[ 461.030235][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.059791][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.083502][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.172594][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.191374][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.223006][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.260662][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.276230][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.349900][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.383097][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.441680][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.487018][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.511695][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.563974][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.579065][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.707006][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.853150][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.903948][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.928295][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.953412][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.057633][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.094413][ T5461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.118721][ T5461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.154405][ T5461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.242536][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 462.287620][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 462.364274][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 462.374885][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 462.459428][ T5461] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.489289][ T5461] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.501521][ T5461] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.522183][ T5461] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.787347][ T5299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.842392][ T5299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.953435][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 463.042981][ T5364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.099195][ T5364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.124094][ T5459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready Warning: Permanently added '10.128.1.239' (ED25519) to the list of known hosts. executing program [ 467.998074][ T5095] Bluetooth: hci11: command 0x0406 tx timeout [ 476.158203][ T27] INFO: task syz.0.26:5363 blocked for more than 143 seconds. [ 476.166702][ T27] Not tainted syzkaller #0 [ 476.198279][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 476.222110][ T27] task:syz.0.26 state:D stack:26192 pid: 5363 ppid: 5346 flags:0x00004004 [ 476.295085][ T27] Call Trace: [ 476.311223][ T27] [ 476.314455][ T27] __schedule+0x11ef/0x43c0 [ 476.345305][ T27] ? release_firmware_map_entry+0x190/0x190 [ 476.369568][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 476.412686][ T27] ? lock_chain_count+0x20/0x20 [ 476.419113][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 476.437745][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 476.473830][ T27] schedule+0x11b/0x1e0 [ 476.524528][ T27] schedule_preempt_disabled+0xf/0x20 [ 476.543148][ T27] rwsem_down_read_slowpath+0x548/0x9d0 [ 476.550044][ T27] ? down_write_killable_nested+0x90/0x90 [ 476.555990][ T27] ? read_lock_is_recursive+0x10/0x10 [ 476.561847][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 476.632780][ T27] ? __rwlock_init+0x140/0x140 [ 476.677846][ T27] down_read+0x96/0x2e0 [ 476.684016][ T27] user_get_super+0x118/0x240 [ 476.698289][ T27] __se_sys_quotactl+0x46f/0x6f0 [ 476.760097][ T27] ? __x64_sys_quotactl+0xa0/0xa0 [ 476.772448][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 476.820459][ T27] ? lock_chain_count+0x20/0x20 [ 476.836983][ T27] ? vtime_user_exit+0x2c8/0x3e0 [ 476.897860][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 476.938391][ T27] do_syscall_64+0x4c/0xa0 [ 476.963332][ T27] ? clear_bhb_loop+0x30/0x80 [ 476.976416][ T27] ? clear_bhb_loop+0x30/0x80 [ 476.996329][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 477.038760][ T27] RIP: 0033:0x7f043f1fa0b9 [ 477.046046][ T27] RSP: 002b:00007f043e45f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 477.066086][ T27] RAX: ffffffffffffffda RBX: 00007f043f426fa0 RCX: 00007f043f1fa0b9 [ 477.197410][ T27] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffff80000800 [ 477.207867][ T27] RBP: 00007f043f28c9c4 R08: 0000000000000000 R09: 0000000000000000 [ 477.222746][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.285244][ T27] R13: 0000000000000000 R14: 00007f043f426fa0 R15: 00007ffccfd73128 [ 477.306114][ T27] [ 477.325477][ T27] [ 477.325477][ T27] Showing all locks held in the system: [ 477.416805][ T27] 1 lock held by khungtaskd/27: [ 477.422689][ T27] #0: ffffffff8c31f320 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 477.436819][ T27] 2 locks held by kworker/u4:1/144: [ 477.443068][ T27] 2 locks held by getty/3946: [ 477.454712][ T27] #0: ffff88814c9b9098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 477.472223][ T27] #1: ffffc90002d032e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 477.487311][ T27] 3 locks held by kworker/u4:5/5121: [ 477.576781][ T27] #0: ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 477.588349][ T27] #1: ffff8880b9027888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x4fe/0x7d0 [ 477.615502][ T27] #2: ffff88814762d170 (&lo->lo_work_lock){..-.}-{2:2}, at: loop_process_work+0x147/0x24a0 [ 477.628433][ T27] 3 locks held by syz.0.16/5123: [ 477.685285][ T27] 3 locks held by syz.1.17/5140: [ 477.747394][ T27] #0: ffff88805bef20e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 477.817622][ T27] #1: ffffc900032a10f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0 [ 477.938436][ T27] #2: ffffc900032a1180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0 [ 477.977635][ T27] 3 locks held by syz.2.18/5157: [ 478.015529][ T27] #0: ffff88807b4fc0e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 478.056321][ T27] #1: ffffc900033410f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0 [ 478.100430][ T27] #2: ffffc90003341180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0 [ 478.148203][ T27] 4 locks held by syz.3.19/5180: [ 478.153366][ T27] 4 locks held by syz.4.20/5206: [ 478.192005][ T27] 3 locks held by syz.5.21/5230: [ 478.197510][ T27] 3 locks held by syz.6.22/5261: [ 478.231985][ T27] #0: ffff8880584000e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 478.245012][ T27] #1: ffffc900037810f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0 [ 478.285586][ T27] #2: ffffc90003781180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0 [ 478.297276][ T27] 4 locks held by syz.7.23/5286: [ 478.320411][ T27] 4 locks held by syz.8.24/5312: [ 478.331435][ T27] #0: ffff888054e900e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 478.362937][ T27] #1: ffffc90003b810f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0 [ 478.373887][ T27] #2: ffffc90003b81180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0 [ 478.389321][ T27] #3: ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 478.402027][ T27] 4 locks held by syz.9.25/5343: [ 478.407333][ T27] 1 lock held by syz.0.26/5363: [ 478.416367][ T27] #0: ffff88802601c0e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240 [ 478.431130][ T27] 1 lock held by syz.1.27/5384: [ 478.436235][ T27] #0: ffff88805bef20e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240 [ 478.476523][ T27] 1 lock held by syz.2.28/5408: [ 478.533760][ T27] #0: ffff88807b4fc0e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240 [ 478.544569][ T27] 1 lock held by syz.3.29/5427: [ 478.595560][ T27] #0: ffff88805e13c0e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240 [ 478.619275][ T27] 1 lock held by syz.4.30/5458: [ 478.624349][ T27] #0: ffff888058f000e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240 [ 478.668240][ T27] 1 lock held by syz.5.31/5491: [ 478.673216][ T27] #0: ffff8880214620e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240 [ 478.687367][ T27] 1 lock held by syz-executor251/5497: [ 478.693553][ T27] #0: ffff88802601c0e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240 [ 478.704530][ T27] [ 478.707053][ T27] ============================================= [ 478.707053][ T27] [ 478.717341][ T27] NMI backtrace for cpu 1 [ 478.722335][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 478.731213][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 478.742863][ T27] Call Trace: [ 478.746250][ T27] [ 478.749569][ T27] dump_stack_lvl+0x188/0x250 [ 478.754403][ T27] ? show_regs_print_info+0x20/0x20 [ 478.760328][ T27] ? load_image+0x400/0x400 [ 478.765103][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 478.772320][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 478.778361][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 478.783789][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 478.790146][ T27] ? _printk+0xda/0x130 [ 478.794813][ T27] ? load_image+0x400/0x400 [ 478.799524][ T27] ? load_image+0x400/0x400 [ 478.804573][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 478.810827][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 478.817397][ T27] watchdog+0xe0f/0xe50 [ 478.821964][ T27] kthread+0x436/0x520 [ 478.826209][ T27] ? hungtask_pm_notify+0x40/0x40 [ 478.831336][ T27] ? kthread_blkcg+0xd0/0xd0 [ 478.836133][ T27] ret_from_fork+0x1f/0x30 [ 478.840942][ T27] [ 478.845567][ T27] Sending NMI from CPU 1 to CPUs 0: [ 478.851479][ C0] NMI backtrace for cpu 0 [ 478.851492][ C0] CPU: 0 PID: 5343 Comm: syz.9.25 Not tainted syzkaller #0 [ 478.851510][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 478.851519][ C0] RIP: 0010:mark_lock+0x66/0x320 [ 478.851539][ C0] Code: b6 47 02 24 03 3c 01 bd 09 00 00 00 83 dd 00 41 bc 01 00 00 00 89 e9 41 d3 e4 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 22 02 00 00 41 8b 07 41 89 c7 41 81 e7 ff 1f 00 00 c1 [ 478.851627][ C0] RSP: 0018:ffffc90003c3efc0 EFLAGS: 00000802 [ 478.851641][ C0] RAX: 0000000000000000 RBX: ffff888027968000 RCX: 0000000000000006 [ 478.851651][ C0] RDX: 0000000000000006 RSI: ffff888027968b18 RDI: ffff888027968000 [ 478.851662][ C0] RBP: 0000000000000006 R08: ffffffff901d6167 R09: 1ffffffff203ac2c [ 478.851672][ C0] R10: dffffc0000000000 R11: fffffbfff203ac2d R12: 0000000000000040 [ 478.851683][ C0] R13: dffffc0000000000 R14: ffff888027968b18 R15: ffff888027968b38 [ 478.851695][ C0] FS: 00007fda721866c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 478.851710][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.851721][ C0] CR2: 00007f5d80bf5000 CR3: 000000007715c000 CR4: 00000000003506f0 [ 478.851736][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 478.851745][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 478.851755][ C0] Call Trace: [ 478.851760][ C0] [ 478.851767][ C0] lockdep_hardirqs_on_prepare+0x372/0x770 [ 478.851787][ C0] ? lock_chain_count+0x20/0x20 [ 478.851803][ C0] ? __rwlock_init+0x140/0x140 [ 478.851817][ C0] ? __mutex_lock_common+0x465/0x2400 [ 478.851835][ C0] ? __find_get_block+0x12a/0x10a0 [ 478.851886][ C0] trace_hardirqs_on+0x67/0x80 [ 478.851930][ C0] __find_get_block+0x264/0x10a0 [ 478.851947][ C0] ? write_boundary_block+0x150/0x150 [ 478.851961][ C0] ? submit_bio_noacct+0x800/0x800 [ 478.852013][ C0] ? mutex_lock_nested+0x17/0x20 [ 478.852030][ C0] flush_commit_list+0xbf0/0x1d70 [ 478.852053][ C0] ? cleanup_bitmap_list+0x500/0x500 [ 478.852069][ C0] ? is_bpf_text_address+0x254/0x270 [ 478.852108][ C0] ? mutex_lock_nested+0x17/0x20 [ 478.852124][ C0] flush_journal_list+0x28d/0x1ba0 [ 478.852146][ C0] flush_used_journal_lists+0x12e6/0x1660 [ 478.852167][ C0] ? do_journal_end+0x2ed8/0x42d0 [ 478.852183][ C0] ? flush_journal_list+0x1ba0/0x1ba0 [ 478.852200][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 478.852217][ C0] ? memset+0x1e/0x40 [ 478.852257][ C0] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 478.852274][ C0] ? mutex_unlock+0x10/0x10 [ 478.852295][ C0] do_journal_end+0x3615/0x42d0 [ 478.852329][ C0] do_journal_begin_r+0xa5b/0x1040 [ 478.852353][ C0] ? journal_join_abort+0xe0/0xe0 [ 478.852373][ C0] journal_begin+0x148/0x350 [ 478.852390][ C0] reiserfs_fill_super+0x16a1/0x2440 [ 478.852411][ C0] ? reiserfs_kill_sb+0x140/0x140 [ 478.852425][ C0] ? snprintf+0xe5/0x140 [ 478.852441][ C0] ? vscnprintf+0x80/0x80 [ 478.852454][ C0] ? set_blocksize+0x1f3/0x370 [ 478.852469][ C0] ? sb_set_blocksize+0xa5/0xe0 [ 478.852483][ C0] mount_bdev+0x287/0x3c0 [ 478.852499][ C0] ? reiserfs_kill_sb+0x140/0x140 [ 478.852514][ C0] legacy_get_tree+0xe6/0x180 [ 478.852560][ C0] ? remove_save_link+0x3e0/0x3e0 [ 478.852575][ C0] vfs_get_tree+0x88/0x270 [ 478.852591][ C0] do_new_mount+0x24a/0xa40 [ 478.852634][ C0] __se_sys_mount+0x2e3/0x3d0 [ 478.852651][ C0] ? __x64_sys_mount+0xc0/0xc0 [ 478.852667][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 478.852683][ C0] ? __x64_sys_mount+0x1c/0xc0 [ 478.852699][ C0] do_syscall_64+0x4c/0xa0 [ 478.852713][ C0] ? clear_bhb_loop+0x30/0x80 [ 478.852728][ C0] ? clear_bhb_loop+0x30/0x80 [ 478.852743][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 478.852758][ C0] RIP: 0033:0x7fda72f2234a [ 478.852773][ C0] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.852786][ C0] RSP: 002b:00007fda72185e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 478.852801][ C0] RAX: ffffffffffffffda RBX: 00007fda72185ee0 RCX: 00007fda72f2234a [ 478.852810][ C0] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007fda72185ea0 [ 478.852819][ C0] RBP: 0000200000000080 R08: 00007fda72185ee0 R09: 000000000000800c [ 478.852827][ C0] R10: 000000000000800c R11: 0000000000000246 R12: 0000200000000040 [ 478.852835][ C0] R13: 00007fda72185ea0 R14: 000000000000112d R15: 0000200000000300 [ 478.852847][ C0] [ 479.353658][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 479.360725][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 479.368489][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 479.380323][ T27] Call Trace: [ 479.383789][ T27] [ 479.386904][ T27] dump_stack_lvl+0x188/0x250 [ 479.392223][ T27] ? show_regs_print_info+0x20/0x20 [ 479.397961][ T27] ? load_image+0x400/0x400 [ 479.402837][ T27] panic+0x2e5/0x810 [ 479.407047][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 479.412880][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 479.417590][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 479.424567][ T27] watchdog+0xe4e/0xe50 [ 479.429115][ T27] kthread+0x436/0x520 [ 479.433646][ T27] ? hungtask_pm_notify+0x40/0x40 [ 479.439290][ T27] ? kthread_blkcg+0xd0/0xd0 [ 479.443912][ T27] ret_from_fork+0x1f/0x30 [ 479.448446][ T27] [ 479.451775][ T27] Kernel Offset: disabled [ 479.456132][ T27] Rebooting in 86400 seconds..