[ 104.453034][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.462054][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.471884][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.479692][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.499914][ T36] veth1_macvtap: left promiscuous mode [ 104.505539][ T36] veth0_macvtap: left promiscuous mode [ 104.512563][ T36] veth1_vlan: left promiscuous mode [ 104.518236][ T36] veth0_vlan: left promiscuous mode [ 104.868317][ T36] team0 (unregistering): Port device team_slave_1 removed [ 104.900363][ T36] team0 (unregistering): Port device team_slave_0 removed Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. 2025/09/10 14:05:15 parsed 1 programs [ 129.992491][ T6211] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 132.513752][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.525804][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.552826][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.561089][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.883511][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.890136][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.526683][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.542560][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.550708][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.560392][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.569067][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.537482][ T6260] chnl_net:caif_netlink_parms(): no params data found [ 134.614180][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.621625][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.629185][ T6260] bridge_slave_0: entered allmulticast mode [ 134.636745][ T6260] bridge_slave_0: entered promiscuous mode [ 134.649488][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.657173][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.665176][ T6260] bridge_slave_1: entered allmulticast mode [ 134.672361][ T6260] bridge_slave_1: entered promiscuous mode [ 134.700449][ T6260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.713443][ T6260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.751182][ T6260] team0: Port device team_slave_0 added [ 134.760548][ T6260] team0: Port device team_slave_1 added [ 134.792091][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.799501][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.825528][ T6260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.838543][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.845484][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.872668][ T6260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.911360][ T6260] hsr_slave_0: entered promiscuous mode [ 134.918196][ T6260] hsr_slave_1: entered promiscuous mode [ 135.357198][ T6260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.372851][ T6260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.385225][ T6260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.397455][ T6260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.440582][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.447765][ T6260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.455128][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.462306][ T6260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.541955][ T6260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.563215][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.572403][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.592806][ T6260] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.613170][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.620363][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.635551][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.642746][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.925001][ T6260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.982027][ T6260] veth0_vlan: entered promiscuous mode [ 135.999727][ T6260] veth1_vlan: entered promiscuous mode [ 136.043563][ T6260] veth0_macvtap: entered promiscuous mode [ 136.061935][ T6260] veth1_macvtap: entered promiscuous mode [ 136.085410][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.104572][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.121563][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.147051][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.161693][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.182748][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.323841][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.396063][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.484610][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.580826][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/09/10 14:05:28 executed programs: 0 [ 138.575026][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.587585][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.596267][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.604846][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.613524][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.775121][ T36] bridge_slave_1: left allmulticast mode [ 138.781876][ T36] bridge_slave_1: left promiscuous mode [ 138.790084][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.802152][ T36] bridge_slave_0: left allmulticast mode [ 138.808274][ T36] bridge_slave_0: left promiscuous mode [ 138.814105][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.190874][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.201315][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.211679][ T36] bond0 (unregistering): Released all slaves [ 139.319939][ T36] hsr_slave_0: left promiscuous mode [ 139.326026][ T36] hsr_slave_1: left promiscuous mode [ 139.333436][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.341174][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.351700][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.360281][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.380279][ T36] veth1_macvtap: left promiscuous mode [ 139.385854][ T36] veth0_macvtap: left promiscuous mode [ 139.392701][ T36] veth1_vlan: left promiscuous mode [ 139.398702][ T36] veth0_vlan: left promiscuous mode [ 139.855009][ T36] team0 (unregistering): Port device team_slave_1 removed [ 139.903338][ T36] team0 (unregistering): Port device team_slave_0 removed [ 140.473984][ T6382] chnl_net:caif_netlink_parms(): no params data found [ 140.639277][ T5890] Bluetooth: hci0: command tx timeout [ 140.649952][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.657161][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.664863][ T6382] bridge_slave_0: entered allmulticast mode [ 140.673468][ T6382] bridge_slave_0: entered promiscuous mode [ 140.684239][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.692549][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.699824][ T6382] bridge_slave_1: entered allmulticast mode [ 140.708495][ T6382] bridge_slave_1: entered promiscuous mode [ 140.937444][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.959071][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.101688][ T6382] team0: Port device team_slave_0 added [ 141.112766][ T6382] team0: Port device team_slave_1 added [ 141.157169][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.169911][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.196280][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.219326][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.226301][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.256264][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.383190][ T6382] hsr_slave_0: entered promiscuous mode [ 141.393145][ T6382] hsr_slave_1: entered promiscuous mode [ 141.860017][ T6382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.872366][ T6382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.884559][ T6382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.896923][ T6382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.014848][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.040632][ T6382] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.055678][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.062896][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.084576][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.091758][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.376865][ T6382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.446668][ T6382] veth0_vlan: entered promiscuous mode [ 142.462620][ T6382] veth1_vlan: entered promiscuous mode [ 142.499595][ T6382] veth0_macvtap: entered promiscuous mode [ 142.510456][ T6382] veth1_macvtap: entered promiscuous mode [ 142.540957][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.556825][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.572203][ T1321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.581122][ T1321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.591474][ T1321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.600561][ T1321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.657296][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.669895][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.692707][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.700754][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.717679][ T5890] Bluetooth: hci0: command tx timeout 2025/09/10 14:05:33 executed programs: 28 [ 144.811592][ T5890] Bluetooth: hci0: command tx timeout [ 146.879575][ T5890] Bluetooth: hci0: command tx timeout [ 194.320444][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.326770][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.761975][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.768472][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.957753][ T5185] Bluetooth: hci0: command 0x0406 tx timeout [ 292.237716][ T31] INFO: task kworker/u8:6:1321 blocked for more than 143 seconds. [ 292.245554][ T31] Not tainted syzkaller #0 [ 292.250551][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.259324][ T31] task:kworker/u8:6 state:D stack:23560 pid:1321 tgid:1321 ppid:2 task_flags:0x4248060 flags:0x00004000 [ 292.271644][ T31] Workqueue: writeback wb_workfn (flush-8:0) [ 292.277737][ T31] Call Trace: [ 292.281019][ T31] [ 292.283941][ T31] __schedule+0x1190/0x5de0 [ 292.288543][ T31] ? blk_mq_flush_plug_list+0x145/0x600 [ 292.294128][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 292.299840][ T31] ? __pfx___schedule+0x10/0x10 [ 292.304774][ T31] ? __blk_flush_plug+0x2f3/0x4b0 [ 292.309917][ T31] ? find_held_lock+0x2b/0x80 [ 292.314614][ T31] ? schedule+0x2d7/0x3a0 [ 292.319055][ T31] schedule+0xe7/0x3a0 [ 292.323145][ T31] io_schedule+0xbf/0x130 [ 292.327471][ T31] rq_qos_wait+0x22f/0x340 [ 292.332500][ T31] ? __pfx_rq_qos_wait+0x10/0x10 [ 292.337473][ T31] ? submit_bio_noacct_nocheck+0x300/0xd30 [ 292.343396][ T31] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 292.349154][ T31] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 292.354442][ T31] ? __pfx___might_resched+0x10/0x10 [ 292.359772][ T31] wbt_wait+0x1af/0x390 [ 292.363943][ T31] ? __pfx_wbt_wait+0x10/0x10 [ 292.368683][ T31] ? bio_integrity_prep+0x1a6/0x990 [ 292.373911][ T31] ? __pfx_wbt_wait+0x10/0x10 [ 292.378624][ T31] __rq_qos_throttle+0x56/0xa0 [ 292.383418][ T31] blk_mq_submit_bio+0x2174/0x2a10 [ 292.388684][ T31] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 292.394178][ T31] __submit_bio+0x3cf/0x690 [ 292.398814][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 292.403842][ T31] ? __pfx___submit_bio+0x10/0x10 [ 292.408971][ T31] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 292.414719][ T31] ? lock_acquire+0x179/0x350 [ 292.419451][ T31] ? submit_bio_noacct_nocheck+0x660/0xd30 [ 292.425306][ T31] submit_bio_noacct_nocheck+0x660/0xd30 [ 292.431037][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 292.437701][ T31] ? __pfx___might_resched+0x10/0x10 [ 292.443063][ T31] submit_bio_noacct+0xc20/0x1ed0 [ 292.448149][ T31] ext4_bio_write_folio+0x756/0x1dc0 [ 292.453633][ T31] mpage_process_page_bufs+0x47c/0x8d0 [ 292.459144][ T31] mpage_prepare_extent_to_map+0x79f/0x14d0 [ 292.465100][ T31] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 292.471504][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 292.476904][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 292.482665][ T31] ? ext4_init_io_end+0x24/0x170 [ 292.487868][ T31] ext4_do_writepages+0xa11/0x3cf0 [ 292.493050][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 292.498060][ T31] ? __pfx_ext4_do_writepages+0x10/0x10 [ 292.503634][ T31] ? ext4_writepages+0x37a/0x7d0 [ 292.508605][ T31] ext4_writepages+0x37a/0x7d0 [ 292.513408][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 292.518772][ T31] ? wb_update_bandwidth+0xa0/0xe0 [ 292.523902][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 292.528876][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 292.534196][ T31] do_writepages+0x27a/0x600 [ 292.539575][ T31] ? __pfx_do_writepages+0x10/0x10 [ 292.544707][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 292.550031][ T31] ? writeback_sb_inodes+0x3b0/0xfa0 [ 292.555433][ T31] __writeback_single_inode+0x160/0xfb0 [ 292.561025][ T31] ? __pfx___writeback_single_inode+0x10/0x10 [ 292.567207][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 292.572492][ T31] writeback_sb_inodes+0x60d/0xfa0 [ 292.577670][ T31] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 292.583334][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 292.588377][ T31] ? move_expired_inodes+0x5a0/0x850 [ 292.593742][ T31] __writeback_inodes_wb+0xf8/0x2d0 [ 292.598988][ T31] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 292.604819][ T31] ? queue_io+0x3f6/0x520 [ 292.609192][ T31] wb_writeback+0x7f3/0xb70 [ 292.613725][ T31] ? __pfx_wb_writeback+0x10/0x10 [ 292.618792][ T31] ? get_nr_dirty_inodes+0x170/0x1e0 [ 292.624106][ T31] wb_workfn+0x8ca/0xbe0 [ 292.628421][ T31] ? try_to_wake_up+0x160/0x1870 [ 292.633404][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 292.638801][ T31] ? rcu_is_watching+0x12/0xc0 [ 292.643595][ T31] process_one_work+0x9cf/0x1b70 [ 292.648660][ T31] ? __pfx_process_one_work+0x10/0x10 [ 292.654079][ T31] ? assign_work+0x1a0/0x250 [ 292.658728][ T31] worker_thread+0x6c8/0xf10 [ 292.663339][ T31] ? __kthread_parkme+0x19e/0x250 [ 292.668431][ T31] ? __pfx_worker_thread+0x10/0x10 [ 292.673640][ T31] kthread+0x3c5/0x780 [ 292.677742][ T31] ? __pfx_kthread+0x10/0x10 [ 292.682355][ T31] ? rcu_is_watching+0x12/0xc0 [ 292.687117][ T31] ? __pfx_kthread+0x10/0x10 [ 292.691757][ T31] ret_from_fork+0x5d7/0x6f0 [ 292.696388][ T31] ? __pfx_kthread+0x10/0x10 [ 292.701442][ T31] ret_from_fork_asm+0x1a/0x30 [ 292.706244][ T31] [ 292.709376][ T31] INFO: task syz.0.243:6946 blocked for more than 143 seconds. [ 292.716930][ T31] Not tainted syzkaller #0 [ 292.723045][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.731759][ T31] task:syz.0.243 state:D stack:28568 pid:6946 tgid:6946 ppid:6382 task_flags:0x440040 flags:0x00004004 [ 292.744199][ T31] Call Trace: [ 292.747580][ T31] [ 292.750523][ T31] __schedule+0x1190/0x5de0 [ 292.755183][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 292.760176][ T31] ? __pfx___schedule+0x10/0x10 [ 292.765100][ T31] ? find_held_lock+0x2b/0x80 [ 292.769827][ T31] ? schedule+0x2d7/0x3a0 [ 292.774184][ T31] schedule+0xe7/0x3a0 [ 292.778315][ T31] io_schedule+0xbf/0x130 [ 292.782751][ T31] bit_wait_io+0x15/0xe0 [ 292.787008][ T31] __wait_on_bit+0x65/0x180 [ 292.791547][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 292.796505][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 292.801910][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 292.807952][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 292.813489][ T31] do_get_write_access+0x93d/0x1320 [ 292.819020][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 292.825040][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 292.831190][ T31] ext4_reserve_inode_write+0x1be/0x340 [ 292.836764][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 292.842281][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 292.848317][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 292.854322][ T31] ? rcu_is_watching+0x12/0xc0 [ 292.859131][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 292.864789][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 292.870024][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 292.875678][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 292.881398][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 292.886372][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 292.891823][ T31] ext4_dirty_inode+0xd9/0x130 [ 292.896614][ T31] ? rcu_is_watching+0x12/0xc0 [ 292.901445][ T31] __mark_inode_dirty+0x1ee/0xe40 [ 292.906499][ T31] generic_update_time+0xcf/0xf0 [ 292.911504][ T31] file_update_time+0x17d/0x1c0 [ 292.916374][ T31] ext4_page_mkwrite+0x33d/0x1880 [ 292.921621][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 292.927099][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 292.932695][ T31] ? pte_alloc_one+0x2b6/0x3a0 [ 292.937474][ T31] do_page_mkwrite+0x174/0x380 [ 292.942270][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 292.948400][ T31] do_pte_missing+0x29d/0x3ba0 [ 292.953201][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 292.958890][ T31] ? __pmd_alloc+0x3fb/0x930 [ 292.963518][ T31] __handle_mm_fault+0x152a/0x2a50 [ 292.969060][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 292.974545][ T31] ? lock_vma_under_rcu+0x1eb/0x530 [ 292.979786][ T31] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 292.985376][ T31] handle_mm_fault+0x589/0xd10 [ 292.990183][ T31] ? trace_raw_output_exceptions+0x131/0x150 [ 292.996203][ T31] do_user_addr_fault+0x60c/0x1370 [ 293.001439][ T31] ? rcu_is_watching+0x12/0xc0 [ 293.006244][ T31] exc_page_fault+0x5c/0xb0 [ 293.010808][ T31] asm_exc_page_fault+0x26/0x30 [ 293.015684][ T31] RIP: 0033:0x7fa85ec6547b [ 293.020169][ T31] RSP: 002b:00007fff4667fc90 EFLAGS: 00010246 [ 293.026249][ T31] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 293.034277][ T31] RDX: 0000001b32820000 RSI: 0000000000040000 RDI: 00007fa85ee98d50 [ 293.042446][ T31] RBP: 0000000000000000 R08: 0000000000000009 R09: 00007fff4667f9d5 [ 293.051236][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 293.059253][ T31] R13: 00000000000927c0 R14: 00000000000240ee R15: 00007fff4667ff40 [ 293.067239][ T31] [ 293.070303][ T31] [ 293.070303][ T31] Showing all locks held in the system: [ 293.080443][ T31] 1 lock held by ksoftirqd/0/15: [ 293.085396][ T31] #0: ffff8880b843a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 293.096335][ T31] 1 lock held by khungtaskd/31: [ 293.101281][ T31] #0: ffffffff8e5c10e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 293.111210][ T31] 4 locks held by kworker/u8:6/1321: [ 293.116479][ T31] #0: ffff88801eaa5948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 293.127341][ T31] #1: ffffc9000486fd10 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 293.139420][ T31] #2: ffff888035bcc0e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 293.150077][ T31] #3: ffff888035bceb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 293.160471][ T31] 2 locks held by getty/5627: [ 293.165166][ T31] #0: ffff88814d3040a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 293.175017][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 293.185217][ T31] 3 locks held by syz.0.243/6946: [ 293.190313][ T31] #0: ffff88807fe2ad08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11b/0x530 [ 293.199662][ T31] #1: ffff888035bcc520 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 [ 293.209194][ T31] #2: ffff888035bd0950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 293.218839][ T31] 3 locks held by syz-executor/6947: [ 293.224106][ T31] #0: ffff888035bcc428 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0x10e/0x4a0 [ 293.233539][ T31] #1: ffff888012d233b0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1bb/0x4a0 [ 293.244240][ T31] #2: ffff888035bd0950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 293.253884][ T31] [ 293.256210][ T31] ============================================= [ 293.256210][ T31] [ 293.264770][ T31] NMI backtrace for cpu 1 [ 293.264794][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 293.264818][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.264829][ T31] Call Trace: [ 293.264836][ T31] [ 293.264845][ T31] dump_stack_lvl+0x116/0x1f0 [ 293.264881][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 293.264907][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 293.264941][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 293.264968][ T31] watchdog+0xf0e/0x1260 [ 293.265009][ T31] ? __pfx_watchdog+0x10/0x10 [ 293.265039][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 293.265074][ T31] ? __kthread_parkme+0x19e/0x250 [ 293.265106][ T31] ? __pfx_watchdog+0x10/0x10 [ 293.265138][ T31] kthread+0x3c5/0x780 [ 293.265171][ T31] ? __pfx_kthread+0x10/0x10 [ 293.265203][ T31] ? rcu_is_watching+0x12/0xc0 [ 293.265225][ T31] ? __pfx_kthread+0x10/0x10 [ 293.265259][ T31] ret_from_fork+0x5d7/0x6f0 [ 293.265293][ T31] ? __pfx_kthread+0x10/0x10 [ 293.265327][ T31] ret_from_fork_asm+0x1a/0x30 [ 293.265373][ T31] [ 293.265382][ T31] Sending NMI from CPU 1 to CPUs 0: [ 293.380787][ C0] NMI backtrace for cpu 0 [ 293.380806][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 293.380833][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.380846][ C0] RIP: 0010:do_raw_spin_lock+0x50/0x2b0 [ 293.380884][ C0] Code: b3 8a b5 41 48 8d 6c 24 08 48 c7 44 24 10 fd 35 e2 8d 48 c1 ed 03 48 c7 44 24 18 90 ab 97 81 48 8d 54 05 00 c7 02 f1 f1 f1 f1 42 04 04 f3 f3 f3 65 48 8b 15 19 84 3e 12 48 89 54 24 60 31 d2 [ 293.380906][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00000806 [ 293.380925][ C0] RAX: dffffc0000000000 RBX: ffff8880b85288a8 RCX: ffffffff93dd89e0 [ 293.380941][ C0] RDX: fffff52000000f44 RSI: ffffffff8de296dd RDI: ffff8880b85288ac [ 293.380956][ C0] RBP: 1ffff92000000f44 R08: aefbc0360f6c0f7d R09: 0000000000000001 [ 293.380971][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 293.380984][ C0] R13: 0000000000000001 R14: ffff8880b85288a8 R15: 0000000000000000 [ 293.380998][ C0] FS: 0000000000000000(0000) GS:ffff8881246bd000(0000) knlGS:0000000000000000 [ 293.381019][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.381034][ C0] CR2: 000055b33bc95ed0 CR3: 000000000e380000 CR4: 00000000003526f0 [ 293.381049][ C0] Call Trace: [ 293.381057][ C0] [ 293.381066][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 293.381099][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 293.381134][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 293.381164][ C0] ? cpu_stop_queue_work+0x6b/0x340 [ 293.381188][ C0] cpu_stop_queue_work+0x6b/0x340 [ 293.381214][ C0] sched_balance_rq+0x2128/0x3110 [ 293.381248][ C0] ? __pfx_sched_balance_rq+0x10/0x10 [ 293.381278][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 293.381309][ C0] sched_balance_domains+0x6ff/0xee0 [ 293.381338][ C0] ? __pfx_sched_balance_domains+0x10/0x10 [ 293.381363][ C0] ? find_held_lock+0x2b/0x80 [ 293.381385][ C0] ? _nohz_idle_balance.isra.0+0x44e/0x840 [ 293.381414][ C0] _nohz_idle_balance.isra.0+0x5fc/0x840 [ 293.381443][ C0] ? __pfx__nohz_idle_balance.isra.0+0x10/0x10 [ 293.381473][ C0] handle_softirqs+0x216/0x8e0 [ 293.381501][ C0] ? rcu_is_watching+0x12/0xc0 [ 293.381524][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 293.381552][ C0] __irq_exit_rcu+0x109/0x170 [ 293.381576][ C0] irq_exit_rcu+0x9/0x30 [ 293.381600][ C0] sysvec_call_function_single+0xa4/0xc0 [ 293.381630][ C0] [ 293.381637][ C0] [ 293.381659][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 293.381685][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 293.381715][ C0] Code: 8c 64 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 d1 18 00 fb f4 7c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 293.381736][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 293.381753][ C0] RAX: 000000000013d85b RBX: 0000000000000000 RCX: ffffffff8b913bf9 [ 293.381767][ C0] RDX: 0000000000000000 RSI: ffffffff8de4eb89 RDI: ffffffff8c163180 [ 293.381782][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 293.381796][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 293.381810][ C0] R13: ffffffff8e2977c0 R14: ffffffff90aba290 R15: 0000000000000000 [ 293.381829][ C0] ? ct_kernel_exit+0x139/0x190 [ 293.381865][ C0] default_idle+0x13/0x20 [ 293.381885][ C0] default_idle_call+0x6d/0xb0 [ 293.381906][ C0] do_idle+0x391/0x510 [ 293.381928][ C0] ? __pfx_do_idle+0x10/0x10 [ 293.381950][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 293.381987][ C0] cpu_startup_entry+0x4f/0x60 [ 293.382009][ C0] rest_init+0x16b/0x2b0 [ 293.382030][ C0] ? acpi_subsystem_init+0x133/0x180 [ 293.382057][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 293.382087][ C0] start_kernel+0x3ee/0x4d0 [ 293.382116][ C0] x86_64_start_reservations+0x18/0x30 [ 293.382144][ C0] x86_64_start_kernel+0x130/0x190 [ 293.382172][ C0] common_startup_64+0x13e/0x148 [ 293.382205][ C0] [ 293.382824][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 293.382840][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 293.382868][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.382882][ T31] Call Trace: [ 293.382890][ T31] [ 293.382900][ T31] dump_stack_lvl+0x3d/0x1f0 [ 293.382936][ T31] vpanic+0x6e8/0x7a0 [ 293.382969][ T31] ? __pfx_vpanic+0x10/0x10 [ 293.383003][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 293.383042][ T31] panic+0xca/0xd0 [ 293.383073][ T31] ? __pfx_panic+0x10/0x10 [ 293.383107][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 293.383141][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 293.383171][ T31] ? watchdog+0xd78/0x1260 [ 293.383203][ T31] ? watchdog+0xd6b/0x1260 [ 293.383236][ T31] watchdog+0xd89/0x1260 [ 293.383275][ T31] ? __pfx_watchdog+0x10/0x10 [ 293.383306][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 293.383339][ T31] ? __kthread_parkme+0x19e/0x250 [ 293.383371][ T31] ? __pfx_watchdog+0x10/0x10 [ 293.383409][ T31] kthread+0x3c5/0x780 [ 293.383443][ T31] ? __pfx_kthread+0x10/0x10 [ 293.383478][ T31] ? rcu_is_watching+0x12/0xc0 [ 293.383502][ T31] ? __pfx_kthread+0x10/0x10 [ 293.383536][ T31] ret_from_fork+0x5d7/0x6f0 [ 293.383570][ T31] ? __pfx_kthread+0x10/0x10 [ 293.383604][ T31] ret_from_fork_asm+0x1a/0x30 [ 293.383646][ T31] [ 293.900488][ T31] Kernel Offset: disabled [ 293.904804][ T31] Rebooting in 86400 seconds..