Warning: Permanently added '10.128.1.129' (ED25519) to the list of known hosts. 2026/09/12 17:07:09 parsed 1 programs 2026/09/12 17:07:09 serving rpc on tcp://39027 [ 151.961378][ T5812] cgroup: Unknown subsys name 'net' [ 152.107026][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 153.564018][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 156.386237][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 156.455864][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.463594][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.471584][ T5844] bridge_slave_0: entered allmulticast mode [ 156.478307][ T5844] bridge_slave_0: entered promiscuous mode [ 156.493463][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.501038][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.508160][ T5844] bridge_slave_1: entered allmulticast mode [ 156.516630][ T5844] bridge_slave_1: entered promiscuous mode [ 156.538498][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.556295][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.581911][ T5844] team0: Port device team_slave_0 added [ 156.593862][ T5844] team0: Port device team_slave_1 added [ 156.613540][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.620603][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.646545][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.663735][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.670738][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.696755][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.732020][ T5844] hsr_slave_0: entered promiscuous mode [ 156.738191][ T5844] hsr_slave_1: entered promiscuous mode [ 156.888721][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 156.905215][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 156.923707][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 156.936727][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 156.958377][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.965600][ T5844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.973402][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.980587][ T5844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.033287][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.057503][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.066245][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.083520][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.104950][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.112063][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.125799][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.132950][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.296514][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.346172][ T5844] veth0_vlan: entered promiscuous mode [ 157.359181][ T5844] veth1_vlan: entered promiscuous mode [ 157.393118][ T5844] veth0_macvtap: entered promiscuous mode [ 157.402482][ T5844] veth1_macvtap: entered promiscuous mode [ 157.419699][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.434790][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.454466][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.464362][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.475015][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.484731][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.818251][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.646969][ T2922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.658421][ T2922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.683304][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.691363][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.330465][ T5901] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.338361][ T5901] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.347039][ T5901] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.355630][ T5901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.363711][ T5901] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.371470][ T5901] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/09/12 17:07:18 executed programs: 0 [ 159.963174][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.971228][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.978718][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.987438][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.995364][ T5087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.003676][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.117128][ T5910] chnl_net:caif_netlink_parms(): no params data found [ 160.168592][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.176069][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.183489][ T5910] bridge_slave_0: entered allmulticast mode [ 160.190125][ T5910] bridge_slave_0: entered promiscuous mode [ 160.197997][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.205211][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.212566][ T5910] bridge_slave_1: entered allmulticast mode [ 160.219206][ T5910] bridge_slave_1: entered promiscuous mode [ 160.242251][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.254117][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.279320][ T5910] team0: Port device team_slave_0 added [ 160.287218][ T5910] team0: Port device team_slave_1 added [ 160.306250][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.313617][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.339580][ T5910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.352204][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.359153][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.385818][ T5910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.422121][ T5910] hsr_slave_0: entered promiscuous mode [ 160.428451][ T5910] hsr_slave_1: entered promiscuous mode [ 160.434723][ T5910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.442636][ T5910] Cannot create hsr debugfs directory [ 160.590181][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.070988][ T5087] Bluetooth: hci0: command tx timeout [ 162.951910][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.012576][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.873093][ T11] hsr_slave_0: left promiscuous mode [ 163.879030][ T11] hsr_slave_1: left promiscuous mode [ 163.886249][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.893714][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.902853][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.910250][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.917945][ T11] bridge_slave_1: left allmulticast mode [ 163.923694][ T11] bridge_slave_1: left promiscuous mode [ 163.929960][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.941018][ T11] bridge_slave_0: left allmulticast mode [ 163.946839][ T11] bridge_slave_0: left promiscuous mode [ 163.952608][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.972305][ T11] veth1_macvtap: left promiscuous mode [ 163.978018][ T11] veth0_macvtap: left promiscuous mode [ 163.983827][ T11] veth1_vlan: left promiscuous mode [ 163.989201][ T11] veth0_vlan: left promiscuous mode [ 164.150791][ T5087] Bluetooth: hci0: command tx timeout [ 164.348453][ T11] team0 (unregistering): Port device team_slave_1 removed [ 164.377479][ T11] team0 (unregistering): Port device team_slave_0 removed [ 164.404510][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.435820][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.628195][ T11] bond0 (unregistering): Released all slaves [ 164.731798][ T5910] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.744575][ T5910] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.754815][ T5910] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.766493][ T5910] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.845742][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.864196][ T5910] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.885473][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.892648][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.905739][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.912900][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.087864][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.134029][ T5910] veth0_vlan: entered promiscuous mode [ 165.156600][ T5910] veth1_vlan: entered promiscuous mode [ 165.221187][ T5910] veth0_macvtap: entered promiscuous mode [ 165.240241][ T5910] veth1_macvtap: entered promiscuous mode [ 165.286526][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.302862][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.321591][ T5910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.331428][ T5910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.340168][ T5910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.349583][ T5910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.407055][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.420120][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.445678][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/09/12 17:07:24 executed programs: 2 [ 165.453698][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.230627][ T5087] Bluetooth: hci0: command tx timeout [ 168.310512][ T5087] Bluetooth: hci0: command tx timeout 2026/09/12 17:07:29 executed programs: 209 [ 194.473516][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.480099][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.912352][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.918661][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 283.590467][ T5901] Bluetooth: hci0: command 0x0406 tx timeout [ 317.362272][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.368573][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.600395][ T29] INFO: task kworker/u4:5:1326 blocked for more than 143 seconds. [ 327.608365][ T29] Not tainted syzkaller #0 [ 327.615310][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.624021][ T29] task:kworker/u4:5 state:D stack:22960 pid:1326 ppid:2 flags:0x00004000 [ 327.633306][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 327.639347][ T29] Call Trace: [ 327.642662][ T29] [ 327.645597][ T29] __schedule+0x15ae/0x4660 [ 327.650110][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 327.656378][ T29] ? blk_mq_start_stopped_hw_queues+0x260/0x260 [ 327.662689][ T29] ? mark_lock+0x94/0x320 [ 327.667007][ T29] ? asan.module_dtor+0x20/0x20 [ 327.671914][ T29] ? blk_check_plugged+0x250/0x250 [ 327.677032][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 327.682964][ T29] ? wq_worker_sleeping+0x63/0x240 [ 327.688088][ T29] schedule+0xbd/0x170 [ 327.692240][ T29] io_schedule+0x80/0xd0 [ 327.696508][ T29] bit_wait_io+0x11/0xd0 [ 327.700798][ T29] __wait_on_bit+0x9f/0x2c0 [ 327.705320][ T29] ? bit_wait+0xd0/0xd0 [ 327.709490][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 327.714995][ T29] ? bit_wait+0xd0/0xd0 [ 327.719174][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 327.724043][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 327.729085][ T29] ? bit_waitqueue+0x30/0x30 [ 327.733716][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 327.738934][ T29] do_get_write_access+0x5c9/0xe00 [ 327.744103][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 327.750099][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 327.756365][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 327.762580][ T29] ? ext4_get_group_desc+0x10e/0x4d0 [ 327.767867][ T29] ext4_mb_mark_diskspace_used+0x27c/0x14b0 [ 327.773795][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 327.778836][ T29] ? ext4_discard_allocated_blocks+0x620/0x620 [ 327.785071][ T29] ext4_mb_new_blocks+0x105b/0x42f0 [ 327.790371][ T29] ? ext4_find_extent+0x1f5/0xcd0 [ 327.795413][ T29] ? rcu_is_watching+0x15/0xb0 [ 327.800171][ T29] ? ext4_mb_release_inode_pa+0xa30/0xa30 [ 327.805957][ T29] ? ext4_inode_to_goal_block+0x317/0x450 [ 327.811761][ T29] ext4_ext_map_blocks+0x1811/0x68c0 [ 327.817068][ T29] ? __might_sleep+0xe0/0xe0 [ 327.821704][ T29] ? ext4_ext_release+0x10/0x10 [ 327.826599][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 327.831701][ T29] ? ext4_es_lookup_extent+0x601/0x9f0 [ 327.837174][ T29] ext4_map_blocks+0x9db/0x1a90 [ 327.842099][ T29] ? ext4_issue_zeroout+0x250/0x250 [ 327.847307][ T29] ? rcu_is_watching+0x15/0xb0 [ 327.852118][ T29] ? ext4_inode_journal_mode+0x376/0x460 [ 327.857762][ T29] ext4_do_writepages+0x1463/0x3990 [ 327.863051][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 327.869920][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 327.875413][ T29] ? __lock_acquire+0x1336/0x7d80 [ 327.880505][ T29] ext4_writepages+0x1dd/0x350 [ 327.885298][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 327.890289][ T29] ? __rwlock_init+0x150/0x150 [ 327.895068][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 327.900316][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 327.905266][ T29] do_writepages+0x351/0x590 [ 327.909870][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 327.915654][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 327.921064][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 327.926078][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 327.931173][ T29] __writeback_single_inode+0x14e/0xee0 [ 327.936742][ T29] writeback_sb_inodes+0x813/0x1020 [ 327.941997][ T29] ? queue_io+0x530/0x530 [ 327.946354][ T29] __writeback_inodes_wb+0x114/0x240 [ 327.951715][ T29] wb_writeback+0x472/0xbe0 [ 327.956249][ T29] ? queue_io+0x391/0x530 [ 327.960674][ T29] ? percpu_ref_tryget+0x250/0x250 [ 327.965794][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 327.971799][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 327.976840][ T29] wb_workfn+0xad7/0xe60 [ 327.981127][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 327.986861][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 327.992935][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 327.997972][ T29] ? read_lock_is_recursive+0x20/0x20 [ 328.007358][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.012618][ T29] ? process_scheduled_works+0x975/0x1600 [ 328.018343][ T29] ? process_scheduled_works+0x975/0x1600 [ 328.024101][ T29] process_scheduled_works+0xa60/0x1600 [ 328.029670][ T29] ? worker_attach_to_pool+0x370/0x370 [ 328.035163][ T29] ? assign_work+0x3cc/0x5d0 [ 328.039773][ T29] worker_thread+0xa5e/0xfe0 [ 328.044419][ T29] ? _raw_spin_unlock+0x40/0x40 [ 328.049273][ T29] ? __kthread_parkme+0x71/0x1c0 [ 328.054245][ T29] kthread+0x2fa/0x390 [ 328.058317][ T29] ? pr_cont_work+0x550/0x550 [ 328.063020][ T29] ? kthread_blkcg+0xd0/0xd0 [ 328.067614][ T29] ret_from_fork+0x48/0x80 [ 328.072190][ T29] ? kthread_blkcg+0xd0/0xd0 [ 328.076801][ T29] ret_from_fork_asm+0x11/0x20 [ 328.081685][ T29] [ 328.084755][ T29] INFO: task jbd2/sda1-8:5103 blocked for more than 143 seconds. [ 328.092514][ T29] Not tainted syzkaller #0 [ 328.097463][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.106155][ T29] task:jbd2/sda1-8 state:D stack:26024 pid:5103 ppid:2 flags:0x00004000 [ 328.115409][ T29] Call Trace: [ 328.118685][ T29] [ 328.121648][ T29] __schedule+0x15ae/0x4660 [ 328.126175][ T29] ? asan.module_dtor+0x20/0x20 [ 328.131070][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 328.136105][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 328.142034][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 328.147245][ T29] schedule+0xbd/0x170 [ 328.151344][ T29] io_schedule+0x80/0xd0 [ 328.155597][ T29] bit_wait_io+0x11/0xd0 [ 328.159827][ T29] __wait_on_bit+0x9f/0x2c0 [ 328.164360][ T29] ? bit_wait+0xd0/0xd0 [ 328.168561][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 328.174086][ T29] ? bit_wait+0xd0/0xd0 [ 328.178251][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 328.183045][ T29] ? do_raw_write_lock+0x11e/0x260 [ 328.188166][ T29] ? bit_waitqueue+0x30/0x30 [ 328.192801][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 328.197847][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 328.204280][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 328.211098][ T29] ? lock_chain_count+0x20/0x20 [ 328.215978][ T29] ? _raw_spin_unlock+0x40/0x40 [ 328.220871][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 328.226511][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 328.231826][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 328.236858][ T29] ? timer_delete_sync+0x20/0x20 [ 328.241824][ T29] ? do_raw_read_unlock+0x80/0x80 [ 328.246855][ T29] ? prepare_to_wait+0x1aa/0x200 [ 328.251836][ T29] kjournald2+0x40f/0x810 [ 328.256182][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 328.261420][ T29] ? wake_bit_function+0x200/0x200 [ 328.266546][ T29] ? _raw_spin_unlock+0x40/0x40 [ 328.271421][ T29] ? __kthread_parkme+0x71/0x1c0 [ 328.276390][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 328.281477][ T29] kthread+0x2fa/0x390 [ 328.285554][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 328.290797][ T29] ? kthread_blkcg+0xd0/0xd0 [ 328.295395][ T29] ret_from_fork+0x48/0x80 [ 328.299807][ T29] ? kthread_blkcg+0xd0/0xd0 [ 328.304440][ T29] ret_from_fork_asm+0x11/0x20 [ 328.309220][ T29] [ 328.312311][ T29] INFO: task syz.0.226:6163 blocked for more than 144 seconds. [ 328.319850][ T29] Not tainted syzkaller #0 [ 328.324838][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.333569][ T29] task:syz.0.226 state:D stack:27560 pid:6163 ppid:5910 flags:0x00004004 [ 328.342813][ T29] Call Trace: [ 328.346102][ T29] [ 328.349055][ T29] __schedule+0x15ae/0x4660 [ 328.353630][ T29] ? mark_lock+0x94/0x320 [ 328.357985][ T29] ? asan.module_dtor+0x20/0x20 [ 328.362868][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 328.367929][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 328.373856][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 328.379066][ T29] schedule+0xbd/0x170 [ 328.383195][ T29] io_schedule+0x80/0xd0 [ 328.387454][ T29] bit_wait_io+0x11/0xd0 [ 328.391728][ T29] __wait_on_bit+0x9f/0x2c0 [ 328.396247][ T29] ? bit_wait+0xd0/0xd0 [ 328.400543][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 328.406107][ T29] ? bit_wait+0xd0/0xd0 [ 328.410305][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 328.415075][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 328.420089][ T29] ? bit_waitqueue+0x30/0x30 [ 328.424706][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 328.429918][ T29] do_get_write_access+0x5c9/0xe00 [ 328.435078][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 328.441098][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 328.447245][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 328.453435][ T29] ? __might_sleep+0xe0/0xe0 [ 328.458039][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 328.463642][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 328.469129][ T29] ext4_dirty_inode+0xcb/0x110 [ 328.473925][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 328.479721][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 328.484781][ T29] file_update_time+0x187/0x1a0 [ 328.489643][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 328.494699][ T29] ? filemap_fault+0x103c/0x1540 [ 328.499648][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 328.505412][ T29] ? pte_alloc_one+0x3b6/0x540 [ 328.510186][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 328.516493][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 328.521553][ T29] do_page_mkwrite+0x153/0x3f0 [ 328.526329][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 328.531298][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 328.536246][ T29] ? numa_migrate_prep+0x350/0x350 [ 328.541399][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 328.546694][ T29] do_user_addr_fault+0x736/0x12d0 [ 328.551842][ T29] exc_page_fault+0x64/0x100 [ 328.556442][ T29] ? clear_bhb_loop+0x40/0x90 [ 328.561168][ T29] asm_exc_page_fault+0x26/0x30 [ 328.566043][ T29] RIP: 0033:0x7f84ed46baa3 [ 328.570483][ T29] RSP: 002b:00007ffe201f08c0 EFLAGS: 00010246 [ 328.576554][ T29] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 328.584585][ T29] RDX: 0000001b2e124000 RSI: 0000000000040000 RDI: 00007f84ed7e0708 [ 328.592595][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.600606][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 328.608575][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe201f0b50 [ 328.616607][ T29] [ 328.619641][ T29] [ 328.619641][ T29] Showing all locks held in the system: [ 328.627397][ T29] 1 lock held by khungtaskd/29: [ 328.632444][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 328.642637][ T29] 7 locks held by kworker/u4:5/1326: [ 328.647916][ T29] #0: ffff88801d259938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 328.659169][ T29] #1: ffffc90005127d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 328.671668][ T29] #2: ffff88814dece0e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 328.682239][ T29] #3: ffff88814ded0c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 328.692738][ T29] #4: ffff88814ded2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 328.702423][ T29] #5: ffff888077cdc888 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 328.712225][ T29] #6: ffffe8ffffd1fba8 (&lg->lg_mutex){+.+.}-{3:3}, at: ext4_mb_initialize_context+0x8af/0xc80 [ 328.722738][ T29] 2 locks held by getty/5540: [ 328.727425][ T29] #0: ffff88823bcfa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 328.737254][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 328.747414][ T29] 3 locks held by syz.0.226/6163: [ 328.752464][ T29] #0: ffff88807cff73a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 328.762443][ T29] #1: ffff88814dece510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 328.772237][ T29] #2: ffff88814ded2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 328.781975][ T29] 3 locks held by syz-executor/6170: [ 328.787240][ T29] #0: ffff88814dece418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 328.796462][ T29] #1: ffff888077cda210 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 328.807177][ T29] #2: ffff88814ded2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 328.816887][ T29] [ 328.819236][ T29] ============================================= [ 328.819236][ T29] [ 328.827687][ T29] NMI backtrace for cpu 1 [ 328.832024][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 328.839203][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.849259][ T29] Call Trace: [ 328.852546][ T29] [ 328.855465][ T29] dump_stack_lvl+0x18c/0x250 [ 328.860133][ T29] ? __wake_up_klogd+0xd9/0x100 [ 328.864977][ T29] ? show_regs_print_info+0x20/0x20 [ 328.870160][ T29] ? load_image+0x420/0x420 [ 328.874652][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 328.879578][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 328.885727][ T29] ? load_image+0x420/0x420 [ 328.890230][ T29] ? wq_watchdog_touch+0xef/0x170 [ 328.895253][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 328.901320][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 328.907299][ T29] watchdog+0xf59/0xfa0 [ 328.911457][ T29] ? watchdog+0x1e1/0xfa0 [ 328.915789][ T29] kthread+0x2fa/0x390 [ 328.919849][ T29] ? hungtask_pm_notify+0x50/0x50 [ 328.924873][ T29] ? kthread_blkcg+0xd0/0xd0 [ 328.929456][ T29] ret_from_fork+0x48/0x80 [ 328.933869][ T29] ? kthread_blkcg+0xd0/0xd0 [ 328.938455][ T29] ret_from_fork_asm+0x11/0x20 [ 328.943222][ T29] [ 328.946380][ T29] Sending NMI from CPU 1 to CPUs 0: [ 328.951681][ C0] NMI backtrace for cpu 0 [ 328.951690][ C0] CPU: 0 PID: 5130 Comm: klogd Not tainted syzkaller #0 [ 328.951704][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.951712][ C0] RIP: 0010:kasan_check_range+0x8f/0x290 [ 328.951734][ C0] Code: 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 8d 01 00 00 <49> ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd 83 e5 07 0f 84 b5 [ 328.951745][ C0] RSP: 0018:ffffc900032b72e0 EFLAGS: 00000246 [ 328.951757][ C0] RAX: ffffc900032b7401 RBX: fffffffffffffffe RCX: ffffffff813bc9f8 [ 328.951768][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc900032b74b8 [ 328.951778][ C0] RBP: 0000000000000000 R08: ffffc900032b74c7 R09: 1ffff92000656e98 [ 328.951787][ C0] R10: dffffc0000000000 R11: fffff52000656e97 R12: 0000000000000002 [ 328.951797][ C0] R13: ffffc900032b7468 R14: fffff52000656e99 R15: 1ffff92000656e97 [ 328.951807][ C0] FS: 00007ff986a0ec80(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 328.951819][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.951829][ C0] CR2: 0000556e3b67f660 CR3: 00000000306a6000 CR4: 00000000003506f0 [ 328.951842][ C0] Call Trace: [ 328.951847][ C0] [ 328.951854][ C0] __asan_memset+0x22/0x40 [ 328.951873][ C0] ? arch_stack_walk+0xf8/0x190 [ 328.951894][ C0] unwind_next_frame+0x1628/0x2990 [ 328.951914][ C0] ? __unwind_start+0x275/0x730 [ 328.951929][ C0] __unwind_start+0x5bb/0x730 [ 328.951945][ C0] ? stack_trace_save+0x100/0x100 [ 328.951961][ C0] arch_stack_walk+0xf8/0x190 [ 328.951978][ C0] ? arch_stack_walk+0xf8/0x190 [ 328.951993][ C0] stack_trace_save+0xaa/0x100 [ 328.952010][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 328.952028][ C0] ? kasan_set_track+0x5f/0x70 [ 328.952042][ C0] ? kasan_set_track+0x4e/0x70 [ 328.952056][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 328.952071][ C0] ? slab_post_alloc_hook+0x6a/0x4d0 [ 328.952092][ C0] kasan_set_track+0x4e/0x70 [ 328.952130][ C0] __kasan_kmalloc+0x8f/0xa0 [ 328.952146][ C0] ? __alloc_skb+0x138/0x2c0 [ 328.952160][ C0] __kmalloc_node_track_caller+0xb4/0x230 [ 328.952180][ C0] ? rcu_is_watching+0x15/0xb0 [ 328.952199][ C0] ? __alloc_skb+0x138/0x2c0 [ 328.952212][ C0] kmalloc_reserve+0x116/0x240 [ 328.952229][ C0] __alloc_skb+0x138/0x2c0 [ 328.952245][ C0] alloc_skb_with_frags+0xcd/0x7a0 [ 328.952267][ C0] ? aa_label_sk_perm+0x500/0x6a0 [ 328.952287][ C0] sock_alloc_send_pskb+0x883/0x9a0 [ 328.952315][ C0] ? sock_kzfree_s+0x50/0x50 [ 328.952333][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 328.952352][ C0] ? __rwlock_init+0x150/0x150 [ 328.952370][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 328.952389][ C0] unix_dgram_sendmsg+0x5a9/0x16e0 [ 328.952413][ C0] ? aa_af_perm+0x330/0x330 [ 328.952431][ C0] ? unix_dgram_poll+0x680/0x680 [ 328.952445][ C0] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 328.952468][ C0] ? apparmor_socket_sendmsg+0x8e/0x330 [ 328.952484][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 328.952502][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 328.952518][ C0] __sys_sendto+0x4a9/0x6b0 [ 328.952533][ C0] ? __ia32_sys_getpeername+0x90/0x90 [ 328.952560][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 328.952577][ C0] ? lock_chain_count+0x20/0x20 [ 328.952596][ C0] __x64_sys_sendto+0xde/0xf0 [ 328.952612][ C0] do_syscall_64+0x55/0xb0 [ 328.952628][ C0] ? clear_bhb_loop+0x40/0x90 [ 328.952644][ C0] ? clear_bhb_loop+0x40/0x90 [ 328.952660][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.952676][ C0] RIP: 0033:0x7ff986b5e407 [ 328.952687][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 328.952697][ C0] RSP: 002b:00007ffc6fa52470 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 328.952711][ C0] RAX: ffffffffffffffda RBX: 00007ff986a0ec80 RCX: 00007ff986b5e407 [ 328.952720][ C0] RDX: 000000000000005c RSI: 00007ffc6fa525b0 RDI: 0000000000000003 [ 328.952729][ C0] RBP: 00007ffc6fa529e0 R08: 0000000000000000 R09: 0000000000000000 [ 328.952738][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc6fa529f8 [ 328.952747][ C0] R13: 00007ffc6fa525b0 R14: 0000000000000041 R15: 00007ffc6fa525b0 [ 328.952764][ C0] [ 328.953721][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 329.379633][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 329.386826][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.396869][ T29] Call Trace: [ 329.400140][ T29] [ 329.403062][ T29] dump_stack_lvl+0x18c/0x250 [ 329.407736][ T29] ? show_regs_print_info+0x20/0x20 [ 329.412932][ T29] ? load_image+0x420/0x420 [ 329.417432][ T29] panic+0x2ca/0x720 [ 329.421324][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 329.425823][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 329.431362][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 329.436727][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 329.442876][ T29] watchdog+0xf98/0xfa0 [ 329.447026][ T29] ? watchdog+0x1e1/0xfa0 [ 329.451352][ T29] kthread+0x2fa/0x390 [ 329.455408][ T29] ? hungtask_pm_notify+0x50/0x50 [ 329.460424][ T29] ? kthread_blkcg+0xd0/0xd0 [ 329.465002][ T29] ret_from_fork+0x48/0x80 [ 329.469406][ T29] ? kthread_blkcg+0xd0/0xd0 [ 329.473984][ T29] ret_from_fork_asm+0x11/0x20 [ 329.478745][ T29] [ 329.482004][ T29] Kernel Offset: disabled [ 329.486314][ T29] Rebooting in 86400 seconds..