX: 000000000009a1e9 RBX: ffffffff81998590 RCX: 0000000080000001
[ 152.126211][ C0] RDX: 0000000000000001 RSI: ffffffff8d887e30 RDI: ffffffff8bca6d80
[ 152.126221][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8633d5b R09: 1ffff110170c67ab
[ 152.126233][ C0] R10: dffffc0000000000 R11: ffffed10170c67ac R12: 0000000000000000
[ 152.126243][ C0] R13: 1ffffffff1bdede8 R14: 1ffffffff1bc0fc4 R15: dffffc0000000000
[ 152.126255][ C0] FS: 0000000000000000(0000) GS:ffff888125c36000(0000) knlGS:0000000000000000
[ 152.126268][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 152.126278][ C0] CR2: 0000563216b981d0 CR3: 000000000dfb0000 CR4: 00000000003526f0
[ 152.126292][ C0] Call Trace:
[ 152.126298][ C0]
[ 152.126304][ C0] default_idle+0x9/0x20
[ 152.126320][ C0] default_idle_call+0x72/0xb0
[ 152.126337][ C0] do_idle+0x2e0/0x540
[ 152.126355][ C0] ? __pfx_do_idle+0x10/0x10
[ 152.126375][ C0] cpu_startup_entry+0x43/0x60
[ 152.126391][ C0] rest_init+0x2de/0x300
[ 152.126410][ C0] start_kernel+0x392/0x3e0
[ 152.126434][ C0] x86_64_start_reservations+0x24/0x30
[ 152.126452][ C0] x86_64_start_kernel+0x137/0x1b0
[ 152.126469][ C0] common_startup_64+0x13e/0x157
[ 152.126493][ C0]
[ 152.127085][ T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 152.127093][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 152.127104][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 152.127110][ T38] Call Trace:
[ 152.127114][ T38]
[ 152.127118][ T38] vpanic+0x56c/0xa60
[ 152.127130][ T38] ? __pfx_vpanic+0x10/0x10
[ 152.127144][ T38] panic+0xc5/0xd0
[ 152.127154][ T38] ? __pfx_panic+0x10/0x10
[ 152.127165][ T38] ? wq_watchdog_touch+0xf9/0x160
[ 152.127176][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380
[ 152.127191][ T38] watchdog+0x1030/0x1030
[ 152.127209][ T38] ? watchdog+0x1c7/0x1030
[ 152.127226][ T38] kthread+0x388/0x470
[ 152.127240][ T38] ? __pfx_watchdog+0x10/0x10
[ 152.127253][ T38] ? __pfx_kthread+0x10/0x10
[ 152.127267][ T38] ret_from_fork+0x514/0xb70
[ 152.127283][ T38] ? __pfx_ret_from_fork+0x10/0x10
[ 152.127297][ T38] ? __switch_to+0xc89/0x1420
[ 152.127310][ T38] ? __pfx_kthread+0x10/0x10
[ 152.127324][ T38] ret_from_fork_asm+0x1a/0x30
[ 152.127341][ T38]
[ 152.127614][ T38] Kernel Offset: disabled