Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. 2026/08/18 17:52:11 parsed 1 programs 2026/08/18 17:52:11 serving rpc on tcp://42201 [ 165.234257][ T5615] cgroup: Unknown subsys name 'net' [ 165.477648][ T5615] cgroup: Unknown subsys name 'cpuset' [ 165.530437][ T5615] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 167.446577][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 174.511102][ T5666] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.512562][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.512685][ T5666] bridge_slave_0: entered allmulticast mode [ 174.514354][ T5666] bridge_slave_0: entered promiscuous mode [ 174.518472][ T5666] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.518544][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.518645][ T5666] bridge_slave_1: entered allmulticast mode [ 174.521495][ T5666] bridge_slave_1: entered promiscuous mode [ 174.577396][ T5666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.580753][ T5666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.692094][ T5666] team0: Port device team_slave_0 added [ 174.694443][ T5666] team0: Port device team_slave_1 added [ 174.741566][ T5666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.741586][ T5666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.741610][ T5666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.745221][ T5666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.745237][ T5666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.745260][ T5666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.818019][ T5666] hsr_slave_0: entered promiscuous mode [ 174.819517][ T5666] hsr_slave_1: entered promiscuous mode [ 175.047113][ T5666] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.086689][ T5666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.088696][ T5666] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.116523][ T5666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.118845][ T5666] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.163117][ T5666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.167253][ T5666] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.195865][ T5666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.239314][ T5666] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.249300][ T5666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.262977][ T5666] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.263077][ T5666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.447688][ T1400] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.480238][ T1400] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.824932][ T5666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.865844][ T5666] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.874740][ T1400] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.875563][ T1400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.910287][ T1400] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.910719][ T1400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.329051][ T5666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.404330][ T5666] veth0_vlan: entered promiscuous mode [ 176.423722][ T5666] veth1_vlan: entered promiscuous mode [ 176.466512][ T5666] veth0_macvtap: entered promiscuous mode [ 176.473688][ T5666] veth1_macvtap: entered promiscuous mode [ 176.505679][ T5666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.536039][ T5666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.631918][ T1430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.634375][ T1014] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.793616][ T1014] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.911183][ T1014] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.235509][ T1430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.429399][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.430112][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.513190][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.513211][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.953887][ T1430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.706970][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.727761][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.729538][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.755210][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.756091][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.857983][ T1430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.678391][ T1430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.400847][ T1430] bridge_slave_1: left allmulticast mode [ 180.401026][ T1430] bridge_slave_1: left promiscuous mode [ 180.413812][ T1430] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.580685][ T1430] bridge_slave_0: left allmulticast mode [ 180.580740][ T1430] bridge_slave_0: left promiscuous mode [ 180.581008][ T1430] bridge0: port 1(bridge_slave_0) entered disabled state 2026/08/18 17:52:30 executed programs: 0 [ 181.084144][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.101547][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.102485][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.105820][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.106686][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.010602][ T1430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.070480][ T1430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.112360][ T1430] bond0 (unregistering): Released all slaves [ 182.154531][ T5244] 8021q: adding VLAN 0 to HW filter on device eth1 [ 182.549922][ T1430] hsr_slave_0: left promiscuous mode [ 182.590565][ T1430] hsr_slave_1: left promiscuous mode [ 182.596536][ T1430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.596621][ T1430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.637123][ T1430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.637153][ T1430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.724817][ T1430] veth1_macvtap: left promiscuous mode [ 182.725091][ T1430] veth0_macvtap: left promiscuous mode [ 182.725417][ T1430] veth1_vlan: left promiscuous mode [ 182.725766][ T1430] veth0_vlan: left promiscuous mode [ 183.201943][ T4897] Bluetooth: hci0: command tx timeout [ 183.480576][ T1430] team0 (unregistering): Port device team_slave_1 removed [ 183.540489][ T1430] team0 (unregistering): Port device team_slave_0 removed [ 183.706079][ T5244] 8021q: adding VLAN 0 to HW filter on device eth2 [ 184.409482][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.417363][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.417670][ T5749] bridge_slave_0: entered allmulticast mode [ 184.434083][ T5749] bridge_slave_0: entered promiscuous mode [ 184.452144][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.452360][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.453891][ T5749] bridge_slave_1: entered allmulticast mode [ 184.456848][ T5749] bridge_slave_1: entered promiscuous mode [ 184.548900][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.564798][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.622118][ T5749] team0: Port device team_slave_0 added [ 184.626131][ T5749] team0: Port device team_slave_1 added [ 184.702013][ T5244] 8021q: adding VLAN 0 to HW filter on device eth3 [ 184.703214][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.703227][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.703251][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.706167][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.706182][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.706205][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.981894][ T5749] hsr_slave_0: entered promiscuous mode [ 184.982752][ T5749] hsr_slave_1: entered promiscuous mode [ 185.279838][ T4897] Bluetooth: hci0: command tx timeout [ 185.882911][ T5244] 8021q: adding VLAN 0 to HW filter on device eth4 [ 187.359878][ T4897] Bluetooth: hci0: command tx timeout [ 188.637008][ T5749] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.697892][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 188.701703][ T5749] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 188.737853][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 188.741809][ T5749] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 188.787965][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 188.789036][ T5749] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 188.835090][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 188.946037][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.973840][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.983805][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.984003][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.018703][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.018967][ T5804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.439949][ T4897] Bluetooth: hci0: command tx timeout [ 189.448963][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.502154][ T5749] veth0_vlan: entered promiscuous mode [ 189.519511][ T5749] veth1_vlan: entered promiscuous mode [ 189.556651][ T5749] veth0_macvtap: entered promiscuous mode [ 189.563742][ T5749] veth1_macvtap: entered promiscuous mode [ 189.603983][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.627340][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.822909][ T1400] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.823187][ T1400] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.823224][ T1400] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.823254][ T1400] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.089350][ T2421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.089376][ T2421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.158635][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.158660][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/18 17:52:39 executed programs: 2 [ 194.570858][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.570976][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.003296][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.003376][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 304.169887][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 317.442791][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.442870][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 349.439849][ T38] INFO: task kworker/u8:1:13 blocked in I/O wait for more than 143 seconds. [ 349.439878][ T38] Not tainted syzkaller #0 [ 349.439889][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.439898][ T38] task:kworker/u8:1 state:D stack:21784 pid:13 tgid:13 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 349.440013][ T38] Workqueue: writeback wb_workfn (flush-8:0) [ 349.440127][ T38] Call Trace: [ 349.440139][ T38] [ 349.440171][ T38] __schedule+0x16dc/0x5500 [ 349.440290][ T38] ? __lock_acquire+0x683/0x2ce0 [ 349.440386][ T38] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 349.440461][ T38] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 349.440482][ T38] ? __blk_flush_plug+0x416/0x4d0 [ 349.440531][ T38] ? __pfx___schedule+0x10/0x10 [ 349.440554][ T38] ? schedule+0x90/0x2b0 [ 349.440574][ T38] schedule+0x164/0x2b0 [ 349.440593][ T38] io_schedule+0x80/0xe0 [ 349.440613][ T38] bit_wait_io+0x11/0xd0 [ 349.440626][ T38] __wait_on_bit+0xac/0x2f0 [ 349.440645][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 349.440658][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 349.440671][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 349.440683][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 349.440697][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 349.440746][ T38] do_get_write_access+0x670/0x1090 [ 349.440803][ T38] jbd2_journal_get_write_access+0x1d6/0x230 [ 349.440820][ T38] __ext4_journal_get_write_access+0x1c3/0x590 [ 349.440854][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 349.440871][ T38] ? ext4_get_group_desc+0x10e/0x4e0 [ 349.440904][ T38] ext4_mb_mark_context+0x325/0xec0 [ 349.440959][ T38] ? ext4_sb_block_valid+0x16d/0x560 [ 349.440976][ T38] ? __pfx_ext4_mb_mark_context+0x10/0x10 [ 349.440995][ T38] ? ext4_sb_block_valid+0x16d/0x560 [ 349.441009][ T38] ? ext4_sb_block_valid+0x484/0x560 [ 349.441022][ T38] ext4_mb_mark_diskspace_used+0x338/0x760 [ 349.441043][ T38] ext4_mb_new_blocks+0x106f/0x4540 [ 349.441067][ T38] ? trace_kmalloc+0x2a/0xf0 [ 349.441108][ T38] ? ext4_find_extent+0x1f5/0xcd0 [ 349.441134][ T38] ? ext4_find_extent+0x1f5/0xcd0 [ 349.441150][ T38] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 349.441171][ T38] ? ext4_inode_to_goal_block+0x319/0x460 [ 349.441193][ T38] ext4_ext_map_blocks+0x1534/0x5850 [ 349.441249][ T38] ? __lock_acquire+0x683/0x2ce0 [ 349.441283][ T38] ? __lock_acquire+0x683/0x2ce0 [ 349.441317][ T38] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 349.441336][ T38] ? __lock_acquire+0x683/0x2ce0 [ 349.441350][ T38] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 349.441368][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.441391][ T38] ? wq_worker_running+0x9f/0x210 [ 349.441455][ T38] ? rt_mutex_post_schedule+0x49/0xf0 [ 349.441485][ T38] ext4_map_create_blocks+0x116/0x530 [ 349.441507][ T38] ext4_map_blocks+0x7e4/0x1240 [ 349.441528][ T38] ? trace_kmem_cache_alloc+0x29/0xe0 [ 349.441563][ T38] ? __pfx_ext4_map_blocks+0x10/0x10 [ 349.441586][ T38] ? ext4_inode_journal_mode+0x376/0x470 [ 349.441601][ T38] ext4_do_writepages+0x237b/0x4490 [ 349.441634][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 349.441680][ T38] ? __pfx_ext4_do_writepages+0x10/0x10 [ 349.441698][ T38] ? __lock_acquire+0x683/0x2ce0 [ 349.441717][ T38] ? __lock_acquire+0x683/0x2ce0 [ 349.441733][ T38] ? ext4_writepages+0x205/0x3b0 [ 349.441749][ T38] ? ext4_writepages+0x205/0x3b0 [ 349.441773][ T38] ext4_writepages+0x241/0x3b0 [ 349.441789][ T38] ? __pfx_ext4_writepages+0x10/0x10 [ 349.441806][ T38] ? reacquire_held_locks+0x104/0x190 [ 349.441829][ T38] ? rt_spin_unlock+0x163/0x200 [ 349.441844][ T38] ? __pfx_ext4_writepages+0x10/0x10 [ 349.441859][ T38] do_writepages+0x338/0x560 [ 349.441907][ T38] ? reacquire_held_locks+0x104/0x190 [ 349.441921][ T38] ? super_trylock_shared+0x23/0xf0 [ 349.441959][ T38] __writeback_single_inode+0x136/0x1230 [ 349.441988][ T38] ? rt_spin_unlock+0x163/0x200 [ 349.442006][ T38] writeback_sb_inodes+0x9db/0x1ab0 [ 349.442023][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.442048][ T38] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 349.442080][ T38] ? __pfx_down_read_trylock+0x10/0x10 [ 349.442120][ T38] __writeback_inodes_wb+0x114/0x240 [ 349.442137][ T38] wb_writeback+0x42f/0xad0 [ 349.442151][ T38] ? queue_io+0x2a1/0x450 [ 349.442167][ T38] ? __pfx_wb_writeback+0x10/0x10 [ 349.442188][ T38] wb_workfn+0xc98/0x10f0 [ 349.442216][ T38] ? __pfx_wb_workfn+0x10/0x10 [ 349.442240][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.442258][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 349.442276][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 349.442310][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 349.442327][ T38] ? rcu_is_watching+0x15/0xb0 [ 349.442361][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 349.442374][ T38] process_scheduled_works+0xa8e/0x14e0 [ 349.442403][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 349.442421][ T38] ? assign_work+0x3cf/0x5d0 [ 349.442437][ T38] worker_thread+0xa47/0xfb0 [ 349.442466][ T38] kthread+0x388/0x470 [ 349.442497][ T38] ? __pfx_worker_thread+0x10/0x10 [ 349.442511][ T38] ? __pfx_kthread+0x10/0x10 [ 349.442528][ T38] ret_from_fork+0x514/0xb70 [ 349.442581][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 349.442599][ T38] ? __switch_to+0xc89/0x1420 [ 349.442629][ T38] ? __pfx_kthread+0x10/0x10 [ 349.442647][ T38] ret_from_fork_asm+0x1a/0x30 [ 349.442697][ T38] [ 349.442778][ T38] INFO: task jbd2/sda1-8:4910 blocked in I/O wait for more than 143 seconds. [ 349.442789][ T38] Not tainted syzkaller #0 [ 349.442798][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.442805][ T38] task:jbd2/sda1-8 state:D stack:25168 pid:4910 tgid:4910 ppid:2 task_flags:0x240040 flags:0x00080000 [ 349.442840][ T38] Call Trace: [ 349.442844][ T38] [ 349.442851][ T38] __schedule+0x16dc/0x5500 [ 349.442870][ T38] ? __lock_acquire+0x683/0x2ce0 [ 349.442886][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.442911][ T38] ? __pfx___schedule+0x10/0x10 [ 349.442934][ T38] ? schedule+0x90/0x2b0 [ 349.442953][ T38] schedule+0x164/0x2b0 [ 349.442971][ T38] io_schedule+0x80/0xe0 [ 349.442991][ T38] bit_wait_io+0x11/0xd0 [ 349.443003][ T38] __wait_on_bit+0xac/0x2f0 [ 349.443022][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 349.443035][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 349.443047][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 349.443059][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 349.443072][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 349.443091][ T38] ? __wait_on_buffer+0xe/0x80 [ 349.443139][ T38] jbd2_journal_commit_transaction+0x2f26/0x5ba0 [ 349.443190][ T38] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 349.443210][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 349.443226][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.443256][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 349.443275][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 349.443314][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 349.443333][ T38] ? __timer_delete_sync+0x538/0x600 [ 349.443376][ T38] kjournald2+0x3bc/0x750 [ 349.443427][ T38] ? __pfx_kjournald2+0x10/0x10 [ 349.443446][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 349.443464][ T38] ? __kthread_parkme+0x71/0x1f0 [ 349.443480][ T38] ? __kthread_parkme+0x196/0x1f0 [ 349.443498][ T38] kthread+0x388/0x470 [ 349.443515][ T38] ? __pfx_kjournald2+0x10/0x10 [ 349.443546][ T38] ? __pfx_kthread+0x10/0x10 [ 349.443590][ T38] ret_from_fork+0x514/0xb70 [ 349.443610][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 349.443627][ T38] ? __switch_to+0xc89/0x1420 [ 349.443644][ T38] ? __pfx_kthread+0x10/0x10 [ 349.443661][ T38] ret_from_fork_asm+0x1a/0x30 [ 349.443689][ T38] [ 349.443707][ T38] INFO: task syz.0.44:5931 blocked in I/O wait for more than 143 seconds. [ 349.443716][ T38] Not tainted syzkaller #0 [ 349.443722][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.443727][ T38] task:syz.0.44 state:D stack:28328 pid:5931 tgid:5931 ppid:5749 task_flags:0x440040 flags:0x00080002 [ 349.443759][ T38] Call Trace: [ 349.443764][ T38] [ 349.443770][ T38] __schedule+0x16dc/0x5500 [ 349.443788][ T38] ? __lock_acquire+0x683/0x2ce0 [ 349.443804][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.443829][ T38] ? __pfx___schedule+0x10/0x10 [ 349.443852][ T38] ? schedule+0x90/0x2b0 [ 349.443871][ T38] schedule+0x164/0x2b0 [ 349.443889][ T38] io_schedule+0x80/0xe0 [ 349.443908][ T38] bit_wait_io+0x11/0xd0 [ 349.443920][ T38] __wait_on_bit+0xac/0x2f0 [ 349.443939][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 349.443952][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 349.443964][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 349.443975][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 349.443989][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 349.444011][ T38] do_get_write_access+0x670/0x1090 [ 349.444035][ T38] jbd2_journal_get_write_access+0x1d6/0x230 [ 349.444051][ T38] __ext4_journal_get_write_access+0x1c3/0x590 [ 349.444067][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 349.444092][ T38] ext4_reserve_inode_write+0x294/0x360 [ 349.444111][ T38] __ext4_mark_inode_dirty+0x13e/0x700 [ 349.444134][ T38] ext4_dirty_inode+0xd0/0x110 [ 349.444148][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 349.444160][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 349.444182][ T38] file_update_time_flags+0x39f/0x450 [ 349.444263][ T38] ext4_page_mkwrite+0x225/0x1150 [ 349.444282][ T38] ? __pfx_filemap_fault+0x10/0x10 [ 349.444318][ T38] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 349.444334][ T38] ? __pte_offset_map+0x29/0x200 [ 349.444368][ T38] do_page_mkwrite+0x14a/0x310 [ 349.444398][ T38] do_pte_missing+0x734/0x28f0 [ 349.444417][ T38] ? handle_mm_fault+0xe8/0x13f0 [ 349.444451][ T38] handle_mm_fault+0xd28/0x13f0 [ 349.444474][ T38] ? handle_mm_fault+0xe8/0x13f0 [ 349.444494][ T38] ? __pfx_handle_mm_fault+0x10/0x10 [ 349.444511][ T38] ? lock_vma_under_rcu+0x45a/0x500 [ 349.444525][ T38] ? __pfx_do_futex+0x10/0x10 [ 349.444585][ T38] do_user_addr_fault+0xa4d/0x1340 [ 349.444631][ T38] ? trace_page_fault_user+0x84/0x1e0 [ 349.444651][ T38] exc_page_fault+0x6a/0xc0 [ 349.444670][ T38] asm_exc_page_fault+0x26/0x30 [ 349.444696][ T38] RIP: 0033:0x7fd099dc67f1 [ 349.444709][ T38] RSP: 002b:00007ffda98134a0 EFLAGS: 00010202 [ 349.444734][ T38] RAX: 0000001b34064000 RBX: 0000000000000000 RCX: 000000000003fde8 [ 349.444743][ T38] RDX: 0000001b34063fff RSI: 0000000000000008 RDI: 00007fd09acb5720 [ 349.444751][ T38] RBP: 00007fd09acb5720 R08: 0000000000000000 R09: 00007fd09a186038 [ 349.444759][ T38] R10: 00007fd09acb5700 R11: 0000000000000000 R12: 0000000000000000 [ 349.444766][ T38] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 349.444784][ T38] [ 349.444791][ T38] [ 349.444791][ T38] Showing all locks held in the system: [ 349.444797][ T38] 6 locks held by kworker/u8:1/13: [ 349.444821][ T38] #0: ffff88801eaed938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 349.444858][ T38] #1: ffffc90000127c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 349.444888][ T38] #2: ffff88803575a0e0 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 349.444925][ T38] #3: ffff888035a38cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 349.444976][ T38] #4: ffff8880356d6bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210 [ 349.445021][ T38] #5: ffff888033468288 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x7cc/0x1240 [ 349.445073][ T38] 1 lock held by khungtaskd/38: [ 349.445080][ T38] #0: ffffffff8e1c3100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 349.445139][ T38] 2 locks held by getty/5335: [ 349.445145][ T38] #0: ffff888035fbd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 349.445235][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 349.445282][ T38] 3 locks held by syz.0.44/5931: [ 349.445289][ T38] #0: ffff88803fe54d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 349.445323][ T38] #1: ffff88803575a688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x203/0x1150 [ 349.445352][ T38] #2: ffff8880356d6bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210 [ 349.445379][ T38] 3 locks held by syz-executor/5932: [ 349.445385][ T38] #0: ffff88803575a510 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 349.445433][ T38] #1: ffff88804112bc90 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 349.445497][ T38] #2: ffff8880356d6bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210 [ 349.445524][ T38] [ 349.445527][ T38] ============================================= [ 349.445527][ T38] [ 349.445533][ T38] NMI backtrace for cpu 0 [ 349.445543][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 349.445556][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.445563][ T38] Call Trace: [ 349.445568][ T38] [ 349.445572][ T38] dump_stack_lvl+0xe8/0x150 [ 349.445590][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 349.445623][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 349.445656][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 349.445673][ T38] sys_info+0x135/0x170 [ 349.445702][ T38] watchdog+0xfd7/0x1030 [ 349.445752][ T38] ? watchdog+0x1c7/0x1030 [ 349.445772][ T38] kthread+0x388/0x470 [ 349.445788][ T38] ? __pfx_watchdog+0x10/0x10 [ 349.445804][ T38] ? __pfx_kthread+0x10/0x10 [ 349.445821][ T38] ret_from_fork+0x514/0xb70 [ 349.445840][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 349.445857][ T38] ? __switch_to+0xc89/0x1420 [ 349.445872][ T38] ? __pfx_kthread+0x10/0x10 [ 349.445889][ T38] ret_from_fork_asm+0x1a/0x30 [ 349.445914][ T38] [ 349.445919][ T38] Sending NMI from CPU 0 to CPUs 1: [ 349.445965][ C1] NMI backtrace for cpu 1 [ 349.445980][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 349.445999][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.446008][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 349.446036][ C1] Code: db 6c 02 e9 d3 d0 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 5a 22 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 349.446049][ C1] RSP: 0018:ffffc900001d7e40 EFLAGS: 00000246 [ 349.446063][ C1] RAX: 0000000000077355 RBX: ffffffff819a2710 RCX: 0000000080000001 [ 349.446075][ C1] RDX: 0000000000000001 RSI: ffffffff8d88808c RDI: ffffffff8bca7780 [ 349.446086][ C1] RBP: ffffc900001d7f10 R08: ffff8880b8733d5b R09: 1ffff110170e67ab [ 349.446099][ C1] R10: dffffc0000000000 R11: ffffed10170e67ac R12: 0000000000000000 [ 349.446110][ C1] R13: 1ffff110039d0000 R14: 1ffff9200003afd0 R15: dffffc0000000000 [ 349.446122][ C1] FS: 0000000000000000(0000) GS:ffff888125d32000(0000) knlGS:0000000000000000 [ 349.446136][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.446148][ C1] CR2: 000055b2f9264660 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 349.446165][ C1] Call Trace: [ 349.446171][ C1] [ 349.446177][ C1] default_idle+0x9/0x20 [ 349.446194][ C1] default_idle_call+0x72/0xb0 [ 349.446211][ C1] do_idle+0x2e0/0x540 [ 349.446258][ C1] ? __pfx_do_idle+0x10/0x10 [ 349.446275][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 349.446301][ C1] cpu_startup_entry+0x43/0x60 [ 349.446317][ C1] start_secondary+0x101/0x110 [ 349.446357][ C1] common_startup_64+0x13e/0x157 [ 349.446381][ C1] [ 349.446960][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 349.446970][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 349.446984][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.446990][ T38] Call Trace: [ 349.446995][ T38] [ 349.447000][ T38] vpanic+0x56c/0xa60 [ 349.447020][ T38] ? __pfx_vpanic+0x10/0x10 [ 349.447042][ T38] panic+0xc5/0xd0 [ 349.447059][ T38] ? __pfx_panic+0x10/0x10 [ 349.447078][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 349.447091][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 349.447109][ T38] watchdog+0x1030/0x1030 [ 349.447130][ T38] ? watchdog+0x1c7/0x1030 [ 349.447149][ T38] kthread+0x388/0x470 [ 349.447166][ T38] ? __pfx_watchdog+0x10/0x10 [ 349.447182][ T38] ? __pfx_kthread+0x10/0x10 [ 349.447199][ T38] ret_from_fork+0x514/0xb70 [ 349.447217][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 349.447234][ T38] ? __switch_to+0xc89/0x1420 [ 349.447249][ T38] ? __pfx_kthread+0x10/0x10 [ 349.447266][ T38] ret_from_fork_asm+0x1a/0x30 [ 349.447290][ T38] [ 349.447563][ T38] Kernel Offset: disabled