Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. [ 132.918259][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.926088][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 2026/06/27 21:05:25 parsed 1 programs [ 140.137681][ T6138] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 143.832377][ T6150] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.839791][ T6150] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.847266][ T6150] bridge_slave_0: entered allmulticast mode [ 143.854787][ T6150] bridge_slave_0: entered promiscuous mode [ 143.863047][ T6150] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.870823][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.878107][ T6150] bridge_slave_1: entered allmulticast mode [ 143.885678][ T6150] bridge_slave_1: entered promiscuous mode [ 143.919237][ T6150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.931321][ T6150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.968684][ T6150] team0: Port device team_slave_0 added [ 143.976717][ T6150] team0: Port device team_slave_1 added [ 144.008128][ T6150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.015283][ T6150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.041890][ T6150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.055103][ T6150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.062118][ T6150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.088348][ T6150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.136487][ T6150] hsr_slave_0: entered promiscuous mode [ 144.142867][ T6150] hsr_slave_1: entered promiscuous mode [ 144.750838][ T6150] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.765716][ T6150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.781387][ T6150] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.793157][ T6150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.801566][ T6150] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.813048][ T6150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.822402][ T6150] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.838117][ T6150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.950109][ T6150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.976896][ T6150] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.992103][ T721] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.999343][ T721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.021816][ T721] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.029059][ T721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.648924][ T6150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.712460][ T6150] veth0_vlan: entered promiscuous mode [ 145.728908][ T6150] veth1_vlan: entered promiscuous mode [ 145.778959][ T6150] veth0_macvtap: entered promiscuous mode [ 145.791852][ T6150] veth1_macvtap: entered promiscuous mode [ 145.820897][ T6150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.840257][ T6150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.861654][ T721] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.882782][ T721] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.912968][ T721] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.937752][ T721] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.141434][ T4942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.155786][ T4942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.164121][ T4942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.179902][ T4942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.187831][ T4942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.191427][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.307677][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.383809][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.190979][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.578742][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.596378][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.639396][ T721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.648810][ T721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.638441][ T36] bridge_slave_1: left allmulticast mode [ 148.656525][ T36] bridge_slave_1: left promiscuous mode [ 148.666464][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.695343][ T36] bridge_slave_0: left allmulticast mode [ 148.701066][ T36] bridge_slave_0: left promiscuous mode [ 148.724629][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.078543][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.108624][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.136968][ T36] bond0 (unregistering): Released all slaves [ 149.325930][ T36] hsr_slave_0: left promiscuous mode [ 149.332111][ T36] hsr_slave_1: left promiscuous mode [ 149.339757][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.347547][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.357561][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.366251][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.382652][ T36] veth1_macvtap: left promiscuous mode [ 149.388424][ T36] veth0_macvtap: left promiscuous mode [ 149.394045][ T36] veth1_vlan: left promiscuous mode [ 149.400007][ T36] veth0_vlan: left promiscuous mode [ 149.718835][ T36] team0 (unregistering): Port device team_slave_1 removed [ 149.742472][ T36] team0 (unregistering): Port device team_slave_0 removed 2026/06/27 21:05:46 executed programs: 0 [ 154.265957][ T5726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.283089][ T5726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.299762][ T5726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.309567][ T5726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.317695][ T5726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.350835][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 155.003892][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 155.220639][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.228047][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.235792][ T6433] bridge_slave_0: entered allmulticast mode [ 155.243987][ T6433] bridge_slave_0: entered promiscuous mode [ 155.255326][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.262638][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.271569][ T6433] bridge_slave_1: entered allmulticast mode [ 155.284338][ T6433] bridge_slave_1: entered promiscuous mode [ 155.338065][ T6433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.351416][ T6433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.405653][ T6433] team0: Port device team_slave_0 added [ 155.415744][ T6433] team0: Port device team_slave_1 added [ 155.462570][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.469929][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.497235][ T6433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.510898][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.518385][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.545282][ T6433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.614423][ T6433] hsr_slave_0: entered promiscuous mode [ 155.622734][ T6433] hsr_slave_1: entered promiscuous mode [ 155.768758][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 156.206626][ T6433] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 156.222218][ T6433] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 156.230931][ T6433] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 156.242432][ T6433] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 156.254425][ T6433] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 156.265291][ T6433] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 156.273533][ T6433] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 156.285760][ T6433] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 156.354788][ T4942] Bluetooth: hci0: command tx timeout [ 156.389603][ T6433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.416243][ T6433] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.434685][ T721] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.441926][ T721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.465643][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.472871][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.089703][ T6433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.157210][ T6433] veth0_vlan: entered promiscuous mode [ 157.173455][ T6433] veth1_vlan: entered promiscuous mode [ 157.213213][ T6433] veth0_macvtap: entered promiscuous mode [ 157.225813][ T6433] veth1_macvtap: entered promiscuous mode [ 157.264479][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.282035][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.308594][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.329560][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.352563][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.382489][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.461673][ T721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.483201][ T721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.528843][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.538070][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.434611][ T4942] Bluetooth: hci0: command tx timeout 2026/06/27 21:05:51 executed programs: 47 [ 160.514648][ T4942] Bluetooth: hci0: command tx timeout [ 162.594842][ T4942] Bluetooth: hci0: command tx timeout [ 194.355847][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.362890][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.795988][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.802438][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.354412][ T5726] Bluetooth: hci0: command 0x0406 tx timeout [ 317.235481][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.241813][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.434408][ T31] INFO: task kworker/u8:4:57 blocked in I/O wait for more than 143 seconds. [ 320.443956][ T31] Not tainted syzkaller #0 [ 320.448994][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 320.457744][ T31] task:kworker/u8:4 state:D stack:23320 pid:57 tgid:57 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 320.469883][ T31] Workqueue: writeback wb_workfn (flush-8:0) [ 320.476525][ T31] Call Trace: [ 320.479871][ T31] [ 320.482833][ T31] __schedule+0x125c/0x6730 [ 320.487597][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 320.493573][ T31] ? __blk_flush_plug+0x2f3/0x4b0 [ 320.498724][ T31] ? __pfx___schedule+0x10/0x10 [ 320.503649][ T31] ? find_held_lock+0x2b/0x80 [ 320.508425][ T31] ? schedule+0x225/0x2c0 [ 320.512829][ T31] schedule+0xdd/0x2c0 [ 320.517093][ T31] io_schedule+0x8a/0xf0 [ 320.521403][ T31] bit_wait_io+0xd/0xe0 [ 320.525698][ T31] __wait_on_bit_lock+0x115/0x1a0 [ 320.530797][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 320.535885][ T31] out_of_line_wait_on_bit_lock+0xdc/0x110 [ 320.541764][ T31] ? __pfx_out_of_line_wait_on_bit_lock+0x10/0x10 [ 320.548306][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 320.553934][ T31] ? __pfx___might_resched+0x10/0x10 [ 320.559355][ T31] __lock_buffer+0x67/0x80 [ 320.563821][ T31] do_get_write_access+0x7c6/0x11e0 [ 320.569126][ T31] ? jbd2_journal_add_journal_head+0x414/0x660 [ 320.575382][ T31] ? jbd2_write_access_granted+0x61/0x3d0 [ 320.581655][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 320.587767][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 320.593927][ T31] ext4_mb_mark_context+0x179/0xdb0 [ 320.599313][ T31] ? ext4_sb_block_valid+0x378/0x640 [ 320.604692][ T31] ? __pfx_ext4_mb_mark_context+0x10/0x10 [ 320.610452][ T31] ext4_mb_mark_diskspace_used+0x472/0x800 [ 320.616369][ T31] ? __pfx_ext4_mb_mark_diskspace_used+0x10/0x10 [ 320.622766][ T31] ? ext4_mb_new_blocks+0x283f/0x4c20 [ 320.628284][ T31] ext4_mb_new_blocks+0x92a/0x4c20 [ 320.633465][ T31] ? __kasan_kmalloc+0xaa/0xb0 [ 320.638429][ T31] ? __kmalloc_noprof+0x343/0x820 [ 320.643546][ T31] ? ext4_find_extent+0x21b/0xa30 [ 320.648666][ T31] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 320.654315][ T31] ? ext4_ext_search_right+0x2cc/0xd60 [ 320.659806][ T31] ? ext4_inode_to_goal_block+0x354/0x410 [ 320.665718][ T31] ext4_ext_map_blocks+0x1c66/0x59a0 [ 320.671095][ T31] ? stack_depot_save_flags+0x27/0x9d0 [ 320.676676][ T31] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 320.682891][ T31] ? __lock_acquire+0x49f/0x1a40 [ 320.688054][ T31] ? wb_writeback+0x6f6/0xb50 [ 320.692823][ T31] ? wb_workfn+0x93f/0xc80 [ 320.697358][ T31] ? process_one_work+0xa23/0x1940 [ 320.702529][ T31] ? worker_thread+0x5ef/0xe50 [ 320.707383][ T31] ? kthread+0x370/0x450 [ 320.711688][ T31] ? ret_from_fork+0x72b/0xd50 [ 320.716558][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 320.721578][ T31] ext4_map_create_blocks+0xec/0x5e0 [ 320.726979][ T31] ? ext4_fc_write_inode_data+0x451/0x480 [ 320.732764][ T31] ext4_map_blocks+0x46b/0xd30 [ 320.737650][ T31] ? __pfx_ext4_map_blocks+0x10/0x10 [ 320.742995][ T31] ? ext4_ext_index_trans_blocks+0x167/0x1a0 [ 320.749074][ T31] ? __ext4_journal_ensure_credits+0x265/0x2f0 [ 320.755352][ T31] ext4_do_writepages+0x224c/0x3ed0 [ 320.760613][ T31] ? __pfx_ext4_do_writepages+0x10/0x10 [ 320.766255][ T31] ? ext4_writepages+0x347/0x750 [ 320.771253][ T31] ext4_writepages+0x347/0x750 [ 320.776107][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 320.782071][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 320.787518][ T31] do_writepages+0x278/0x600 [ 320.792186][ T31] ? __pfx_do_writepages+0x10/0x10 [ 320.797539][ T31] __writeback_single_inode+0x164/0x1300 [ 320.803242][ T31] ? find_held_lock+0x2b/0x80 [ 320.808028][ T31] ? __pfx___writeback_single_inode+0x10/0x10 [ 320.814242][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 320.819523][ T31] writeback_sb_inodes+0x766/0x1c50 [ 320.824870][ T31] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 320.830611][ T31] ? _raw_spin_unlock+0x28/0x50 [ 320.835564][ T31] ? move_expired_inodes+0x5ea/0x8f0 [ 320.840931][ T31] __writeback_inodes_wb+0xf8/0x2d0 [ 320.846262][ T31] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 320.852140][ T31] ? queue_io+0x287/0x530 [ 320.856582][ T31] wb_writeback+0x6f6/0xb50 [ 320.861164][ T31] ? __smp_call_single_queue+0x17e/0x450 [ 320.866904][ T31] ? __pfx_wb_writeback+0x10/0x10 [ 320.872010][ T31] ? get_nr_inodes+0x100/0x150 [ 320.876851][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.882119][ T31] wb_workfn+0x93f/0xc80 [ 320.887058][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 320.892942][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 320.897819][ T31] ? rcu_is_watching+0x12/0xc0 [ 320.902649][ T31] process_one_work+0xa23/0x1940 [ 320.907732][ T31] ? __pfx_process_one_work+0x10/0x10 [ 320.913178][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 320.918273][ T31] worker_thread+0x5ef/0xe50 [ 320.922959][ T31] ? __pfx_worker_thread+0x10/0x10 [ 320.928182][ T31] ? kthread+0x13a/0x450 [ 320.932485][ T31] ? __pfx_worker_thread+0x10/0x10 [ 320.937697][ T31] kthread+0x370/0x450 [ 320.941834][ T31] ? __pfx_kthread+0x10/0x10 [ 320.946647][ T31] ret_from_fork+0x72b/0xd50 [ 320.951396][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 320.956664][ T31] ? __switch_to+0x800/0x10f0 [ 320.961383][ T31] ? __switch_to_asm+0x39/0x70 [ 320.966248][ T31] ? __pfx_kthread+0x10/0x10 [ 320.970924][ T31] ret_from_fork_asm+0x1a/0x30 [ 320.975814][ T31] [ 320.978929][ T31] INFO: task jbd2/sda1-8:4955 blocked in I/O wait for more than 143 seconds. [ 320.988315][ T31] Not tainted syzkaller #0 [ 320.993296][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 321.002241][ T31] task:jbd2/sda1-8 state:D stack:25896 pid:4955 tgid:4955 ppid:2 task_flags:0x240040 flags:0x00080000 [ 321.014339][ T31] Call Trace: [ 321.017776][ T31] [ 321.020729][ T31] __schedule+0x125c/0x6730 [ 321.025389][ T31] ? __pfx___schedule+0x10/0x10 [ 321.030313][ T31] ? find_held_lock+0x2b/0x80 [ 321.035108][ T31] ? schedule+0x225/0x2c0 [ 321.039508][ T31] schedule+0xdd/0x2c0 [ 321.043612][ T31] io_schedule+0x8a/0xf0 [ 321.047994][ T31] bit_wait_io+0xd/0xe0 [ 321.052215][ T31] __wait_on_bit+0x65/0x180 [ 321.056813][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 321.061822][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 321.067327][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 321.073388][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 321.079015][ T31] ? __pfx___might_resched+0x10/0x10 [ 321.084415][ T31] __wait_on_buffer+0x64/0x70 [ 321.089711][ T31] jbd2_journal_commit_transaction+0x37ef/0x6700 [ 321.096224][ T31] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 321.102971][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 321.108874][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 321.114629][ T31] ? __pfx_debug_object_deactivate+0x10/0x10 [ 321.120649][ T31] ? _raw_spin_lock_irqsave+0x52/0x60 [ 321.126134][ T31] ? find_held_lock+0x2b/0x80 [ 321.130867][ T31] ? __try_to_del_timer_sync+0x107/0x160 [ 321.136632][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 321.142507][ T31] ? __timer_delete_sync+0x151/0x1c0 [ 321.147880][ T31] kjournald2+0x200/0x760 [ 321.152279][ T31] ? __pfx_kjournald2+0x10/0x10 [ 321.157221][ T31] ? find_held_lock+0x2b/0x80 [ 321.161950][ T31] ? __kthread_parkme+0xbb/0x230 [ 321.166966][ T31] ? rcu_is_watching+0x12/0xc0 [ 321.171789][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 321.177983][ T31] ? __kthread_parkme+0x18c/0x230 [ 321.183064][ T31] ? kthread+0x13a/0x450 [ 321.187398][ T31] ? __pfx_kjournald2+0x10/0x10 [ 321.192905][ T31] kthread+0x370/0x450 [ 321.197114][ T31] ? __pfx_kthread+0x10/0x10 [ 321.201768][ T31] ret_from_fork+0x72b/0xd50 [ 321.206462][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 321.211646][ T31] ? __switch_to+0x800/0x10f0 [ 321.216448][ T31] ? __switch_to_asm+0x39/0x70 [ 321.221280][ T31] ? __pfx_kthread+0x10/0x10 [ 321.225981][ T31] ret_from_fork_asm+0x1a/0x30 [ 321.230850][ T31] [ 321.233902][ T31] INFO: task syz.0.206:6940 blocked in I/O wait for more than 144 seconds. [ 321.242810][ T31] Not tainted syzkaller #0 [ 321.247936][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 321.256680][ T31] task:syz.0.206 state:D stack:28280 pid:6940 tgid:6940 ppid:6433 task_flags:0x440040 flags:0x00080002 [ 321.268715][ T31] Call Trace: [ 321.272040][ T31] [ 321.275086][ T31] __schedule+0x125c/0x6730 [ 321.279676][ T31] ? __pfx___schedule+0x10/0x10 [ 321.284649][ T31] ? find_held_lock+0x2b/0x80 [ 321.289405][ T31] ? schedule+0x225/0x2c0 [ 321.294355][ T31] schedule+0xdd/0x2c0 [ 321.298501][ T31] io_schedule+0x8a/0xf0 [ 321.302800][ T31] bit_wait_io+0xd/0xe0 [ 321.307097][ T31] __wait_on_bit+0x65/0x180 [ 321.311666][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 321.316705][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 321.322145][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 321.328231][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 321.333859][ T31] do_get_write_access+0x836/0x11e0 [ 321.339178][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 321.345282][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 321.351418][ T31] ext4_reserve_inode_write+0x1b7/0x330 [ 321.357073][ T31] __ext4_mark_inode_dirty+0x18f/0x880 [ 321.362608][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 321.368697][ T31] ? trace_jbd2_handle_start+0x83/0x240 [ 321.374370][ T31] ? jbd2__journal_start+0xf7/0x6a0 [ 321.379624][ T31] ? __ext4_journal_start_sb+0x367/0x670 [ 321.385339][ T31] ? __ext4_journal_start_sb+0x1ce/0x670 [ 321.391033][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 321.396675][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 321.402126][ T31] ext4_dirty_inode+0xd9/0x130 [ 321.407004][ T31] ? rcu_is_watching+0x12/0xc0 [ 321.411835][ T31] __mark_inode_dirty+0x1f3/0x16e0 [ 321.417045][ T31] file_update_time_flags+0x46b/0x500 [ 321.422444][ T31] ext4_page_mkwrite+0x324/0x1850 [ 321.427591][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 321.433125][ T31] do_page_mkwrite+0x17a/0x440 [ 321.437999][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 321.443507][ T31] do_fault+0x3b5/0x1750 [ 321.447853][ T31] ? __pmd_alloc+0x3fb/0x950 [ 321.452515][ T31] __handle_mm_fault+0x187d/0x2a00 [ 321.457756][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 321.463090][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 321.468635][ T31] ? lock_vma_under_rcu+0x17c/0x590 [ 321.473918][ T31] handle_mm_fault+0x37b/0xa30 [ 321.478817][ T31] do_user_addr_fault+0x5a3/0x12f0 [ 321.484115][ T31] exc_page_fault+0x6f/0xd0 [ 321.488773][ T31] asm_exc_page_fault+0x26/0x30 [ 321.493684][ T31] RIP: 0033:0x7f405025eaaf [ 321.498889][ T31] RSP: 002b:00007ffc86643cf0 EFLAGS: 00010246 [ 321.505205][ T31] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 321.513238][ T31] RDX: 0000001b2dc20000 RSI: 0000000000040000 RDI: 00007f4050551710 [ 321.521332][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.529368][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 321.537426][ T31] R13: 0000000000000000 R14: 00007ffc86643f70 R15: 00007ffc86643f70 [ 321.545498][ T31] [ 321.548577][ T31] [ 321.548577][ T31] Showing all locks held in the system: [ 321.556395][ T31] 1 lock held by khungtaskd/31: [ 321.561279][ T31] #0: ffffffff8e7e5ec0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 321.571231][ T31] 6 locks held by kworker/u8:4/57: [ 321.576403][ T31] #0: ffff888020ec8140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 321.587219][ T31] #1: ffffc900015e7d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 321.599190][ T31] #2: ffff8880323600d8 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 321.610433][ T31] #3: ffff8880323dec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 321.620895][ T31] #4: ffff8880323dc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 321.630602][ T31] #5: ffff888072796938 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x45a/0xd30 [ 321.640628][ T31] 2 locks held by getty/5379: [ 321.645378][ T31] #0: ffff888026a4d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 321.655222][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 321.665467][ T31] 3 locks held by syz.0.206/6940: [ 321.670516][ T31] #0: ffff888075551088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 321.679865][ T31] #1: ffff888032360548 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 321.689472][ T31] #2: ffff8880323dc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 321.699176][ T31] 2 locks held by syz-executor/6941: [ 321.705010][ T31] #0: ffff888032360450 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 321.714603][ T31] #1: ffff888077d49640 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 321.725460][ T31] [ 321.727818][ T31] ============================================= [ 321.727818][ T31] [ 321.736506][ T31] NMI backtrace for cpu 0 [ 321.736543][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 321.736579][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 321.736597][ T31] Call Trace: [ 321.736607][ T31] [ 321.736619][ T31] dump_stack_lvl+0x100/0x190 [ 321.736663][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 321.736709][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 321.736752][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 321.736801][ T31] sys_info+0x141/0x190 [ 321.736838][ T31] watchdog+0xcb1/0x1030 [ 321.736896][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 321.736946][ T31] ? __pfx_watchdog+0x10/0x10 [ 321.736996][ T31] ? __kthread_parkme+0x18c/0x230 [ 321.737040][ T31] ? kthread+0x13a/0x450 [ 321.737082][ T31] ? __pfx_watchdog+0x10/0x10 [ 321.737129][ T31] kthread+0x370/0x450 [ 321.737173][ T31] ? __pfx_kthread+0x10/0x10 [ 321.737221][ T31] ret_from_fork+0x72b/0xd50 [ 321.737265][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 321.737309][ T31] ? __switch_to+0x800/0x10f0 [ 321.737338][ T31] ? __switch_to_asm+0x39/0x70 [ 321.737386][ T31] ? __pfx_kthread+0x10/0x10 [ 321.737442][ T31] ret_from_fork_asm+0x1a/0x30 [ 321.737511][ T31] [ 321.737522][ T31] Sending NMI from CPU 0 to CPUs 1: [ 321.868942][ C1] NMI backtrace for cpu 1 [ 321.868963][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 321.868992][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 321.869007][ C1] RIP: 0010:rcu_is_watching+0x41/0xc0 [ 321.869045][ C1] Code: 14 94 89 c5 83 f8 07 0f 87 82 00 00 00 48 8d 3c ed 20 e9 20 8e 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <75> 5c 48 03 1c ed 20 e9 20 8e 48 b8 00 00 00 00 00 fc ff df 48 89 [ 321.869069][ C1] RSP: 0018:ffffc90000197dd0 EFLAGS: 00000046 [ 321.869090][ C1] RAX: dffffc0000000000 RBX: ffffffff9414cc68 RCX: ffffffff81dc50c1 [ 321.869108][ C1] RDX: 1ffffffff1c41d25 RSI: ffffffff8c1e8e00 RDI: ffffffff8e20e928 [ 321.869124][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff21b7b92 [ 321.869140][ C1] R10: ffffffff90dbdc97 R11: 0000000000000000 R12: 0000000000000000 [ 321.869155][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 321.869177][ C1] FS: 0000000000000000(0000) GS:ffff8881243e7000(0000) knlGS:0000000000000000 [ 321.869200][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.869217][ C1] CR2: 000055a388add168 CR3: 000000000e592000 CR4: 00000000003526f0 [ 321.869233][ C1] Call Trace: [ 321.869242][ C1] [ 321.869253][ C1] trace_cpu_idle+0x149/0x1a0 [ 321.869292][ C1] default_idle_call+0x8c/0xb0 [ 321.869320][ C1] do_idle+0x3a7/0x5b0 [ 321.869348][ C1] ? __pfx_do_idle+0x10/0x10 [ 321.869375][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 321.869410][ C1] cpu_startup_entry+0x4f/0x60 [ 321.869441][ C1] start_secondary+0x21d/0x2d0 [ 321.869471][ C1] ? __pfx_start_secondary+0x10/0x10 [ 321.869504][ C1] common_startup_64+0x13e/0x158 [ 321.869553][ C1] [ 321.870382][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 321.870443][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 321.870537][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 321.870589][ T31] Call Trace: [ 321.870612][ T31] [ 321.870663][ T31] dump_stack_lvl+0x100/0x190 [ 321.870787][ T31] vpanic+0x552/0x970 [ 321.870870][ T31] ? __pfx_vpanic+0x10/0x10 [ 321.870960][ T31] ? rcu_is_watching+0x12/0xc0 [ 321.871094][ T31] panic+0xd1/0xe0 [ 321.871196][ T31] ? __pfx_panic+0x10/0x10 [ 321.871298][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 321.871422][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 321.871538][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 321.871659][ T31] ? watchdog.cold+0x1ec/0x234 [ 321.871747][ T31] ? watchdog+0xcc1/0x1030 [ 321.871885][ T31] watchdog.cold+0x1fd/0x234 [ 321.871993][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 321.872127][ T31] ? __pfx_watchdog+0x10/0x10 [ 321.872254][ T31] ? __kthread_parkme+0x18c/0x230 [ 321.872368][ T31] ? kthread+0x13a/0x450 [ 321.872500][ T31] ? __pfx_watchdog+0x10/0x10 [ 321.872646][ T31] kthread+0x370/0x450 [ 321.872762][ T31] ? __pfx_kthread+0x10/0x10 [ 321.872889][ T31] ret_from_fork+0x72b/0xd50 [ 321.873009][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 321.873107][ T31] ? __switch_to+0x800/0x10f0 [ 321.873190][ T31] ? __switch_to_asm+0x39/0x70 [ 321.873328][ T31] ? __pfx_kthread+0x10/0x10 [ 321.873454][ T31] ret_from_fork_asm+0x1a/0x30 [ 321.873634][ T31] [ 322.196469][ T31] Kernel Offset: disabled [ 322.200803][ T31] Rebooting in 86400 seconds..