syzkaller login: [ 91.771951][ T54] cfg80211: failed to load regulatory.db
[ 231.618168][ T5343] sshd-session (5343) used greatest stack depth: 20552 bytes left
Warning: Permanently added '[localhost]:57905' (ED25519) to the list of known hosts.
2025/07/05 17:22:54 ignoring optional flag "sandboxArg"="0"
2025/07/05 17:22:55 parsed 1 programs
[ 239.369010][ T5362] cgroup: Unknown subsys name 'net'
[ 239.456108][ T5362] cgroup: Unknown subsys name 'cpuset'
[ 239.461417][ T5362] cgroup: Unknown subsys name 'rlimit'
[ 241.185252][ T5362] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 244.998580][ T5370] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 245.269196][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 245.273701][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 245.307430][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 245.310723][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 246.250729][ T5386] chnl_net:caif_netlink_parms(): no params data found
[ 246.318660][ T5386] bridge0: port 1(bridge_slave_0) entered blocking state
[ 246.323319][ T5386] bridge0: port 1(bridge_slave_0) entered disabled state
[ 246.326481][ T5386] bridge_slave_0: entered allmulticast mode
[ 246.330613][ T5386] bridge_slave_0: entered promiscuous mode
[ 246.337887][ T5386] bridge0: port 2(bridge_slave_1) entered blocking state
[ 246.341120][ T5386] bridge0: port 2(bridge_slave_1) entered disabled state
[ 246.344684][ T5386] bridge_slave_1: entered allmulticast mode
[ 246.348530][ T5386] bridge_slave_1: entered promiscuous mode
[ 246.373236][ T5386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 246.379696][ T5386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 246.409473][ T5386] team0: Port device team_slave_0 added
[ 246.417148][ T5386] team0: Port device team_slave_1 added
[ 246.437859][ T5386] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 246.440706][ T5386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 246.452799][ T5386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 246.459199][ T5386] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 246.463005][ T5386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 246.474700][ T5386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 246.509231][ T5386] hsr_slave_0: entered promiscuous mode
[ 246.513660][ T5386] hsr_slave_1: entered promiscuous mode
[ 246.670058][ T5386] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 246.678957][ T5386] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 246.685868][ T5386] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 246.693236][ T5386] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 246.774998][ T5386] 8021q: adding VLAN 0 to HW filter on device bond0
[ 246.795959][ T5386] 8021q: adding VLAN 0 to HW filter on device team0
[ 246.807225][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state
[ 246.810517][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 246.825055][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state
[ 246.828118][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 247.019616][ T5386] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 247.057641][ T5386] veth0_vlan: entered promiscuous mode
[ 247.066199][ T5386] veth1_vlan: entered promiscuous mode
[ 247.095277][ T5386] veth0_macvtap: entered promiscuous mode
[ 247.104782][ T5386] veth1_macvtap: entered promiscuous mode
[ 247.137364][ T5386] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 247.148484][ T5386] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 247.157606][ T5386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 247.161480][ T5386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 247.166974][ T5386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 247.170708][ T5386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 247.303208][ T5386] syz-executor (5386) used greatest stack depth: 20344 bytes left
[ 247.319985][ T1042] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 247.367556][ T1042] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 247.427414][ T1042] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 247.496607][ T1042] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 249.060676][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 249.064415][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 249.067663][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 249.071108][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 249.075792][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 250.192361][ T1042] bridge_slave_1: left allmulticast mode
[ 250.195078][ T1042] bridge_slave_1: left promiscuous mode
[ 250.198451][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state
[ 250.216166][ T1042] bridge_slave_0: left allmulticast mode
[ 250.218484][ T1042] bridge_slave_0: left promiscuous mode
[ 250.220896][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state
[ 250.639437][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 250.646820][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 250.651780][ T1042] bond0 (unregistering): Released all slaves
[ 250.750731][ T1042] hsr_slave_0: left promiscuous mode
[ 250.753938][ T1042] hsr_slave_1: left promiscuous mode
[ 250.756767][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 250.759856][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 250.765051][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 250.768142][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 250.779404][ T1042] veth1_macvtap: left promiscuous mode
[ 250.781913][ T1042] veth0_macvtap: left promiscuous mode
[ 250.785683][ T1042] veth1_vlan: left promiscuous mode
[ 250.788000][ T1042] veth0_vlan: left promiscuous mode
[ 251.044361][ T1042] team0 (unregistering): Port device team_slave_1 removed
[ 251.067689][ T1042] team0 (unregistering): Port device team_slave_0 removed
2025/07/05 17:23:10 executed programs: 0
[ 252.125010][ T4686] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 252.128896][ T4686] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 252.132893][ T4686] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 252.137173][ T4686] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 252.140707][ T4686] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 252.926633][ T5480] chnl_net:caif_netlink_parms(): no params data found
[ 253.171216][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state
[ 253.182990][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state
[ 253.186447][ T5480] bridge_slave_0: entered allmulticast mode
[ 253.202677][ T5480] bridge_slave_0: entered promiscuous mode
[ 253.215155][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state
[ 253.219335][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state
[ 253.233947][ T5480] bridge_slave_1: entered allmulticast mode
[ 253.237857][ T5480] bridge_slave_1: entered promiscuous mode
[ 253.283891][ T5480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 253.289946][ T5480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 253.360211][ T5480] team0: Port device team_slave_0 added
[ 253.377634][ T5480] team0: Port device team_slave_1 added
[ 253.432593][ T5480] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 253.435694][ T5480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 253.462731][ T5480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 253.484339][ T5480] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 253.487319][ T5480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 253.510648][ T5480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 253.593108][ T5480] hsr_slave_0: entered promiscuous mode
[ 253.596373][ T5480] hsr_slave_1: entered promiscuous mode
[ 254.163127][ T45] Bluetooth: hci0: command tx timeout
[ 254.251163][ T5480] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 254.270912][ T5480] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 254.284863][ T5480] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 254.304028][ T5480] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 254.452634][ T5480] 8021q: adding VLAN 0 to HW filter on device bond0
[ 254.486025][ T5480] 8021q: adding VLAN 0 to HW filter on device team0
[ 254.505294][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state
[ 254.508399][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 254.527330][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state
[ 254.530504][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 254.866478][ T5480] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 254.926577][ T5480] veth0_vlan: entered promiscuous mode
[ 254.949413][ T5480] veth1_vlan: entered promiscuous mode
[ 254.986823][ T5480] veth0_macvtap: entered promiscuous mode
[ 255.011142][ T5480] veth1_macvtap: entered promiscuous mode
[ 255.045934][ T5480] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 255.064880][ T5480] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 255.069849][ T5480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 255.088823][ T5480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 255.102274][ T5480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 255.106082][ T5480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 255.226574][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 255.231018][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 255.314404][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 255.319097][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 255.828366][ T5538] loop0: detected capacity change from 0 to 32768
[ 256.247579][ T45] Bluetooth: hci0: command tx timeout
[ 258.322801][ T45] Bluetooth: hci0: command tx timeout
[ 260.403247][ T45] Bluetooth: hci0: command tx timeout
[ 260.725905][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 260.728842][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 270.467086][ T4686] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 270.470997][ T4686] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 270.474802][ T4686] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 270.478346][ T4686] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 270.483128][ T4686] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 271.164832][ T5553] chnl_net:caif_netlink_parms(): no params data found
[ 271.288154][ T5553] bridge0: port 1(bridge_slave_0) entered blocking state
[ 271.293200][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state
[ 271.296366][ T5553] bridge_slave_0: entered allmulticast mode
[ 271.312857][ T5553] bridge_slave_0: entered promiscuous mode
[ 271.317496][ T5553] bridge0: port 2(bridge_slave_1) entered blocking state
[ 271.320847][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state
[ 271.332759][ T5553] bridge_slave_1: entered allmulticast mode
[ 271.342753][ T5553] bridge_slave_1: entered promiscuous mode
[ 271.387647][ T5553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 271.406650][ T5553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 271.464467][ T5553] team0: Port device team_slave_0 added
[ 271.473954][ T5553] team0: Port device team_slave_1 added
[ 271.519936][ T5553] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 271.532712][ T5553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 271.562184][ T5553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 271.568330][ T5553] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 271.571270][ T5553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 271.604260][ T5553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 271.668768][ T5553] hsr_slave_0: entered promiscuous mode
[ 271.676234][ T5553] hsr_slave_1: entered promiscuous mode
[ 271.683493][ T5553] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 271.687227][ T5553] Cannot create hsr debugfs directory
[ 272.077871][ T5553] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 272.113359][ T5553] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 272.119255][ T5553] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 272.135462][ T5553] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 272.287566][ T5553] 8021q: adding VLAN 0 to HW filter on device bond0
[ 272.324284][ T5553] 8021q: adding VLAN 0 to HW filter on device team0
[ 272.335854][ T25] bridge0: port 1(bridge_slave_0) entered blocking state
[ 272.339221][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 272.374819][ T25] bridge0: port 2(bridge_slave_1) entered blocking state
[ 272.378085][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 272.424613][ T5553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 272.562350][ T4686] Bluetooth: hci1: command tx timeout
[ 272.688148][ T5553] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 272.756357][ T5553] veth0_vlan: entered promiscuous mode
[ 272.776257][ T5553] veth1_vlan: entered promiscuous mode
[ 272.824061][ T5553] veth0_macvtap: entered promiscuous mode
[ 272.835104][ T5553] veth1_macvtap: entered promiscuous mode
[ 272.874080][ T5553] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 272.886204][ T5553] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 272.905905][ T5553] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 272.909723][ T5553] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 272.922537][ T5553] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 272.926315][ T5553] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 273.047658][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 273.051020][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 273.099165][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 273.104400][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/07/05 17:23:31 executed programs: 3
[ 274.642439][ T4686] Bluetooth: hci1: command tx timeout
[ 276.724164][ T4686] Bluetooth: hci1: command tx timeout
2025/07/05 17:23:36 executed programs: 13
[ 278.804847][ T45] Bluetooth: hci1: command tx timeout
2025/07/05 17:23:42 executed programs: 24
2025/07/05 17:23:47 executed programs: 35
2025/07/05 17:23:53 executed programs: 46
2025/07/05 17:23:58 executed programs: 56
2025/07/05 17:24:03 executed programs: 66
2025/07/05 17:24:09 executed programs: 77
2025/07/05 17:24:14 executed programs: 88
2025/07/05 17:24:19 executed programs: 98
[ 322.166952][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 322.169879][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
2025/07/05 17:24:25 executed programs: 109
2025/07/05 17:24:30 executed programs: 120
2025/07/05 17:24:36 executed programs: 131
2025/07/05 17:24:41 executed programs: 142
2025/07/05 17:24:46 executed programs: 152
2025/07/05 17:24:51 executed programs: 163
2025/07/05 17:24:57 executed programs: 173
2025/07/05 17:25:02 executed programs: 183
2025/07/05 17:25:07 executed programs: 193
2025/07/05 17:25:12 executed programs: 203
[ 375.444419][ T4686] Bluetooth: hci0: command 0x0406 tx timeout
2025/07/05 17:25:17 executed programs: 213
[ 383.612349][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 383.614934][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
2025/07/05 17:25:23 executed programs: 223
2025/07/05 17:25:28 executed programs: 233
2025/07/05 17:25:33 executed programs: 243
[ 395.923442][ T4686] Bluetooth: hci1: command 0x0406 tx timeout
2025/07/05 17:25:38 executed programs: 253
2025/07/05 17:25:43 executed programs: 263
2025/07/05 17:25:48 executed programs: 273
2025/07/05 17:25:53 executed programs: 283
2025/07/05 17:25:58 executed programs: 294
2025/07/05 17:26:04 executed programs: 304
2025/07/05 17:26:09 executed programs: 315
2025/07/05 17:26:14 executed programs: 325
2025/07/05 17:26:19 executed programs: 336
[ 443.762413][ T27] INFO: task kworker/u4:8:1042 blocked for more than 143 seconds.
[ 443.765571][ T27] Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0
[ 443.768461][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 443.782552][ T27] task:kworker/u4:8 state:D stack:21992 pid:1042 tgid:1042 ppid:2 task_flags:0x4208060 flags:0x00004000
[ 443.810357][ T27] Workqueue: writeback wb_workfn (flush-7:0)
[ 443.814584][ T27] Call Trace:
[ 443.816147][ T27]
[ 443.817459][ T27] __schedule+0x16f5/0x4d00
[ 443.819646][ T27] ? blk_mq_flush_plug_list+0x48b/0x550
[ 443.843529][ T27] ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[ 443.846219][ T27] ? schedule+0x165/0x360
[ 443.847988][ T27] ? __pfx___schedule+0x10/0x10
[ 443.850109][ T27] ? schedule+0x91/0x360
[ 443.851797][ T27] schedule+0x165/0x360
[ 443.878008][ T27] schedule_preempt_disabled+0x13/0x30
[ 443.880427][ T27] __mutex_lock+0x724/0xe80
[ 443.902593][ T27] ? __mutex_lock+0x51b/0xe80
[ 443.905011][ T27] ? jfs_commit_inode+0x1ca/0x530
[ 443.907260][ T27] ? __pfx___mutex_lock+0x10/0x10
[ 443.909485][ T27] ? metapage_writepages+0xae/0x100
[ 443.911723][ T27] ? __lock_acquire+0xab9/0xd20
[ 443.935104][ T27] jfs_commit_inode+0x1ca/0x530
[ 443.937259][ T27] ? __pfx_jfs_commit_inode+0x10/0x10
[ 443.939630][ T27] jfs_write_inode+0x145/0x220
[ 443.941892][ T27] __writeback_single_inode+0x6ee/0xff0
[ 443.972263][ T27] writeback_sb_inodes+0x6b5/0x1000
[ 443.974725][ T27] ? __pfx_writeback_sb_inodes+0x10/0x10
[ 443.977180][ T27] ? __pfx___up_read+0x10/0x10
[ 443.979337][ T27] __writeback_inodes_wb+0x111/0x240
[ 443.981651][ T27] wb_writeback+0x44f/0xaf0
[ 444.012173][ T27] ? queue_io+0x361/0x590
[ 444.014337][ T27] ? __pfx_wb_writeback+0x10/0x10
[ 444.018132][ T27] wb_workfn+0xaef/0xef0
[ 444.020096][ T27] ? __pfx_wb_workfn+0x10/0x10
[ 444.042300][ T27] ? __lock_acquire+0xab9/0xd20
[ 444.045138][ T27] ? process_scheduled_works+0x9ef/0x17b0
[ 444.047580][ T27] ? _raw_spin_unlock_irq+0x23/0x50
[ 444.049760][ T27] ? process_scheduled_works+0x9ef/0x17b0
[ 444.072173][ T27] ? process_scheduled_works+0x9ef/0x17b0
[ 444.075050][ T27] process_scheduled_works+0xade/0x17b0
[ 444.077416][ T27] ? __pfx_process_scheduled_works+0x10/0x10
[ 444.079906][ T27] worker_thread+0x8a0/0xda0
[ 444.081789][ T27] kthread+0x70e/0x8a0
[ 444.104668][ T27] ? __pfx_worker_thread+0x10/0x10
[ 444.106958][ T27] ? __pfx_kthread+0x10/0x10
[ 444.108930][ T27] ? _raw_spin_unlock_irq+0x23/0x50
[ 444.111079][ T27] ? lockdep_hardirqs_on+0x9c/0x150
[ 444.132169][ T27] ? __pfx_kthread+0x10/0x10
[ 444.134066][ T27] ret_from_fork+0x3fc/0x770
[ 444.152193][ T27] ? __pfx_ret_from_fork+0x10/0x10
[ 444.154762][ T27] ? __pfx_kthread+0x10/0x10
[ 444.156502][ T27] ret_from_fork_asm+0x1a/0x30
[ 444.158793][ T27]
[ 444.172570][ T27]
[ 444.172570][ T27] Showing all locks held in the system:
[ 444.175819][ T27] 1 lock held by khungtaskd/27:
[ 444.177921][ T27] #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 444.181989][ T27] 4 locks held by kworker/u4:8/1042:
[ 444.213833][ T27] #0: ffff88801bf79948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 444.218587][ T27] #1: ffffc900024cfbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 444.252145][ T27] #2: ffff88801f0060e0 (&type->s_umount_key#54){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0
[ 444.263050][ T27] #3: ffff88804295afe0 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: jfs_commit_inode+0x1ca/0x530
[ 444.267336][ T27] 2 locks held by getty/5126:
[ 444.269363][ T27] #0: ffff888030fd90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 444.292933][ T27] #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 444.297071][ T27] 4 locks held by syz.0.16/5538:
[ 444.299243][ T27] 2 locks held by dhcpcd/5941:
[ 444.301357][ T27] #0: ffff8880444ea008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[ 444.342167][ T27] #1: ffffffff8e144938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[ 444.352276][ T27] 3 locks held by syz.1.355/5942:
[ 444.362196][ T27]
[ 444.363229][ T27] =============================================
[ 444.363229][ T27]
[ 444.366539][ T27] NMI backtrace for cpu 0
[ 444.366549][ T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full)
[ 444.366562][ T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 444.366568][ T27] Call Trace:
[ 444.366574][ T27]
[ 444.366580][ T27] dump_stack_lvl+0x189/0x250
[ 444.366598][ T27] ? __wake_up_klogd+0xd9/0x110
[ 444.366614][ T27] ? __pfx_dump_stack_lvl+0x10/0x10
[ 444.366630][ T27] ? __pfx__printk+0x10/0x10
[ 444.366648][ T27] nmi_cpu_backtrace+0x39e/0x3d0
[ 444.366668][ T27] ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 444.366680][ T27] ? _printk+0xcf/0x120
[ 444.366695][ T27] ? __pfx__printk+0x10/0x10
[ 444.366709][ T27] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 444.366720][ T27] nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 444.366736][ T27] watchdog+0xfee/0x1030
[ 444.366748][ T27] ? watchdog+0x1de/0x1030
[ 444.366761][ T27] kthread+0x70e/0x8a0
[ 444.366778][ T27] ? __pfx_watchdog+0x10/0x10
[ 444.366786][ T27] ? __pfx_kthread+0x10/0x10
[ 444.366800][ T27] ? _raw_spin_unlock_irq+0x23/0x50
[ 444.366814][ T27] ? lockdep_hardirqs_on+0x9c/0x150
[ 444.366823][ T27] ? __pfx_kthread+0x10/0x10
[ 444.366837][ T27] ret_from_fork+0x3fc/0x770
[ 444.366851][ T27] ? __pfx_ret_from_fork+0x10/0x10
[ 444.366864][ T27] ? __pfx_kthread+0x10/0x10
[ 444.366873][ T27] ret_from_fork_asm+0x1a/0x30
[ 444.366886][ T27]
[ 444.366891][ T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 444.431732][ T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full)
[ 444.436699][ T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 444.441203][ T27] Call Trace:
[ 444.442571][ T27]
[ 444.443810][ T27] dump_stack_lvl+0x99/0x250
[ 444.445868][ T27] ? __asan_memcpy+0x40/0x70
[ 444.447861][ T27] ? __pfx_dump_stack_lvl+0x10/0x10
[ 444.450156][ T27] ? __pfx__printk+0x10/0x10
[ 444.452037][ T27] panic+0x2db/0x790
[ 444.453674][ T27] ? __pfx_panic+0x10/0x10
[ 444.455574][ T27] ? nmi_backtrace_stall_check+0x433/0x440
[ 444.458011][ T27] ? irq_work_queue+0xc3/0x140
[ 444.459905][ T27] watchdog+0x102d/0x1030
[ 444.461629][ T27] ? watchdog+0x1de/0x1030
[ 444.463694][ T27] kthread+0x70e/0x8a0
[ 444.465803][ T27] ? __pfx_watchdog+0x10/0x10
[ 444.468348][ T27] ? __pfx_kthread+0x10/0x10
[ 444.470769][ T27] ? _raw_spin_unlock_irq+0x23/0x50
[ 444.473425][ T27] ? lockdep_hardirqs_on+0x9c/0x150
[ 444.475651][ T27] ? __pfx_kthread+0x10/0x10
[ 444.477661][ T27] ret_from_fork+0x3fc/0x770
[ 444.479582][ T27] ? __pfx_ret_from_fork+0x10/0x10
[ 444.481604][ T27] ? __pfx_kthread+0x10/0x10
[ 444.483570][ T27] ret_from_fork_asm+0x1a/0x30
[ 444.485708][ T27]
[ 444.487413][ T27] Kernel Offset: disabled
[ 444.489339][ T27] Rebooting in 86400 seconds..
VM DIAGNOSIS:
17:26:22 Registers:
info registers vcpu 0
CPU#0
RAX=ffff88801b350000 RBX=0000000000000000 RCX=c51736edb308be00 RDX=0000000000000000
RSI=ffffffff81729b12 RDI=1ffffffff1c27dc4 RBP=ffffffff81729af5 RSP=ffffc900004bf390
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900004bf558 R11=ffffffff81acf6c0
R12=0000000000000002 R13=ffffffff8e13ee20 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819e3269 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88808d21c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff32d5ff000 CR3=00000000592a6000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff237720d0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff335a11b12
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff335a11b1f
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff335a11b19
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff335a11b2d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff335a11bb3
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff335a11c91
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000