syzkaller login: [ 91.994763][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:33033' (ED25519) to the list of known hosts. 2025/09/15 02:40:18 parsed 1 programs [ 240.443322][ T5388] cgroup: Unknown subsys name 'net' [ 240.514703][ T5388] cgroup: Unknown subsys name 'cpuset' [ 240.521226][ T5388] cgroup: Unknown subsys name 'rlimit' [ 242.131987][ T5388] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 246.198898][ T5396] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 247.096152][ T5414] chnl_net:caif_netlink_parms(): no params data found [ 247.170990][ T5414] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.175029][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.179995][ T5414] bridge_slave_0: entered allmulticast mode [ 247.184614][ T5414] bridge_slave_0: entered promiscuous mode [ 247.191153][ T5414] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.194153][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.197080][ T5414] bridge_slave_1: entered allmulticast mode [ 247.201212][ T5414] bridge_slave_1: entered promiscuous mode [ 247.226501][ T5414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.233765][ T5414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.259943][ T5414] team0: Port device team_slave_0 added [ 247.264450][ T5414] team0: Port device team_slave_1 added [ 247.284611][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.288510][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.307097][ T5414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.319675][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.322695][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.337342][ T5414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.375611][ T5414] hsr_slave_0: entered promiscuous mode [ 247.379184][ T5414] hsr_slave_1: entered promiscuous mode [ 247.528856][ T5414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.538131][ T5414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.544986][ T5414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.552195][ T5414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 247.585041][ T5414] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.588128][ T5414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.591867][ T5414] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.594915][ T5414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.657388][ T5414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.672471][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.676416][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.689518][ T5414] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.698407][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.701425][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.712131][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.715145][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.892427][ T5414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.934532][ T5414] veth0_vlan: entered promiscuous mode [ 247.944591][ T5414] veth1_vlan: entered promiscuous mode [ 247.972011][ T5414] veth0_macvtap: entered promiscuous mode [ 247.980599][ T5414] veth1_macvtap: entered promiscuous mode [ 247.996205][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.008995][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.020987][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.031493][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.036312][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.052612][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.206778][ T5437] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.213150][ T5437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.216888][ T5437] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.221451][ T5437] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.224418][ T5437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.243489][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.294939][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.331373][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.381439][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.598313][ T43] bridge_slave_1: left allmulticast mode [ 250.601002][ T43] bridge_slave_1: left promiscuous mode [ 250.604230][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.642294][ T43] bridge_slave_0: left allmulticast mode [ 250.645380][ T43] bridge_slave_0: left promiscuous mode [ 250.650345][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.048564][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.054647][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.060642][ T43] bond0 (unregistering): Released all slaves [ 251.134682][ T43] hsr_slave_0: left promiscuous mode [ 251.137465][ T43] hsr_slave_1: left promiscuous mode [ 251.141390][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.144603][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.150020][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.153112][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.164191][ T43] veth1_macvtap: left promiscuous mode [ 251.166865][ T43] veth0_macvtap: left promiscuous mode [ 251.169829][ T43] veth1_vlan: left promiscuous mode [ 251.172829][ T43] veth0_vlan: left promiscuous mode [ 251.459212][ T43] team0 (unregistering): Port device team_slave_1 removed [ 251.475616][ T43] team0 (unregistering): Port device team_slave_0 removed [ 252.914187][ T3112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.942036][ T3112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.065337][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.090792][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/15 02:40:34 executed programs: 0 [ 254.512264][ T5437] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.516439][ T5437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.525379][ T5437] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.533372][ T5437] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.536772][ T5437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.731557][ T5527] chnl_net:caif_netlink_parms(): no params data found [ 254.790205][ T5527] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.793295][ T5527] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.796431][ T5527] bridge_slave_0: entered allmulticast mode [ 254.801513][ T5527] bridge_slave_0: entered promiscuous mode [ 254.806508][ T5527] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.810766][ T5527] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.813883][ T5527] bridge_slave_1: entered allmulticast mode [ 254.818803][ T5527] bridge_slave_1: entered promiscuous mode [ 254.842269][ T5527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.848974][ T5527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.872869][ T5527] team0: Port device team_slave_0 added [ 254.878702][ T5527] team0: Port device team_slave_1 added [ 254.897508][ T5527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.901479][ T5527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.912822][ T5527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.920351][ T5527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.923508][ T5527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.935402][ T5527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.973540][ T5527] hsr_slave_0: entered promiscuous mode [ 254.976704][ T5527] hsr_slave_1: entered promiscuous mode [ 255.432749][ T5527] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.449342][ T5527] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.460006][ T5527] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.478947][ T5527] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.639231][ T5527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.667477][ T5527] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.683679][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.687010][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.723770][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.727437][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.766607][ T5527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.788732][ T5527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.077268][ T5527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.145919][ T5527] veth0_vlan: entered promiscuous mode [ 256.168950][ T5527] veth1_vlan: entered promiscuous mode [ 256.214847][ T5527] veth0_macvtap: entered promiscuous mode [ 256.232032][ T5527] veth1_macvtap: entered promiscuous mode [ 256.262145][ T5527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.281725][ T5527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.302843][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.306883][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.333009][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.369875][ T3112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.453094][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.456770][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.529977][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.535708][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.552166][ T5437] Bluetooth: hci0: command tx timeout [ 257.051950][ T5569] loop0: detected capacity change from 0 to 32768 [ 258.628266][ T5437] Bluetooth: hci0: command tx timeout [ 260.708698][ T5437] Bluetooth: hci0: command tx timeout [ 260.950540][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.953633][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.787753][ T5437] Bluetooth: hci0: command tx timeout [ 271.674561][ T4707] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.679391][ T4707] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.682993][ T4707] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.686854][ T4707] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.690959][ T4707] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.382275][ T5588] chnl_net:caif_netlink_parms(): no params data found [ 272.503844][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.507012][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.518785][ T5588] bridge_slave_0: entered allmulticast mode [ 272.522554][ T5588] bridge_slave_0: entered promiscuous mode [ 272.535516][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.540600][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.543786][ T5588] bridge_slave_1: entered allmulticast mode [ 272.558708][ T5588] bridge_slave_1: entered promiscuous mode [ 272.601992][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.618055][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.661825][ T5588] team0: Port device team_slave_0 added [ 272.678695][ T5588] team0: Port device team_slave_1 added [ 272.720281][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.723414][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.758672][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.765237][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.777656][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.808701][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.880058][ T5588] hsr_slave_0: entered promiscuous mode [ 272.889317][ T5588] hsr_slave_1: entered promiscuous mode [ 272.897719][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 272.900407][ T5588] Cannot create hsr debugfs directory [ 273.214270][ T5588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 273.230792][ T5588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 273.248811][ T5588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 273.259428][ T5588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.312524][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.315799][ T5588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.319427][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.322625][ T5588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.350457][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.354796][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.460901][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.498536][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.514663][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.518050][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.540388][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.543534][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.594586][ T5588] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.619141][ T5588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.749238][ T4707] Bluetooth: hci1: command tx timeout [ 273.909230][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.975183][ T5588] veth0_vlan: entered promiscuous mode [ 273.995169][ T5588] veth1_vlan: entered promiscuous mode [ 274.047220][ T5588] veth0_macvtap: entered promiscuous mode [ 274.062742][ T5588] veth1_macvtap: entered promiscuous mode [ 274.100790][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.120411][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.146985][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.152779][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.156771][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.173403][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.268840][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.272266][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.340021][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.344668][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/15 02:40:54 executed programs: 3 [ 275.829480][ T5437] Bluetooth: hci1: command tx timeout [ 277.907864][ T5437] Bluetooth: hci1: command tx timeout 2025/09/15 02:40:59 executed programs: 13 [ 279.988070][ T5437] Bluetooth: hci1: command tx timeout 2025/09/15 02:41:05 executed programs: 24 2025/09/15 02:41:10 executed programs: 35 2025/09/15 02:41:16 executed programs: 46 2025/09/15 02:41:21 executed programs: 56 2025/09/15 02:41:26 executed programs: 67 2025/09/15 02:41:31 executed programs: 77 2025/09/15 02:41:36 executed programs: 87 2025/09/15 02:41:42 executed programs: 98 [ 322.399059][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.401545][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 2025/09/15 02:41:47 executed programs: 109 2025/09/15 02:41:52 executed programs: 119 2025/09/15 02:41:58 executed programs: 130 2025/09/15 02:42:03 executed programs: 140 2025/09/15 02:42:08 executed programs: 151 2025/09/15 02:42:14 executed programs: 161 2025/09/15 02:42:19 executed programs: 172 2025/09/15 02:42:24 executed programs: 183 2025/09/15 02:42:29 executed programs: 193 2025/09/15 02:42:35 executed programs: 204 2025/09/15 02:42:40 executed programs: 214 [ 380.788771][ T4707] Bluetooth: hci0: command 0x0406 tx timeout [ 383.836309][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.849163][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 2025/09/15 02:42:45 executed programs: 224 2025/09/15 02:42:50 executed programs: 235 2025/09/15 02:42:55 executed programs: 245 [ 396.147758][ T4707] Bluetooth: hci1: command 0x0406 tx timeout 2025/09/15 02:43:00 executed programs: 255 2025/09/15 02:43:06 executed programs: 266 2025/09/15 02:43:11 executed programs: 277 2025/09/15 02:43:16 executed programs: 288 2025/09/15 02:43:22 executed programs: 299 2025/09/15 02:43:27 executed programs: 309 2025/09/15 02:43:32 executed programs: 320 2025/09/15 02:43:38 executed programs: 331 2025/09/15 02:43:43 executed programs: 342 [ 445.269061][ T26] INFO: task kworker/u4:0:12 blocked for more than 143 seconds. [ 445.272522][ T26] Not tainted syzkaller #0 [ 445.277254][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.284409][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.287090][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.307881][ T26] task:kworker/u4:0 state:D stack:21128 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 445.319102][ T26] Workqueue: writeback wb_workfn (flush-7:0) [ 445.321598][ T26] Call Trace: [ 445.323072][ T26] [ 445.324382][ T26] __schedule+0x1798/0x4cc0 [ 445.326643][ T26] ? blk_mq_flush_plug_list+0x48b/0x550 [ 445.349083][ T26] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 445.358857][ T26] ? __lock_acquire+0xab9/0xd20 [ 445.361177][ T26] ? __pfx___schedule+0x10/0x10 [ 445.363511][ T26] ? schedule+0x91/0x360 [ 445.365534][ T26] schedule+0x165/0x360 [ 445.386620][ T26] schedule_preempt_disabled+0x13/0x30 [ 445.400577][ T26] __mutex_lock+0x7e6/0x1350 [ 445.402628][ T26] ? __mutex_lock+0x5bb/0x1350 [ 445.404610][ T26] ? jfs_commit_inode+0x1ca/0x530 [ 445.406935][ T26] ? __pfx___mutex_lock+0x10/0x10 [ 445.425820][ T26] ? metapage_writepages+0x107/0x160 [ 445.438527][ T26] ? __pfx_metapage_writepages+0x10/0x10 [ 445.441108][ T26] ? __lock_acquire+0xab9/0xd20 [ 445.443316][ T26] jfs_commit_inode+0x1ca/0x530 [ 445.445524][ T26] ? __pfx_jfs_commit_inode+0x10/0x10 [ 445.469976][ T26] jfs_write_inode+0x145/0x220 [ 445.472233][ T26] __writeback_single_inode+0x6ee/0xff0 [ 445.474753][ T26] writeback_sb_inodes+0x6c7/0x1010 [ 445.477201][ T26] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 445.508738][ T26] ? __pfx_down_read_trylock+0x10/0x10 [ 445.511365][ T26] ? __pfx___up_read+0x10/0x10 [ 445.513637][ T26] __writeback_inodes_wb+0x111/0x240 [ 445.515938][ T26] wb_writeback+0x44f/0xaf0 [ 445.537630][ T26] ? queue_io+0x3b1/0x590 [ 445.539758][ T26] ? __pfx_wb_writeback+0x10/0x10 [ 445.541722][ T26] wb_workfn+0xaef/0xef0 [ 445.543566][ T26] ? __pfx_wb_workfn+0x10/0x10 [ 445.545420][ T26] ? __lock_acquire+0xab9/0xd20 [ 445.547365][ T26] ? process_scheduled_works+0x9ef/0x17b0 [ 445.569651][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.571914][ T26] ? process_scheduled_works+0x9ef/0x17b0 [ 445.574546][ T26] ? process_scheduled_works+0x9ef/0x17b0 [ 445.577053][ T26] process_scheduled_works+0xae1/0x17b0 [ 445.607777][ T26] ? __pfx_process_scheduled_works+0x10/0x10 [ 445.610322][ T26] worker_thread+0x8a0/0xda0 [ 445.612345][ T26] kthread+0x70e/0x8a0 [ 445.614130][ T26] ? __pfx_worker_thread+0x10/0x10 [ 445.616393][ T26] ? __pfx_kthread+0x10/0x10 [ 445.637632][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.639927][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.642198][ T26] ? __pfx_kthread+0x10/0x10 [ 445.644248][ T26] ret_from_fork+0x436/0x7d0 [ 445.646342][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 445.678591][ T26] ? __pfx_kthread+0x10/0x10 [ 445.680689][ T26] ret_from_fork_asm+0x1a/0x30 [ 445.682803][ T26] [ 445.694142][ T26] [ 445.694142][ T26] Showing all locks held in the system: [ 445.717756][ T26] 4 locks held by kworker/u4:0/12: [ 445.720150][ T26] #0: ffff88801c342948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 445.724895][ T26] #1: ffffc900001e7bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 445.754072][ T26] #2: ffff888043cbc0e0 (&type->s_umount_key#54){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 445.777638][ T26] #3: ffff888042222fe0 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: jfs_commit_inode+0x1ca/0x530 [ 445.782342][ T26] 1 lock held by khungtaskd/26: [ 445.784561][ T26] #0: ffffffff8e33a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 445.808548][ T26] 2 locks held by getty/5147: [ 445.810597][ T26] #0: ffff88803698d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 445.814387][ T26] #1: ffffc9000018e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 445.847776][ T26] 4 locks held by syz.0.17/5569: [ 445.849857][ T26] 3 locks held by syz.1.361/5981: [ 445.851956][ T26] 2 locks held by dhcpcd/5982: [ 445.854005][ T26] #0: ffff888032a82258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 445.878211][ T26] #1: ffffffff8e33fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 445.888221][ T26] [ 445.889184][ T26] ============================================= [ 445.889184][ T26] [ 445.892857][ T26] NMI backtrace for cpu 0 [ 445.892868][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 445.892880][ T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 445.892887][ T26] Call Trace: [ 445.892894][ T26] [ 445.892899][ T26] dump_stack_lvl+0x189/0x250 [ 445.892920][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.892933][ T26] ? __pfx__printk+0x10/0x10 [ 445.892954][ T26] nmi_cpu_backtrace+0x39e/0x3d0 [ 445.892971][ T26] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 445.892985][ T26] ? __pfx__printk+0x10/0x10 [ 445.893002][ T26] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 445.893013][ T26] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 445.893027][ T26] watchdog+0xf93/0xfe0 [ 445.893052][ T26] ? watchdog+0x1de/0xfe0 [ 445.893068][ T26] kthread+0x70e/0x8a0 [ 445.893083][ T26] ? __pfx_watchdog+0x10/0x10 [ 445.893096][ T26] ? __pfx_kthread+0x10/0x10 [ 445.893109][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.893124][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.893139][ T26] ? __pfx_kthread+0x10/0x10 [ 445.893151][ T26] ret_from_fork+0x436/0x7d0 [ 445.893164][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 445.893179][ T26] ? __pfx_kthread+0x10/0x10 [ 445.893191][ T26] ret_from_fork_asm+0x1a/0x30 [ 445.893213][ T26] [ 445.893220][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 445.950821][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 445.954771][ T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 445.959269][ T26] Call Trace: [ 445.960787][ T26] [ 445.962054][ T26] dump_stack_lvl+0x99/0x250 [ 445.964042][ T26] ? __asan_memcpy+0x40/0x70 [ 445.966206][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.968441][ T26] ? __pfx__printk+0x10/0x10 [ 445.970398][ T26] vpanic+0x281/0x750 [ 445.972184][ T26] ? __pfx_vpanic+0x10/0x10 [ 445.974244][ T26] ? nmi_cpu_backtrace+0x319/0x3d0 [ 445.976507][ T26] ? nmi_cpu_backtrace+0x386/0x3d0 [ 445.978640][ T26] panic+0xb9/0xc0 [ 445.980254][ T26] ? __pfx_panic+0x10/0x10 [ 445.982142][ T26] ? irq_work_queue+0xc3/0x140 [ 445.984206][ T26] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 445.986811][ T26] watchdog+0xfd2/0xfe0 [ 445.988647][ T26] ? watchdog+0x1de/0xfe0 [ 445.990502][ T26] kthread+0x70e/0x8a0 [ 445.992368][ T26] ? __pfx_watchdog+0x10/0x10 [ 445.994459][ T26] ? __pfx_kthread+0x10/0x10 [ 445.996503][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.998730][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.001064][ T26] ? __pfx_kthread+0x10/0x10 [ 446.003094][ T26] ret_from_fork+0x436/0x7d0 [ 446.005106][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 446.007303][ T26] ? __pfx_kthread+0x10/0x10 [ 446.009274][ T26] ret_from_fork_asm+0x1a/0x30 [ 446.011457][ T26] [ 446.013224][ T26] Kernel Offset: disabled [ 446.015195][ T26] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:43:45 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900004d76b0 R8 =ffff888033b70237 R9 =1ffff1100676e046 R10=dffffc0000000000 R11=ffffffff855139b0 R12=dffffc0000000000 R13=ffffffff99d0b8ef R14=ffffffff9a000840 R15=0000000000000000 RIP=ffffffff85513a2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808d00a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdf937ff000 CR3=0000000059738000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb739cac0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb739cc46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb739cc46 00007fffb739cc4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf9b812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf9b812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf9b812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf9b812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf9b812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf9b812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000