syzkaller login: [ 91.927566][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:58438' (ED25519) to the list of known hosts. 2025/09/01 03:15:50 parsed 1 programs [ 240.926143][ T5384] cgroup: Unknown subsys name 'net' [ 240.997047][ T5384] cgroup: Unknown subsys name 'cpuset' [ 241.003025][ T5384] cgroup: Unknown subsys name 'rlimit' [ 242.678698][ T5384] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 246.496511][ T5390] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 246.645575][ T5397] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.651769][ T5397] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.655328][ T5397] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.659944][ T5397] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.663777][ T5397] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.027934][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.038735][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.089280][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.092492][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.242315][ T5438] chnl_net:caif_netlink_parms(): no params data found [ 249.305793][ T5438] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.310216][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.313177][ T5438] bridge_slave_0: entered allmulticast mode [ 249.316571][ T5438] bridge_slave_0: entered promiscuous mode [ 249.322811][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.326188][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.330279][ T5438] bridge_slave_1: entered allmulticast mode [ 249.334045][ T5438] bridge_slave_1: entered promiscuous mode [ 249.359959][ T5438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.366199][ T5438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.390452][ T5438] team0: Port device team_slave_0 added [ 249.394951][ T5438] team0: Port device team_slave_1 added [ 249.414083][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.417024][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.427950][ T5438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.435037][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.437971][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.449674][ T5438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.485018][ T5438] hsr_slave_0: entered promiscuous mode [ 249.489276][ T5438] hsr_slave_1: entered promiscuous mode [ 249.633267][ T5438] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.643834][ T5438] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.650410][ T5438] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.656390][ T5438] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.687999][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.691141][ T5438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.694883][ T5438] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.698071][ T5438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.755390][ T5438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.770644][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.775642][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.789862][ T5438] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.800012][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.802882][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.813592][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.816659][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.993858][ T5438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.056543][ T5438] veth0_vlan: entered promiscuous mode [ 250.066065][ T5438] veth1_vlan: entered promiscuous mode [ 250.094112][ T5438] veth0_macvtap: entered promiscuous mode [ 250.102153][ T5438] veth1_macvtap: entered promiscuous mode [ 250.116818][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.127614][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.141866][ T1038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.152271][ T1038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.155977][ T1038] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.165713][ T1038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.302410][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.345223][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.389347][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.459486][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/09/01 03:16:04 executed programs: 0 [ 252.398408][ T4706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.406041][ T4706] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.410549][ T4706] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.417233][ T4706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.421015][ T4706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.737184][ T5492] chnl_net:caif_netlink_parms(): no params data found [ 252.862133][ T5492] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.868778][ T5492] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.872008][ T5492] bridge_slave_0: entered allmulticast mode [ 252.879610][ T5492] bridge_slave_0: entered promiscuous mode [ 252.884692][ T5492] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.887743][ T5492] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.891628][ T5492] bridge_slave_1: entered allmulticast mode [ 252.895051][ T5492] bridge_slave_1: entered promiscuous mode [ 252.920459][ T5492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.925752][ T5492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.950210][ T5492] team0: Port device team_slave_0 added [ 252.954892][ T5492] team0: Port device team_slave_1 added [ 253.011686][ T5492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.014580][ T5492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.029059][ T5492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.051652][ T5492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.054678][ T5492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.074124][ T5492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.183082][ T5492] hsr_slave_0: entered promiscuous mode [ 253.194677][ T5492] hsr_slave_1: entered promiscuous mode [ 253.210549][ T5492] debugfs: 'hsr0' already exists in 'hsr' [ 253.213131][ T5492] Cannot create hsr debugfs directory [ 253.216002][ T13] bridge_slave_1: left allmulticast mode [ 253.229226][ T13] bridge_slave_1: left promiscuous mode [ 253.232565][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.240304][ T13] bridge_slave_0: left allmulticast mode [ 253.242867][ T13] bridge_slave_0: left promiscuous mode [ 253.245480][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.657199][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.663219][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.667599][ T13] bond0 (unregistering): Released all slaves [ 253.771000][ T13] hsr_slave_0: left promiscuous mode [ 253.780000][ T13] hsr_slave_1: left promiscuous mode [ 253.789012][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.792323][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.805030][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.813098][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.840804][ T13] veth1_macvtap: left promiscuous mode [ 253.843549][ T13] veth0_macvtap: left promiscuous mode [ 253.846292][ T13] veth1_vlan: left promiscuous mode [ 253.858845][ T13] veth0_vlan: left promiscuous mode [ 254.392570][ T13] team0 (unregistering): Port device team_slave_1 removed [ 254.419155][ T13] team0 (unregistering): Port device team_slave_0 removed [ 254.483755][ T4706] Bluetooth: hci0: command tx timeout [ 255.843857][ T5492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.893480][ T5492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.917230][ T5492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.931844][ T5492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 256.090374][ T5492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.111653][ T5492] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.131536][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.134447][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.171029][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.174080][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.542626][ T5492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.563634][ T4706] Bluetooth: hci0: command tx timeout [ 256.627484][ T5492] veth0_vlan: entered promiscuous mode [ 256.654364][ T5492] veth1_vlan: entered promiscuous mode [ 256.699583][ T5492] veth0_macvtap: entered promiscuous mode [ 256.713807][ T5492] veth1_macvtap: entered promiscuous mode [ 256.761562][ T5492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.773694][ T5492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.796135][ T1038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.811282][ T1038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.815536][ T1038] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.830796][ T1038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.953217][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.956543][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.030514][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.034348][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.446393][ T5551] loop0: detected capacity change from 0 to 32768 [ 258.638585][ T4706] Bluetooth: hci0: command tx timeout [ 260.718619][ T4706] Bluetooth: hci0: command tx timeout [ 260.883105][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.886278][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.180638][ T5397] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.185970][ T5397] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.191631][ T5397] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.196695][ T5397] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.200492][ T5397] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.895481][ T5560] chnl_net:caif_netlink_parms(): no params data found [ 273.025070][ T5560] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.039529][ T5560] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.042725][ T5560] bridge_slave_0: entered allmulticast mode [ 273.046708][ T5560] bridge_slave_0: entered promiscuous mode [ 273.060269][ T5560] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.063363][ T5560] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.066719][ T5560] bridge_slave_1: entered allmulticast mode [ 273.079544][ T5560] bridge_slave_1: entered promiscuous mode [ 273.129119][ T5560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.141661][ T5560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.193123][ T5560] team0: Port device team_slave_0 added [ 273.210251][ T5560] team0: Port device team_slave_1 added [ 273.254661][ T5560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.257809][ T5560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.288986][ T5560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.294278][ T5560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.296790][ T5560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.329138][ T5560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.400466][ T5560] hsr_slave_0: entered promiscuous mode [ 273.409671][ T5560] hsr_slave_1: entered promiscuous mode [ 273.699508][ T5560] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 273.712244][ T5560] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 273.729483][ T5560] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 273.749606][ T5560] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.799982][ T5560] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.803130][ T5560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.806543][ T5560] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.809714][ T5560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.840403][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.844084][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.933366][ T5560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.969981][ T5560] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.981937][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.985048][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.011180][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.014243][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.242703][ T5397] Bluetooth: hci1: command tx timeout [ 274.336077][ T5560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.410104][ T5560] veth0_vlan: entered promiscuous mode [ 274.424239][ T5560] veth1_vlan: entered promiscuous mode [ 274.471572][ T5560] veth0_macvtap: entered promiscuous mode [ 274.490235][ T5560] veth1_macvtap: entered promiscuous mode [ 274.514765][ T5560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.542224][ T5560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.561078][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.565378][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.585114][ T1038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.591105][ T1038] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.677478][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.682539][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.750277][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.755128][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/01 03:16:27 executed programs: 3 [ 276.321950][ T5397] Bluetooth: hci1: command tx timeout [ 278.403097][ T5397] Bluetooth: hci1: command tx timeout 2025/09/01 03:16:32 executed programs: 13 [ 280.481973][ T5397] Bluetooth: hci1: command tx timeout 2025/09/01 03:16:37 executed programs: 23 2025/09/01 03:16:43 executed programs: 34 2025/09/01 03:16:48 executed programs: 44 2025/09/01 03:16:53 executed programs: 54 2025/09/01 03:16:58 executed programs: 65 2025/09/01 03:17:04 executed programs: 75 2025/09/01 03:17:09 executed programs: 85 2025/09/01 03:17:14 executed programs: 96 [ 322.330952][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.334195][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 2025/09/01 03:17:20 executed programs: 107 2025/09/01 03:17:25 executed programs: 118 2025/09/01 03:17:30 executed programs: 129 2025/09/01 03:17:36 executed programs: 140 2025/09/01 03:17:41 executed programs: 151 2025/09/01 03:17:46 executed programs: 162 2025/09/01 03:17:52 executed programs: 173 2025/09/01 03:17:57 executed programs: 184 2025/09/01 03:18:03 executed programs: 195 [ 375.606965][ T5397] Bluetooth: hci0: command 0x0406 tx timeout 2025/09/01 03:18:08 executed programs: 205 2025/09/01 03:18:13 executed programs: 215 [ 383.767512][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.780100][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 2025/09/01 03:18:19 executed programs: 226 2025/09/01 03:18:24 executed programs: 236 [ 396.080495][ T4706] Bluetooth: hci1: command 0x0406 tx timeout 2025/09/01 03:18:29 executed programs: 246 2025/09/01 03:18:34 executed programs: 256 2025/09/01 03:18:39 executed programs: 266 2025/09/01 03:18:44 executed programs: 277 2025/09/01 03:18:50 executed programs: 288 2025/09/01 03:18:55 executed programs: 299 2025/09/01 03:19:00 executed programs: 310 2025/09/01 03:19:06 executed programs: 321 2025/09/01 03:19:11 executed programs: 332 2025/09/01 03:19:16 executed programs: 342 [ 445.200697][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.203571][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.842290][ T26] INFO: task kworker/u4:0:12 blocked for more than 143 seconds. [ 445.845303][ T26] Not tainted syzkaller #0 [ 445.847623][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.868233][ T26] task:kworker/u4:0 state:D stack:22296 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 445.873030][ T26] Workqueue: writeback wb_workfn (flush-7:0) [ 445.875560][ T26] Call Trace: [ 445.876860][ T26] [ 445.878063][ T26] __schedule+0x1798/0x4cc0 [ 445.900283][ T26] ? blk_mq_flush_plug_list+0x48b/0x550 [ 445.902771][ T26] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 445.905365][ T26] ? __lock_acquire+0xab9/0xd20 [ 445.907464][ T26] ? __pfx___schedule+0x10/0x10 [ 445.948362][ T26] ? schedule+0x91/0x360 [ 445.950201][ T26] schedule+0x165/0x360 [ 445.951939][ T26] schedule_preempt_disabled+0x13/0x30 [ 445.954140][ T26] __mutex_lock+0x7e6/0x1350 [ 445.956091][ T26] ? __mutex_lock+0x5bb/0x1350 [ 445.968287][ T26] ? jfs_commit_inode+0x1ca/0x530 [ 445.979669][ T26] ? __pfx___mutex_lock+0x10/0x10 [ 445.982621][ T26] ? __lock_acquire+0xab9/0xd20 [ 445.984723][ T26] jfs_commit_inode+0x1ca/0x530 [ 445.986902][ T26] ? __pfx_jfs_commit_inode+0x10/0x10 [ 446.008281][ T26] jfs_write_inode+0x145/0x220 [ 446.010292][ T26] __writeback_single_inode+0x6ee/0xff0 [ 446.012620][ T26] writeback_sb_inodes+0x6c7/0x1010 [ 446.014716][ T26] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 446.017066][ T26] ? __pfx_down_read_trylock+0x10/0x10 [ 446.048268][ T26] ? __pfx___up_read+0x10/0x10 [ 446.058302][ T26] __writeback_inodes_wb+0x111/0x240 [ 446.060707][ T26] wb_writeback+0x44f/0xaf0 [ 446.062712][ T26] ? queue_io+0x2f1/0x590 [ 446.064507][ T26] ? __pfx_wb_writeback+0x10/0x10 [ 446.066606][ T26] wb_workfn+0xaef/0xef0 [ 446.089168][ T26] ? __pfx_wb_workfn+0x10/0x10 [ 446.091487][ T26] ? __lock_acquire+0xab9/0xd20 [ 446.093591][ T26] ? process_scheduled_works+0x9ef/0x17b0 [ 446.095828][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.098027][ T26] ? process_scheduled_works+0x9ef/0x17b0 [ 446.118207][ T26] ? process_scheduled_works+0x9ef/0x17b0 [ 446.120785][ T26] process_scheduled_works+0xae1/0x17b0 [ 446.123032][ T26] ? __pfx_process_scheduled_works+0x10/0x10 [ 446.125726][ T26] worker_thread+0x8a0/0xda0 [ 446.127809][ T26] kthread+0x70e/0x8a0 [ 446.159179][ T26] ? __pfx_worker_thread+0x10/0x10 [ 446.161601][ T26] ? __pfx_kthread+0x10/0x10 [ 446.163808][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.165983][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.188665][ T26] ? __pfx_kthread+0x10/0x10 [ 446.193822][ T26] ret_from_fork+0x3fc/0x770 [ 446.195777][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 446.197924][ T26] ? __pfx_kthread+0x10/0x10 [ 446.221537][ T26] ret_from_fork_asm+0x1a/0x30 [ 446.223720][ T26] [ 446.228520][ T26] [ 446.228520][ T26] Showing all locks held in the system: [ 446.231862][ T26] 4 locks held by kworker/u4:0/12: [ 446.251333][ T26] #0: ffff888030f06948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 446.256230][ T26] #1: ffffc900001e7bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 446.288266][ T26] #2: ffff88804ff4a0e0 (&type->s_umount_key#54){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 446.292710][ T26] #3: ffff8880416e26a8 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: jfs_commit_inode+0x1ca/0x530 [ 446.297648][ T26] 1 lock held by khungtaskd/26: [ 446.328385][ T26] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 446.332404][ T26] 2 locks held by getty/5146: [ 446.334222][ T26] #0: ffff8880363cd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 446.359039][ T26] #1: ffffc9000018e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 446.363071][ T26] 5 locks held by syz.0.17/5551: [ 446.365103][ T26] 2 locks held by syz.1.360/5953: [ 446.388273][ T26] [ 446.389416][ T26] ============================================= [ 446.389416][ T26] [ 446.399738][ T26] NMI backtrace for cpu 0 [ 446.399752][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 446.399764][ T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 446.399770][ T26] Call Trace: [ 446.399774][ T26] [ 446.399780][ T26] dump_stack_lvl+0x189/0x250 [ 446.399800][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.399812][ T26] ? __pfx__printk+0x10/0x10 [ 446.399831][ T26] nmi_cpu_backtrace+0x39e/0x3d0 [ 446.399847][ T26] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 446.399861][ T26] ? __pfx__printk+0x10/0x10 [ 446.399877][ T26] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 446.399895][ T26] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 446.399909][ T26] watchdog+0xf93/0xfe0 [ 446.399927][ T26] ? watchdog+0x1de/0xfe0 [ 446.399950][ T26] kthread+0x70e/0x8a0 [ 446.399964][ T26] ? __pfx_watchdog+0x10/0x10 [ 446.399978][ T26] ? __pfx_kthread+0x10/0x10 [ 446.399992][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.400011][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.400028][ T26] ? __pfx_kthread+0x10/0x10 [ 446.400041][ T26] ret_from_fork+0x3fc/0x770 [ 446.400054][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 446.400069][ T26] ? __pfx_kthread+0x10/0x10 [ 446.400082][ T26] ret_from_fork_asm+0x1a/0x30 [ 446.400110][ T26] [ 446.400117][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 446.459393][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 446.463313][ T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 446.467885][ T26] Call Trace: [ 446.469372][ T26] [ 446.470689][ T26] dump_stack_lvl+0x99/0x250 [ 446.472732][ T26] ? __asan_memcpy+0x40/0x70 [ 446.474750][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.476955][ T26] ? __pfx__printk+0x10/0x10 [ 446.479113][ T26] vpanic+0x281/0x750 [ 446.480918][ T26] ? __pfx_vpanic+0x10/0x10 [ 446.482888][ T26] ? nmi_cpu_backtrace+0x319/0x3d0 [ 446.485127][ T26] ? nmi_cpu_backtrace+0x386/0x3d0 [ 446.487230][ T26] panic+0xb9/0xc0 [ 446.488874][ T26] ? __pfx_panic+0x10/0x10 [ 446.490836][ T26] ? irq_work_queue+0xc3/0x140 [ 446.492859][ T26] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 446.495564][ T26] watchdog+0xfd2/0xfe0 [ 446.497395][ T26] ? watchdog+0x1de/0xfe0 [ 446.499298][ T26] kthread+0x70e/0x8a0 [ 446.501093][ T26] ? __pfx_watchdog+0x10/0x10 [ 446.503050][ T26] ? __pfx_kthread+0x10/0x10 [ 446.505006][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.507223][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.509470][ T26] ? __pfx_kthread+0x10/0x10 [ 446.511457][ T26] ret_from_fork+0x3fc/0x770 [ 446.513542][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 446.515666][ T26] ? __pfx_kthread+0x10/0x10 [ 446.517665][ T26] ret_from_fork_asm+0x1a/0x30 [ 446.519617][ T26] [ 446.521322][ T26] Kernel Offset: disabled [ 446.523230][ T26] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:19:18 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900004d76b0 R8 =ffff888033dc0237 R9 =1ffff110067b8046 R10=dffffc0000000000 R11=ffffffff8550ca40 R12=dffffc0000000000 R13=ffffffff99b088c5 R14=ffffffff99dfd820 R15=0000000000000000 RIP=ffffffff8550cabc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808d20d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f219f5ff000 CR3=000000003f8e9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3037e550 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3037e6d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3037e6d6 00007ffe3037e6dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21a7612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21a7612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21a7612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21a7612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21a7612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f21a7612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000