INFO: task syz.4.458:10155 blocked in I/O wait for more than 143 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz.4.458 state:D stack:25640 pid:10155 tgid:10154 ppid:8204 task_flags:0x400140 flags:0x00080002 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x16dc/0x5500 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7326 io_schedule+0x80/0xe0 kernel/sched/core.c:8154 TXN_SLEEP_DROP_LOCK fs/jfs/jfs_txnmgr.c:125 [inline] txBegin+0x281/0xbe0 fs/jfs/jfs_txnmgr.c:376 jfs_mkdir+0x21f/0xaf0 fs/jfs/namei.c:232 vfs_mkdir+0x408/0x620 fs/namei.c:5410 filename_mkdirat+0x289/0x520 fs/namei.c:5443 __do_sys_mkdirat fs/namei.c:5464 [inline] __se_sys_mkdirat+0x35/0x150 fs/namei.c:5461 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f6bd878cf47 RSP: 002b:00007f6bd69e5e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 RAX: ffffffffffffffda RBX: 00007f6bd69e5ee0 RCX: 00007f6bd878cf47 RDX: 00000000000001ff RSI: 0000200000000680 RDI: 00000000ffffff9c RBP: 0000200000000080 R08: 0000200000000d40 R09: 0000000000000000 R10: 0000200000000080 R11: 0000000000000246 R12: 0000200000000680 R13: 00007f6bd69e5ea0 R14: 0000000000000000 R15: 0000000000000000 Showing all locks held in the system: 1 lock held by khungtaskd/38: #0: ffffffff8e1c3100 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] #0: ffffffff8e1c3100 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:840 [inline] #0: ffffffff8e1c3100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6775 3 locks held by kworker/u8:9/184: 5 locks held by kworker/u8:14/1286: #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc90005b6fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc90005b6fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #2: ffffffff8f59da60 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 net/core/net_namespace.c:673 #3: ffff888033ff4160 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline] #3: ffff888033ff4160 (&dev->mutex){....}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:124 [inline] #3: ffff888033ff4160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 net/devlink/core.c:557 #4: ffff88803c8d4310 (&devlink->lock_key#36){+.+.}-{4:4}, at: devl_lock net/devlink/core.c:292 [inline] #4: ffff88803c8d4310 (&devlink->lock_key#36){+.+.}-{4:4}, at: devl_dev_lock net/devlink/devl_internal.h:125 [inline] #4: ffff88803c8d4310 (&devlink->lock_key#36){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 net/devlink/core.c:557 2 locks held by getty/5343: #0: ffff88823beb40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 drivers/tty/n_tty.c:2211 3 locks held by kworker/1:4/5597: 4 locks held by kworker/0:5/5720: 2 locks held by kworker/u8:2/9910: #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 #1: ffffc900066cfc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3297 [inline] #1: ffffc900066cfc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 kernel/workqueue.c:3405 7 locks held by kworker/u8:23/9915: 3 locks held by kworker/u8:33/9925: 2 locks held by syz.4.458/10155: #0: ffff888062ef6510 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 fs/namespace.c:494 #1: ffff888040ae7998 (&type->i_mutex_dir_key#11/1){+.+.}-{4:4}, at: inode_lock_nested include/linux/fs.h:1070 [inline] #1: ffff888040ae7998 (&type->i_mutex_dir_key#11/1){+.+.}-{4:4}, at: __start_dirop fs/namei.c:2918 [inline] #1: ffff888040ae7998 (&type->i_mutex_dir_key#11/1){+.+.}-{4:4}, at: start_dirop fs/namei.c:2942 [inline] #1: ffff888040ae7998 (&type->i_mutex_dir_key#11/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 fs/namei.c:5092 2 locks held by syz-executor/11267: 2 locks held by syz.8.513/11870: 2 locks held by syz.1.166/11890: 1 lock held by syz.1.166/11904: 2 locks held by udevadm/11897: 1 lock held by modprobe/11902: 4 locks held by dhcpcd-run-hook/11903: ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:122 nmi_trigger_cpumask_backtrace+0x17a/0x380 lib/nmi_backtrace.c:65 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xfd7/0x1030 kernel/hung_task.c:561 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5720 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Workqueue: wg-crypt-wg1 wg_packet_tx_worker RIP: 0010:__bfs kernel/locking/lockdep.c:1815 [inline] RIP: 0010:__bfs_backwards kernel/locking/lockdep.c:1860 [inline] RIP: 0010:check_irq_usage kernel/locking/lockdep.c:2796 [inline] RIP: 0010:check_prev_add kernel/locking/lockdep.c:3169 [inline] RIP: 0010:check_prevs_add kernel/locking/lockdep.c:3284 [inline] RIP: 0010:validate_chain kernel/locking/lockdep.c:3908 [inline] RIP: 0010:__lock_acquire+0x18fa/0x2ce0 kernel/locking/lockdep.c:5237 Code: 14 25 ff 0f 00 00 39 05 00 b2 04 12 73 06 89 05 f8 b1 04 12 48 8b 02 48 89 df 4c 39 e8 0f 84 34 fe ff ff 4c 89 78 30 48 8b 00 <4c> 39 e8 75 f4 48 89 df e9 20 fe ff ff 48 89 fb 48 c7 c7 f0 03 09 RSP: 0000:ffffc90004f672e0 EFLAGS: 00000006 RAX: ffffffff96429d08 RBX: 00000000000003cd RCX: 000000000000069e RDX: ffffffff9629ccf8 RSI: ffff888020eae9b0 RDI: 00000000000003cd RBP: 8c8a6f051fce8645 R08: ffffc90004f672a8 R09: 0000000000000020 R10: 0000000000000000 R11: ffffffff81a1d950 R12: 000000000000069d R13: ffffffff93476318 R14: ffff888020eadd00 R15: ffffffff962e26d8 FS: 0000000000000000(0000) GS:ffff888125c38000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffc55bc9438 CR3: 000000005ac10000 CR4: 00000000003526f0 Call Trace: lock_acquire+0x106/0x350 kernel/locking/lockdep.c:5868 seqcount_lockdep_reader_access+0x55/0x100 include/linux/seqlock.h:73 ktime_get+0x45/0x220 kernel/time/timekeeping.c:971 clockevents_program_event+0x290/0x630 kernel/time/clockevents.c:363 __hrtimer_reprogram kernel/time/hrtimer.c:735 [inline] hrtimer_force_reprogram kernel/time/hrtimer.c:746 [inline] hrtimer_start_range_ns+0x353/0x3f0 kernel/time/hrtimer.c:1508 hrtimer_start include/linux/hrtimer.h:223 [inline] hrtick_cond_restart kernel/sched/core.c:939 [inline] hrtick_schedule_exit kernel/sched/core.c:1001 [inline] finish_lock_switch kernel/sched/core.c:5240 [inline] finish_task_switch+0x3c4/0xc60 kernel/sched/core.c:5359 context_switch kernel/sched/core.c:5513 [inline] __schedule+0x16e4/0x5500 kernel/sched/core.c:7234 preempt_schedule_common+0x82/0xd0 kernel/sched/core.c:7413 preempt_schedule_thunk+0x16/0x40 arch/x86/entry/thunk.S:12 class_preempt_destructor include/linux/preempt.h:468 [inline] __migrate_disable include/linux/sched.h:2486 [inline] migrate_disable include/linux/sched.h:2501 [inline] get_random_u8+0x571/0x8a0 drivers/char/random.c:539 get_random_u32_below include/linux/random.h:78 [inline] wg_timers_data_sent+0x9a/0x310 drivers/net/wireguard/timers.c:153 wg_packet_create_data_done drivers/net/wireguard/send.c:257 [inline] wg_packet_tx_worker+0x253/0x7e0 drivers/net/wireguard/send.c:276 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245