Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. 2026/09/07 04:12:11 parsed 1 programs 2026/09/07 04:12:11 serving rpc on tcp://40849 [ 153.602410][ T5639] cgroup: Unknown subsys name 'net' [ 153.882906][ T5639] cgroup: Unknown subsys name 'cpuset' [ 153.956876][ T5639] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 156.061259][ T5639] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 159.995056][ T5649] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 162.913322][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.924837][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.925763][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.930658][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.931789][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.993603][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.994107][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.059916][ T1539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.060644][ T1539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.901129][ T5719] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.902957][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.903537][ T5719] bridge_slave_0: entered allmulticast mode [ 166.906670][ T5719] bridge_slave_0: entered promiscuous mode [ 166.921781][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.922363][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.922661][ T5719] bridge_slave_1: entered allmulticast mode [ 166.925615][ T5719] bridge_slave_1: entered promiscuous mode [ 166.980079][ T5719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.984313][ T5719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.025835][ T5719] team0: Port device team_slave_0 added [ 167.031423][ T5719] team0: Port device team_slave_1 added [ 167.071083][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.071155][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.071180][ T5719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.075260][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.075276][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.075299][ T5719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.175139][ T5719] hsr_slave_0: entered promiscuous mode [ 167.183532][ T5719] hsr_slave_1: entered promiscuous mode [ 167.685086][ T5719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.730390][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.735402][ T5719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.762824][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.765823][ T5719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.793665][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.794843][ T5719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 167.831713][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 168.289182][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.336719][ T5719] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.358455][ T3398] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.359827][ T3398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.395608][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.395884][ T3530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.922012][ T5719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.012499][ T5719] veth0_vlan: entered promiscuous mode [ 169.030028][ T5719] veth1_vlan: entered promiscuous mode [ 169.105833][ T5719] veth0_macvtap: entered promiscuous mode [ 169.121930][ T5719] veth1_macvtap: entered promiscuous mode [ 169.149049][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.170633][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.472511][ T1539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.476889][ T1539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.476937][ T1539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.476970][ T1539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.862546][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/09/07 04:12:30 executed programs: 0 [ 170.437709][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.457833][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.462737][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.467097][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.470638][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.592351][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.078408][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.451056][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.532105][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.532404][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.532564][ T5760] bridge_slave_0: entered allmulticast mode [ 171.535244][ T5760] bridge_slave_0: entered promiscuous mode [ 171.543595][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.543721][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.546647][ T5760] bridge_slave_1: entered allmulticast mode [ 171.549976][ T5760] bridge_slave_1: entered promiscuous mode [ 171.607995][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.614392][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.672070][ T5760] team0: Port device team_slave_0 added [ 171.679735][ T5760] team0: Port device team_slave_1 added [ 171.732977][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.733047][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.733072][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.735460][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.735474][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.735498][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.814660][ T5760] hsr_slave_0: entered promiscuous mode [ 171.816118][ T5760] hsr_slave_1: entered promiscuous mode [ 171.817818][ T5760] debugfs: 'hsr0' already exists in 'hsr' [ 171.817912][ T5760] Cannot create hsr debugfs directory [ 172.417113][ T12] bridge_slave_1: left allmulticast mode [ 172.418484][ T12] bridge_slave_1: left promiscuous mode [ 172.424260][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.551024][ T59] Bluetooth: hci0: command tx timeout [ 172.551201][ T12] bridge_slave_0: left allmulticast mode [ 172.551265][ T12] bridge_slave_0: left promiscuous mode [ 172.570296][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.258428][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.337144][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.358488][ T12] bond0 (unregistering): Released all slaves [ 173.896498][ T12] hsr_slave_0: left promiscuous mode [ 173.936370][ T12] hsr_slave_1: left promiscuous mode [ 173.948756][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.957038][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.997831][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.997953][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.061792][ T12] veth1_macvtap: left promiscuous mode [ 174.063088][ T12] veth0_macvtap: left promiscuous mode [ 174.063317][ T12] veth1_vlan: left promiscuous mode [ 174.063592][ T12] veth0_vlan: left promiscuous mode [ 174.626345][ T59] Bluetooth: hci0: command tx timeout [ 174.797388][ T12] team0 (unregistering): Port device team_slave_1 removed [ 174.837095][ T12] team0 (unregistering): Port device team_slave_0 removed [ 175.022729][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 176.049855][ T5760] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 176.093163][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.095975][ T5760] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 176.144826][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.153702][ T5760] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 176.203615][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.205697][ T5760] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 176.234854][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.707345][ T59] Bluetooth: hci0: command tx timeout [ 176.773967][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.900993][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.915230][ T1539] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.918592][ T1539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.953645][ T1539] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.953885][ T1539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.364607][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.434630][ T5760] veth0_vlan: entered promiscuous mode [ 177.459316][ T5760] veth1_vlan: entered promiscuous mode [ 177.501403][ T5760] veth0_macvtap: entered promiscuous mode [ 177.508137][ T5760] veth1_macvtap: entered promiscuous mode [ 177.532624][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.549834][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.577866][ T3530] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.596954][ T3532] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.748947][ T3398] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.910267][ T3530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.985529][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.998413][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.084953][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.095999][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/07 04:12:38 executed programs: 2 [ 178.787968][ T59] Bluetooth: hci0: command tx timeout [ 195.749753][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.750891][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.193840][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.193982][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 295.106378][ T4920] Bluetooth: hci0: command 0x0406 tx timeout [ 318.628096][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.628260][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.986430][ T38] INFO: task jbd2/sda1-8:4933 blocked in I/O wait for more than 143 seconds. [ 333.998357][ T38] Not tainted syzkaller #0 [ 333.998379][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.998389][ T38] task:jbd2/sda1-8 state:D stack:24016 pid:4933 tgid:4933 ppid:2 task_flags:0x240040 flags:0x00080000 [ 333.998470][ T38] Call Trace: [ 333.998480][ T38] [ 333.998505][ T38] __schedule+0x16d9/0x5700 [ 333.998572][ T38] ? __pfx___schedule+0x10/0x10 [ 333.998606][ T38] ? schedule+0x90/0x2b0 [ 333.998633][ T38] schedule+0x164/0x2b0 [ 333.998659][ T38] io_schedule+0x80/0xe0 [ 333.998685][ T38] bit_wait_io+0x11/0xd0 [ 334.060883][ T38] __wait_on_bit+0xac/0x2f0 [ 334.060922][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 334.060951][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 334.060979][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 334.061002][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 334.061032][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 334.061059][ T38] ? __wait_on_buffer+0xe/0x80 [ 334.061093][ T38] jbd2_journal_commit_transaction+0x2f26/0x5ba0 [ 334.061163][ T38] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 334.061200][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 334.061251][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 334.061281][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 334.061306][ T38] ? __timer_delete_sync+0x552/0x620 [ 334.061341][ T38] kjournald2+0x3bc/0x750 [ 334.061388][ T38] ? __pfx_kjournald2+0x10/0x10 [ 334.061419][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 334.061443][ T38] ? __kthread_parkme+0x71/0x1f0 [ 334.061476][ T38] ? __kthread_parkme+0x199/0x1f0 [ 334.061522][ T38] kthread+0x38b/0x470 [ 334.061544][ T38] ? __pfx_kjournald2+0x10/0x10 [ 334.061572][ T38] ? __pfx_kthread+0x10/0x10 [ 334.061595][ T38] ret_from_fork+0x514/0xb70 [ 334.061621][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 334.061643][ T38] ? __switch_to+0xc89/0x1420 [ 334.061677][ T38] ? __pfx_kthread+0x10/0x10 [ 334.061701][ T38] ret_from_fork_asm+0x1a/0x30 [ 334.061742][ T38] [ 334.061776][ T38] INFO: task syz.0.70:5901 blocked in I/O wait for more than 143 seconds. [ 334.061794][ T38] Not tainted syzkaller #0 [ 334.061805][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.061815][ T38] task:syz.0.70 state:D stack:27200 pid:5901 tgid:5901 ppid:5760 task_flags:0x440040 flags:0x00080002 [ 334.061885][ T38] Call Trace: [ 334.061893][ T38] [ 334.061906][ T38] __schedule+0x16d9/0x5700 [ 334.061962][ T38] ? __pfx___schedule+0x10/0x10 [ 334.061994][ T38] ? schedule+0x90/0x2b0 [ 334.062022][ T38] schedule+0x164/0x2b0 [ 334.062047][ T38] io_schedule+0x80/0xe0 [ 334.062073][ T38] bit_wait_io+0x11/0xd0 [ 334.062100][ T38] __wait_on_bit+0xac/0x2f0 [ 334.062124][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 334.062169][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 334.062196][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 334.062220][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 334.062250][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 334.062283][ T38] do_get_write_access+0x671/0x1090 [ 334.062350][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 334.062378][ T38] __ext4_journal_get_write_access+0xf1/0x620 [ 334.062409][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 334.062433][ T38] ? trace_kmem_cache_alloc+0x29/0xe0 [ 334.062470][ T38] ext4_reserve_inode_write+0x294/0x360 [ 334.062511][ T38] __ext4_mark_inode_dirty+0x146/0x7b0 [ 334.062553][ T38] ext4_dirty_inode+0xd0/0x110 [ 334.062575][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 334.062596][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 334.062633][ T38] file_update_time_flags+0x39f/0x450 [ 334.062666][ T38] ext4_page_mkwrite+0x225/0x1150 [ 334.062699][ T38] ? __pfx_filemap_fault+0x10/0x10 [ 334.062726][ T38] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 334.062753][ T38] ? lock_acquire+0x115/0x350 [ 334.062783][ T38] do_page_mkwrite+0x14a/0x310 [ 334.062819][ T38] do_pte_missing+0x734/0x28f0 [ 334.062858][ T38] ? handle_mm_fault+0xeb/0x28c0 [ 334.062887][ T38] handle_mm_fault+0xf64/0x28c0 [ 334.062919][ T38] ? handle_mm_fault+0xeb/0x28c0 [ 334.062955][ T38] ? __pfx_handle_mm_fault+0x10/0x10 [ 334.062978][ T38] ? lock_vma_under_rcu+0x45a/0x500 [ 334.063004][ T38] ? __pfx_do_futex+0x10/0x10 [ 334.063063][ T38] do_user_addr_fault+0xa4f/0x1340 [ 334.063099][ T38] ? trace_page_fault_user+0x84/0x1e0 [ 334.063125][ T38] exc_page_fault+0x6a/0xc0 [ 334.063152][ T38] asm_exc_page_fault+0x26/0x30 [ 334.063174][ T38] RIP: 0033:0x7fb5267c6871 [ 334.063194][ T38] RSP: 002b:00007fffe741f680 EFLAGS: 00010202 [ 334.063214][ T38] RAX: 0000001b34b64000 RBX: 0000000000000000 RCX: 000000000003fde8 [ 334.063229][ T38] RDX: 0000001b34b63fff RSI: 0000000000000008 RDI: 00007fb5276b5720 [ 334.063244][ T38] RBP: 00007fb5276b5720 R08: 0000000000000000 R09: 00007fb526b86038 [ 334.063258][ T38] R10: 00007fb5276b5700 R11: 0000000000000000 R12: 0000000000000000 [ 334.063272][ T38] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 334.063305][ T38] [ 334.063316][ T38] [ 334.063316][ T38] Showing all locks held in the system: [ 334.063327][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 334.063343][ T38] #0: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 334.063411][ T38] locks held by kworker/u8:17/1539: 6, on CPU#0: [ 334.063426][ T38] #0: ffff88801f6d5138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 334.063486][ T38] #1: ffffc9000776fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 334.063553][ T38] #2: ffff888035dee0e0 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 334.063611][ T38] #3: ffff88803649cd98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 334.063666][ T38] #4: ffff888035deabb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 334.063727][ T38] #5: ffff8880231bdcc8 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x77d/0x12c0 [ 334.063804][ T38] locks held by getty/5360: 2, on CPU#1: [ 334.063819][ T38] #0: ffff888028ec60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 334.063881][ T38] #1: ffffc900044cb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 334.063939][ T38] locks held by kworker/0:4/5741: 2, last CPU#0: [ 334.063953][ T38] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 334.064026][ T38] #1: ffffc90004327c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 334.064087][ T38] locks held by syz.0.70/5901: 3, on CPU#1: [ 334.064102][ T38] #0: ffff8880339716c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 334.064159][ T38] #1: ffff888035dee688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x203/0x1150 [ 334.064211][ T38] #2: ffff888035deabb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 334.064272][ T38] locks held by syz-executor/5907: 3, on CPU#0: [ 334.064287][ T38] #0: ffff888035dee510 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 334.064349][ T38] #1: ffff8880231cb148 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 334.064416][ T38] #2: ffff888035deabb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 334.064477][ T38] [ 334.064483][ T38] ============================================= [ 334.064483][ T38] [ 334.064500][ T38] NMI backtrace for cpu 1 [ 334.064514][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 334.064536][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.064548][ T38] Call Trace: [ 334.064557][ T38] [ 334.064566][ T38] dump_stack_lvl+0xe8/0x150 [ 334.064597][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 334.064630][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 334.064665][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 334.064700][ T38] sys_info+0x135/0x170 [ 334.064728][ T38] watchdog+0xfd7/0x1030 [ 334.064763][ T38] ? watchdog+0x1c7/0x1030 [ 334.064795][ T38] kthread+0x38b/0x470 [ 334.064817][ T38] ? __pfx_watchdog+0x10/0x10 [ 334.064840][ T38] ? __pfx_kthread+0x10/0x10 [ 334.064863][ T38] ret_from_fork+0x514/0xb70 [ 334.064887][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 334.064907][ T38] ? __switch_to+0xc89/0x1420 [ 334.064939][ T38] ? __pfx_kthread+0x10/0x10 [ 334.064962][ T38] ret_from_fork_asm+0x1a/0x30 [ 334.064998][ T38] [ 334.065006][ T38] Sending NMI from CPU 1 to CPUs 0: [ 334.065034][ C0] NMI backtrace for cpu 0 [ 334.065050][ C0] CPU: 0 UID: 0 PID: 5741 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 334.065068][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.065079][ C0] Workqueue: events_power_efficient gc_worker [ 334.065105][ C0] RIP: 0010:__might_resched+0x18/0x470 [ 334.065128][ C0] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 20 89 d3 89 74 24 04 <48> 89 7c 24 08 e8 ae ba bf 09 85 c0 74 46 48 c7 c7 80 3b 1c 8e be [ 334.065141][ C0] RSP: 0018:ffffc90004327928 EFLAGS: 00000286 [ 334.065155][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000046 [ 334.065166][ C0] RDX: 0000000000000000 RSI: 000000000000064a RDI: ffffffff8c78b0c0 [ 334.065177][ C0] RBP: ffffc90004327ad0 R08: 0000000000000000 R09: 0000000000000000 [ 334.065188][ C0] R10: dffffc0000000000 R11: fffffbfff1f63c30 R12: dffffc0000000000 [ 334.065200][ C0] R13: ffffffff818f8a7a R14: 0000000000000001 R15: 000000000001a9e7 [ 334.065211][ C0] FS: 0000000000000000(0000) GS:ffff888125bd4000(0000) knlGS:0000000000000000 [ 334.065225][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.065237][ C0] CR2: 00005581cfab5660 CR3: 0000000012012000 CR4: 00000000003526f0 [ 334.065254][ C0] Call Trace: [ 334.065260][ C0] [ 334.065267][ C0] ? gc_worker+0x274/0x18b0 [ 334.065290][ C0] ? process_scheduled_works+0x97a/0x1630 [ 334.065310][ C0] gc_worker+0x10b2/0x18b0 [ 334.065333][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 334.065353][ C0] ? gc_worker+0x274/0x18b0 [ 334.065376][ C0] ? __pfx_gc_worker+0x10/0x10 [ 334.065399][ C0] ? rcu_is_watching+0x16/0xb0 [ 334.065422][ C0] ? process_scheduled_works+0x97a/0x1630 [ 334.065442][ C0] process_scheduled_works+0xc3d/0x1630 [ 334.065474][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 334.065496][ C0] ? assign_work+0x3cf/0x5d0 [ 334.065518][ C0] worker_thread+0xa47/0xfb0 [ 334.065545][ C0] ? __kthread_parkme+0x71/0x1f0 [ 334.065570][ C0] kthread+0x38b/0x470 [ 334.065585][ C0] ? __pfx_worker_thread+0x10/0x10 [ 334.065605][ C0] ? __pfx_kthread+0x10/0x10 [ 334.065621][ C0] ret_from_fork+0x514/0xb70 [ 334.065637][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 334.065653][ C0] ? __switch_to+0xc89/0x1420 [ 334.065675][ C0] ? __pfx_kthread+0x10/0x10 [ 334.065690][ C0] ret_from_fork_asm+0x1a/0x30 [ 334.065712][ C0] [ 334.066030][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 335.126471][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 335.136123][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.146460][ T38] Call Trace: [ 335.149759][ T38] [ 335.152773][ T38] vpanic+0x56d/0xa60 [ 335.157027][ T38] ? __pfx_vpanic+0x10/0x10 [ 335.161538][ T38] ? console_srcu_read_unlock+0x3a/0x60 [ 335.167272][ T38] panic+0xc5/0xd0 [ 335.171037][ T38] ? __pfx_panic+0x10/0x10 [ 335.175460][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 335.180583][ T38] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 335.186764][ T38] watchdog+0x1030/0x1030 [ 335.191106][ T38] ? watchdog+0x1c7/0x1030 [ 335.195532][ T38] kthread+0x38b/0x470 [ 335.199779][ T38] ? __pfx_watchdog+0x10/0x10 [ 335.204523][ T38] ? __pfx_kthread+0x10/0x10 [ 335.209129][ T38] ret_from_fork+0x514/0xb70 [ 335.213823][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 335.219033][ T38] ? __switch_to+0xc89/0x1420 [ 335.223721][ T38] ? __pfx_kthread+0x10/0x10 [ 335.228331][ T38] ret_from_fork_asm+0x1a/0x30 [ 335.233228][ T38] [ 335.237825][ T38] Kernel Offset: disabled [ 335.242348][ T38] Rebooting in 86400 seconds..