Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. 2026/08/17 01:04:18 parsed 1 programs 2026/08/17 01:04:18 serving rpc on tcp://34315 [ 166.694989][ T5622] cgroup: Unknown subsys name 'net' [ 166.926112][ T5622] cgroup: Unknown subsys name 'cpuset' [ 166.981201][ T5622] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 168.667290][ T5622] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 172.862090][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.865553][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.865741][ T5638] bridge_slave_0: entered allmulticast mode [ 172.870083][ T5638] bridge_slave_0: entered promiscuous mode [ 172.905108][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.905225][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.905318][ T5638] bridge_slave_1: entered allmulticast mode [ 172.906735][ T5638] bridge_slave_1: entered promiscuous mode [ 172.952432][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.954776][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.986951][ T5638] team0: Port device team_slave_0 added [ 172.988898][ T5638] team0: Port device team_slave_1 added [ 173.019119][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.019130][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.019141][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.023282][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.023296][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.023316][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.115188][ T5638] hsr_slave_0: entered promiscuous mode [ 173.116380][ T5638] hsr_slave_1: entered promiscuous mode [ 173.408795][ T5638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.447124][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.449925][ T5638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.467029][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.468802][ T5638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.514569][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.516096][ T5638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.534927][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.865480][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.907665][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.925508][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.926115][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.959462][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.959607][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.327353][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.379995][ T5638] veth0_vlan: entered promiscuous mode [ 174.407092][ T5638] veth1_vlan: entered promiscuous mode [ 174.455441][ T5638] veth0_macvtap: entered promiscuous mode [ 174.459425][ T5638] veth1_macvtap: entered promiscuous mode [ 174.490139][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.509316][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.741528][ T1374] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.741592][ T1374] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.741624][ T1374] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.741653][ T1374] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.115024][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.411119][ T4901] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.423176][ T4901] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.435845][ T4901] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.438876][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.439165][ T4901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.442356][ T4901] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.853696][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.083972][ T1449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.083996][ T1449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.252913][ T1374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.252930][ T1374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.456293][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.631999][ T66] bridge_slave_1: left allmulticast mode [ 177.632297][ T66] bridge_slave_1: left promiscuous mode [ 177.664784][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.903876][ T66] bridge_slave_0: left allmulticast mode [ 177.903910][ T66] bridge_slave_0: left promiscuous mode [ 177.904155][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.661853][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.721284][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.742754][ T66] bond0 (unregistering): Released all slaves [ 179.240891][ T66] hsr_slave_0: left promiscuous mode [ 179.286122][ T66] hsr_slave_1: left promiscuous mode [ 179.287261][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.287322][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.344806][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.344831][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.455286][ T66] veth1_macvtap: left promiscuous mode [ 179.455528][ T66] veth0_macvtap: left promiscuous mode [ 179.455807][ T66] veth1_vlan: left promiscuous mode [ 179.456630][ T66] veth0_vlan: left promiscuous mode [ 180.171889][ T66] team0 (unregistering): Port device team_slave_1 removed [ 180.211231][ T66] team0 (unregistering): Port device team_slave_0 removed [ 180.376968][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1 [ 181.230297][ T5247] 8021q: adding VLAN 0 to HW filter on device eth2 [ 181.780194][ T5247] 8021q: adding VLAN 0 to HW filter on device eth3 [ 182.793773][ T5247] 8021q: adding VLAN 0 to HW filter on device eth4 2026/08/17 01:04:38 executed programs: 0 [ 184.115521][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.116985][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.117714][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.118818][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.119576][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.903151][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.903320][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.903446][ T5814] bridge_slave_0: entered allmulticast mode [ 184.911810][ T5814] bridge_slave_0: entered promiscuous mode [ 184.960100][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.962245][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.982260][ T5814] bridge_slave_1: entered allmulticast mode [ 184.987319][ T5814] bridge_slave_1: entered promiscuous mode [ 185.336231][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.339853][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.385422][ T5814] team0: Port device team_slave_0 added [ 185.387441][ T5814] team0: Port device team_slave_1 added [ 185.422106][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.422118][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.422129][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.426764][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.426777][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.426793][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.495624][ T5814] hsr_slave_0: entered promiscuous mode [ 185.496772][ T5814] hsr_slave_1: entered promiscuous mode [ 186.142806][ T59] Bluetooth: hci0: command tx timeout [ 188.097689][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.140691][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 188.142088][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 188.204773][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 188.206223][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 188.220745][ T59] Bluetooth: hci0: command tx timeout [ 188.268394][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 188.269789][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 188.316098][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 188.564223][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.607783][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.626884][ T1374] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.627074][ T1374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.662681][ T1374] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.662853][ T1374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.349187][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.447532][ T5814] veth0_vlan: entered promiscuous mode [ 189.488865][ T5814] veth1_vlan: entered promiscuous mode [ 189.542595][ T5814] veth0_macvtap: entered promiscuous mode [ 189.557417][ T5814] veth1_macvtap: entered promiscuous mode [ 189.601045][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.631435][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.672973][ T1471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.722480][ T1374] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.081340][ T1374] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.146453][ T5796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.146473][ T5796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.261855][ T1374] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.311343][ T59] Bluetooth: hci0: command tx timeout [ 190.338297][ T1471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.338315][ T1471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/17 01:04:44 executed programs: 2 [ 192.395586][ T59] Bluetooth: hci0: command tx timeout [ 194.230857][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.230958][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.663713][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.663755][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 308.940747][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 317.104401][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.104441][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 351.020866][ T38] INFO: task kworker/u8:10:1374 blocked in I/O wait for more than 143 seconds. [ 351.020894][ T38] Not tainted syzkaller #0 [ 351.020903][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.020911][ T38] task:kworker/u8:10 state:D stack:21760 pid:1374 tgid:1374 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 351.020961][ T38] Workqueue: writeback wb_workfn (flush-8:0) [ 351.021038][ T38] Call Trace: [ 351.021044][ T38] [ 351.021056][ T38] __schedule+0x16dc/0x5500 [ 351.021078][ T38] ? __lock_acquire+0x683/0x2ce0 [ 351.021106][ T38] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 351.021133][ T38] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 351.021159][ T38] ? __blk_flush_plug+0x416/0x4d0 [ 351.021180][ T38] ? __pfx___schedule+0x10/0x10 [ 351.021209][ T38] ? schedule+0x90/0x2b0 [ 351.021231][ T38] schedule+0x164/0x2b0 [ 351.021253][ T38] io_schedule+0x80/0xe0 [ 351.021274][ T38] bit_wait_io+0x11/0xd0 [ 351.021296][ T38] __wait_on_bit+0xac/0x2f0 [ 351.021316][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 351.021339][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 351.021365][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 351.021385][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 351.021409][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 351.021442][ T38] do_get_write_access+0x670/0x1090 [ 351.021483][ T38] jbd2_journal_get_write_access+0x1d6/0x230 [ 351.021510][ T38] __ext4_journal_get_write_access+0x1c3/0x590 [ 351.021540][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 351.021574][ T38] ext4_mb_mark_context+0x171/0xec0 [ 351.021602][ T38] ? ext4_sb_block_valid+0x16d/0x560 [ 351.021632][ T38] ? __pfx_ext4_mb_mark_context+0x10/0x10 [ 351.021653][ T38] ? ext4_sb_block_valid+0x16d/0x560 [ 351.021679][ T38] ? ext4_sb_block_valid+0x484/0x560 [ 351.021704][ T38] ext4_mb_mark_diskspace_used+0x338/0x760 [ 351.021742][ T38] ext4_mb_new_blocks+0x106f/0x4540 [ 351.021771][ T38] ? trace_kmalloc+0x2a/0xf0 [ 351.021795][ T38] ? ext4_find_extent+0x1f5/0xcd0 [ 351.021817][ T38] ? ext4_find_extent+0x1f5/0xcd0 [ 351.021846][ T38] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 351.021872][ T38] ? ext4_inode_to_goal_block+0x319/0x460 [ 351.021898][ T38] ext4_ext_map_blocks+0x1534/0x5850 [ 351.021916][ T38] ? __lock_acquire+0x683/0x2ce0 [ 351.021947][ T38] ? __lock_acquire+0x683/0x2ce0 [ 351.021973][ T38] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 351.021994][ T38] ? __lock_acquire+0x683/0x2ce0 [ 351.022022][ T38] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 351.022044][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 351.022077][ T38] ? wq_worker_running+0x9f/0x210 [ 351.022101][ T38] ? rt_mutex_post_schedule+0x49/0xf0 [ 351.022123][ T38] ext4_map_create_blocks+0x116/0x530 [ 351.022152][ T38] ext4_map_blocks+0x7e4/0x1240 [ 351.022292][ T38] ? trace_kmem_cache_alloc+0x29/0xe0 [ 351.022322][ T38] ? __pfx_ext4_map_blocks+0x10/0x10 [ 351.022352][ T38] ? ext4_inode_journal_mode+0x376/0x470 [ 351.022379][ T38] ext4_do_writepages+0x23d6/0x47a0 [ 351.022444][ T38] ? kasan_save_track+0x3e/0x80 [ 351.022469][ T38] ? __pfx_ext4_do_writepages+0x10/0x10 [ 351.022491][ T38] ? __lock_acquire+0x683/0x2ce0 [ 351.022511][ T38] ? kthread+0x388/0x470 [ 351.022531][ T38] ? ret_from_fork+0x514/0xb70 [ 351.022552][ T38] ? ret_from_fork_asm+0x1a/0x30 [ 351.022582][ T38] ? __lock_acquire+0x683/0x2ce0 [ 351.022607][ T38] ? ext4_writepages+0x205/0x3b0 [ 351.022626][ T38] ? ext4_writepages+0x205/0x3b0 [ 351.022661][ T38] ext4_writepages+0x241/0x3b0 [ 351.022681][ T38] ? __pfx_ext4_writepages+0x10/0x10 [ 351.022710][ T38] ? rt_spin_unlock+0x157/0x200 [ 351.022731][ T38] ? rt_spin_unlock+0x163/0x200 [ 351.022747][ T38] ? __pfx_ext4_writepages+0x10/0x10 [ 351.022765][ T38] do_writepages+0x338/0x560 [ 351.022788][ T38] ? reacquire_held_locks+0x104/0x190 [ 351.022806][ T38] ? super_trylock_shared+0x20/0xf0 [ 351.022834][ T38] __writeback_single_inode+0x12e/0xf90 [ 351.022867][ T38] writeback_sb_inodes+0x9db/0x1ab0 [ 351.022899][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 351.022935][ T38] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 351.022993][ T38] ? __pfx_down_read_trylock+0x10/0x10 [ 351.023036][ T38] __writeback_inodes_wb+0x114/0x240 [ 351.023068][ T38] wb_writeback+0x42f/0xad0 [ 351.023095][ T38] ? queue_io+0x1f1/0x450 [ 351.023124][ T38] ? __pfx_wb_writeback+0x10/0x10 [ 351.023163][ T38] wb_workfn+0xc98/0x10f0 [ 351.023203][ T38] ? __pfx_wb_workfn+0x10/0x10 [ 351.023237][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 351.023261][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 351.023287][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 351.023308][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 351.023333][ T38] ? rcu_is_watching+0x15/0xb0 [ 351.023355][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 351.023374][ T38] process_scheduled_works+0xa8e/0x14e0 [ 351.023421][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.023447][ T38] ? assign_work+0x3cf/0x5d0 [ 351.023471][ T38] worker_thread+0xa47/0xfb0 [ 351.023516][ T38] kthread+0x388/0x470 [ 351.023537][ T38] ? __pfx_worker_thread+0x10/0x10 [ 351.023555][ T38] ? __pfx_kthread+0x10/0x10 [ 351.023579][ T38] ret_from_fork+0x514/0xb70 [ 351.023605][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 351.023627][ T38] ? __switch_to+0xc89/0x1420 [ 351.023673][ T38] ? __pfx_kthread+0x10/0x10 [ 351.023697][ T38] ret_from_fork_asm+0x1a/0x30 [ 351.023737][ T38] [ 351.023801][ T38] INFO: task jbd2/sda1-8:4914 blocked in I/O wait for more than 143 seconds. [ 351.023815][ T38] Not tainted syzkaller #0 [ 351.023823][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.023830][ T38] task:jbd2/sda1-8 state:D stack:26256 pid:4914 tgid:4914 ppid:2 task_flags:0x240040 flags:0x00080000 [ 351.023872][ T38] Call Trace: [ 351.023878][ T38] [ 351.023889][ T38] __schedule+0x16dc/0x5500 [ 351.023908][ T38] ? __lock_acquire+0x683/0x2ce0 [ 351.023933][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 351.023970][ T38] ? __pfx___schedule+0x10/0x10 [ 351.023997][ T38] ? schedule+0x90/0x2b0 [ 351.024025][ T38] schedule+0x164/0x2b0 [ 351.024046][ T38] io_schedule+0x80/0xe0 [ 351.024068][ T38] bit_wait_io+0x11/0xd0 [ 351.024089][ T38] __wait_on_bit+0xac/0x2f0 [ 351.024109][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 351.024132][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 351.024154][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 351.024173][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 351.024197][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 351.024222][ T38] ? __wait_on_buffer+0xe/0x80 [ 351.024248][ T38] jbd2_journal_commit_transaction+0x2f26/0x5ba0 [ 351.024304][ T38] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 351.024332][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 351.024353][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 351.024397][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 351.024432][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 351.024452][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 351.024473][ T38] ? __timer_delete_sync+0x538/0x600 [ 351.024503][ T38] kjournald2+0x3bc/0x750 [ 351.024540][ T38] ? __pfx_kjournald2+0x10/0x10 [ 351.024561][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 351.024585][ T38] ? __kthread_parkme+0x71/0x1f0 [ 351.024607][ T38] ? __kthread_parkme+0x196/0x1f0 [ 351.024633][ T38] kthread+0x388/0x470 [ 351.024656][ T38] ? __pfx_kjournald2+0x10/0x10 [ 351.024674][ T38] ? __pfx_kthread+0x10/0x10 [ 351.024698][ T38] ret_from_fork+0x514/0xb70 [ 351.024723][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 351.024746][ T38] ? __switch_to+0xc89/0x1420 [ 351.024769][ T38] ? __pfx_kthread+0x10/0x10 [ 351.024792][ T38] ret_from_fork_asm+0x1a/0x30 [ 351.024831][ T38] [ 351.024862][ T38] INFO: task syz.0.102:6055 blocked in I/O wait for more than 143 seconds. [ 351.024874][ T38] Not tainted syzkaller #0 [ 351.024882][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.024889][ T38] task:syz.0.102 state:D stack:26136 pid:6055 tgid:6055 ppid:5814 task_flags:0x440040 flags:0x00080002 [ 351.024930][ T38] Call Trace: [ 351.024936][ T38] [ 351.024946][ T38] __schedule+0x16dc/0x5500 [ 351.024965][ T38] ? __lock_acquire+0x683/0x2ce0 [ 351.024989][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 351.025032][ T38] ? __pfx___schedule+0x10/0x10 [ 351.025059][ T38] ? schedule+0x90/0x2b0 [ 351.025081][ T38] schedule+0x164/0x2b0 [ 351.025102][ T38] io_schedule+0x80/0xe0 [ 351.025123][ T38] bit_wait_io+0x11/0xd0 [ 351.025144][ T38] __wait_on_bit+0xac/0x2f0 [ 351.025164][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 351.025187][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 351.025209][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 351.025228][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 351.025252][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 351.025284][ T38] do_get_write_access+0x670/0x1090 [ 351.025325][ T38] jbd2_journal_get_write_access+0x1d6/0x230 [ 351.025353][ T38] __ext4_journal_get_write_access+0x1c3/0x590 [ 351.025381][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 351.025405][ T38] ? trace_kmem_cache_alloc+0x29/0xe0 [ 351.025437][ T38] ext4_reserve_inode_write+0x294/0x360 [ 351.025469][ T38] __ext4_mark_inode_dirty+0x13e/0x700 [ 351.025500][ T38] ext4_dirty_inode+0xd0/0x110 [ 351.025523][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 351.025546][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 351.025574][ T38] file_update_time_flags+0x3f4/0x4b0 [ 351.025598][ T38] ext4_page_mkwrite+0x225/0x1150 [ 351.025631][ T38] ? __pfx_filemap_fault+0x10/0x10 [ 351.025658][ T38] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 351.025685][ T38] ? __pte_offset_map+0x29/0x200 [ 351.025712][ T38] do_page_mkwrite+0x14a/0x310 [ 351.025737][ T38] do_pte_missing+0x734/0x28f0 [ 351.025765][ T38] ? handle_mm_fault+0xe8/0x13f0 [ 351.025793][ T38] handle_mm_fault+0xd28/0x13f0 [ 351.025825][ T38] ? handle_mm_fault+0xe8/0x13f0 [ 351.025850][ T38] ? __pfx_handle_mm_fault+0x10/0x10 [ 351.025872][ T38] ? lock_vma_under_rcu+0x45a/0x500 [ 351.025891][ T38] ? __pfx_do_futex+0x10/0x10 [ 351.025933][ T38] do_user_addr_fault+0xa4d/0x1340 [ 351.025967][ T38] ? trace_page_fault_user+0x84/0x1e0 [ 351.025993][ T38] exc_page_fault+0x6a/0xc0 [ 351.026020][ T38] asm_exc_page_fault+0x26/0x30 [ 351.026038][ T38] RIP: 0033:0x7fe8296c67f1 [ 351.026065][ T38] RSP: 002b:00007ffe3821be90 EFLAGS: 00010202 [ 351.026080][ T38] RAX: 0000001b30164000 RBX: 0000000000000000 RCX: 000000000003fde8 [ 351.026091][ T38] RDX: 0000001b30163fff RSI: 0000000000000008 RDI: 00007fe82a5b5720 [ 351.026103][ T38] RBP: 00007fe82a5b5720 R08: 0000000000000000 R09: 00007fe829a86038 [ 351.026115][ T38] R10: 00007fe82a5b5700 R11: 0000000000000000 R12: 0000000000000000 [ 351.026126][ T38] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 351.026153][ T38] [ 351.026166][ T38] [ 351.026166][ T38] Showing all locks held in the system: [ 351.026177][ T38] 1 lock held by khungtaskd/38: [ 351.026186][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 351.026241][ T38] 6 locks held by kworker/u8:10/1374: [ 351.026251][ T38] #0: ffff88801f686138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 351.026294][ T38] #1: ffffc90006327c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 351.026336][ T38] #2: ffff88803561c0d0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 351.026381][ T38] #3: ffff8880355fccd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 351.026422][ T38] #4: ffff888035618bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210 [ 351.026467][ T38] #5: ffff888040cf31e8 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x7cc/0x1240 [ 351.026523][ T38] 2 locks held by getty/5342: [ 351.026533][ T38] #0: ffff888035c2e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 351.026575][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 351.026621][ T38] 2 locks held by kworker/u8:20/5796: [ 351.026632][ T38] 3 locks held by syz.0.102/6055: [ 351.026641][ T38] #0: ffff888035934808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 351.026681][ T38] #1: ffff88803561c678 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x203/0x1150 [ 351.026727][ T38] #2: ffff888035618bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210 [ 351.026771][ T38] 3 locks held by syz-executor/6056: [ 351.026781][ T38] #0: ffff88803561c500 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 351.026827][ T38] #1: ffff888040d7bf60 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 351.026879][ T38] #2: ffff888035618bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210 [ 351.026924][ T38] [ 351.026928][ T38] ============================================= [ 351.026928][ T38] [ 351.026940][ T38] NMI backtrace for cpu 0 [ 351.026958][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 351.026980][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.026989][ T38] Call Trace: [ 351.026996][ T38] [ 351.027002][ T38] dump_stack_lvl+0xe8/0x150 [ 351.027032][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 351.027049][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 351.027074][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 351.027094][ T38] sys_info+0x135/0x170 [ 351.027116][ T38] watchdog+0xfd7/0x1030 [ 351.027146][ T38] ? watchdog+0x1c7/0x1030 [ 351.027175][ T38] kthread+0x388/0x470 [ 351.027197][ T38] ? __pfx_watchdog+0x10/0x10 [ 351.027217][ T38] ? __pfx_kthread+0x10/0x10 [ 351.027240][ T38] ret_from_fork+0x514/0xb70 [ 351.027265][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 351.027287][ T38] ? __switch_to+0xc89/0x1420 [ 351.027310][ T38] ? __pfx_kthread+0x10/0x10 [ 351.027332][ T38] ret_from_fork_asm+0x1a/0x30 [ 351.027369][ T38] [ 351.027379][ T38] Sending NMI from CPU 0 to CPUs 1: [ 351.027407][ C1] NMI backtrace for cpu 1 [ 351.027426][ C1] CPU: 1 UID: 0 PID: 5796 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 351.027443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.027452][ C1] Workqueue: bat_events batadv_tt_purge [ 351.027469][ C1] RIP: 0010:check_preemption_disabled+0xd/0xe0 [ 351.027489][ C1] Code: 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 77 1d 59 07 <65> 8b 0d 6c 1d 59 07 f7 c1 ff ff ff 7f 74 0c 5b 41 5e 41 5f 5d e9 [ 351.027501][ C1] RSP: 0018:ffffc9000410f930 EFLAGS: 00000046 [ 351.027520][ C1] RAX: 0000000000000001 RBX: ffff88802f01dd00 RCX: ffffffff934fab40 [ 351.027531][ C1] RDX: 0000000000000002 RSI: ffffffff8daf4c16 RDI: ffffffff8bca5980 [ 351.027541][ C1] RBP: ffffc9000410fa60 R08: ffffffff8faf9337 R09: 1ffffffff1f5f266 [ 351.027552][ C1] R10: dffffc0000000000 R11: fffffbfff1f5f267 R12: ffff88802f01e9d0 [ 351.027563][ C1] R13: 0000000000000246 R14: ffff88802f01e908 R15: 0000000000000005 [ 351.027574][ C1] FS: 0000000000000000(0000) GS:ffff888125d3a000(0000) knlGS:0000000000000000 [ 351.027586][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.027597][ C1] CR2: 000055b9a82a1660 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 351.027611][ C1] Call Trace: [ 351.027616][ C1] [ 351.027623][ C1] lockdep_hardirqs_on_prepare+0x19c/0x270 [ 351.027646][ C1] trace_hardirqs_on+0x28/0x40 [ 351.027666][ C1] _raw_spin_unlock_irqrestore+0x30/0x80 [ 351.027684][ C1] rt_spin_lock+0x17a/0x400 [ 351.027704][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 351.027724][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 351.027740][ C1] ? rcu_is_watching+0x15/0xb0 [ 351.027757][ C1] ? batadv_tt_purge+0x96/0x9f0 [ 351.027771][ C1] ? batadv_tt_purge+0x96/0x9f0 [ 351.027783][ C1] batadv_tt_purge+0x137/0x9f0 [ 351.027799][ C1] ? batadv_tt_purge+0x96/0x9f0 [ 351.027813][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 351.027828][ C1] process_scheduled_works+0xa8e/0x14e0 [ 351.027854][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.027872][ C1] ? assign_work+0x3cf/0x5d0 [ 351.027888][ C1] worker_thread+0xa47/0xfb0 [ 351.027914][ C1] kthread+0x388/0x470 [ 351.027932][ C1] ? __pfx_worker_thread+0x10/0x10 [ 351.027947][ C1] ? __pfx_kthread+0x10/0x10 [ 351.027965][ C1] ret_from_fork+0x514/0xb70 [ 351.027985][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 351.028003][ C1] ? __switch_to+0xc89/0x1420 [ 351.028021][ C1] ? __pfx_kthread+0x10/0x10 [ 351.028039][ C1] ret_from_fork_asm+0x1a/0x30 [ 351.028064][ C1] [ 351.028407][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 351.028420][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 351.028438][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.028447][ T38] Call Trace: [ 351.028454][ T38] [ 351.028460][ T38] vpanic+0x56c/0xa60 [ 351.028487][ T38] ? __pfx_vpanic+0x10/0x10 [ 351.028519][ T38] panic+0xc5/0xd0 [ 351.028541][ T38] ? __pfx_panic+0x10/0x10 [ 351.028568][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 351.028587][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 351.028608][ T38] watchdog+0x1030/0x1030 [ 351.028638][ T38] ? watchdog+0x1c7/0x1030 [ 351.028667][ T38] kthread+0x388/0x470 [ 351.028689][ T38] ? __pfx_watchdog+0x10/0x10 [ 351.028710][ T38] ? __pfx_kthread+0x10/0x10 [ 351.028733][ T38] ret_from_fork+0x514/0xb70 [ 351.028757][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 351.028780][ T38] ? __switch_to+0xc89/0x1420 [ 351.028802][ T38] ? __pfx_kthread+0x10/0x10 [ 351.028825][ T38] ret_from_fork_asm+0x1a/0x30 [ 351.028862][ T38] [ 351.029133][ T38] Kernel Offset: disabled