Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts. 2026/05/01 14:44:18 parsed 1 programs [ 157.264400][ T5661] cgroup: Unknown subsys name 'net' [ 157.410118][ T5661] cgroup: Unknown subsys name 'cpuset' [ 157.419929][ T5661] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 159.231845][ T5661] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 162.527310][ T5669] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 163.883330][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.891238][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.901356][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.910757][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.920013][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.342584][ T3084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.351883][ T3084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.433823][ T3084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.443102][ T3084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.810080][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.818506][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.825883][ T5720] bridge_slave_0: entered allmulticast mode [ 165.833412][ T5720] bridge_slave_0: entered promiscuous mode [ 165.844483][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.852385][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.859679][ T5720] bridge_slave_1: entered allmulticast mode [ 165.867050][ T5720] bridge_slave_1: entered promiscuous mode [ 165.898518][ T5720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.911424][ T5720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.945533][ T5720] team0: Port device team_slave_0 added [ 165.953598][ T5720] team0: Port device team_slave_1 added [ 165.981327][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.988412][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.014631][ T5720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.028519][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.035689][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.061694][ T5720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.109054][ T5720] hsr_slave_0: entered promiscuous mode [ 166.116589][ T5720] hsr_slave_1: entered promiscuous mode [ 166.305817][ T5720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.325994][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.335092][ T5720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.348574][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.360167][ T5720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.373961][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.382706][ T5720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.396499][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.533017][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.580267][ T5720] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.599655][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.607747][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.634748][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.642000][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.117493][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.179361][ T5720] veth0_vlan: entered promiscuous mode [ 167.195133][ T5720] veth1_vlan: entered promiscuous mode [ 167.234147][ T5720] veth0_macvtap: entered promiscuous mode [ 167.244281][ T5720] veth1_macvtap: entered promiscuous mode [ 167.270563][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.287255][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.304685][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.321675][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.330592][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.343001][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.519528][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.603768][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.664970][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.809057][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/05/01 14:44:35 executed programs: 0 [ 169.415799][ T35] bridge_slave_1: left allmulticast mode [ 169.423654][ T35] bridge_slave_1: left promiscuous mode [ 169.435678][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.458695][ T4944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.469010][ T4944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.471158][ T35] bridge_slave_0: left allmulticast mode [ 169.482970][ T35] bridge_slave_0: left promiscuous mode [ 169.483653][ T4944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.489990][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.507215][ T4944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.517385][ T4944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.857407][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.869488][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.886012][ T35] bond0 (unregistering): Released all slaves [ 170.031764][ T35] hsr_slave_0: left promiscuous mode [ 170.039807][ T35] hsr_slave_1: left promiscuous mode [ 170.046648][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.054142][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.064214][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.075867][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.096673][ T35] veth1_macvtap: left promiscuous mode [ 170.102824][ T35] veth0_macvtap: left promiscuous mode [ 170.112787][ T35] veth1_vlan: left promiscuous mode [ 170.118303][ T35] veth0_vlan: left promiscuous mode [ 170.392007][ T35] team0 (unregistering): Port device team_slave_1 removed [ 170.412537][ T35] team0 (unregistering): Port device team_slave_0 removed [ 170.542200][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 171.422191][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 171.588558][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.595914][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.603133][ T5783] bridge_slave_0: entered allmulticast mode [ 171.610089][ T51] Bluetooth: hci0: command tx timeout [ 171.617210][ T5783] bridge_slave_0: entered promiscuous mode [ 171.626472][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.633762][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.642524][ T5783] bridge_slave_1: entered allmulticast mode [ 171.650725][ T5783] bridge_slave_1: entered promiscuous mode [ 171.706679][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.734621][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.793589][ T5783] team0: Port device team_slave_0 added [ 171.802798][ T5783] team0: Port device team_slave_1 added [ 171.869240][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.880462][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.907401][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.928461][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.935634][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.961780][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.050086][ T5783] hsr_slave_0: entered promiscuous mode [ 172.059567][ T5783] hsr_slave_1: entered promiscuous mode [ 172.695775][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.718051][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.726910][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.740497][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.749635][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.764162][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.773209][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 172.784908][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.900845][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.934196][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.951911][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.959277][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.985990][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.993218][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.642578][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.696161][ T51] Bluetooth: hci0: command tx timeout [ 173.732665][ T5783] veth0_vlan: entered promiscuous mode [ 173.750751][ T5783] veth1_vlan: entered promiscuous mode [ 173.794409][ T5783] veth0_macvtap: entered promiscuous mode [ 173.808775][ T5783] veth1_macvtap: entered promiscuous mode [ 173.836035][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.859450][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.881068][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.891304][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.901034][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.919887][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.024093][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.046234][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.101098][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.112463][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/01 14:44:40 executed programs: 5 [ 175.767521][ T51] Bluetooth: hci0: command tx timeout [ 177.845589][ T51] Bluetooth: hci0: command tx timeout [ 194.647604][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.654051][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.087418][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.094786][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 294.005427][ T4944] Bluetooth: hci0: command 0x0406 tx timeout [ 317.528904][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.535367][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.766521][ T30] INFO: task jbd2/sda1-8:4955 blocked in I/O wait for more than 143 seconds. [ 327.775470][ T30] Not tainted syzkaller #0 [ 327.780510][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.789254][ T30] task:jbd2/sda1-8 state:D stack:26088 pid:4955 tgid:4955 ppid:2 task_flags:0x240040 flags:0x00080000 [ 327.801398][ T30] Call Trace: [ 327.804845][ T30] [ 327.807877][ T30] __schedule+0x10e9/0x6820 [ 327.812894][ T30] ? __pfx___schedule+0x10/0x10 [ 327.817972][ T30] ? find_held_lock+0x2b/0x80 [ 327.822793][ T30] ? schedule+0x2bf/0x390 [ 327.828303][ T30] schedule+0xdd/0x390 [ 327.832481][ T30] io_schedule+0x8a/0xf0 [ 327.836864][ T30] bit_wait_io+0xd/0xe0 [ 327.841083][ T30] __wait_on_bit+0x65/0x180 [ 327.846092][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 327.851135][ T30] out_of_line_wait_on_bit+0xdc/0x110 [ 327.856969][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 327.863273][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 327.869049][ T30] ? __pfx___might_resched+0x10/0x10 [ 327.874405][ T30] __wait_on_buffer+0x64/0x70 [ 327.879267][ T30] jbd2_journal_commit_transaction+0x388a/0x6870 [ 327.885736][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 327.892462][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 327.898441][ T30] ? debug_object_deactivate+0x2e4/0x3b0 [ 327.904255][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 327.910339][ T30] ? find_held_lock+0x2b/0x80 [ 327.915116][ T30] ? __try_to_del_timer_sync+0x107/0x160 [ 327.920965][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 327.926875][ T30] ? __timer_delete_sync+0x151/0x1c0 [ 327.932231][ T30] kjournald2+0x200/0x760 [ 327.936813][ T30] ? __pfx_kjournald2+0x10/0x10 [ 327.941755][ T30] ? find_held_lock+0x2b/0x80 [ 327.946578][ T30] ? __kthread_parkme+0xbb/0x230 [ 327.951585][ T30] ? rcu_is_watching+0x12/0xc0 [ 327.956558][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 327.962720][ T30] ? __kthread_parkme+0x18c/0x230 [ 327.967906][ T30] ? kthread+0x13a/0x450 [ 327.972200][ T30] ? __pfx_kjournald2+0x10/0x10 [ 327.977330][ T30] kthread+0x370/0x450 [ 327.981494][ T30] ? __pfx_kthread+0x10/0x10 [ 327.986185][ T30] ret_from_fork+0x72b/0xd50 [ 327.990829][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 327.996693][ T30] ? __switch_to+0x800/0x1100 [ 328.001466][ T30] ? __switch_to_asm+0x39/0x70 [ 328.006389][ T30] ? __pfx_kthread+0x10/0x10 [ 328.011056][ T30] ret_from_fork_asm+0x1a/0x30 [ 328.015993][ T30] [ 328.019125][ T30] INFO: task syz.0.189:6070 blocked in I/O wait for more than 143 seconds. [ 328.027839][ T30] Not tainted syzkaller #0 [ 328.032803][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.041541][ T30] task:syz.0.189 state:D stack:28240 pid:6070 tgid:6070 ppid:5783 task_flags:0x440040 flags:0x00080002 [ 328.053599][ T30] Call Trace: [ 328.057079][ T30] [ 328.060171][ T30] __schedule+0x10e9/0x6820 [ 328.064738][ T30] ? __pfx___schedule+0x10/0x10 [ 328.069683][ T30] ? find_held_lock+0x2b/0x80 [ 328.074423][ T30] ? schedule+0x2bf/0x390 [ 328.078866][ T30] schedule+0xdd/0x390 [ 328.083104][ T30] io_schedule+0x8a/0xf0 [ 328.087581][ T30] bit_wait_io+0xd/0xe0 [ 328.091821][ T30] __wait_on_bit+0x65/0x180 [ 328.096437][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 328.101449][ T30] out_of_line_wait_on_bit+0xdc/0x110 [ 328.106930][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 328.113135][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 328.119362][ T30] do_get_write_access+0x84f/0x1220 [ 328.124647][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 328.130761][ T30] __ext4_journal_get_write_access+0x6a/0x340 [ 328.136966][ T30] ext4_reserve_inode_write+0x1b7/0x330 [ 328.142727][ T30] __ext4_mark_inode_dirty+0x18f/0x890 [ 328.148322][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 328.154361][ T30] ? trace_jbd2_handle_start+0x82/0x260 [ 328.160057][ T30] ? jbd2__journal_start+0xf7/0x6a0 [ 328.165390][ T30] ? __ext4_journal_start_sb+0x36d/0x670 [ 328.171055][ T30] ? __ext4_journal_start_sb+0x1ce/0x670 [ 328.176828][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 328.181844][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 328.187316][ T30] ext4_dirty_inode+0xd9/0x130 [ 328.192137][ T30] ? rcu_is_watching+0x12/0xc0 [ 328.197028][ T30] __mark_inode_dirty+0x1f3/0x1720 [ 328.202284][ T30] file_update_time_flags+0x46b/0x500 [ 328.207773][ T30] ext4_page_mkwrite+0x324/0x1890 [ 328.212863][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 328.218436][ T30] do_page_mkwrite+0x17a/0x440 [ 328.223289][ T30] ? __pfx_filemap_map_pages+0x10/0x10 [ 328.228882][ T30] do_fault+0x3b5/0x1750 [ 328.233194][ T30] ? __pmd_alloc+0x3fb/0x950 [ 328.237921][ T30] __handle_mm_fault+0x187d/0x2a00 [ 328.243137][ T30] ? reacquire_held_locks+0xce/0x1e0 [ 328.248638][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 328.254181][ T30] ? lock_vma_under_rcu+0x17c/0x590 [ 328.259505][ T30] handle_mm_fault+0x36d/0xa20 [ 328.264336][ T30] do_user_addr_fault+0x5a3/0x12f0 [ 328.269574][ T30] exc_page_fault+0x6f/0xd0 [ 328.274164][ T30] asm_exc_page_fault+0x26/0x30 [ 328.279134][ T30] RIP: 0033:0x7f97a466a883 [ 328.283604][ T30] RSP: 002b:00007ffc3f813c60 EFLAGS: 00010246 [ 328.289780][ T30] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 328.297856][ T30] RDX: 0000001b2e124000 RSI: 0000000000040000 RDI: 00007f97a49db710 [ 328.305939][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.313959][ T30] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 328.322028][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc3f813ef0 [ 328.330093][ T30] [ 328.333187][ T30] [ 328.333187][ T30] Showing all locks held in the system: [ 328.341157][ T30] 1 lock held by ksoftirqd/1/23: [ 328.346214][ T30] #0: ffff8880b853b3e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 328.356278][ T30] 1 lock held by khungtaskd/30: [ 328.361163][ T30] #0: ffffffff8e7e52e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 328.371144][ T30] 6 locks held by kworker/u8:3/47: [ 328.376339][ T30] #0: ffff88801c6ca140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 328.387387][ T30] #1: ffffc90000b77d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 328.399629][ T30] #2: ffff8880389060d8 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 328.410312][ T30] #3: ffff888038904c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 328.420717][ T30] #4: ffff888038902938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 328.430438][ T30] #5: ffff88807928f290 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x45a/0xd30 [ 328.440267][ T30] 2 locks held by getty/5383: [ 328.444958][ T30] #0: ffff88802dace0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 328.454827][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 328.465078][ T30] 3 locks held by syz.0.189/6070: [ 328.470277][ T30] #0: ffff88807e006bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 328.479658][ T30] #1: ffff888038906508 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 328.489271][ T30] #2: ffff888038902938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 328.498972][ T30] 3 locks held by syz-executor/6077: [ 328.504266][ T30] #0: ffff888038906410 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 328.513898][ T30] #1: ffff8880792b1f98 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 328.524687][ T30] #2: ffff888038902938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 328.535218][ T30] [ 328.537621][ T30] ============================================= [ 328.537621][ T30] [ 328.546194][ T30] NMI backtrace for cpu 0 [ 328.546233][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 328.546268][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 328.546285][ T30] Call Trace: [ 328.546296][ T30] [ 328.546307][ T30] dump_stack_lvl+0x100/0x190 [ 328.546348][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 328.546389][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 328.546426][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 328.546484][ T30] sys_info+0x141/0x190 [ 328.546529][ T30] watchdog+0xcb1/0x1030 [ 328.546584][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 328.546623][ T30] ? __pfx_watchdog+0x10/0x10 [ 328.546672][ T30] ? __kthread_parkme+0x18c/0x230 [ 328.546721][ T30] ? kthread+0x13a/0x450 [ 328.546747][ T30] ? __pfx_watchdog+0x10/0x10 [ 328.546793][ T30] kthread+0x370/0x450 [ 328.546821][ T30] ? __pfx_kthread+0x10/0x10 [ 328.546852][ T30] ret_from_fork+0x72b/0xd50 [ 328.546890][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 328.546929][ T30] ? __switch_to+0x800/0x1100 [ 328.546975][ T30] ? __switch_to_asm+0x39/0x70 [ 328.547018][ T30] ? __pfx_kthread+0x10/0x10 [ 328.547048][ T30] ret_from_fork_asm+0x1a/0x30 [ 328.547109][ T30] [ 328.547120][ T30] Sending NMI from CPU 0 to CPUs 1: [ 328.677671][ C1] NMI backtrace for cpu 1 [ 328.677690][ C1] CPU: 1 UID: 0 PID: 1057 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 328.677720][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 328.677741][ C1] Workqueue: events_unbound toggle_allocation_gate [ 328.677779][ C1] RIP: 0010:smp_call_function_many_cond+0xdd4/0x1700 [ 328.677823][ C1] Code: 00 00 0f 84 1e 05 00 00 e8 c9 6a 0c 00 83 c5 01 bf 07 00 00 00 48 63 dd 48 89 de e8 96 65 0c 00 48 83 fb 07 0f 86 22 fb ff ff <44> 8b 64 24 58 44 8b 7c 24 5c e8 9d 6a 0c 00 8b 5c 24 4c bf 01 00 [ 328.677846][ C1] RSP: 0018:ffffc90003d37870 EFLAGS: 00000246 [ 328.677865][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fb686f [ 328.677881][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888029b83d80 [ 328.677896][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 328.677910][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003d37958 [ 328.677925][ C1] R13: ffff8880b843c6c0 R14: ffff8880b843c601 R15: ffff8880b853c710 [ 328.677942][ C1] FS: 0000000000000000(0000) GS:ffff88812447d000(0000) knlGS:0000000000000000 [ 328.677965][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.677981][ C1] CR2: 000055a400fed660 CR3: 000000000e596000 CR4: 00000000003526f0 [ 328.677997][ C1] Call Trace: [ 328.678006][ C1] [ 328.678017][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 328.678054][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 328.678093][ C1] ? perf_event_text_poke+0x132/0x180 [ 328.678125][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 328.678162][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 328.678193][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 328.678224][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 328.678264][ C1] smp_text_poke_batch_finish+0x976/0xc60 [ 328.678305][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 328.678346][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 328.678394][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 328.678434][ C1] jump_label_update+0x37a/0x550 [ 328.678467][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 328.678501][ C1] static_key_enable+0x1a/0x20 [ 328.678531][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 328.678557][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 328.678587][ C1] ? rcu_is_watching+0x12/0xc0 [ 328.678620][ C1] process_one_work+0xa0e/0x1980 [ 328.678654][ C1] ? __pfx_process_one_work+0x10/0x10 [ 328.678685][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 328.678713][ C1] worker_thread+0x5ef/0xe50 [ 328.678745][ C1] ? kthread+0x13a/0x450 [ 328.678765][ C1] ? __pfx_worker_thread+0x10/0x10 [ 328.678789][ C1] kthread+0x370/0x450 [ 328.678814][ C1] ? __pfx_kthread+0x10/0x10 [ 328.678836][ C1] ret_from_fork+0x72b/0xd50 [ 328.678869][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 328.678897][ C1] ? __switch_to+0x800/0x1100 [ 328.678931][ C1] ? __switch_to_asm+0x39/0x70 [ 328.678969][ C1] ? __pfx_kthread+0x10/0x10 [ 328.678997][ C1] ret_from_fork_asm+0x1a/0x30 [ 328.679040][ C1] [ 328.982520][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 328.989454][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 328.998609][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.008782][ T30] Call Trace: [ 329.012094][ T30] [ 329.015052][ T30] dump_stack_lvl+0x100/0x190 [ 329.019773][ T30] vpanic+0x552/0x970 [ 329.023792][ T30] ? __pfx_vpanic+0x10/0x10 [ 329.028331][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 329.034536][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 329.040753][ T30] panic+0xd1/0xe0 [ 329.044514][ T30] ? __pfx_panic+0x10/0x10 [ 329.048969][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 329.055181][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 329.061397][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 329.067613][ T30] ? watchdog.cold+0x1ec/0x234 [ 329.072424][ T30] ? watchdog+0xcc1/0x1030 [ 329.076899][ T30] watchdog.cold+0x1fd/0x234 [ 329.081542][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 329.087386][ T30] ? __pfx_watchdog+0x10/0x10 [ 329.092131][ T30] ? __kthread_parkme+0x18c/0x230 [ 329.097220][ T30] ? kthread+0x13a/0x450 [ 329.101497][ T30] ? __pfx_watchdog+0x10/0x10 [ 329.106225][ T30] kthread+0x370/0x450 [ 329.110335][ T30] ? __pfx_kthread+0x10/0x10 [ 329.114962][ T30] ret_from_fork+0x72b/0xd50 [ 329.119596][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 329.124749][ T30] ? __switch_to+0x800/0x1100 [ 329.129472][ T30] ? __switch_to_asm+0x39/0x70 [ 329.134287][ T30] ? __pfx_kthread+0x10/0x10 [ 329.138920][ T30] ret_from_fork_asm+0x1a/0x30 [ 329.143755][ T30] [ 329.147660][ T30] Kernel Offset: disabled [ 329.152007][ T30] Rebooting in 86400 seconds..