Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. 2026/10/03 01:29:11 parsed 1 programs 2026/10/03 01:29:11 serving rpc on tcp://43857 Setting up swapspace version 1, size = 127995904 bytes [ 127.112542][ T5952] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 131.915457][ T4934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.916641][ T4934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.917201][ T4934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.918394][ T4934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.919257][ T4934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.442031][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.442073][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.482930][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.482954][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.975094][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.975176][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.280699][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.280839][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.280934][ T6088] bridge_slave_0: entered allmulticast mode [ 134.282309][ T6088] bridge_slave_0: entered promiscuous mode [ 134.289468][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.289942][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.290143][ T6088] bridge_slave_1: entered allmulticast mode [ 134.297924][ T6088] bridge_slave_1: entered promiscuous mode [ 134.354283][ T6088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.356961][ T6088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.394010][ T6088] team0: Port device team_slave_0 added [ 134.396836][ T6088] team0: Port device team_slave_1 added [ 134.427412][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.427432][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.427466][ T6088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.429023][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.429038][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.429070][ T6088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.535548][ T6088] hsr_slave_0: entered promiscuous mode [ 134.536308][ T6088] hsr_slave_1: entered promiscuous mode [ 135.058217][ T6088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.063022][ T6088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 135.085492][ T6088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.090110][ T6088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.091249][ T6088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.120090][ T6088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.121588][ T6088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.142289][ T6088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 135.250332][ T6088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.274672][ T6088] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.287642][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.287945][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.316645][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.316775][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.881103][ T6088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.938699][ T6088] veth0_vlan: entered promiscuous mode [ 135.956658][ T6088] veth1_vlan: entered promiscuous mode [ 136.006682][ T6088] veth0_macvtap: entered promiscuous mode [ 136.011909][ T6088] veth1_macvtap: entered promiscuous mode [ 136.041912][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.062628][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.137146][ T1014] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.137195][ T1014] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.137233][ T1014] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.137270][ T1014] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.335301][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/10/03 01:29:27 executed programs: 0 [ 137.080206][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.082753][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.094933][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.111976][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.112962][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.334255][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.907852][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.908037][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.908181][ T6185] bridge_slave_0: entered allmulticast mode [ 137.911179][ T6185] bridge_slave_0: entered promiscuous mode [ 137.920628][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.920747][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.921232][ T6185] bridge_slave_1: entered allmulticast mode [ 137.927866][ T6185] bridge_slave_1: entered promiscuous mode [ 137.992686][ T6185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.009031][ T6185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.056669][ T6185] team0: Port device team_slave_0 added [ 138.059764][ T6185] team0: Port device team_slave_1 added [ 138.110337][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.110357][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.110383][ T6185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.112874][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.112891][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.112919][ T6185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.256862][ T6185] hsr_slave_0: entered promiscuous mode [ 138.257937][ T6185] hsr_slave_1: entered promiscuous mode [ 138.258692][ T6185] debugfs: 'hsr0' already exists in 'hsr' [ 138.258730][ T6185] Cannot create hsr debugfs directory [ 138.348472][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.770838][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.947405][ T12] bridge_slave_1: left allmulticast mode [ 138.947438][ T12] bridge_slave_1: left promiscuous mode [ 138.947684][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.977220][ T12] bridge_slave_0: left allmulticast mode [ 138.977250][ T12] bridge_slave_0: left promiscuous mode [ 138.977527][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.138201][ T4934] Bluetooth: hci0: command tx timeout [ 139.195107][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.200114][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.202156][ T12] bond0 (unregistering): Released all slaves [ 139.311960][ T12] hsr_slave_0: left promiscuous mode [ 139.319995][ T12] hsr_slave_1: left promiscuous mode [ 139.321018][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.321042][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.330942][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.331005][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.365603][ T12] veth1_macvtap: left promiscuous mode [ 139.365645][ T12] veth0_macvtap: left promiscuous mode [ 139.365751][ T12] veth1_vlan: left promiscuous mode [ 139.365819][ T12] veth0_vlan: left promiscuous mode [ 139.689447][ T12] team0 (unregistering): Port device team_slave_1 removed [ 139.718881][ T12] team0 (unregistering): Port device team_slave_0 removed [ 140.239859][ T6185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.255308][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 140.320741][ T6185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.336088][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 140.337680][ T6185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.358043][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 140.361741][ T6185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.382627][ T6185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 140.516535][ T6185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.541603][ T6185] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.556415][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.556532][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.580325][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.580430][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.131350][ T6185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.199335][ T6185] veth0_vlan: entered promiscuous mode [ 141.214254][ T4934] Bluetooth: hci0: command tx timeout [ 141.222425][ T6185] veth1_vlan: entered promiscuous mode [ 141.261777][ T6185] veth0_macvtap: entered promiscuous mode [ 141.276856][ T6185] veth1_macvtap: entered promiscuous mode [ 141.305495][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.327094][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.384642][ T1161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.384692][ T1161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.384729][ T1161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.384765][ T1161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.467140][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.467163][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.526220][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.526243][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.873686][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 142.026568][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 142.035204][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.035266][ T9] usb 1-1: Product: syz [ 142.035301][ T9] usb 1-1: Manufacturer: syz [ 142.035336][ T9] usb 1-1: SerialNumber: syz [ 142.156080][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 142.760503][ T5768] usb 1-1: USB disconnect, device number 2 2026/10/03 01:29:34 executed programs: 3 [ 143.293403][ T4934] Bluetooth: hci0: command tx timeout [ 143.373785][ T10] usb 1-1: Service connection timeout for: 256 [ 143.373812][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 145.373228][ T4934] Bluetooth: hci0: command tx timeout 2026/10/03 01:29:40 executed programs: 5 2026/10/03 01:29:46 executed programs: 7 2026/10/03 01:29:52 executed programs: 9 2026/10/03 01:29:58 executed programs: 11 2026/10/03 01:30:04 executed programs: 13 2026/10/03 01:30:10 executed programs: 15 2026/10/03 01:30:16 executed programs: 17 2026/10/03 01:30:22 executed programs: 19 [ 194.415934][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.415995][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 2026/10/03 01:30:28 executed programs: 21 2026/10/03 01:30:34 executed programs: 23 2026/10/03 01:30:40 executed programs: 25 2026/10/03 01:30:47 executed programs: 27 2026/10/03 01:30:53 executed programs: 29 2026/10/03 01:30:59 executed programs: 31 2026/10/03 01:31:05 executed programs: 33 2026/10/03 01:31:11 executed programs: 35 2026/10/03 01:31:17 executed programs: 37 2026/10/03 01:31:23 executed programs: 39 [ 255.855217][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.855280][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 2026/10/03 01:31:29 executed programs: 41 [ 263.055928][ T4934] Bluetooth: hci0: command 0x0406 tx timeout 2026/10/03 01:31:35 executed programs: 43 2026/10/03 01:31:41 executed programs: 45 2026/10/03 01:31:47 executed programs: 47 2026/10/03 01:31:54 executed programs: 49 2026/10/03 01:32:00 executed programs: 51 [ 292.973224][ T33] INFO: task kworker/1:4:5768 blocked for more than 143 seconds. [ 292.973256][ T33] Not tainted syzkaller #0 [ 292.973268][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.973278][ T33] task:kworker/1:4 state:D stack:24512 pid:5768 tgid:5768 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 292.973366][ T33] Workqueue: usb_hub_wq hub_event [ 292.973420][ T33] Call Trace: [ 292.973434][ T33] [ 292.973450][ T33] __schedule+0x17db/0x58f0 [ 292.973513][ T33] ? __pfx___schedule+0x10/0x10 [ 292.973554][ T33] ? schedule+0x90/0x2b0 [ 292.973588][ T33] schedule+0x164/0x2b0 [ 292.973620][ T33] schedule_timeout+0xc0/0x2c0 [ 292.973647][ T33] ? __pfx_schedule_timeout+0x10/0x10 [ 292.973675][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 292.973719][ T33] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.973749][ T33] ? wait_for_completion+0x272/0x5e0 [ 292.973780][ T33] wait_for_completion+0x2ca/0x5e0 [ 292.973826][ T33] ? __pfx_wait_for_completion+0x10/0x10 [ 292.973873][ T33] ath9k_hif_usb_disconnect+0xb8/0x250 [ 292.973908][ T33] usb_unbind_interface+0x295/0x9f0 [ 292.973940][ T33] ? kernfs_remove_by_name_ns+0x101/0x140 [ 292.974024][ T33] ? kernfs_remove_by_name_ns+0x101/0x140 [ 292.974057][ T33] ? __pfx_usb_unbind_interface+0x10/0x10 [ 292.974087][ T33] device_release_driver_internal+0x4f5/0x880 [ 292.974127][ T33] bus_remove_device+0x444/0x560 [ 292.974157][ T33] ? __pfx_bus_remove_device+0x10/0x10 [ 292.974193][ T33] ? kernfs_remove_by_name_ns+0x101/0x140 [ 292.974226][ T33] device_del+0x524/0x8f0 [ 292.974264][ T33] ? __pfx_device_del+0x10/0x10 [ 292.974291][ T33] ? kobject_put+0x516/0x550 [ 292.974324][ T33] usb_disable_device+0x3d4/0x8d0 [ 292.974364][ T33] usb_disconnect+0x346/0x9a0 [ 292.974401][ T33] hub_event+0x1bbb/0x4d30 [ 292.974429][ T33] ? __lock_acquire+0x747/0x2de0 [ 292.974467][ T33] ? register_lock_class+0x31/0x2e0 [ 292.974527][ T33] ? __pfx_hub_event+0x10/0x10 [ 292.974566][ T33] ? rcu_is_watching+0x16/0xb0 [ 292.974596][ T33] ? process_scheduled_works+0x97a/0x1630 [ 292.974628][ T33] process_scheduled_works+0xc3d/0x1630 [ 292.974692][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 292.974730][ T33] ? assign_work+0x3cf/0x5d0 [ 292.974765][ T33] worker_thread+0xa47/0xfb0 [ 292.974811][ T33] ? __kthread_parkme+0x71/0x1f0 [ 292.974855][ T33] kthread+0x38b/0x480 [ 292.974878][ T33] ? __pfx_worker_thread+0x10/0x10 [ 292.974907][ T33] ? __pfx_kthread+0x10/0x10 [ 292.974931][ T33] ret_from_fork+0x514/0xb70 [ 292.974957][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 292.974987][ T33] ? __switch_to+0xc89/0x1420 [ 292.975022][ T33] ? __pfx_kthread+0x10/0x10 [ 292.975046][ T33] ret_from_fork_asm+0x1a/0x30 [ 292.975099][ T33] [ 292.975126][ T33] [ 292.975126][ T33] Showing all locks held in the system: [ 292.975138][ T33] locks held by kworker/0:1/10: 4, on CPU#0: [ 292.975155][ T33] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 292.975219][ T33] #1: ffffc900000f7c40 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 292.975282][ T33] #2: ffff8880b863bb20 (&rq->__lock){-.-.}-{2:2}, at: schedule+0x90/0x2b0 [ 292.975343][ T33] #3: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 292.975403][ T33] locks held by ksoftirqd/0/15: 2, last CPU#0: [ 292.975419][ T33] #0: ffff8880b863bb20 (&rq->__lock){-.-.}-{2:2}, at: finish_task_switch+0x159/0xc60 [ 292.975479][ T33] #1: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 292.975540][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 292.975556][ T33] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 292.975632][ T33] locks held by getty/5372: 2, on CPU#1: [ 292.975648][ T33] #0: ffff8880328b10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 292.975704][ T33] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 292.975768][ T33] locks held by kworker/1:4/5768: 5, on CPU#1: [ 292.975784][ T33] #0: ffff888022aaf540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 292.975847][ T33] #1: ffffc90003b9fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 292.975909][ T33] #2: ffff88802a1b51d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 292.975970][ T33] #3: ffff88807bbca1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 292.976034][ T33] #4: ffff88807f7b41a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 292.976099][ T33] [ 292.976105][ T33] ============================================= [ 292.976105][ T33] [ 292.976116][ T33] NMI backtrace for cpu 1 [ 292.976140][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 292.976164][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 292.976177][ T33] Call Trace: [ 292.976186][ T33] [ 292.976195][ T33] dump_stack_lvl+0xe8/0x150 [ 292.976228][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 292.976255][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 292.976292][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 292.976322][ T33] sys_info+0x135/0x170 [ 292.976345][ T33] watchdog+0xfd7/0x1030 [ 292.976377][ T33] ? watchdog+0x1c7/0x1030 [ 292.976408][ T33] kthread+0x38b/0x480 [ 292.976430][ T33] ? __pfx_watchdog+0x10/0x10 [ 292.976452][ T33] ? __pfx_kthread+0x10/0x10 [ 292.976475][ T33] ret_from_fork+0x514/0xb70 [ 292.976500][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 292.976522][ T33] ? __switch_to+0xc89/0x1420 [ 292.976556][ T33] ? __pfx_kthread+0x10/0x10 [ 292.976580][ T33] ret_from_fork_asm+0x1a/0x30 [ 292.976631][ T33] [ 292.976639][ T33] Sending NMI from CPU 1 to CPUs 0: [ 292.976671][ C0] NMI backtrace for cpu 0 [ 292.976685][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 292.976706][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 292.976717][ C0] RIP: 0010:check_preemption_disabled+0x19/0xd0 [ 292.976750][ C0] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 1b 4d ae 07 65 48 8b 0d eb 4c ae 07 85 c9 74 0c <5b> 41 5e 41 5f 5d c3 cc cc cc cc cc 9c 59 f7 c1 00 02 00 00 74 ea [ 292.976766][ C0] RSP: 0018:ffffc90000147bf8 EFLAGS: 00000006 [ 292.976782][ C0] RAX: 0000000000000000 RBX: ffff88801e299f40 RCX: 8000000000000100 [ 292.976796][ C0] RDX: 0000000000000000 RSI: ffffffff8e69f5c6 RDI: ffffffff8c6dad80 [ 292.976809][ C0] RBP: dffffc0000000000 R08: ffffffff907a627f R09: 1ffffffff20f4c4f [ 292.976823][ C0] R10: dffffc0000000000 R11: fffffbfff20f4c50 R12: ffff8880b8624080 [ 292.976837][ C0] R13: 0000000000000286 R14: ffff8880b8624088 R15: ffff88807c9cd158 [ 292.976851][ C0] FS: 0000000000000000(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000 [ 292.976867][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.976880][ C0] CR2: 00007f74059872c0 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 292.976897][ C0] Call Trace: [ 292.976904][ C0] [ 292.976912][ C0] lockdep_hardirqs_on_prepare+0x19f/0x270 [ 292.976934][ C0] trace_hardirqs_on+0x28/0x40 [ 292.976954][ C0] __tasklet_schedule_common+0xc9/0x110 [ 292.976984][ C0] tasklet_action_common+0x2d7/0x490 [ 292.977015][ C0] handle_softirqs+0x226/0x860 [ 292.977041][ C0] ? run_ksoftirqd+0x36/0x60 [ 292.977070][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 292.977097][ C0] run_ksoftirqd+0x36/0x60 [ 292.977122][ C0] smpboot_thread_fn+0x565/0xa70 [ 292.977151][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 292.977181][ C0] kthread+0x38b/0x480 [ 292.977198][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 292.977224][ C0] ? __pfx_kthread+0x10/0x10 [ 292.977242][ C0] ret_from_fork+0x514/0xb70 [ 292.977260][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 292.977277][ C0] ? __switch_to+0xc89/0x1420 [ 292.977303][ C0] ? __pfx_kthread+0x10/0x10 [ 292.977321][ C0] ret_from_fork_asm+0x1a/0x30 [ 292.977355][ C0] [ 292.977669][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 293.769884][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 293.779025][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 293.789116][ T33] Call Trace: [ 293.792431][ T33] [ 293.795393][ T33] vpanic+0x56d/0xa60 [ 293.799421][ T33] ? __pfx_vpanic+0x10/0x10 [ 293.803969][ T33] ? console_srcu_read_unlock+0x3a/0x60 [ 293.809566][ T33] panic+0xc5/0xd0 [ 293.813330][ T33] ? __pfx_panic+0x10/0x10 [ 293.817802][ T33] ? wq_watchdog_touch+0xf9/0x160 [ 293.822876][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 293.829090][ T33] watchdog+0x1030/0x1030 [ 293.833469][ T33] ? watchdog+0x1c7/0x1030 [ 293.838020][ T33] kthread+0x38b/0x480 [ 293.842127][ T33] ? __pfx_watchdog+0x10/0x10 [ 293.846845][ T33] ? __pfx_kthread+0x10/0x10 [ 293.851482][ T33] ret_from_fork+0x514/0xb70 [ 293.856116][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 293.861276][ T33] ? __switch_to+0xc89/0x1420 [ 293.866001][ T33] ? __pfx_kthread+0x10/0x10 [ 293.870630][ T33] ret_from_fork_asm+0x1a/0x30 [ 293.875465][ T33] [ 293.879124][ T33] Kernel Offset: disabled [ 293.883561][ T33] Rebooting in 86400 seconds..