Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. 2025/12/03 13:39:36 parsed 1 programs [ 133.308787][ T6289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 136.656835][ T5161] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.665654][ T5161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.674849][ T5161] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.683198][ T5161] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.691121][ T5161] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.060850][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.067480][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.132051][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.147194][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.171987][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.180283][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.199289][ T6359] chnl_net:caif_netlink_parms(): no params data found [ 139.271690][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.279635][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.287298][ T6359] bridge_slave_0: entered allmulticast mode [ 139.294351][ T6359] bridge_slave_0: entered promiscuous mode [ 139.303131][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.310356][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.317854][ T6359] bridge_slave_1: entered allmulticast mode [ 139.324809][ T6359] bridge_slave_1: entered promiscuous mode [ 139.381873][ T6359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.393750][ T6359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.432868][ T6359] team0: Port device team_slave_0 added [ 139.441280][ T6359] team0: Port device team_slave_1 added [ 139.465752][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.473140][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.499836][ T6359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.515166][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.522210][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.548544][ T6359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.594925][ T6359] hsr_slave_0: entered promiscuous mode [ 139.601359][ T6359] hsr_slave_1: entered promiscuous mode [ 140.113002][ T6359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.124542][ T6359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.141408][ T6359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.152944][ T6359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.197333][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.204530][ T6359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.212101][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.219319][ T6359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.231432][ T2910] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.240607][ T2910] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.337964][ T6359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.365471][ T6359] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.381603][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.388798][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.401638][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.408816][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.711994][ T6359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.775804][ T6359] veth0_vlan: entered promiscuous mode [ 140.800719][ T6359] veth1_vlan: entered promiscuous mode [ 140.845056][ T6359] veth0_macvtap: entered promiscuous mode [ 140.858182][ T6359] veth1_macvtap: entered promiscuous mode [ 140.885072][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.906408][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.928559][ T2997] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.945209][ T2997] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.970909][ T2997] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.982892][ T2997] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.139584][ T2910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.232793][ T2910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.329411][ T2910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.440035][ T2910] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/03 13:39:49 executed programs: 0 [ 141.794466][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.803006][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.812342][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.822492][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.830767][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.107579][ T6436] chnl_net:caif_netlink_parms(): no params data found [ 142.249512][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.259684][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.267560][ T6436] bridge_slave_0: entered allmulticast mode [ 142.275724][ T6436] bridge_slave_0: entered promiscuous mode [ 142.285938][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.294039][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.302295][ T6436] bridge_slave_1: entered allmulticast mode [ 142.310620][ T6436] bridge_slave_1: entered promiscuous mode [ 142.357684][ T6436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.370981][ T6436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.418629][ T6436] team0: Port device team_slave_0 added [ 142.427917][ T6436] team0: Port device team_slave_1 added [ 142.483539][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.490690][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.527698][ T6436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.550170][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.557401][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.584534][ T6436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.649510][ T6436] hsr_slave_0: entered promiscuous mode [ 142.656213][ T6436] hsr_slave_1: entered promiscuous mode [ 142.666058][ T6436] debugfs: 'hsr0' already exists in 'hsr' [ 142.672486][ T6436] Cannot create hsr debugfs directory [ 143.873552][ T2910] bridge_slave_1: left allmulticast mode [ 143.880614][ T2910] bridge_slave_1: left promiscuous mode [ 143.886421][ T2910] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.896860][ T5161] Bluetooth: hci0: command tx timeout [ 143.899769][ T2910] bridge_slave_0: left allmulticast mode [ 143.913599][ T2910] bridge_slave_0: left promiscuous mode [ 143.920071][ T2910] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.250671][ T2910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.269497][ T2910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.279992][ T2910] bond0 (unregistering): Released all slaves [ 144.399809][ T2910] hsr_slave_0: left promiscuous mode [ 144.406127][ T2910] hsr_slave_1: left promiscuous mode [ 144.413297][ T2910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.426106][ T2910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.435012][ T2910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.442977][ T2910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.468242][ T2910] veth1_macvtap: left promiscuous mode [ 144.473924][ T2910] veth0_macvtap: left promiscuous mode [ 144.479925][ T2910] veth1_vlan: left promiscuous mode [ 144.485316][ T2910] veth0_vlan: left promiscuous mode [ 144.956819][ T2910] team0 (unregistering): Port device team_slave_1 removed [ 144.991057][ T2910] team0 (unregistering): Port device team_slave_0 removed [ 145.574117][ T6436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.593197][ T6436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.604606][ T6436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.621395][ T6436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 145.819034][ T6436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.852298][ T6436] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.868155][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.875336][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.920971][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.928204][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.967085][ T5161] Bluetooth: hci0: command tx timeout [ 146.142658][ T6436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.182291][ T6436] veth0_vlan: entered promiscuous mode [ 146.193781][ T6436] veth1_vlan: entered promiscuous mode [ 146.219753][ T6436] veth0_macvtap: entered promiscuous mode [ 146.229595][ T6436] veth1_macvtap: entered promiscuous mode [ 146.246072][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.261979][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.276171][ T2910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.285451][ T2910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.296242][ T2910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.310886][ T2910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.361472][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.372670][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.401468][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.410406][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/03 13:39:54 executed programs: 13 [ 148.046963][ T5161] Bluetooth: hci0: command tx timeout [ 150.130088][ T5161] Bluetooth: hci0: command tx timeout [ 199.489715][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.496018][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.930358][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.936907][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.126654][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 294.206637][ T31] INFO: task kworker/u8:12:2997 blocked for more than 143 seconds. [ 294.214577][ T31] Not tainted syzkaller #0 [ 294.219631][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.228858][ T31] task:kworker/u8:12 state:D stack:22808 pid:2997 tgid:2997 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 294.241327][ T31] Workqueue: writeback wb_workfn (flush-8:0) [ 294.247566][ T31] Call Trace: [ 294.250873][ T31] [ 294.253823][ T31] ? __schedule+0x10b9/0x6150 [ 294.258617][ T31] __schedule+0x1139/0x6150 [ 294.263258][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 294.269247][ T31] ? __blk_flush_plug+0x2f3/0x4b0 [ 294.274298][ T31] ? __pfx___schedule+0x10/0x10 [ 294.279432][ T31] ? find_held_lock+0x2b/0x80 [ 294.284150][ T31] ? schedule+0x2d7/0x3a0 [ 294.288580][ T31] schedule+0xe7/0x3a0 [ 294.292692][ T31] io_schedule+0xbf/0x130 [ 294.297194][ T31] rq_qos_wait+0x22f/0x340 [ 294.301658][ T31] ? __pfx_rq_qos_wait+0x10/0x10 [ 294.306787][ T31] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 294.312526][ T31] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 294.317971][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 294.324157][ T31] ? bio_clone_blkg_association+0x77/0x90 [ 294.330488][ T31] wbt_wait+0x1b8/0x3a0 [ 294.334757][ T31] ? __pfx_wbt_wait+0x10/0x10 [ 294.339726][ T31] ? bio_submit_split_bioset+0x576/0xa40 [ 294.345395][ T31] ? bio_integrity_prep+0x1a6/0x990 [ 294.350704][ T31] ? __pfx_wbt_wait+0x10/0x10 [ 294.355401][ T31] __rq_qos_throttle+0x56/0xa0 [ 294.360249][ T31] blk_mq_submit_bio+0x2274/0x2bf0 [ 294.365396][ T31] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 294.371008][ T31] ? __lock_acquire+0x433/0x22f0 [ 294.375977][ T31] __submit_bio+0x3cf/0x690 [ 294.380630][ T31] ? __pfx___submit_bio+0x10/0x10 [ 294.385678][ T31] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 294.391472][ T31] ? lock_acquire+0x179/0x330 [ 294.396168][ T31] ? submit_bio_noacct_nocheck+0x53d/0xbe0 [ 294.402063][ T31] submit_bio_noacct_nocheck+0x53d/0xbe0 [ 294.407820][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 294.413987][ T31] ? __pfx___might_resched+0x10/0x10 [ 294.419354][ T31] submit_bio_noacct+0x5bd/0x1f40 [ 294.424410][ T31] ext4_bio_write_folio+0x756/0x1dc0 [ 294.430086][ T31] mpage_process_page_bufs+0x47c/0x8d0 [ 294.435601][ T31] mpage_prepare_extent_to_map+0x765/0x14b0 [ 294.441580][ T31] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 294.448074][ T31] ? kmem_cache_alloc_noprof+0x2a1/0x720 [ 294.453735][ T31] ? ext4_init_io_end+0x24/0x170 [ 294.458759][ T31] ext4_do_writepages+0xa11/0x3c70 [ 294.463889][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 294.469410][ T31] ? __pfx_ext4_do_writepages+0x10/0x10 [ 294.474999][ T31] ? ext4_writepages+0x37a/0x7d0 [ 294.480006][ T31] ext4_writepages+0x37a/0x7d0 [ 294.484786][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 294.490115][ T31] ? wb_update_bandwidth+0xa0/0xe0 [ 294.495261][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 294.500701][ T31] do_writepages+0x27a/0x600 [ 294.505312][ T31] ? __pfx_do_writepages+0x10/0x10 [ 294.510507][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 294.515918][ T31] __writeback_single_inode+0x168/0x14a0 [ 294.521758][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 294.526949][ T31] ? __pfx___writeback_single_inode+0x10/0x10 [ 294.533382][ T31] writeback_sb_inodes+0x795/0x1de0 [ 294.538710][ T31] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 294.544382][ T31] ? __lock_acquire+0x433/0x22f0 [ 294.549370][ T31] ? move_expired_inodes+0x5ee/0x8f0 [ 294.554676][ T31] __writeback_inodes_wb+0xf8/0x2d0 [ 294.560063][ T31] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 294.565978][ T31] ? queue_io+0x3f6/0x4f0 [ 294.570430][ T31] wb_writeback+0x799/0xae0 [ 294.575215][ T31] ? __pfx_wb_writeback+0x10/0x10 [ 294.580341][ T31] ? get_nr_dirty_inodes+0x170/0x1e0 [ 294.585747][ T31] wb_workfn+0x8a0/0xbb0 [ 294.590106][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 294.595935][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 294.600955][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.605744][ T31] process_one_work+0x9ba/0x1b20 [ 294.610861][ T31] ? __pfx_process_one_work+0x10/0x10 [ 294.616260][ T31] ? assign_work+0x1a0/0x250 [ 294.621004][ T31] worker_thread+0x6c8/0xf10 [ 294.625622][ T31] ? __kthread_parkme+0x19e/0x250 [ 294.630963][ T31] ? __pfx_worker_thread+0x10/0x10 [ 294.636510][ T31] kthread+0x3c5/0x780 [ 294.640611][ T31] ? __pfx_kthread+0x10/0x10 [ 294.645212][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.650029][ T31] ? __pfx_kthread+0x10/0x10 [ 294.654636][ T31] ret_from_fork+0x983/0xb10 [ 294.659349][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 294.664475][ T31] ? __switch_to+0x7af/0x10d0 [ 294.669305][ T31] ? __pfx_kthread+0x10/0x10 [ 294.673913][ T31] ret_from_fork_asm+0x1a/0x30 [ 294.678758][ T31] [ 294.681833][ T31] [ 294.681833][ T31] Showing all locks held in the system: [ 294.689673][ T31] 1 lock held by khungtaskd/31: [ 294.694528][ T31] #0: ffffffff8e1c9420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 294.704490][ T31] 5 locks held by kworker/u8:5/132: [ 294.709785][ T31] 4 locks held by kworker/u8:12/2997: [ 294.715183][ T31] #0: ffff888140ade148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 294.726139][ T31] #1: ffffc9000be17c90 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 294.738453][ T31] #2: ffff8880352120e0 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 294.749261][ T31] #3: ffff888035214b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 294.759917][ T31] 2 locks held by getty/5600: [ 294.764775][ T31] #0: ffff8880351450a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 294.774684][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 294.784904][ T31] 3 locks held by syz.0.202/6943: [ 294.789959][ T31] #0: ffff888030fdea88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x117/0x580 [ 294.799478][ T31] #1: ffff888035212518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 [ 294.809020][ T31] #2: ffff88814d806950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 294.818694][ T31] 3 locks held by syz-executor/6945: [ 294.823961][ T31] #0: ffff888035212420 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 294.833454][ T31] #1: ffff88807dd42090 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 294.844734][ T31] #2: ffff88814d806950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 294.854548][ T31] [ 294.856939][ T31] ============================================= [ 294.856939][ T31] [ 294.865541][ T31] NMI backtrace for cpu 0 [ 294.865567][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 294.865583][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.865592][ T31] Call Trace: [ 294.865598][ T31] [ 294.865605][ T31] dump_stack_lvl+0x116/0x1f0 [ 294.865629][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 294.865645][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 294.865669][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 294.865685][ T31] watchdog+0xf14/0x1140 [ 294.865709][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.865731][ T31] ? __pfx_watchdog+0x10/0x10 [ 294.865749][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.865770][ T31] ? __kthread_parkme+0x19e/0x250 [ 294.865792][ T31] ? __pfx_watchdog+0x10/0x10 [ 294.865813][ T31] kthread+0x3c5/0x780 [ 294.865828][ T31] ? __pfx_kthread+0x10/0x10 [ 294.865844][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.865864][ T31] ? __pfx_kthread+0x10/0x10 [ 294.865879][ T31] ret_from_fork+0x983/0xb10 [ 294.865893][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 294.865907][ T31] ? __switch_to+0x7af/0x10d0 [ 294.865923][ T31] ? __pfx_kthread+0x10/0x10 [ 294.865938][ T31] ret_from_fork_asm+0x1a/0x30 [ 294.865966][ T31] [ 294.865971][ T31] Sending NMI from CPU 0 to CPUs 1: [ 294.996954][ C1] NMI backtrace for cpu 1 [ 294.996975][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 294.997006][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.997021][ C1] RIP: 0010:__lock_acquire+0x13e/0x22f0 [ 294.997055][ C1] Code: c1 f9 03 4c 0f af c8 44 89 e8 48 8d 1c 80 48 c1 e3 03 45 85 ed 74 26 f6 84 24 b0 00 00 00 01 75 1c 4a 8d 74 13 d8 0f b7 46 20 <25> ff 1f 00 00 44 39 c8 75 09 4d 85 f6 0f 85 bb 03 00 00 4c 01 d3 [ 294.997079][ C1] RSP: 0018:ffffc90000a089b8 EFLAGS: 00000046 [ 294.997099][ C1] RAX: 0000000000002007 RBX: 0000000000000028 RCX: 0000000000000000 [ 294.997115][ C1] RDX: 0000000000000000 RSI: ffff88801d2de6b0 RDI: ffff8880b843ab98 [ 294.997132][ C1] RBP: ffff88801d2ddb80 R08: 0000000000000001 R09: 0000000000000041 [ 294.997148][ C1] R10: ffff88801d2de6b0 R11: 0000000000000001 R12: 0000000000000000 [ 294.997164][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880b843ab98 [ 294.997181][ C1] FS: 0000000000000000(0000) GS:ffff888124ca3000(0000) knlGS:0000000000000000 [ 294.997205][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.997222][ C1] CR2: 00005634efe3aa38 CR3: 000000000df84000 CR4: 00000000003526f0 [ 294.997239][ C1] Call Trace: [ 294.997248][ C1] [ 294.997264][ C1] lock_acquire+0x179/0x330 [ 294.997291][ C1] ? raw_spin_rq_lock_nested+0x29/0x130 [ 294.997334][ C1] _raw_spin_lock_nested+0x31/0x40 [ 294.997387][ C1] ? raw_spin_rq_lock_nested+0x29/0x130 [ 294.997424][ C1] raw_spin_rq_lock_nested+0x29/0x130 [ 294.997462][ C1] sched_balance_rq+0xb51/0x3220 [ 294.997511][ C1] ? __pfx_sched_balance_rq+0x10/0x10 [ 294.997555][ C1] ? __lock_acquire+0x433/0x22f0 [ 294.997584][ C1] sched_balance_domains+0x6a5/0xdd0 [ 294.997627][ C1] ? __pfx_sched_balance_domains+0x10/0x10 [ 294.997666][ C1] ? find_held_lock+0x2b/0x80 [ 294.997704][ C1] ? _nohz_idle_balance.isra.0+0x44e/0x840 [ 294.997746][ C1] _nohz_idle_balance.isra.0+0x5fc/0x840 [ 294.997791][ C1] ? __pfx__nohz_idle_balance.isra.0+0x10/0x10 [ 294.997836][ C1] handle_softirqs+0x219/0x8b0 [ 294.997874][ C1] ? rcu_is_watching+0x12/0xc0 [ 294.997924][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 294.997963][ C1] __irq_exit_rcu+0x109/0x170 [ 294.997999][ C1] irq_exit_rcu+0x9/0x30 [ 294.998034][ C1] sysvec_call_function_single+0xa4/0xc0 [ 294.998067][ C1] [ 294.998076][ C1] [ 294.998084][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 294.998114][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 294.998149][ C1] Code: a6 58 02 e9 d3 2f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 71 0e 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 294.998173][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c2 [ 294.998192][ C1] RAX: 00000000000c232d RBX: 0000000000000001 RCX: ffffffff8b5be6f9 [ 294.998209][ C1] RDX: 0000000000000000 RSI: ffffffff8d89fdde RDI: ffffffff8bd1d700 [ 294.998226][ C1] RBP: ffffed1003a5bb70 R08: 0000000000000001 R09: ffffed10170a672d [ 294.998243][ C1] R10: ffff8880b853396b R11: 00000000ffffffff R12: 0000000000000001 [ 294.998259][ C1] R13: ffff88801d2ddb80 R14: ffffffff906604d0 R15: 0000000000000000 [ 294.998280][ C1] ? ct_kernel_exit+0x139/0x190 [ 294.998318][ C1] default_idle+0x13/0x20 [ 294.998362][ C1] default_idle_call+0x6c/0xb0 [ 294.998402][ C1] do_idle+0x38d/0x510 [ 294.998438][ C1] ? __pfx_do_idle+0x10/0x10 [ 294.998472][ C1] ? rcu_is_watching+0x12/0xc0 [ 294.998509][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 294.998541][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.998577][ C1] cpu_startup_entry+0x4f/0x60 [ 294.998614][ C1] start_secondary+0x21d/0x2b0 [ 294.998655][ C1] ? __pfx_start_secondary+0x10/0x10 [ 294.998698][ C1] common_startup_64+0x13e/0x148 [ 294.998735][ C1]