Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. 2026/02/20 05:38:26 parsed 1 programs [ 120.116249][ T6135] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 124.708777][ T6182] chnl_net:caif_netlink_parms(): no params data found [ 124.802718][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.811614][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.819070][ T6182] bridge_slave_0: entered allmulticast mode [ 124.826965][ T6182] bridge_slave_0: entered promiscuous mode [ 124.834871][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.842258][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.850145][ T6182] bridge_slave_1: entered allmulticast mode [ 124.857114][ T6182] bridge_slave_1: entered promiscuous mode [ 124.883600][ T6182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.895149][ T6182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.924264][ T6182] team0: Port device team_slave_0 added [ 124.932847][ T6182] team0: Port device team_slave_1 added [ 124.957808][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.964761][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.990815][ T6182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.003022][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.010054][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.036851][ T6182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.075441][ T6182] hsr_slave_0: entered promiscuous mode [ 125.081826][ T6182] hsr_slave_1: entered promiscuous mode [ 125.611540][ T6182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.623686][ T6182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.634944][ T6182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.648998][ T6182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.752996][ T6182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.775819][ T6182] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.791996][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.799214][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.816919][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.824110][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.111201][ T6182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.169378][ T6182] veth0_vlan: entered promiscuous mode [ 126.183481][ T6182] veth1_vlan: entered promiscuous mode [ 126.225644][ T6182] veth0_macvtap: entered promiscuous mode [ 126.238268][ T6182] veth1_macvtap: entered promiscuous mode [ 126.269203][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.286412][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.304690][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.328945][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.344786][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.369488][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.517920][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.526667][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.535098][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.537601][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.543187][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.563033][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.645826][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.764098][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.921298][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.065279][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.090433][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.124086][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.132481][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/20 05:38:40 executed programs: 0 [ 128.882756][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.892192][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.905600][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.914064][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.922590][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.100004][ T64] bridge_slave_1: left allmulticast mode [ 129.105698][ T64] bridge_slave_1: left promiscuous mode [ 129.112620][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.126906][ T64] bridge_slave_0: left allmulticast mode [ 129.134933][ T64] bridge_slave_0: left promiscuous mode [ 129.142515][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.278793][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.289142][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.299028][ T64] bond0 (unregistering): Released all slaves [ 129.445306][ T64] hsr_slave_0: left promiscuous mode [ 129.452755][ T64] hsr_slave_1: left promiscuous mode [ 129.463654][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.471532][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.479744][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.487362][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.501405][ T64] veth1_macvtap: left promiscuous mode [ 129.506932][ T64] veth0_macvtap: left promiscuous mode [ 129.513105][ T64] veth1_vlan: left promiscuous mode [ 129.518526][ T64] veth0_vlan: left promiscuous mode [ 129.793882][ T64] team0 (unregistering): Port device team_slave_1 removed [ 129.811367][ T64] team0 (unregistering): Port device team_slave_0 removed [ 130.075553][ T6316] chnl_net:caif_netlink_parms(): no params data found [ 130.215219][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.228106][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.235332][ T6316] bridge_slave_0: entered allmulticast mode [ 130.243143][ T6316] bridge_slave_0: entered promiscuous mode [ 130.252017][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.259326][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.266522][ T6316] bridge_slave_1: entered allmulticast mode [ 130.274505][ T6316] bridge_slave_1: entered promiscuous mode [ 130.325118][ T6316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.338843][ T6316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.383250][ T6316] team0: Port device team_slave_0 added [ 130.399043][ T6316] team0: Port device team_slave_1 added [ 130.764403][ T6316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.773767][ T6316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.818045][ T6316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.842626][ T6316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.854605][ T6316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.887275][ T6316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.954389][ T5143] Bluetooth: hci0: command tx timeout [ 131.035600][ T6316] hsr_slave_0: entered promiscuous mode [ 131.047931][ T6316] hsr_slave_1: entered promiscuous mode [ 131.732212][ T6316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.743816][ T6316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.755064][ T6316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.769177][ T6316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.899926][ T6316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.921448][ T6316] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.943798][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.951030][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.967905][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.975093][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.251033][ T6316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.312792][ T6316] veth0_vlan: entered promiscuous mode [ 132.326917][ T6316] veth1_vlan: entered promiscuous mode [ 132.371928][ T6316] veth0_macvtap: entered promiscuous mode [ 132.385016][ T6316] veth1_macvtap: entered promiscuous mode [ 132.411611][ T6316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.429413][ T6316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.448406][ T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.470074][ T64] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.485449][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.505717][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.573281][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.587155][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.629323][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.638744][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.954516][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.961410][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.034808][ T5143] Bluetooth: hci0: command tx timeout 2026/02/20 05:38:45 executed programs: 38 [ 135.114468][ T5143] Bluetooth: hci0: command tx timeout [ 137.193287][ T5143] Bluetooth: hci0: command tx timeout [ 194.391732][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.398247][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.787299][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 255.831383][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.838461][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 282.067235][ T31] INFO: task kworker/u8:4:64 blocked for more than 143 seconds. [ 282.074894][ T31] Not tainted syzkaller #0 [ 282.079959][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.088739][ T31] task:kworker/u8:4 state:D stack:22296 pid:64 tgid:64 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 282.100927][ T31] Workqueue: writeback wb_workfn (flush-8:0) [ 282.107003][ T31] Call Trace: [ 282.110390][ T31] [ 282.113357][ T31] __schedule+0xfee/0x60e0 [ 282.117868][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 282.123799][ T31] ? __lock_acquire+0x4a5/0x2630 [ 282.128814][ T31] ? __blk_flush_plug+0x2f3/0x4b0 [ 282.133855][ T31] ? __pfx___schedule+0x10/0x10 [ 282.138760][ T31] ? find_held_lock+0x2b/0x80 [ 282.143459][ T31] ? schedule+0x2bf/0x390 [ 282.148147][ T31] ? rq_qos_wait+0x21c/0x330 [ 282.153048][ T31] schedule+0xdd/0x390 [ 282.157221][ T31] io_schedule+0x8a/0xf0 [ 282.161480][ T31] rq_qos_wait+0x22d/0x330 [ 282.165895][ T31] ? __pfx_rq_qos_wait+0x10/0x10 [ 282.170944][ T31] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 282.176683][ T31] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 282.182078][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 282.188321][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 282.194260][ T31] wbt_wait+0x18a/0x310 [ 282.198606][ T31] ? __pfx_wbt_wait+0x10/0x10 [ 282.203324][ T31] ? bio_submit_split_bioset+0x5b6/0xa90 [ 282.209041][ T31] ? __pfx_wbt_wait+0x10/0x10 [ 282.213743][ T31] __rq_qos_throttle+0x56/0xa0 [ 282.218568][ T31] blk_mq_submit_bio+0xb68/0x2bf0 [ 282.223606][ T31] ? mark_held_locks+0x40/0x70 [ 282.228722][ T31] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 282.234202][ T31] ? finish_task_switch.isra.0+0x205/0xb80 [ 282.240076][ T31] __submit_bio+0x1e1/0x6c0 [ 282.244593][ T31] ? __pfx___submit_bio+0x10/0x10 [ 282.249683][ T31] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 282.255643][ T31] ? submit_bio_noacct_nocheck+0x562/0xc10 [ 282.261542][ T31] submit_bio_noacct_nocheck+0x562/0xc10 [ 282.267216][ T31] ? pfn_valid+0x2ce/0x4e0 [ 282.271630][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 282.277829][ T31] ? __pfx___might_resched+0x10/0x10 [ 282.283140][ T31] ? bvec_try_merge_page+0x1cd/0x290 [ 282.288477][ T31] submit_bio_noacct+0xd17/0x2010 [ 282.293518][ T31] ext4_io_submit+0xf7/0x1a0 [ 282.298180][ T31] ext4_bio_write_folio+0x766/0x1dd0 [ 282.303500][ T31] mpage_process_page_bufs+0x473/0x8d0 [ 282.309203][ T31] mpage_prepare_extent_to_map+0xb50/0x1920 [ 282.315301][ T31] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 282.321749][ T31] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 282.327440][ T31] ? ext4_init_io_end+0x24/0x170 [ 282.332382][ T31] ext4_do_writepages+0x9f9/0x3f50 [ 282.337548][ T31] ? __lock_acquire+0x4a5/0x2630 [ 282.342502][ T31] ? __pfx_ext4_do_writepages+0x10/0x10 [ 282.348098][ T31] ? ext4_writepages+0x347/0x790 [ 282.353049][ T31] ext4_writepages+0x347/0x790 [ 282.358145][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 282.363459][ T31] ? do_writepages+0x4b5/0x600 [ 282.368262][ T31] ? do_writepages+0x4b5/0x600 [ 282.373040][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 282.378394][ T31] do_writepages+0x278/0x600 [ 282.383001][ T31] ? __pfx_do_writepages+0x10/0x10 [ 282.388151][ T31] __writeback_single_inode+0x164/0x13c0 [ 282.393806][ T31] ? find_held_lock+0x2b/0x80 [ 282.398552][ T31] ? __pfx___writeback_single_inode+0x10/0x10 [ 282.404638][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 282.409890][ T31] writeback_sb_inodes+0x72e/0x1bf0 [ 282.415126][ T31] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 282.420950][ T31] ? _raw_spin_unlock+0x28/0x50 [ 282.425829][ T31] ? move_expired_inodes+0x5ea/0x8f0 [ 282.431190][ T31] __writeback_inodes_wb+0xf8/0x2d0 [ 282.436410][ T31] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 282.442305][ T31] ? queue_io+0x287/0x550 [ 282.446653][ T31] wb_writeback+0x755/0xbe0 [ 282.451537][ T31] ? __pfx_wb_writeback+0x10/0x10 [ 282.456856][ T31] ? get_nr_inodes+0x100/0x150 [ 282.461722][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.466924][ T31] wb_workfn+0x8c6/0xc00 [ 282.471202][ T31] ? try_to_wake_up+0x160/0x1a80 [ 282.476161][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 282.481033][ T31] ? rcu_is_watching+0x12/0xc0 [ 282.485912][ T31] process_one_work+0x9d7/0x1920 [ 282.490958][ T31] ? __pfx_process_one_work+0x10/0x10 [ 282.496354][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 282.501176][ T31] worker_thread+0x5da/0xe40 [ 282.505828][ T31] ? __pfx_worker_thread+0x10/0x10 [ 282.511030][ T31] ? kthread+0x13a/0x450 [ 282.515290][ T31] ? __pfx_worker_thread+0x10/0x10 [ 282.520450][ T31] kthread+0x370/0x450 [ 282.524534][ T31] ? __pfx_kthread+0x10/0x10 [ 282.529241][ T31] ret_from_fork+0x754/0xd80 [ 282.533877][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 282.539067][ T31] ? __switch_to+0x7b4/0x1120 [ 282.543769][ T31] ? __pfx_kthread+0x10/0x10 [ 282.548412][ T31] ret_from_fork_asm+0x1a/0x30 [ 282.553201][ T31] [ 282.556327][ T31] INFO: task syz.0.216:6819 blocked for more than 143 seconds. [ 282.564203][ T31] Not tainted syzkaller #0 [ 282.569204][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.577994][ T31] task:syz.0.216 state:D stack:27912 pid:6819 tgid:6819 ppid:6316 task_flags:0x440040 flags:0x00080002 [ 282.590113][ T31] Call Trace: [ 282.593459][ T31] [ 282.596379][ T31] __schedule+0xfee/0x60e0 [ 282.600861][ T31] ? __lock_acquire+0x4a5/0x2630 [ 282.605822][ T31] ? __pfx___schedule+0x10/0x10 [ 282.610723][ T31] ? find_held_lock+0x2b/0x80 [ 282.615419][ T31] ? schedule+0x2bf/0x390 [ 282.619805][ T31] schedule+0xdd/0x390 [ 282.623900][ T31] io_schedule+0x8a/0xf0 [ 282.628499][ T31] bit_wait_io+0xd/0xe0 [ 282.632664][ T31] __wait_on_bit+0x65/0x180 [ 282.637304][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 282.642261][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 282.647683][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 282.653677][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 282.659210][ T31] do_get_write_access+0x889/0x1210 [ 282.664622][ T31] ? jbd2_write_access_granted+0x61/0x3d0 [ 282.670530][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 282.676535][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 282.682663][ T31] ext4_reserve_inode_write+0x1b7/0x330 [ 282.688298][ T31] __ext4_mark_inode_dirty+0x18f/0x8b0 [ 282.693752][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 282.699775][ T31] ? trace_jbd2_handle_start+0x83/0x270 [ 282.705343][ T31] ? jbd2__journal_start+0xf7/0x6a0 [ 282.710624][ T31] ? __ext4_journal_start_sb+0x382/0x6a0 [ 282.716288][ T31] ? __ext4_journal_start_sb+0x1ce/0x6a0 [ 282.721988][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 282.726957][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 282.732414][ T31] ext4_dirty_inode+0xd9/0x130 [ 282.737237][ T31] ? rcu_is_watching+0x12/0xc0 [ 282.741995][ T31] __mark_inode_dirty+0x1f3/0x1790 [ 282.747222][ T31] file_update_time_flags+0x46b/0x500 [ 282.752607][ T31] ext4_page_mkwrite+0x35b/0x1980 [ 282.757710][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 282.763186][ T31] ? __raw_spin_lock_init+0x3a/0x110 [ 282.768794][ T31] do_page_mkwrite+0x17a/0x440 [ 282.773601][ T31] do_fault+0x3d7/0x1950 [ 282.777896][ T31] ? __pmd_alloc+0x6aa/0x9c0 [ 282.782495][ T31] __handle_mm_fault+0x180f/0x2b60 [ 282.787676][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 282.792975][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 282.798508][ T31] ? lock_vma_under_rcu+0x17c/0x590 [ 282.803747][ T31] handle_mm_fault+0x36d/0xa20 [ 282.808564][ T31] do_user_addr_fault+0x5a3/0x12f0 [ 282.813704][ T31] exc_page_fault+0x6f/0xd0 [ 282.818266][ T31] asm_exc_page_fault+0x26/0x30 [ 282.823125][ T31] RIP: 0033:0x7fca1aa6738b [ 282.827582][ T31] RSP: 002b:00007fff6a77e5a0 EFLAGS: 00010246 [ 282.833661][ T31] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 282.841730][ T31] RDX: 0000001b2e720000 RSI: 0000000000040000 RDI: 00007fca1ad8a710 [ 282.849860][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.857973][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 282.865957][ T31] R13: 0000000000000000 R14: 00000000000219af R15: 00007fff6a77e830 [ 282.874331][ T31] [ 282.877452][ T31] [ 282.877452][ T31] Showing all locks held in the system: [ 282.885433][ T31] 1 lock held by khungtaskd/31: [ 282.890432][ T31] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 282.900428][ T31] 4 locks held by kworker/u8:4/64: [ 282.905617][ T31] #0: ffff888020ed0948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 282.916405][ T31] #1: ffffc9000214fd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 282.928446][ T31] #2: ffff8880377a20e0 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 282.939022][ T31] #3: ffff888036b70b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 282.949666][ T31] 2 locks held by getty/5586: [ 282.954330][ T31] #0: ffff8880384980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 282.964193][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 282.974666][ T31] 3 locks held by syz.0.216/6819: [ 282.979770][ T31] #0: ffff888074bcd1c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 282.989112][ T31] #1: ffff8880377a2518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 282.998668][ T31] #2: ffff88803762e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 283.008340][ T31] 3 locks held by syz-executor/6820: [ 283.013631][ T31] #0: ffff8880377a2420 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 283.023117][ T31] #1: ffff888012d463d0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 283.033876][ T31] #2: ffff88803762e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 283.043548][ T31] [ 283.045869][ T31] ============================================= [ 283.045869][ T31] [ 283.054978][ T31] NMI backtrace for cpu 1 [ 283.055003][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 283.055019][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.055028][ T31] Call Trace: [ 283.055033][ T31] [ 283.055039][ T31] dump_stack_lvl+0x100/0x190 [ 283.055064][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 283.055087][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 283.055108][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 283.055132][ T31] sys_info+0x141/0x190 [ 283.055150][ T31] watchdog+0xd25/0x1050 [ 283.055168][ T31] ? __pfx_watchdog+0x10/0x10 [ 283.055190][ T31] ? __kthread_parkme+0x18c/0x230 [ 283.055208][ T31] ? kthread+0x13a/0x450 [ 283.055224][ T31] ? __pfx_watchdog+0x10/0x10 [ 283.055245][ T31] kthread+0x370/0x450 [ 283.055261][ T31] ? __pfx_kthread+0x10/0x10 [ 283.055280][ T31] ret_from_fork+0x754/0xd80 [ 283.055301][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 283.055323][ T31] ? __switch_to+0x7b4/0x1120 [ 283.055338][ T31] ? __pfx_kthread+0x10/0x10 [ 283.055356][ T31] ret_from_fork_asm+0x1a/0x30 [ 283.055379][ T31] [ 283.055387][ T31] Sending NMI from CPU 1 to CPUs 0: [ 283.175902][ C0] NMI backtrace for cpu 0 [ 283.175921][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 283.175949][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.175965][ C0] Workqueue: 0x0 (events_unbound) [ 283.175993][ C0] RIP: 0010:debug_smp_processor_id+0x12/0x20 [ 283.176026][ C0] Code: eb ac 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c6 a0 ea 1a 8c 48 c7 c7 e0 ea 1a 8c f9 fe ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 [ 283.176055][ C0] RSP: 0018:ffffc90000127a30 EFLAGS: 00000007 [ 283.176072][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81dc7f6f [ 283.176087][ C0] RDX: 0000000000000001 RSI: ffffffff8c1aeaa0 RDI: ffffffff8c1aeae0 [ 283.176103][ C0] RBP: ffffc90000127ad8 R08: 0000000000000000 R09: fffffbfff21b3122 [ 283.176118][ C0] R10: ffffffff90d98917 R11: 0000000000000002 R12: 000000000000b960 [ 283.176133][ C0] R13: 000000000000b960 R14: 0000000000000749 R15: ffff88801e2f5c08 [ 283.176148][ C0] FS: 0000000000000000(0000) GS:ffff888124351000(0000) knlGS:0000000000000000 [ 283.176170][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.176186][ C0] CR2: 00005592245023d8 CR3: 000000000e598000 CR4: 00000000003526f0 [ 283.176201][ C0] Call Trace: [ 283.176208][ C0] [ 283.176215][ C0] rcu_is_watching+0x12/0xc0 [ 283.176250][ C0] trace_pelt_se_tp+0x159/0x1b0 [ 283.176280][ C0] __update_load_avg_se+0x5c7/0xe80 [ 283.176304][ C0] ? __pfx___resched_curr+0x10/0x10 [ 283.176345][ C0] update_load_avg+0xf10/0x1ba0 [ 283.176373][ C0] ? update_curr+0x263/0x550 [ 283.176408][ C0] dequeue_entities+0x1fe/0x2e40 [ 283.176447][ C0] ? rcu_is_watching+0x12/0xc0 [ 283.176481][ C0] dequeue_task_fair+0x1aa/0xa10 [ 283.176518][ C0] __schedule+0x3551/0x60e0 [ 283.176541][ C0] ? __lock_acquire+0x4a5/0x2630 [ 283.176577][ C0] ? __pfx___schedule+0x10/0x10 [ 283.176597][ C0] ? find_held_lock+0x2b/0x80 [ 283.176633][ C0] ? schedule+0x2bf/0x390 [ 283.176656][ C0] schedule+0xdd/0x390 [ 283.176676][ C0] ? worker_thread+0x4ab/0xe40 [ 283.176707][ C0] worker_thread+0x526/0xe40 [ 283.176745][ C0] ? kthread+0x13a/0x450 [ 283.176772][ C0] ? __pfx_worker_thread+0x10/0x10 [ 283.176801][ C0] kthread+0x370/0x450 [ 283.176829][ C0] ? __pfx_kthread+0x10/0x10 [ 283.176858][ C0] ret_from_fork+0x754/0xd80 [ 283.176891][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 283.176926][ C0] ? __switch_to+0x7b4/0x1120 [ 283.176950][ C0] ? __pfx_kthread+0x10/0x10 [ 283.176980][ C0] ret_from_fork_asm+0x1a/0x30 [ 283.177013][ C0] [ 283.190221][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 283.190243][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 283.190275][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.190290][ T31] Call Trace: [ 283.190300][ T31] [ 283.190310][ T31] dump_stack_lvl+0x100/0x190 [ 283.190352][ T31] vpanic+0x552/0x970 [ 283.190379][ T31] ? __pfx_vpanic+0x10/0x10 [ 283.190406][ T31] ? rcu_is_watching+0x12/0xc0 [ 283.190450][ T31] panic+0xd1/0xe0 [ 283.190475][ T31] ? __pfx_panic+0x10/0x10 [ 283.190504][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 283.190544][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 283.190581][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 283.190634][ T31] ? watchdog.cold+0x198/0x1ca [ 283.190664][ T31] ? watchdog+0xd35/0x1050 [ 283.190688][ T31] watchdog.cold+0x1a9/0x1ca [ 283.523025][ T31] ? __pfx_watchdog+0x10/0x10 [ 283.527723][ T31] ? __kthread_parkme+0x18c/0x230 [ 283.532764][ T31] ? kthread+0x13a/0x450 [ 283.537012][ T31] ? __pfx_watchdog+0x10/0x10 [ 283.541701][ T31] kthread+0x370/0x450 [ 283.545787][ T31] ? __pfx_kthread+0x10/0x10 [ 283.550395][ T31] ret_from_fork+0x754/0xd80 [ 283.554999][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 283.560129][ T31] ? __switch_to+0x7b4/0x1120 [ 283.564815][ T31] ? __pfx_kthread+0x10/0x10 [ 283.569412][ T31] ret_from_fork_asm+0x1a/0x30 [ 283.574200][ T31] [ 283.577586][ T31] Kernel Offset: disabled [ 283.581903][ T31] Rebooting in 86400 seconds..