INFO: task jbd2/sda1-8:4937 blocked in I/O wait for more than 141 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:jbd2/sda1-8 state:D stack:27096 pid:4937 tgid:4937 ppid:2 task_flags:0x240040 flags:0x00080000 Call Trace: context_switch kernel/sched/core.c:5510 [inline] __schedule+0x125c/0x6730 kernel/sched/core.c:7234 __schedule_loop kernel/sched/core.c:7311 [inline] schedule+0xdd/0x2c0 kernel/sched/core.c:7326 io_schedule+0x8a/0xf0 kernel/sched/core.c:8154 bit_wait_io+0xd/0xe0 kernel/sched/wait_bit.c:250 __wait_on_bit+0x65/0x180 kernel/sched/wait_bit.c:52 out_of_line_wait_on_bit+0xdc/0x110 kernel/sched/wait_bit.c:67 wait_on_bit_io include/linux/wait_bit.h:105 [inline] __wait_on_buffer+0x64/0x70 fs/buffer.c:118 wait_on_buffer include/linux/buffer_head.h:422 [inline] journal_wait_on_commit_record fs/jbd2/commit.c:170 [inline] jbd2_journal_commit_transaction+0x4837/0x6700 fs/jbd2/commit.c:907 kjournald2+0x200/0x760 fs/jbd2/journal.c:199 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Showing all locks held in the system: 6 locks held by kworker/0:0/9: #0: ffff88802368d540 ( (wq_completion)usb_hub_wq ){+.+.}-{0:0} , at: process_one_work+0x12b1/0x1940 kernel/workqueue.c:3297 #1: ffffc900000e7d08 ( (work_completion)(&hub->events) ){+.+.}-{0:0} , at: process_one_work+0x988/0x1940 kernel/workqueue.c:3298 #2: ffff88802a98a1d8 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:1102 [inline] , at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899 #3: ffff8880744d61d8 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:1102 [inline] , at: usb_disconnect+0x10a/0x9a0 drivers/usb/core/hub.c:2336 #4: ffff88801c6c7aa0 ( &root->kernfs_supers_rwsem ){++++}-{4:4} , at: kernfs_remove_by_name_ns+0x49/0x120 fs/kernfs/dir.c:1791 #5: ffff88801c6c7980 ( &root->kernfs_rwsem ){++++}-{4:4} , at: kernfs_remove_by_name_ns+0x51/0x120 fs/kernfs/dir.c:1792 2 locks held by kworker/1:0/24: 1 lock held by khungtaskd/30: #0: ffffffff8e7e60c0 ( rcu_read_lock ){....}-{1:3} , at: rcu_lock_acquire include/linux/rcupdate.h:300 [inline] , at: rcu_read_lock include/linux/rcupdate.h:840 [inline] , at: debug_show_all_locks+0x3d/0x184 kernel/locking/lockdep.c:6775 6 locks held by kworker/1:1/53: 5 locks held by kworker/u8:4/57: 1 lock held by udevd/4975: 2 locks held by getty/5361: #0: ffff888036bdf0a0 ( &tty->ldisc_sem ){++++}-{0:0} , at: tty_ldisc_ref_wait+0x24/0x80 drivers/tty/tty_ldisc.c:243 #1: ffffc900032332e8 ( &ldata->atomic_read_lock ){+.+.}-{4:4} , at: n_tty_read+0x419/0x14e0 drivers/tty/n_tty.c:2211 1 lock held by udevd/5595: 1 lock held by udevd/5596: 1 lock held by udevd/5597: 1 lock held by udevd/5598: 1 lock held by udevd/5916: 1 lock held by udevd/5917: 3 locks held by kworker/1:3/5987: 3 locks held by kworker/1:4/5988: 1 lock held by syz-executor/6012: 1 lock held by syz-executor/6015: 1 lock held by syz-executor/6016: 1 lock held by syz-executor/6022: 1 lock held by syz-executor/6024: 4 locks held by kworker/1:5/6210: #0: ffff88802368d540 ( (wq_completion)usb_hub_wq ){+.+.}-{0:0} , at: process_one_work+0x12b1/0x1940 kernel/workqueue.c:3297 #1: ffffc900036e7d08 ( (work_completion)(&hub->events) ){+.+.}-{0:0} , at: process_one_work+0x988/0x1940 kernel/workqueue.c:3298 #2: ffff88802aa831d8 ( &dev->mutex ){....}-{4:4} , at: device_lock include/linux/device.h:1102 [inline] , at: hub_event+0x1bd/0x4af0 drivers/usb/core/hub.c:5899 #3: ffff88801c6c7980 ( &root->kernfs_rwsem ){++++}-{4:4} , at: kernfs_add_one+0x38/0xaa0 fs/kernfs/dir.c:825 3 locks held by kworker/1:6/6215: #0: ffff88813fe6b140 ( (wq_completion)events ){+.+.}-{0:0} , at: process_one_work+0x12b1/0x1940 kernel/workqueue.c:3297 #1: ffffc90002edfd08 ( key_gc_work ){+.+.}-{0:0} , at: process_one_work+0x988/0x1940 kernel/workqueue.c:3298 #2: ffffffff8e7f1b68 ( rcu_state.exp_mutex ){+.+.}-{4:4} , at: exp_funnel_lock+0x19e/0x3c0 kernel/rcu/tree_exp.h:343 5 locks held by kworker/1:7/6305: 1 lock held by syz-executor/7658: 1 lock held by syz-executor/7659: 1 lock held by syz-executor/7660: 1 lock held by syz-executor/7661: 1 lock held by syz-executor/7662: 1 lock held by dhcpcd/7670: #0: ffff8880748da4c0 ( &sb->s_type->i_mutex_key #13 ){+.+.}-{4:4} , at: inode_lock include/linux/fs.h:1024 [inline] , at: __sock_release+0x86/0x260 net/socket.c:709 2 locks held by dhcpcd/7671: 1 lock held by dhcpcd/7672: 1 lock held by dhcpcd/7673: 1 lock held by dhcpcd/7674: 1 lock held by dhcpcd/7675: ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 nmi_cpu_backtrace.cold+0x12d/0x151 lib/nmi_backtrace.c:122 nmi_trigger_cpumask_backtrace+0x21c/0x2a0 lib/nmi_backtrace.c:65 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x141/0x190 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:353 [inline] watchdog+0xcb1/0x1030 kernel/hung_task.c:561 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 0 to CPUs 1: yealink 4-1:36.0: urb_irq_callback - urb status -71 NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 53 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker RIP: 0010:write_comp_data+0x7/0x90 kernel/kcov.c:240 Code: 1f 84 00 00 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 8b 05 d9 17 0a 12 <49> 89 f8 49 89 f1 49 89 d2 65 48 8b 3d b0 17 0a 12 a9 00 01 ff 00 RSP: 0018:ffffc90000a08018 EFLAGS: 00000002 RAX: 0000000080000102 RBX: 0000000000000006 RCX: ffffffff8b981217 RDX: 0000000000000043 RSI: 0000000000000009 RDI: 0000000000000005 RBP: ffffc90000a080c0 R08: 0000000000000005 R09: 0000000000000009 R10: 0000000000000006 R11: 00000000001c0c50 R12: dffffc0000000000 R13: ffffffff8bb07d43 R14: ffffc90000a08150 R15: 0000000000000043 FS: 0000000000000000(0000) GS:ffff8881243e7000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b34c13ff8 CR3: 000000005d327000 CR4: 00000000003526f0 Call Trace: skip_atoi lib/vsprintf.c:184 [inline] format_decode+0x767/0xdd0 lib/vsprintf.c:2729 vsnprintf+0x1c0/0x1300 lib/vsprintf.c:2887 sprintf+0xcc/0x100 lib/vsprintf.c:3112 print_caller kernel/printk/printk.c:1370 [inline] info_print_prefix+0x146/0x350 kernel/printk/printk.c:1387 record_print_text+0x143/0x3c0 kernel/printk/printk.c:1434 printk_get_next_message+0x2d1/0x6c0 kernel/printk/printk.c:3072 console_emit_next_record kernel/printk/printk.c:3137 [inline] console_flush_one_record+0x67c/0xe50 kernel/printk/printk.c:3269 console_flush_all kernel/printk/printk.c:3343 [inline] __console_flush_and_unlock kernel/printk/printk.c:3373 [inline] console_unlock+0x103/0x260 kernel/printk/printk.c:3413 vprintk_emit+0x407/0x6b0 kernel/printk/printk.c:2479 dev_vprintk_emit+0x391/0x3e0 drivers/base/core.c:4996 dev_printk_emit+0xd2/0x10d drivers/base/core.c:5007 __dev_printk+0xcb/0x100 drivers/base/core.c:5019 _dev_err+0xef/0x127 drivers/base/core.c:5062 urb_irq_callback.cold+0x41/0xfd drivers/input/misc/yealink.c:409 __usb_hcd_giveback_urb+0x38d/0x610 drivers/usb/core/hcd.c:1657 usb_hcd_giveback_urb+0x3ca/0x4a0 drivers/usb/core/hcd.c:1741 dummy_timer+0xda1/0x36c0 drivers/usb/gadget/udc/dummy_hcd.c:2005 __run_hrtimer kernel/time/hrtimer.c:2032 [inline] __hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2096 hrtimer_run_softirq+0x17d/0x2c0 kernel/time/hrtimer.c:2113 handle_softirqs+0x1ea/0x9b0 kernel/softirq.c:622 do_softirq kernel/softirq.c:523 [inline] do_softirq+0xac/0xe0 kernel/softirq.c:510 __local_bh_enable_ip+0xf8/0x120 kernel/softirq.c:450 local_bh_enable include/linux/bottom_half.h:33 [inline] fpregs_unlock arch/x86/include/asm/fpu/api.h:77 [inline] kernel_fpu_end arch/x86/kernel/fpu/core.c:506 [inline] kernel_fpu_end+0x64/0x80 arch/x86/kernel/fpu/core.c:499 blake2s_compress+0x78/0xf0 lib/crypto/x86/blake2s.h:42 blake2s_update+0xef/0x320 lib/crypto/blake2s.c:119 hmac.constprop.0+0x24a/0x480 drivers/net/wireguard/noise.c:324 kdf.constprop.0+0x14d/0x280 drivers/net/wireguard/noise.c:367 mix_precomputed_dh drivers/net/wireguard/noise.c:426 [inline] wg_noise_handshake_consume_initiation+0x4b9/0x860 drivers/net/wireguard/noise.c:623 wg_receive_handshake_packet+0x7b2/0xc20 drivers/net/wireguard/receive.c:144 wg_packet_handshake_receive_worker+0x15e/0x370 drivers/net/wireguard/receive.c:213 process_one_work+0xa23/0x1940 kernel/workqueue.c:3322 process_scheduled_works kernel/workqueue.c:3405 [inline] worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486 kthread+0x370/0x450 kernel/kthread.c:436 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245