Warning: Permanently added '10.128.10.15' (ED25519) to the list of known hosts. 2025/09/26 05:40:50 parsed 1 programs [ 123.321832][ T6185] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 126.116954][ T6207] chnl_net:caif_netlink_parms(): no params data found [ 126.182343][ T6207] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.189562][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.198018][ T6207] bridge_slave_0: entered allmulticast mode [ 126.205685][ T6207] bridge_slave_0: entered promiscuous mode [ 126.213565][ T6207] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.221049][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.228426][ T6207] bridge_slave_1: entered allmulticast mode [ 126.235816][ T6207] bridge_slave_1: entered promiscuous mode [ 126.267583][ T6207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.279595][ T6207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.308651][ T6207] team0: Port device team_slave_0 added [ 126.316667][ T6207] team0: Port device team_slave_1 added [ 126.340007][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.347616][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.373592][ T6207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.386268][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.393209][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.419165][ T6207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.491248][ T6207] hsr_slave_0: entered promiscuous mode [ 126.498045][ T6207] hsr_slave_1: entered promiscuous mode [ 126.951871][ T6207] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.970829][ T6207] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.981636][ T6207] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.993268][ T6207] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.097719][ T6207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.123042][ T6207] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.137518][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.144692][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.162835][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.170028][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.467338][ T6207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.527082][ T6207] veth0_vlan: entered promiscuous mode [ 127.546752][ T6207] veth1_vlan: entered promiscuous mode [ 127.589289][ T6207] veth0_macvtap: entered promiscuous mode [ 127.602721][ T6207] veth1_macvtap: entered promiscuous mode [ 127.629794][ T6207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.651761][ T6207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.672391][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.699706][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.725856][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.746733][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.917118][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.999055][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.081294][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.171534][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.573678][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.582162][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.593405][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.601931][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.610380][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.992189][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.003591][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.035892][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.043734][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.400898][ T13] bridge_slave_1: left allmulticast mode [ 130.410045][ T13] bridge_slave_1: left promiscuous mode [ 130.425517][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.444762][ T13] bridge_slave_0: left allmulticast mode [ 130.450426][ T13] bridge_slave_0: left promiscuous mode [ 130.460812][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.897181][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.907542][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.917806][ T13] bond0 (unregistering): Released all slaves [ 131.038005][ T13] hsr_slave_0: left promiscuous mode [ 131.044088][ T13] hsr_slave_1: left promiscuous mode [ 131.055100][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.062500][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.078048][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.113292][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.141162][ T13] veth1_macvtap: left promiscuous mode [ 131.148840][ T13] veth0_macvtap: left promiscuous mode [ 131.154591][ T13] veth1_vlan: left promiscuous mode [ 131.160017][ T13] veth0_vlan: left promiscuous mode [ 131.774002][ T13] team0 (unregistering): Port device team_slave_1 removed [ 131.811659][ T13] team0 (unregistering): Port device team_slave_0 removed [ 132.798338][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.804898][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 2025/09/26 05:41:05 executed programs: 0 [ 134.755218][ T5188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.763583][ T5188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.771509][ T5188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.780146][ T5188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.791154][ T5188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.071008][ T6452] chnl_net:caif_netlink_parms(): no params data found [ 135.198614][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.205930][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.213140][ T6452] bridge_slave_0: entered allmulticast mode [ 135.222250][ T6452] bridge_slave_0: entered promiscuous mode [ 135.231501][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.239682][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.246977][ T6452] bridge_slave_1: entered allmulticast mode [ 135.255640][ T6452] bridge_slave_1: entered promiscuous mode [ 135.299969][ T6452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.315595][ T6452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.358132][ T6452] team0: Port device team_slave_0 added [ 135.367543][ T6452] team0: Port device team_slave_1 added [ 135.413077][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.420624][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.446588][ T6452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.459187][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.466496][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.492383][ T6452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.537198][ T6452] hsr_slave_0: entered promiscuous mode [ 135.543929][ T6452] hsr_slave_1: entered promiscuous mode [ 135.995650][ T6452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 136.008019][ T6452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 136.019976][ T6452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 136.032653][ T6452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 136.134276][ T6452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.166119][ T6452] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.183482][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.190667][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.207332][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.214478][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.499586][ T6452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.555316][ T6452] veth0_vlan: entered promiscuous mode [ 136.568350][ T6452] veth1_vlan: entered promiscuous mode [ 136.601641][ T6452] veth0_macvtap: entered promiscuous mode [ 136.617025][ T6452] veth1_macvtap: entered promiscuous mode [ 136.647047][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.665416][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.682099][ T4911] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.694424][ T4911] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.704389][ T4911] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.717330][ T4911] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.790677][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.807712][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.841704][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.850050][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.864840][ T51] Bluetooth: hci0: command tx timeout [ 138.944621][ T51] Bluetooth: hci0: command tx timeout [ 141.024693][ T51] Bluetooth: hci0: command tx timeout [ 143.104664][ T51] Bluetooth: hci0: command tx timeout [ 194.228484][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.234888][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.672610][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.679112][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.744675][ T5188] Bluetooth: hci0: command 0x0406 tx timeout [ 285.104748][ T31] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 285.112503][ T31] Not tainted syzkaller #0 [ 285.117543][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.126254][ T31] task:kworker/u8:1 state:D stack:23560 pid:13 tgid:13 ppid:2 task_flags:0x4248060 flags:0x00004000 [ 285.138382][ T31] Workqueue: writeback wb_workfn (flush-8:0) [ 285.144417][ T31] Call Trace: [ 285.147762][ T31] [ 285.150708][ T31] __schedule+0x1190/0x5de0 [ 285.155317][ T31] ? blk_mq_flush_plug_list+0x145/0x600 [ 285.160898][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 285.165903][ T31] ? __pfx___schedule+0x10/0x10 [ 285.170750][ T31] ? __blk_flush_plug+0x2f3/0x4b0 [ 285.175862][ T31] ? find_held_lock+0x2b/0x80 [ 285.180547][ T31] ? schedule+0x2d7/0x3a0 [ 285.184928][ T31] schedule+0xe7/0x3a0 [ 285.189013][ T31] io_schedule+0xbf/0x130 [ 285.193340][ T31] rq_qos_wait+0x22f/0x340 [ 285.197800][ T31] ? __pfx_rq_qos_wait+0x10/0x10 [ 285.202751][ T31] ? submit_bio_noacct_nocheck+0x300/0xd30 [ 285.208927][ T31] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 285.215534][ T31] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 285.220841][ T31] ? __pfx___might_resched+0x10/0x10 [ 285.226175][ T31] wbt_wait+0x1af/0x390 [ 285.230341][ T31] ? __pfx_wbt_wait+0x10/0x10 [ 285.235138][ T31] ? bio_integrity_prep+0x1a6/0x990 [ 285.240354][ T31] ? __pfx_wbt_wait+0x10/0x10 [ 285.245052][ T31] __rq_qos_throttle+0x53/0xa0 [ 285.249830][ T31] blk_mq_submit_bio+0x2174/0x2a10 [ 285.255020][ T31] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 285.260505][ T31] ? folio_unlock+0x7d/0xd0 [ 285.265121][ T31] ? mpage_process_page_bufs+0x5e3/0x8d0 [ 285.270793][ T31] __submit_bio+0x3cf/0x690 [ 285.275382][ T31] ? __pfx___submit_bio+0x10/0x10 [ 285.280424][ T31] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 285.286192][ T31] ? submit_bio_noacct_nocheck+0x660/0xd30 [ 285.292013][ T31] submit_bio_noacct_nocheck+0x660/0xd30 [ 285.297784][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 285.303957][ T31] ? __pfx___might_resched+0x10/0x10 [ 285.309556][ T31] submit_bio_noacct+0xc20/0x1ed0 [ 285.314697][ T31] ext4_io_submit+0xa6/0x140 [ 285.319302][ T31] ext4_do_writepages+0xa2a/0x3cf0 [ 285.324407][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 285.329417][ T31] ? __pfx_ext4_do_writepages+0x10/0x10 [ 285.335065][ T31] ? ext4_writepages+0x37a/0x7d0 [ 285.340030][ T31] ext4_writepages+0x37a/0x7d0 [ 285.344880][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 285.350182][ T31] ? wb_update_bandwidth+0xa0/0xe0 [ 285.355398][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 285.360355][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 285.365667][ T31] do_writepages+0x27a/0x600 [ 285.370267][ T31] ? __pfx_do_writepages+0x10/0x10 [ 285.375447][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 285.380751][ T31] ? writeback_sb_inodes+0x3b0/0xfa0 [ 285.386086][ T31] __writeback_single_inode+0x160/0xfb0 [ 285.391650][ T31] ? __pfx___writeback_single_inode+0x10/0x10 [ 285.397801][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 285.403023][ T31] writeback_sb_inodes+0x60d/0xfa0 [ 285.408270][ T31] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 285.414126][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 285.419207][ T31] ? move_expired_inodes+0x5a0/0x850 [ 285.424545][ T31] __writeback_inodes_wb+0xf8/0x2d0 [ 285.429760][ T31] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 285.435671][ T31] ? queue_io+0x3f6/0x520 [ 285.440013][ T31] wb_writeback+0x7f3/0xb70 [ 285.444567][ T31] ? __pfx_wb_writeback+0x10/0x10 [ 285.449611][ T31] ? get_nr_dirty_inodes+0x170/0x1e0 [ 285.455010][ T31] wb_workfn+0x8ca/0xbe0 [ 285.459276][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 285.465150][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 285.469950][ T31] ? rcu_is_watching+0x12/0xc0 [ 285.474815][ T31] process_one_work+0x9cf/0x1b70 [ 285.479791][ T31] ? __pfx_process_one_work+0x10/0x10 [ 285.485238][ T31] ? assign_work+0x1a0/0x250 [ 285.489845][ T31] worker_thread+0x6c8/0xf10 [ 285.494425][ T31] ? __pfx_worker_thread+0x10/0x10 [ 285.499614][ T31] kthread+0x3c5/0x780 [ 285.503702][ T31] ? __pfx_kthread+0x10/0x10 [ 285.508535][ T31] ? rcu_is_watching+0x12/0xc0 [ 285.513517][ T31] ? __pfx_kthread+0x10/0x10 [ 285.519195][ T31] ret_from_fork+0x56d/0x730 [ 285.523814][ T31] ? __pfx_kthread+0x10/0x10 [ 285.528449][ T31] ret_from_fork_asm+0x1a/0x30 [ 285.533241][ T31] [ 285.536595][ T31] INFO: task syz.0.56:6604 blocked for more than 143 seconds. [ 285.544075][ T31] Not tainted syzkaller #0 [ 285.549067][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.557767][ T31] task:syz.0.56 state:D stack:28216 pid:6604 tgid:6604 ppid:6452 task_flags:0x440040 flags:0x00004004 [ 285.570441][ T31] Call Trace: [ 285.573756][ T31] [ 285.576758][ T31] __schedule+0x1190/0x5de0 [ 285.581292][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 285.586318][ T31] ? __pfx___schedule+0x10/0x10 [ 285.591197][ T31] ? find_held_lock+0x2b/0x80 [ 285.595911][ T31] ? schedule+0x2d7/0x3a0 [ 285.600260][ T31] schedule+0xe7/0x3a0 [ 285.604351][ T31] io_schedule+0xbf/0x130 [ 285.608726][ T31] bit_wait_io+0x15/0xe0 [ 285.612979][ T31] __wait_on_bit+0x65/0x180 [ 285.617793][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 285.622755][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 285.628188][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 285.634193][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 285.639686][ T31] do_get_write_access+0x93d/0x1320 [ 285.644924][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 285.650895][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 285.656987][ T31] ext4_reserve_inode_write+0x1be/0x340 [ 285.662553][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 285.668139][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 285.673534][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 285.679553][ T31] ? rcu_is_watching+0x12/0xc0 [ 285.684323][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 285.690009][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 285.695270][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 285.700905][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 285.706578][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 285.711533][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 285.717260][ T31] ext4_dirty_inode+0xd9/0x130 [ 285.722052][ T31] ? rcu_is_watching+0x12/0xc0 [ 285.726865][ T31] __mark_inode_dirty+0x1ee/0xe40 [ 285.731907][ T31] generic_update_time+0xcf/0xf0 [ 285.736881][ T31] file_update_time+0x17d/0x1c0 [ 285.741744][ T31] ext4_page_mkwrite+0x33d/0x1880 [ 285.746999][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 285.752482][ T31] ? do_wp_page+0x1aa7/0x4f00 [ 285.757426][ T31] do_page_mkwrite+0x171/0x380 [ 285.762211][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 285.767709][ T31] do_pte_missing+0x29d/0x3ba0 [ 285.772479][ T31] ? find_held_lock+0x2b/0x80 [ 285.777228][ T31] ? __handle_mm_fault+0x14fd/0x2a50 [ 285.782524][ T31] __handle_mm_fault+0x152a/0x2a50 [ 285.787709][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 285.793183][ T31] ? lock_vma_under_rcu+0x1eb/0x530 [ 285.798427][ T31] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 285.803987][ T31] handle_mm_fault+0x589/0xd10 [ 285.808797][ T31] ? trace_raw_output_exceptions+0x131/0x150 [ 285.814826][ T31] do_user_addr_fault+0x60c/0x1370 [ 285.820142][ T31] ? rcu_is_watching+0x12/0xc0 [ 285.825043][ T31] exc_page_fault+0x5c/0xb0 [ 285.829637][ T31] asm_exc_page_fault+0x26/0x30 [ 285.834658][ T31] RIP: 0033:0x7f6923258589 [ 285.839090][ T31] RSP: 002b:00007ffdea784220 EFLAGS: 00010202 [ 285.845188][ T31] RAX: 0000001b2ef60000 RBX: 00007f69240a5720 RCX: 0000000000000003 [ 285.853170][ T31] RDX: 0000001b2ef5ffff RSI: 0000000000000008 RDI: 00007f69240a5720 [ 285.861176][ T31] RBP: 00000000fffffc03 R08: 0000000000000000 R09: 0000000000000000 [ 285.869184][ T31] R10: 00007f69240a5700 R11: 0000000000000000 R12: 00007f6923576038 [ 285.877225][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.885246][ T31] [ 285.888265][ T31] [ 285.888265][ T31] Showing all locks held in the system: [ 285.896027][ T31] 4 locks held by kworker/u8:1/13: [ 285.901141][ T31] #0: ffff8881436b8148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 285.911948][ T31] #1: ffffc90000127d10 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 285.924216][ T31] #2: ffff8880248200e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 285.934846][ T31] #3: ffff888024822b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 285.945194][ T31] 1 lock held by khungtaskd/31: [ 285.950051][ T31] #0: ffffffff8e5c1420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 285.959988][ T31] 2 locks held by kworker/u8:11/4911: [ 285.965391][ T31] 2 locks held by getty/5632: [ 285.970066][ T31] #0: ffff88814e3660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 285.979916][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 285.990041][ T31] 3 locks held by syz.0.56/6604: [ 285.995013][ T31] #0: ffff88805bfa9088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11b/0x530 [ 286.004239][ T31] #1: ffff888024820520 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 286.013866][ T31] #2: ffff888024824950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 286.023527][ T31] 3 locks held by syz-executor/6606: [ 286.029145][ T31] #0: ffff888024820428 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0x10e/0x4a0 [ 286.038653][ T31] #1: ffff888075c92a20 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1bb/0x4a0 [ 286.049360][ T31] #2: ffff888024824950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 286.058980][ T31] [ 286.061301][ T31] ============================================= [ 286.061301][ T31] [ 286.069796][ T31] NMI backtrace for cpu 0 [ 286.069818][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 286.069840][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.069852][ T31] Call Trace: [ 286.069860][ T31] [ 286.069869][ T31] dump_stack_lvl+0x116/0x1f0 [ 286.069905][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 286.069933][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.069965][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 286.069996][ T31] watchdog+0xf0e/0x1260 [ 286.070035][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.070066][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.070100][ T31] ? __kthread_parkme+0x19e/0x250 [ 286.070140][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.070174][ T31] kthread+0x3c5/0x780 [ 286.070209][ T31] ? __pfx_kthread+0x10/0x10 [ 286.070245][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.070271][ T31] ? __pfx_kthread+0x10/0x10 [ 286.070305][ T31] ret_from_fork+0x56d/0x730 [ 286.070338][ T31] ? __pfx_kthread+0x10/0x10 [ 286.070370][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.070413][ T31] [ 286.070422][ T31] Sending NMI from CPU 0 to CPUs 1: [ 286.185787][ C1] NMI backtrace for cpu 1 [ 286.185804][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 286.185831][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.185845][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 286.185884][ C1] Code: fd 63 02 e9 13 0a 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 35 18 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 286.185907][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 286.185926][ C1] RAX: 00000000000b511b RBX: 0000000000000001 RCX: ffffffff8b91db29 [ 286.185941][ C1] RDX: 0000000000000000 RSI: ffffffff8de4f73a RDI: ffffffff8c163800 [ 286.185956][ C1] RBP: ffffed1003c55b40 R08: 0000000000000001 R09: ffffed10170a6655 [ 286.185972][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 286.185986][ C1] R13: ffff88801e2ada00 R14: ffffffff90abad90 R15: 0000000000000000 [ 286.186002][ C1] FS: 0000000000000000(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 286.186024][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.186040][ C1] CR2: 000056292d41aa38 CR3: 000000000e380000 CR4: 00000000003526f0 [ 286.186055][ C1] Call Trace: [ 286.186063][ C1] [ 286.186070][ C1] default_idle+0x13/0x20 [ 286.186093][ C1] default_idle_call+0x6d/0xb0 [ 286.186117][ C1] do_idle+0x391/0x510 [ 286.186142][ C1] ? __pfx_do_idle+0x10/0x10 [ 286.186166][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 286.186206][ C1] cpu_startup_entry+0x4f/0x60 [ 286.186230][ C1] start_secondary+0x21d/0x2b0 [ 286.186264][ C1] ? __pfx_start_secondary+0x10/0x10 [ 286.186302][ C1] common_startup_64+0x13e/0x148 [ 286.186336][ C1] [ 286.186775][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 286.362695][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 286.371796][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.381840][ T31] Call Trace: [ 286.385110][ T31] [ 286.388029][ T31] dump_stack_lvl+0x3d/0x1f0 [ 286.392630][ T31] vpanic+0x6e8/0x7a0 [ 286.396615][ T31] ? __pfx_vpanic+0x10/0x10 [ 286.401120][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.407108][ T31] panic+0xca/0xd0 [ 286.410829][ T31] ? __pfx_panic+0x10/0x10 [ 286.415244][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 286.420617][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 286.426768][ T31] ? watchdog+0xd78/0x1260 [ 286.431184][ T31] ? watchdog+0xd6b/0x1260 [ 286.435601][ T31] watchdog+0xd89/0x1260 [ 286.439854][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.444531][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.449734][ T31] ? __kthread_parkme+0x19e/0x250 [ 286.454756][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.459432][ T31] kthread+0x3c5/0x780 [ 286.463501][ T31] ? __pfx_kthread+0x10/0x10 [ 286.468095][ T31] ? rcu_is_watching+0x12/0xc0 [ 286.472864][ T31] ? __pfx_kthread+0x10/0x10 [ 286.477472][ T31] ret_from_fork+0x56d/0x730 [ 286.482071][ T31] ? __pfx_kthread+0x10/0x10 [ 286.486666][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.491443][ T31] [ 286.494717][ T31] Kernel Offset: disabled [ 286.499027][ T31] Rebooting in 86400 seconds..