Warning: Permanently added '10.128.1.238' (ED25519) to the list of known hosts. 2025/12/03 14:32:44 parsed 1 programs [ 133.554861][ T6194] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 136.179884][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.188691][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.201072][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.210595][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.218770][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.316412][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.325113][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.363782][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.372834][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.159165][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.170166][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.828276][ T6264] chnl_net:caif_netlink_parms(): no params data found [ 139.898303][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.906165][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.913616][ T6264] bridge_slave_0: entered allmulticast mode [ 139.921233][ T6264] bridge_slave_0: entered promiscuous mode [ 139.929159][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.936675][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.944022][ T6264] bridge_slave_1: entered allmulticast mode [ 139.951430][ T6264] bridge_slave_1: entered promiscuous mode [ 139.978518][ T6264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.990045][ T6264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.020391][ T6264] team0: Port device team_slave_0 added [ 140.028525][ T6264] team0: Port device team_slave_1 added [ 140.056379][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.063438][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.090078][ T6264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.103090][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.111198][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.139594][ T6264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.180567][ T6264] hsr_slave_0: entered promiscuous mode [ 140.187701][ T6264] hsr_slave_1: entered promiscuous mode [ 140.715125][ T6264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.730878][ T6264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.744606][ T6264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.758323][ T6264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.916024][ T6264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.946896][ T6264] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.963193][ T2050] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.970419][ T2050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.001641][ T2050] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.008967][ T2050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.310277][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.372107][ T6264] veth0_vlan: entered promiscuous mode [ 141.389944][ T6264] veth1_vlan: entered promiscuous mode [ 141.432353][ T6264] veth0_macvtap: entered promiscuous mode [ 141.444759][ T6264] veth1_macvtap: entered promiscuous mode [ 141.468586][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.488489][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.509996][ T145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.526505][ T145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.547521][ T145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.561631][ T145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.739635][ T4333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.814655][ T4333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.882839][ T4333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.949188][ T4333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/03 14:32:58 executed programs: 0 [ 142.658662][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.670044][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.678982][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.706263][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.714432][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.997377][ T6345] chnl_net:caif_netlink_parms(): no params data found [ 143.151969][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.160192][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.167728][ T6345] bridge_slave_0: entered allmulticast mode [ 143.175802][ T6345] bridge_slave_0: entered promiscuous mode [ 143.184894][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.193512][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.201393][ T6345] bridge_slave_1: entered allmulticast mode [ 143.209460][ T6345] bridge_slave_1: entered promiscuous mode [ 143.253033][ T6345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.267419][ T6345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.312950][ T6345] team0: Port device team_slave_0 added [ 143.322666][ T6345] team0: Port device team_slave_1 added [ 143.363546][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.373391][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.405879][ T6345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.420737][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.428490][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.455537][ T6345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.517534][ T6345] hsr_slave_0: entered promiscuous mode [ 143.524334][ T6345] hsr_slave_1: entered promiscuous mode [ 143.531425][ T6345] debugfs: 'hsr0' already exists in 'hsr' [ 143.537627][ T6345] Cannot create hsr debugfs directory [ 144.302890][ T4333] bridge_slave_1: left allmulticast mode [ 144.310131][ T4333] bridge_slave_1: left promiscuous mode [ 144.321157][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.337540][ T4333] bridge_slave_0: left allmulticast mode [ 144.343588][ T4333] bridge_slave_0: left promiscuous mode [ 144.350044][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.706913][ T4333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.718628][ T4333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.730946][ T4333] bond0 (unregistering): Released all slaves [ 144.805424][ T53] Bluetooth: hci0: command tx timeout [ 144.854015][ T4333] hsr_slave_0: left promiscuous mode [ 144.869814][ T4333] hsr_slave_1: left promiscuous mode [ 144.876293][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.884973][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.894515][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.913191][ T4333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.937375][ T4333] veth1_macvtap: left promiscuous mode [ 144.944883][ T4333] veth0_macvtap: left promiscuous mode [ 144.953077][ T4333] veth1_vlan: left promiscuous mode [ 144.959055][ T4333] veth0_vlan: left promiscuous mode [ 145.439263][ T4333] team0 (unregistering): Port device team_slave_1 removed [ 145.471961][ T4333] team0 (unregistering): Port device team_slave_0 removed [ 146.000024][ T6345] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.012668][ T6345] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.031115][ T6345] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.054827][ T6345] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.272896][ T6345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.314003][ T6345] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.331364][ T2050] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.338776][ T2050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.357370][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.365003][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.684768][ T6345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.750879][ T6345] veth0_vlan: entered promiscuous mode [ 146.765185][ T6345] veth1_vlan: entered promiscuous mode [ 146.809682][ T6345] veth0_macvtap: entered promiscuous mode [ 146.824369][ T6345] veth1_macvtap: entered promiscuous mode [ 146.852387][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.871793][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.880928][ T53] Bluetooth: hci0: command tx timeout [ 146.903849][ T4333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.927803][ T4333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.944411][ T4333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.972426][ T4333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.039793][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.062257][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.096525][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.105950][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/03 14:33:03 executed programs: 8 [ 148.955611][ T53] Bluetooth: hci0: command tx timeout [ 151.035880][ T53] Bluetooth: hci0: command tx timeout [ 199.598739][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.605087][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.040299][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.046881][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.235518][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 293.675829][ T31] INFO: task kworker/u8:5:145 blocked for more than 143 seconds. [ 293.683817][ T31] Not tainted syzkaller #0 [ 293.689997][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.699026][ T31] task:kworker/u8:5 state:D stack:23376 pid:145 tgid:145 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 293.711999][ T31] Workqueue: writeback wb_workfn (flush-8:0) [ 293.719185][ T31] Call Trace: [ 293.722701][ T31] [ 293.725886][ T31] ? __schedule+0x10b9/0x6150 [ 293.730738][ T31] __schedule+0x1139/0x6150 [ 293.735643][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 293.741964][ T31] ? __blk_flush_plug+0x2f3/0x4b0 [ 293.747419][ T31] ? __pfx___schedule+0x10/0x10 [ 293.752793][ T31] ? find_held_lock+0x2b/0x80 [ 293.757799][ T31] ? schedule+0x2d7/0x3a0 [ 293.762580][ T31] schedule+0xe7/0x3a0 [ 293.767179][ T31] io_schedule+0xbf/0x130 [ 293.771565][ T31] rq_qos_wait+0x22f/0x340 [ 293.777668][ T31] ? __pfx_rq_qos_wait+0x10/0x10 [ 293.783110][ T31] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 293.789717][ T31] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 293.795666][ T31] ? dd_bio_merge+0xde/0x150 [ 293.800766][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 293.806456][ T31] wbt_wait+0x1b8/0x3a0 [ 293.810691][ T31] ? __pfx_wbt_wait+0x10/0x10 [ 293.816853][ T31] ? blk_rq_merge_ok+0xa1/0x5c0 [ 293.821827][ T31] ? __pfx_dd_bio_merge+0x10/0x10 [ 293.827128][ T31] ? __pfx_wbt_wait+0x10/0x10 [ 293.832103][ T31] __rq_qos_throttle+0x56/0xa0 [ 293.837164][ T31] blk_mq_submit_bio+0x2274/0x2bf0 [ 293.842685][ T31] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 293.848277][ T31] __submit_bio+0x3cf/0x690 [ 293.852824][ T31] ? __pfx___submit_bio+0x10/0x10 [ 293.858388][ T31] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 293.864671][ T31] ? lock_acquire+0x179/0x330 [ 293.869522][ T31] ? submit_bio_noacct_nocheck+0x53d/0xbe0 [ 293.875689][ T31] submit_bio_noacct_nocheck+0x53d/0xbe0 [ 293.881909][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 293.888491][ T31] ? __pfx___might_resched+0x10/0x10 [ 293.894114][ T31] submit_bio_noacct+0x5bd/0x1f40 [ 293.899444][ T31] ext4_bio_write_folio+0x756/0x1dc0 [ 293.905542][ T31] mpage_process_page_bufs+0x47c/0x8d0 [ 293.911341][ T31] mpage_prepare_extent_to_map+0x765/0x14b0 [ 293.919602][ T31] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 293.926283][ T31] ? kmem_cache_alloc_noprof+0x2a1/0x720 [ 293.932346][ T31] ? ext4_init_io_end+0x24/0x170 [ 293.938034][ T31] ext4_do_writepages+0xa11/0x3c70 [ 293.943759][ T31] ? __lock_acquire+0x433/0x22f0 [ 293.948980][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 293.954432][ T31] ? __pfx_ext4_do_writepages+0x10/0x10 [ 293.960331][ T31] ? ext4_writepages+0x37a/0x7d0 [ 293.965659][ T31] ext4_writepages+0x37a/0x7d0 [ 293.970555][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 293.976195][ T31] ? __pfx___page_table_check_zero+0x10/0x10 [ 293.982699][ T31] ? mark_held_locks+0x49/0x80 [ 293.987759][ T31] ? do_writepages+0x4b7/0x600 [ 293.992935][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 293.998822][ T31] do_writepages+0x27a/0x600 [ 294.003656][ T31] ? __pfx_do_writepages+0x10/0x10 [ 294.008925][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 294.014345][ T31] __writeback_single_inode+0x168/0x14a0 [ 294.021010][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 294.026455][ T31] ? __pfx___writeback_single_inode+0x10/0x10 [ 294.033023][ T31] writeback_sb_inodes+0x795/0x1de0 [ 294.038897][ T31] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 294.044968][ T31] ? _raw_spin_unlock+0x28/0x50 [ 294.050872][ T31] ? move_expired_inodes+0x5ee/0x8f0 [ 294.056273][ T31] __writeback_inodes_wb+0xf8/0x2d0 [ 294.061624][ T31] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 294.068334][ T31] ? queue_io+0x3f6/0x4f0 [ 294.073059][ T31] wb_writeback+0x799/0xae0 [ 294.078141][ T31] ? __pfx_wb_writeback+0x10/0x10 [ 294.084212][ T31] ? get_nr_dirty_inodes+0x170/0x1e0 [ 294.089843][ T31] wb_workfn+0x8a0/0xbb0 [ 294.094640][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 294.100809][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 294.105866][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.110690][ T31] process_one_work+0x9ba/0x1b20 [ 294.115938][ T31] ? __pfx_process_one_work+0x10/0x10 [ 294.121706][ T31] ? assign_work+0x1a0/0x250 [ 294.127022][ T31] worker_thread+0x6c8/0xf10 [ 294.131850][ T31] ? __pfx_worker_thread+0x10/0x10 [ 294.137196][ T31] kthread+0x3c5/0x780 [ 294.141410][ T31] ? __pfx_kthread+0x10/0x10 [ 294.146384][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.151551][ T31] ? __pfx_kthread+0x10/0x10 [ 294.156221][ T31] ret_from_fork+0x983/0xb10 [ 294.161010][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 294.166318][ T31] ? __switch_to+0x7af/0x10d0 [ 294.171106][ T31] ? __pfx_kthread+0x10/0x10 [ 294.175936][ T31] ret_from_fork_asm+0x1a/0x30 [ 294.181026][ T31] [ 294.184169][ T31] INFO: task syz.0.23:6490 blocked for more than 143 seconds. [ 294.191830][ T31] Not tainted syzkaller #0 [ 294.197182][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.206286][ T31] task:syz.0.23 state:D stack:28824 pid:6490 tgid:6490 ppid:6345 task_flags:0x440040 flags:0x00080002 [ 294.218474][ T31] Call Trace: [ 294.221944][ T31] [ 294.225557][ T31] ? __schedule+0x10b9/0x6150 [ 294.230272][ T31] __schedule+0x1139/0x6150 [ 294.234785][ T31] ? __pfx___schedule+0x10/0x10 [ 294.239881][ T31] ? find_held_lock+0x2b/0x80 [ 294.244697][ T31] ? schedule+0x2d7/0x3a0 [ 294.249150][ T31] schedule+0xe7/0x3a0 [ 294.253243][ T31] io_schedule+0xbf/0x130 [ 294.257897][ T31] bit_wait_io+0x15/0xe0 [ 294.262507][ T31] __wait_on_bit+0x65/0x180 [ 294.267206][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 294.272383][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 294.277928][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 294.284283][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 294.289999][ T31] do_get_write_access+0x910/0x12f0 [ 294.295386][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 294.301505][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 294.307722][ T31] ext4_reserve_inode_write+0x1be/0x340 [ 294.313542][ T31] __ext4_mark_inode_dirty+0x197/0x840 [ 294.319146][ T31] ? trace_kmem_cache_alloc+0x28/0xb0 [ 294.324654][ T31] ? kmem_cache_alloc_noprof+0x2a1/0x720 [ 294.331088][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 294.337452][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.342259][ T31] ? trace_jbd2_handle_start+0x1a8/0x200 [ 294.348051][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 294.353382][ T31] ? __ext4_journal_start_sb+0x195/0x640 [ 294.359241][ T31] ? __ext4_journal_start_sb+0x19e/0x640 [ 294.365567][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 294.370614][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 294.376135][ T31] ext4_dirty_inode+0xd9/0x130 [ 294.381065][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.385993][ T31] __mark_inode_dirty+0x1f7/0x1670 [ 294.391487][ T31] generic_update_time+0xcf/0xf0 [ 294.396595][ T31] file_update_time_flags+0x410/0x520 [ 294.402166][ T31] ext4_page_mkwrite+0x33d/0x1880 [ 294.407511][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 294.413207][ T31] do_page_mkwrite+0x174/0x380 [ 294.418325][ T31] do_pte_missing+0x29c/0x4000 [ 294.423471][ T31] ? __handle_mm_fault+0x151e/0x2ad0 [ 294.428837][ T31] __handle_mm_fault+0x154b/0x2ad0 [ 294.434598][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 294.440172][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 294.445877][ T31] ? lock_vma_under_rcu+0x176/0x580 [ 294.451259][ T31] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 294.457957][ T31] handle_mm_fault+0x3fe/0xad0 [ 294.462799][ T31] do_user_addr_fault+0x423/0xda0 [ 294.467939][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.472741][ T31] exc_page_fault+0x64/0xc0 [ 294.477320][ T31] asm_exc_page_fault+0x26/0x30 [ 294.482203][ T31] RIP: 0033:0x7f72ffe605f1 [ 294.486777][ T31] RSP: 002b:00007ffece2d94b0 EFLAGS: 00010202 [ 294.493054][ T31] RAX: 0000001b30260000 RBX: 00007f7300ce5720 RCX: 0000000000000003 [ 294.501210][ T31] RDX: 0000001b3025ffff RSI: 0000000000000008 RDI: 00007f7300ce5720 [ 294.509337][ T31] RBP: 00007f73001b6038 R08: 0000000000000000 R09: 0000000000000000 [ 294.517895][ T31] R10: 00007f7300ce5700 R11: 0000000000000000 R12: 00000000fffffc03 [ 294.526269][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.535136][ T31] [ 294.538265][ T31] [ 294.538265][ T31] Showing all locks held in the system: [ 294.546416][ T31] 1 lock held by khungtaskd/31: [ 294.551945][ T31] #0: ffffffff8e1c9420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 294.562663][ T31] 4 locks held by kworker/u8:5/145: [ 294.568200][ T31] #0: ffff888140ac5948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 294.580226][ T31] #1: ffffc90002ec7c90 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 294.592548][ T31] #2: ffff8880345620e0 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 294.603661][ T31] #3: ffff888034564b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 294.614268][ T31] 5 locks held by kworker/u8:7/2050: [ 294.619797][ T31] 2 locks held by klogd/5197: [ 294.624916][ T31] #0: ffff8880b853ab98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 294.635826][ T31] #1: ffff8880b8524508 (psi_seq){-.-.}-{0:0}, at: __schedule+0x19b1/0x6150 [ 294.644989][ T31] 2 locks held by getty/5600: [ 294.649837][ T31] #0: ffff8880348d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 294.660085][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 294.671102][ T31] 3 locks held by syz.0.23/6490: [ 294.676192][ T31] #0: ffff88807e871a88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x117/0x580 [ 294.685623][ T31] #1: ffff888034562518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 [ 294.695407][ T31] #2: ffff888034566950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 294.706182][ T31] 3 locks held by syz-executor/6493: [ 294.711769][ T31] #0: ffff888034562420 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 294.721790][ T31] #1: ffff888075d259f0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 294.733042][ T31] #2: ffff888034566950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 294.743609][ T31] [ 294.746020][ T31] ============================================= [ 294.746020][ T31] [ 294.754713][ T31] NMI backtrace for cpu 0 [ 294.754739][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 294.754756][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.754765][ T31] Call Trace: [ 294.754773][ T31] [ 294.754779][ T31] dump_stack_lvl+0x116/0x1f0 [ 294.754804][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 294.754820][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 294.754844][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 294.754859][ T31] watchdog+0xf14/0x1140 [ 294.754884][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.754905][ T31] ? __pfx_watchdog+0x10/0x10 [ 294.754924][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.754944][ T31] ? __kthread_parkme+0x19e/0x250 [ 294.754967][ T31] ? __pfx_watchdog+0x10/0x10 [ 294.754987][ T31] kthread+0x3c5/0x780 [ 294.755002][ T31] ? __pfx_kthread+0x10/0x10 [ 294.755018][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.755038][ T31] ? __pfx_kthread+0x10/0x10 [ 294.755053][ T31] ret_from_fork+0x983/0xb10 [ 294.755067][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 294.755081][ T31] ? __switch_to+0x7af/0x10d0 [ 294.755098][ T31] ? __pfx_kthread+0x10/0x10 [ 294.755113][ T31] ret_from_fork_asm+0x1a/0x30 [ 294.755140][ T31] [ 294.755145][ T31] Sending NMI from CPU 0 to CPUs 1: [ 294.893371][ C1] NMI backtrace for cpu 1 [ 294.893393][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 294.893422][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.893438][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 294.893476][ C1] Code: a6 58 02 e9 d3 2f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 71 0e 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 294.893500][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c2 [ 294.893520][ C1] RAX: 00000000000c9bf3 RBX: 0000000000000001 RCX: ffffffff8b5be6f9 [ 294.893536][ C1] RDX: 0000000000000000 RSI: ffffffff8d89fdde RDI: ffffffff8bd1d700 [ 294.893552][ C1] RBP: ffffed1003a5bb70 R08: 0000000000000001 R09: ffffed10170a672d [ 294.893568][ C1] R10: ffff8880b853396b R11: 00000000fb268dbe R12: 0000000000000001 [ 294.893584][ C1] R13: ffff88801d2ddb80 R14: ffffffff906604d0 R15: 0000000000000000 [ 294.893600][ C1] FS: 0000000000000000(0000) GS:ffff888124ca3000(0000) knlGS:0000000000000000 [ 294.893624][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.893640][ C1] CR2: 000055c12b6eba38 CR3: 000000000df84000 CR4: 00000000003526f0 [ 294.893656][ C1] Call Trace: [ 294.893666][ C1] [ 294.893674][ C1] default_idle+0x13/0x20 [ 294.893720][ C1] default_idle_call+0x6c/0xb0 [ 294.893757][ C1] do_idle+0x38d/0x510 [ 294.893794][ C1] ? __pfx_do_idle+0x10/0x10 [ 294.893832][ C1] cpu_startup_entry+0x4f/0x60 [ 294.893867][ C1] start_secondary+0x21d/0x2b0 [ 294.893906][ C1] ? __pfx_start_secondary+0x10/0x10 [ 294.893951][ C1] common_startup_64+0x13e/0x148 [ 294.893987][ C1]