syzkaller login: [ 91.889679][ T54] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:34077' (ED25519) to the list of known hosts. 2025/09/07 13:29:53 parsed 1 programs [ 240.786111][ T5381] cgroup: Unknown subsys name 'net' [ 240.874732][ T5381] cgroup: Unknown subsys name 'cpuset' [ 240.884142][ T5381] cgroup: Unknown subsys name 'rlimit' [ 242.637341][ T5381] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 246.655258][ T5389] chnl_net:caif_netlink_parms(): no params data found [ 246.723167][ T5389] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.726940][ T5389] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.730778][ T5389] bridge_slave_0: entered allmulticast mode [ 246.734564][ T5389] bridge_slave_0: entered promiscuous mode [ 246.741636][ T5389] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.744641][ T5389] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.748152][ T5389] bridge_slave_1: entered allmulticast mode [ 246.753602][ T5389] bridge_slave_1: entered promiscuous mode [ 246.781264][ T5389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.787922][ T5389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.814284][ T5389] team0: Port device team_slave_0 added [ 246.818738][ T5389] team0: Port device team_slave_1 added [ 246.844984][ T5389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.847922][ T5389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.858960][ T5389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.867503][ T5389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.871117][ T5389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.883022][ T5389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.923935][ T5389] hsr_slave_0: entered promiscuous mode [ 246.926950][ T5389] hsr_slave_1: entered promiscuous mode [ 247.078272][ T5389] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.087662][ T5389] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.095248][ T5389] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.103229][ T5389] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 247.135809][ T5389] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.138937][ T5389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.142975][ T5389] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.146380][ T5389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.211692][ T5389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.225341][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.231899][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.246772][ T5389] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.255660][ T1045] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.258669][ T1045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.276252][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.279452][ T1045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.496221][ T5389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.537880][ T5389] veth0_vlan: entered promiscuous mode [ 247.547566][ T5389] veth1_vlan: entered promiscuous mode [ 247.581158][ T5389] veth0_macvtap: entered promiscuous mode [ 247.587825][ T5389] veth1_macvtap: entered promiscuous mode [ 247.608092][ T5389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.617518][ T5389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.629078][ T1049] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.643722][ T1049] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.647563][ T1049] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.664063][ T1049] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.751951][ T5389] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 247.855448][ T5389] syz-executor (5389) used greatest stack depth: 18888 bytes left [ 247.902179][ T1049] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.954497][ T1049] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.992290][ T1049] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.058956][ T1049] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.170079][ T5418] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.174526][ T5418] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.178431][ T5418] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.183935][ T5418] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.187534][ T5418] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.642853][ T3045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.646826][ T3045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.691082][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.694389][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.502957][ T1049] bridge_slave_1: left allmulticast mode [ 250.505574][ T1049] bridge_slave_1: left promiscuous mode [ 250.509279][ T1049] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.591513][ T1049] bridge_slave_0: left allmulticast mode [ 250.593811][ T1049] bridge_slave_0: left promiscuous mode [ 250.596237][ T1049] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.265932][ T1049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.282792][ T1049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.300929][ T1049] bond0 (unregistering): Released all slaves [ 251.460931][ T1049] hsr_slave_0: left promiscuous mode [ 251.470211][ T1049] hsr_slave_1: left promiscuous mode [ 251.473420][ T1049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.476766][ T1049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.509565][ T1049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.512709][ T1049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.544216][ T1049] veth1_macvtap: left promiscuous mode [ 251.546786][ T1049] veth0_macvtap: left promiscuous mode [ 251.549401][ T1049] veth1_vlan: left promiscuous mode [ 251.560926][ T1049] veth0_vlan: left promiscuous mode [ 251.932748][ T1049] team0 (unregistering): Port device team_slave_1 removed [ 251.952639][ T1049] team0 (unregistering): Port device team_slave_0 removed 2025/09/07 13:30:10 executed programs: 0 [ 255.586612][ T4704] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.590784][ T4704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.594277][ T4704] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.598202][ T4704] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.603143][ T4704] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.817224][ T5523] chnl_net:caif_netlink_parms(): no params data found [ 255.878000][ T5523] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.881777][ T5523] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.884873][ T5523] bridge_slave_0: entered allmulticast mode [ 255.888745][ T5523] bridge_slave_0: entered promiscuous mode [ 255.894215][ T5523] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.897370][ T5523] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.901527][ T5523] bridge_slave_1: entered allmulticast mode [ 255.909165][ T5523] bridge_slave_1: entered promiscuous mode [ 255.946832][ T5523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.953404][ T5523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.975861][ T5523] team0: Port device team_slave_0 added [ 255.981321][ T5523] team0: Port device team_slave_1 added [ 256.004144][ T5523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.007062][ T5523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.018708][ T5523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.025993][ T5523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.030405][ T5523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.045432][ T5523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.082681][ T5523] hsr_slave_0: entered promiscuous mode [ 256.085884][ T5523] hsr_slave_1: entered promiscuous mode [ 256.565709][ T5523] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 256.581559][ T5523] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 256.601787][ T5523] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 256.616090][ T5523] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 256.672719][ T5523] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.676066][ T5523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.680105][ T5523] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.683221][ T5523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.802295][ T5523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.827924][ T1045] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.840787][ T1045] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.855083][ T5523] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.878006][ T1045] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.881222][ T1045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.902379][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.905507][ T1045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.245949][ T5523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.321087][ T5523] veth0_vlan: entered promiscuous mode [ 257.335185][ T5523] veth1_vlan: entered promiscuous mode [ 257.385323][ T5523] veth0_macvtap: entered promiscuous mode [ 257.402759][ T5523] veth1_macvtap: entered promiscuous mode [ 257.435330][ T5523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.453529][ T5523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.477656][ T1036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.483814][ T1036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.487718][ T1036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.536157][ T1036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.641592][ T4704] Bluetooth: hci0: command tx timeout [ 257.669289][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.690615][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.724923][ T3045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.731568][ T3045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.286734][ T5567] loop0: detected capacity change from 0 to 32768 [ 259.720136][ T5418] Bluetooth: hci0: command tx timeout [ 260.842147][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.846226][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.800659][ T5418] Bluetooth: hci0: command tx timeout [ 263.879565][ T5418] Bluetooth: hci0: command tx timeout [ 272.898028][ T4704] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.903374][ T4704] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.906965][ T4704] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.911723][ T4704] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.914869][ T4704] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.636996][ T5590] chnl_net:caif_netlink_parms(): no params data found [ 273.758861][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.769635][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.772895][ T5590] bridge_slave_0: entered allmulticast mode [ 273.790027][ T5590] bridge_slave_0: entered promiscuous mode [ 273.795558][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.798454][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.809784][ T5590] bridge_slave_1: entered allmulticast mode [ 273.813697][ T5590] bridge_slave_1: entered promiscuous mode [ 273.871520][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.877667][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.940130][ T5590] team0: Port device team_slave_0 added [ 273.944991][ T5590] team0: Port device team_slave_1 added [ 273.986088][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.989121][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.021121][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.029702][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.032509][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.059447][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.124898][ T5590] hsr_slave_0: entered promiscuous mode [ 274.139869][ T5590] hsr_slave_1: entered promiscuous mode [ 274.142838][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 274.145374][ T5590] Cannot create hsr debugfs directory [ 274.450959][ T5590] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 274.471266][ T5590] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 274.477396][ T5590] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 274.493048][ T5590] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 274.543267][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.546417][ T5590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.549564][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.552492][ T5590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.608877][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.613433][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.675271][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.701794][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.728644][ T3045] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.731857][ T3045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.750885][ T3045] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.753893][ T3045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.000501][ T5418] Bluetooth: hci1: command tx timeout [ 275.087833][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.164702][ T5590] veth0_vlan: entered promiscuous mode [ 275.174136][ T5590] veth1_vlan: entered promiscuous mode [ 275.223402][ T5590] veth0_macvtap: entered promiscuous mode [ 275.242177][ T5590] veth1_macvtap: entered promiscuous mode [ 275.266520][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.287669][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.308353][ T1036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.321481][ T1036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.325332][ T1036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.328958][ T1036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.443890][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.447180][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.522547][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.526027][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/07 13:30:30 executed programs: 3 [ 277.084576][ T5418] Bluetooth: hci1: command tx timeout [ 279.160364][ T5418] Bluetooth: hci1: command tx timeout 2025/09/07 13:30:36 executed programs: 13 [ 281.239472][ T5418] Bluetooth: hci1: command tx timeout 2025/09/07 13:30:41 executed programs: 23 2025/09/07 13:30:46 executed programs: 33 2025/09/07 13:30:52 executed programs: 44 2025/09/07 13:30:57 executed programs: 54 2025/09/07 13:31:02 executed programs: 64 2025/09/07 13:31:07 executed programs: 74 2025/09/07 13:31:12 executed programs: 84 [ 322.282413][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.284912][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 2025/09/07 13:31:18 executed programs: 95 2025/09/07 13:31:23 executed programs: 105 2025/09/07 13:31:28 executed programs: 115 2025/09/07 13:31:33 executed programs: 125 2025/09/07 13:31:38 executed programs: 135 2025/09/07 13:31:43 executed programs: 146 2025/09/07 13:31:48 executed programs: 156 2025/09/07 13:31:54 executed programs: 166 2025/09/07 13:31:59 executed programs: 176 2025/09/07 13:32:04 executed programs: 186 2025/09/07 13:32:09 executed programs: 196 2025/09/07 13:32:14 executed programs: 206 [ 380.684813][ T4704] Bluetooth: hci0: command 0x0406 tx timeout [ 383.723961][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.726683][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 2025/09/07 13:32:19 executed programs: 216 2025/09/07 13:32:24 executed programs: 226 2025/09/07 13:32:29 executed programs: 236 [ 396.049489][ T5418] Bluetooth: hci1: command 0x0406 tx timeout 2025/09/07 13:32:34 executed programs: 246 2025/09/07 13:32:40 executed programs: 257 2025/09/07 13:32:45 executed programs: 268 2025/09/07 13:32:50 executed programs: 278 2025/09/07 13:32:55 executed programs: 289 2025/09/07 13:33:01 executed programs: 300 2025/09/07 13:33:06 executed programs: 310 2025/09/07 13:33:11 executed programs: 320 2025/09/07 13:33:16 executed programs: 330 [ 445.165119][ T26] INFO: task kworker/u4:8:1045 blocked for more than 143 seconds. [ 445.168615][ T26] Not tainted syzkaller #0 [ 445.173477][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.176211][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.189570][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.193306][ T26] task:kworker/u4:8 state:D stack:23640 pid:1045 tgid:1045 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 445.198479][ T26] Workqueue: writeback wb_workfn (flush-7:0) [ 445.229429][ T26] Call Trace: [ 445.230716][ T26] [ 445.231951][ T26] __schedule+0x1798/0x4cc0 [ 445.240329][ T26] ? blk_mq_flush_plug_list+0x48b/0x550 [ 445.242756][ T26] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 445.259483][ T26] ? __lock_acquire+0xab9/0xd20 [ 445.270386][ T26] ? __pfx___schedule+0x10/0x10 [ 445.272489][ T26] ? schedule+0x91/0x360 [ 445.274327][ T26] schedule+0x165/0x360 [ 445.276096][ T26] schedule_preempt_disabled+0x13/0x30 [ 445.278296][ T26] __mutex_lock+0x7e6/0x1350 [ 445.300467][ T26] ? __mutex_lock+0x5bb/0x1350 [ 445.302671][ T26] ? jfs_commit_inode+0x1ca/0x530 [ 445.304771][ T26] ? __pfx___mutex_lock+0x10/0x10 [ 445.307031][ T26] ? metapage_writepages+0x107/0x160 [ 445.309320][ T26] ? __pfx_metapage_writepages+0x10/0x10 [ 445.331945][ T26] ? __lock_acquire+0xab9/0xd20 [ 445.334089][ T26] jfs_commit_inode+0x1ca/0x530 [ 445.350579][ T26] ? __pfx_jfs_commit_inode+0x10/0x10 [ 445.352924][ T26] jfs_write_inode+0x145/0x220 [ 445.354988][ T26] __writeback_single_inode+0x6ee/0xff0 [ 445.357230][ T26] writeback_sb_inodes+0x6c7/0x1010 [ 445.380387][ T26] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 445.382861][ T26] ? __pfx_down_read_trylock+0x10/0x10 [ 445.385361][ T26] ? __pfx___up_read+0x10/0x10 [ 445.387710][ T26] __writeback_inodes_wb+0x111/0x240 [ 445.409506][ T26] wb_writeback+0x44f/0xaf0 [ 445.420093][ T26] ? queue_io+0x341/0x590 [ 445.421811][ T26] ? __pfx_wb_writeback+0x10/0x10 [ 445.423774][ T26] wb_workfn+0xaef/0xef0 [ 445.425483][ T26] ? __pfx_wb_workfn+0x10/0x10 [ 445.427407][ T26] ? __lock_acquire+0xab9/0xd20 [ 445.442148][ T26] ? process_scheduled_works+0x9ef/0x17b0 [ 445.444630][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.446774][ T26] ? process_scheduled_works+0x9ef/0x17b0 [ 445.449167][ T26] ? process_scheduled_works+0x9ef/0x17b0 [ 445.479899][ T26] process_scheduled_works+0xae1/0x17b0 [ 445.482409][ T26] ? __pfx_process_scheduled_works+0x10/0x10 [ 445.485045][ T26] worker_thread+0x8a0/0xda0 [ 445.487120][ T26] kthread+0x70e/0x8a0 [ 445.488900][ T26] ? __pfx_worker_thread+0x10/0x10 [ 445.512434][ T26] ? __pfx_kthread+0x10/0x10 [ 445.514449][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.516606][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.518793][ T26] ? __pfx_kthread+0x10/0x10 [ 445.542502][ T26] ret_from_fork+0x3fc/0x770 [ 445.544536][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 445.546857][ T26] ? __pfx_kthread+0x10/0x10 [ 445.549050][ T26] ret_from_fork_asm+0x1a/0x30 [ 445.571044][ T26] [ 445.580435][ T26] [ 445.580435][ T26] Showing all locks held in the system: [ 445.583755][ T26] 1 lock held by khungtaskd/26: [ 445.585911][ T26] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 445.609501][ T26] 4 locks held by kworker/u4:8/1045: [ 445.611942][ T26] #0: ffff888030f76948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 445.616834][ T26] #1: ffffc9000266fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 445.650328][ T26] #2: ffff888000c440e0 (&type->s_umount_key#54){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 445.679448][ T26] #3: ffff8880422e2fe0 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: jfs_commit_inode+0x1ca/0x530 [ 445.684143][ T26] 2 locks held by getty/5146: [ 445.686239][ T26] #0: ffff88803e9f50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 445.710529][ T26] #1: ffffc9000018e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 445.714548][ T26] 4 locks held by syz.0.17/5567: [ 445.730817][ T26] [ 445.731864][ T26] ============================================= [ 445.731864][ T26] [ 445.735360][ T26] NMI backtrace for cpu 0 [ 445.735373][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 445.735385][ T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 445.735391][ T26] Call Trace: [ 445.735399][ T26] [ 445.735405][ T26] dump_stack_lvl+0x189/0x250 [ 445.735424][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.735436][ T26] ? __pfx__printk+0x10/0x10 [ 445.735456][ T26] nmi_cpu_backtrace+0x39e/0x3d0 [ 445.735471][ T26] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 445.735484][ T26] ? __pfx__printk+0x10/0x10 [ 445.735499][ T26] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 445.735515][ T26] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 445.735529][ T26] watchdog+0xf93/0xfe0 [ 445.735544][ T26] ? watchdog+0x1de/0xfe0 [ 445.735560][ T26] kthread+0x70e/0x8a0 [ 445.735575][ T26] ? __pfx_watchdog+0x10/0x10 [ 445.735587][ T26] ? __pfx_kthread+0x10/0x10 [ 445.735599][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.735613][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.735627][ T26] ? __pfx_kthread+0x10/0x10 [ 445.735639][ T26] ret_from_fork+0x3fc/0x770 [ 445.735651][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 445.735664][ T26] ? __pfx_kthread+0x10/0x10 [ 445.735675][ T26] ret_from_fork_asm+0x1a/0x30 [ 445.735695][ T26] [ 445.735701][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 445.794637][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 445.798166][ T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 445.802960][ T26] Call Trace: [ 445.804462][ T26] [ 445.805778][ T26] dump_stack_lvl+0x99/0x250 [ 445.807852][ T26] ? __asan_memcpy+0x40/0x70 [ 445.809907][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.812244][ T26] ? __pfx__printk+0x10/0x10 [ 445.814226][ T26] vpanic+0x281/0x750 [ 445.816073][ T26] ? __pfx_vpanic+0x10/0x10 [ 445.818029][ T26] ? nmi_cpu_backtrace+0x319/0x3d0 [ 445.820057][ T26] ? nmi_cpu_backtrace+0x386/0x3d0 [ 445.822387][ T26] panic+0xb9/0xc0 [ 445.824191][ T26] ? __pfx_panic+0x10/0x10 [ 445.826276][ T26] ? irq_work_queue+0xc3/0x140 [ 445.828381][ T26] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 445.831213][ T26] watchdog+0xfd2/0xfe0 [ 445.833113][ T26] ? watchdog+0x1de/0xfe0 [ 445.834704][ T26] kthread+0x70e/0x8a0 [ 445.836496][ T26] ? __pfx_watchdog+0x10/0x10 [ 445.838491][ T26] ? __pfx_kthread+0x10/0x10 [ 445.840727][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.842905][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.844882][ T26] ? __pfx_kthread+0x10/0x10 [ 445.846826][ T26] ret_from_fork+0x3fc/0x770 [ 445.848735][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 445.851006][ T26] ? __pfx_kthread+0x10/0x10 [ 445.853050][ T26] ret_from_fork_asm+0x1a/0x30 [ 445.855124][ T26] [ 445.856828][ T26] Kernel Offset: disabled [ 445.858546][ T26] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:33:20 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff934a0888 RBX=0000000000000004 RCX=8254f670159718c0 RDX=0000000000000000 RSI=ffff88801b33afd0 RDI=ffff88801b33a440 RBP=0000000000000000 RSP=ffffc900000075c0 R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc90000007838 R11=ffffffff81ac3ae0 R12=00000000762cb430 R13=ffff88801b33af30 R14=ffff88801b33afd0 R15=8254f670159718c0 RIP=ffffffff819da407 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808d20c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feb5246b000 CR3=00000000573d9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000f8000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffeee941e0 00007fffeee941c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffeee94320 00007fffeee941a0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffeee950d6 00007fffeee950dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffeee941e0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffeee94320 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffeee94320 00007fffeee941a0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffeee941e0 00007fffeee941c0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb5b412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb5b412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04252712694a1e07 dc842bfeaa2ead6d fe43f47ddff007fd 571d6f4dddec9c78 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000