syzkaller login: [ 91.944100][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:6979' (ED25519) to the list of known hosts. 2025/07/03 15:35:40 ignoring optional flag "sandboxArg"="0" 2025/07/03 15:35:41 parsed 1 programs [ 239.610677][ T5344] cgroup: Unknown subsys name 'net' [ 239.698124][ T5344] cgroup: Unknown subsys name 'cpuset' [ 239.705184][ T5344] cgroup: Unknown subsys name 'rlimit' [ 241.428475][ T5344] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 245.318144][ T5352] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 246.037747][ T5363] chnl_net:caif_netlink_parms(): no params data found [ 246.108785][ T5363] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.112546][ T5363] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.116227][ T5363] bridge_slave_0: entered allmulticast mode [ 246.120215][ T5363] bridge_slave_0: entered promiscuous mode [ 246.126600][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.129775][ T5363] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.132898][ T5363] bridge_slave_1: entered allmulticast mode [ 246.137258][ T5363] bridge_slave_1: entered promiscuous mode [ 246.164381][ T5363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.170929][ T5363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.198502][ T5363] team0: Port device team_slave_0 added [ 246.204523][ T5363] team0: Port device team_slave_1 added [ 246.226325][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.229451][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.241041][ T5363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.248451][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.251423][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.262994][ T5363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.301588][ T5363] hsr_slave_0: entered promiscuous mode [ 246.305653][ T5363] hsr_slave_1: entered promiscuous mode [ 246.462239][ T5363] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 246.471047][ T5363] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 246.478043][ T5363] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 246.485102][ T5363] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 246.511930][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.515249][ T5363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.519216][ T5363] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.522379][ T5363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.581733][ T5363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.596304][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.600404][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.614987][ T5363] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.623515][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.626844][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.643109][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.646854][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.831379][ T5363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.870011][ T5363] veth0_vlan: entered promiscuous mode [ 246.879541][ T5363] veth1_vlan: entered promiscuous mode [ 246.907680][ T5363] veth0_macvtap: entered promiscuous mode [ 246.913148][ T5363] veth1_macvtap: entered promiscuous mode [ 246.929838][ T5363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.941059][ T5363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.949454][ T5363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.953365][ T5363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.958299][ T5363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.962342][ T5363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.143278][ T1040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.199000][ T1040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.246168][ T1040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.312236][ T1040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.475091][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.478763][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.509290][ T1049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.512939][ T1049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.594369][ T5415] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.599474][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.603501][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.608256][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.611834][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.725475][ T1040] bridge_slave_1: left allmulticast mode [ 249.729202][ T1040] bridge_slave_1: left promiscuous mode [ 249.732435][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.756550][ T1040] bridge_slave_0: left allmulticast mode [ 249.759056][ T1040] bridge_slave_0: left promiscuous mode [ 249.761691][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.302537][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.316282][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.327652][ T1040] bond0 (unregistering): Released all slaves [ 250.488949][ T1040] hsr_slave_0: left promiscuous mode [ 250.492057][ T1040] hsr_slave_1: left promiscuous mode [ 250.505335][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.508650][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.523886][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.527135][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.547578][ T1040] veth1_macvtap: left promiscuous mode [ 250.550245][ T1040] veth0_macvtap: left promiscuous mode [ 250.552909][ T1040] veth1_vlan: left promiscuous mode [ 250.564007][ T1040] veth0_vlan: left promiscuous mode [ 250.903374][ T1040] team0 (unregistering): Port device team_slave_1 removed [ 250.926377][ T1040] team0 (unregistering): Port device team_slave_0 removed 2025/07/03 15:35:56 executed programs: 0 [ 252.401950][ T4668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.406594][ T4668] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.410893][ T4668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.415040][ T4668] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.418505][ T4668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.152966][ T5460] chnl_net:caif_netlink_parms(): no params data found [ 253.388000][ T5460] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.395399][ T5460] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.398467][ T5460] bridge_slave_0: entered allmulticast mode [ 253.413984][ T5460] bridge_slave_0: entered promiscuous mode [ 253.420112][ T5460] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.423352][ T5460] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.436988][ T5460] bridge_slave_1: entered allmulticast mode [ 253.442480][ T5460] bridge_slave_1: entered promiscuous mode [ 253.518642][ T5460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.536392][ T5460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.582338][ T5460] team0: Port device team_slave_0 added [ 253.595913][ T5460] team0: Port device team_slave_1 added [ 253.632733][ T5460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.643925][ T5460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.653575][ T5460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.688243][ T5460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.691757][ T5460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.715080][ T5460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.779431][ T5460] hsr_slave_0: entered promiscuous mode [ 253.796037][ T5460] hsr_slave_1: entered promiscuous mode [ 254.430174][ T5460] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 254.442774][ T5460] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.457521][ T5460] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 254.475736][ T5460] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 254.496043][ T4668] Bluetooth: hci0: command tx timeout [ 254.629701][ T5460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.662493][ T5460] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.679544][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.682665][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.710780][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.714109][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.067491][ T5460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.146520][ T5460] veth0_vlan: entered promiscuous mode [ 255.170519][ T5460] veth1_vlan: entered promiscuous mode [ 255.222227][ T5460] veth0_macvtap: entered promiscuous mode [ 255.238375][ T5460] veth1_macvtap: entered promiscuous mode [ 255.268910][ T5460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.288969][ T5460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.306294][ T5460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.309984][ T5460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.313547][ T5460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.331241][ T5460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.446590][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.449885][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.516734][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.521140][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.010850][ T5520] loop0: detected capacity change from 0 to 32768 [ 256.576072][ T4668] Bluetooth: hci0: command tx timeout [ 258.654050][ T4668] Bluetooth: hci0: command tx timeout [ 260.734423][ T4668] Bluetooth: hci0: command tx timeout [ 260.898475][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.901413][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.673391][ T45] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.678236][ T45] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.681709][ T45] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.694529][ T45] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.698224][ T45] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.366598][ T5542] chnl_net:caif_netlink_parms(): no params data found [ 271.486636][ T5542] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.489678][ T5542] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.492630][ T5542] bridge_slave_0: entered allmulticast mode [ 271.505687][ T5542] bridge_slave_0: entered promiscuous mode [ 271.515026][ T5542] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.518403][ T5542] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.521603][ T5542] bridge_slave_1: entered allmulticast mode [ 271.535607][ T5542] bridge_slave_1: entered promiscuous mode [ 271.585922][ T5542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.594453][ T5542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.641260][ T5542] team0: Port device team_slave_0 added [ 271.657113][ T5542] team0: Port device team_slave_1 added [ 271.700037][ T5542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.703211][ T5542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.734209][ T5542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.746155][ T5542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.749354][ T5542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.784918][ T5542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.851676][ T5542] hsr_slave_0: entered promiscuous mode [ 271.866923][ T5542] hsr_slave_1: entered promiscuous mode [ 271.870204][ T5542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.883840][ T5542] Cannot create hsr debugfs directory [ 272.137419][ T5542] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 272.158649][ T5542] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 272.164817][ T5542] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 272.176314][ T5542] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 272.221171][ T5542] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.224600][ T5542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.228107][ T5542] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.231179][ T5542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.335006][ T5542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.338116][ T1043] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.342095][ T1043] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.375131][ T5542] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.386186][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.389034][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.425782][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.429009][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.711246][ T5542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.734624][ T45] Bluetooth: hci1: command tx timeout [ 272.780643][ T5542] veth0_vlan: entered promiscuous mode [ 272.797801][ T5542] veth1_vlan: entered promiscuous mode [ 272.842898][ T5542] veth0_macvtap: entered promiscuous mode [ 272.858985][ T5542] veth1_macvtap: entered promiscuous mode [ 272.885685][ T5542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.909252][ T5542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.926286][ T5542] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.930447][ T5542] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.943952][ T5542] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.948018][ T5542] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.078456][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.081981][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.131731][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.136329][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/03 15:36:17 executed programs: 3 [ 274.813885][ T45] Bluetooth: hci1: command tx timeout [ 276.896119][ T45] Bluetooth: hci1: command tx timeout 2025/07/03 15:36:23 executed programs: 13 [ 278.974249][ T45] Bluetooth: hci1: command tx timeout 2025/07/03 15:36:28 executed programs: 23 2025/07/03 15:36:33 executed programs: 34 2025/07/03 15:36:39 executed programs: 45 2025/07/03 15:36:44 executed programs: 55 2025/07/03 15:36:49 executed programs: 65 2025/07/03 15:36:54 executed programs: 75 2025/07/03 15:36:59 executed programs: 85 2025/07/03 15:37:04 executed programs: 96 [ 322.345725][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.349934][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 2025/07/03 15:37:09 executed programs: 106 2025/07/03 15:37:14 executed programs: 116 2025/07/03 15:37:20 executed programs: 127 2025/07/03 15:37:25 executed programs: 138 2025/07/03 15:37:30 executed programs: 148 2025/07/03 15:37:36 executed programs: 159 2025/07/03 15:37:41 executed programs: 169 2025/07/03 15:37:46 executed programs: 180 2025/07/03 15:37:51 executed programs: 191 2025/07/03 15:37:57 executed programs: 202 [ 375.616256][ T4668] Bluetooth: hci0: command 0x0406 tx timeout 2025/07/03 15:38:03 executed programs: 213 [ 383.780086][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.782654][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 2025/07/03 15:38:08 executed programs: 224 2025/07/03 15:38:13 executed programs: 235 2025/07/03 15:38:19 executed programs: 246 [ 396.094932][ T4668] Bluetooth: hci1: command 0x0406 tx timeout 2025/07/03 15:38:24 executed programs: 257 2025/07/03 15:38:30 executed programs: 268 2025/07/03 15:38:35 executed programs: 279 2025/07/03 15:38:40 executed programs: 289 2025/07/03 15:38:46 executed programs: 300 2025/07/03 15:38:51 executed programs: 310 2025/07/03 15:38:56 executed programs: 321 2025/07/03 15:39:01 executed programs: 331 2025/07/03 15:39:06 executed programs: 341 [ 443.936158][ T26] INFO: task kworker/u4:7:1040 blocked for more than 143 seconds. [ 443.939415][ T26] Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 [ 443.942398][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 443.957826][ T26] task:kworker/u4:7 state:D stack:22552 pid:1040 tgid:1040 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 443.983836][ T26] Workqueue: writeback wb_workfn (flush-7:0) [ 443.986423][ T26] Call Trace: [ 443.987760][ T26] [ 443.988997][ T26] __schedule+0x16f5/0x4d00 [ 443.990883][ T26] ? blk_mq_flush_plug_list+0x48b/0x550 [ 443.993349][ T26] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 444.017079][ T26] ? schedule+0x165/0x360 [ 444.019159][ T26] ? __pfx___schedule+0x10/0x10 [ 444.021219][ T26] ? schedule+0x91/0x360 [ 444.023166][ T26] schedule+0x165/0x360 [ 444.044155][ T26] schedule_preempt_disabled+0x13/0x30 [ 444.055764][ T26] __mutex_lock+0x724/0xe80 [ 444.057963][ T26] ? __mutex_lock+0x51b/0xe80 [ 444.060162][ T26] ? jfs_commit_inode+0x1ca/0x530 [ 444.062273][ T26] ? __pfx___mutex_lock+0x10/0x10 [ 444.084473][ T26] ? metapage_writepages+0xae/0x100 [ 444.086878][ T26] ? __lock_acquire+0xab9/0xd20 [ 444.089198][ T26] jfs_commit_inode+0x1ca/0x530 [ 444.091454][ T26] ? __pfx_jfs_commit_inode+0x10/0x10 [ 444.114854][ T26] jfs_write_inode+0x145/0x220 [ 444.117146][ T26] __writeback_single_inode+0x6f1/0xff0 [ 444.119340][ T26] writeback_sb_inodes+0x6b5/0x1000 [ 444.121571][ T26] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 444.144465][ T26] ? __pfx___up_read+0x10/0x10 [ 444.146178][ T26] __writeback_inodes_wb+0x111/0x240 [ 444.148169][ T26] wb_writeback+0x44f/0xaf0 [ 444.149954][ T26] ? queue_io+0x3c1/0x590 [ 444.151435][ T26] ? __pfx_wb_writeback+0x10/0x10 [ 444.153377][ T26] wb_workfn+0xaef/0xef0 [ 444.184807][ T26] ? __pfx_wb_workfn+0x10/0x10 [ 444.187371][ T26] ? __lock_acquire+0xab9/0xd20 [ 444.189840][ T26] ? process_scheduled_works+0x9ef/0x17b0 [ 444.192764][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.213770][ T26] ? process_scheduled_works+0x9ef/0x17b0 [ 444.216090][ T26] ? process_scheduled_works+0x9ef/0x17b0 [ 444.224718][ T26] process_scheduled_works+0xade/0x17b0 [ 444.227238][ T26] ? __pfx_process_scheduled_works+0x10/0x10 [ 444.229868][ T26] worker_thread+0x8a0/0xda0 [ 444.231948][ T26] kthread+0x70e/0x8a0 [ 444.254469][ T26] ? __pfx_worker_thread+0x10/0x10 [ 444.256729][ T26] ? __pfx_kthread+0x10/0x10 [ 444.258809][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.261186][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.263579][ T26] ? __pfx_kthread+0x10/0x10 [ 444.294839][ T26] ret_from_fork+0x3fc/0x770 [ 444.297006][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 444.299357][ T26] ? __pfx_kthread+0x10/0x10 [ 444.301524][ T26] ret_from_fork_asm+0x1a/0x30 [ 444.303574][ T26] [ 444.326352][ T26] [ 444.326352][ T26] Showing all locks held in the system: [ 444.329747][ T26] 1 lock held by khungtaskd/26: [ 444.331968][ T26] #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 444.364475][ T26] 4 locks held by kworker/u4:7/1040: [ 444.366945][ T26] #0: ffff88801bf16148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 444.371569][ T26] #1: ffffc90002587bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 444.404833][ T26] #2: ffff88804e00c0e0 (&type->s_umount_key#54){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 444.425347][ T26] #3: ffff8880420aafe0 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: jfs_commit_inode+0x1ca/0x530 [ 444.430054][ T26] 2 locks held by getty/5108: [ 444.432109][ T26] #0: ffff888037fc90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 444.463880][ T26] #1: ffffc9000018e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 444.468547][ T26] 4 locks held by syz.0.16/5520: [ 444.470749][ T26] 1 lock held by syz.1.358/5939: [ 444.485692][ T26] [ 444.486804][ T26] ============================================= [ 444.486804][ T26] [ 444.490351][ T26] NMI backtrace for cpu 0 [ 444.490361][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 444.490372][ T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 444.490378][ T26] Call Trace: [ 444.490385][ T26] [ 444.490390][ T26] dump_stack_lvl+0x189/0x250 [ 444.490408][ T26] ? __wake_up_klogd+0xd9/0x110 [ 444.490421][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.490435][ T26] ? __pfx__printk+0x10/0x10 [ 444.490453][ T26] nmi_cpu_backtrace+0x39e/0x3d0 [ 444.490466][ T26] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 444.490476][ T26] ? _printk+0xcf/0x120 [ 444.490489][ T26] ? __pfx__printk+0x10/0x10 [ 444.490500][ T26] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 444.490512][ T26] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 444.490520][ T26] watchdog+0xfee/0x1030 [ 444.490530][ T26] ? watchdog+0x1de/0x1030 [ 444.490540][ T26] kthread+0x70e/0x8a0 [ 444.490549][ T26] ? __pfx_watchdog+0x10/0x10 [ 444.490558][ T26] ? __pfx_kthread+0x10/0x10 [ 444.490569][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.490582][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.490593][ T26] ? __pfx_kthread+0x10/0x10 [ 444.490605][ T26] ret_from_fork+0x3fc/0x770 [ 444.490620][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 444.490637][ T26] ? __pfx_kthread+0x10/0x10 [ 444.490653][ T26] ret_from_fork_asm+0x1a/0x30 [ 444.490671][ T26] [ 444.490677][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 444.557487][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 444.562187][ T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 444.567011][ T26] Call Trace: [ 444.568523][ T26] [ 444.569849][ T26] dump_stack_lvl+0x99/0x250 [ 444.571921][ T26] ? __asan_memcpy+0x40/0x70 [ 444.574012][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.576347][ T26] ? __pfx__printk+0x10/0x10 [ 444.578320][ T26] panic+0x2db/0x790 [ 444.580052][ T26] ? __pfx_panic+0x10/0x10 [ 444.581968][ T26] ? nmi_backtrace_stall_check+0x433/0x440 [ 444.584662][ T26] ? irq_work_queue+0xc3/0x140 [ 444.586903][ T26] watchdog+0x102d/0x1030 [ 444.588821][ T26] ? watchdog+0x1de/0x1030 [ 444.590889][ T26] kthread+0x70e/0x8a0 [ 444.592747][ T26] ? __pfx_watchdog+0x10/0x10 [ 444.594899][ T26] ? __pfx_kthread+0x10/0x10 [ 444.596935][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.599194][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.601429][ T26] ? __pfx_kthread+0x10/0x10 [ 444.603445][ T26] ret_from_fork+0x3fc/0x770 [ 444.605498][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 444.607769][ T26] ? __pfx_kthread+0x10/0x10 [ 444.609839][ T26] ret_from_fork_asm+0x1a/0x30 [ 444.611994][ T26] [ 444.613717][ T26] Kernel Offset: disabled [ 444.615702][ T26] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:39:08 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff820bebe7 RBX=ffff888042b952a0 RCX=dffffc0000000000 RDX=ffff88803da92440 RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc9000cdbfdd0 RSP=ffffc9000cdbfbd8 R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff520019b7f5c R12=0000000000000000 R13=ffff888042b95290 R14=1ffff11008572a52 R15=0000000000000000 RIP=ffffffff81c05108 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557bd94500 ffffffff 00c00000 GS =0000 ffff88808d250000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007efcef3b3000 CR3=00000000338b6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebd2bcaf0 00007ffebd2bcad0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebd2bcc30 00007ffebd2bcab0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebd2bcaf0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebd2bcc30 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebd2bcc30 00007ffebd2bcab0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffebd2bcaf0 00007ffebd2bcad0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efcf8011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efcf8011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 212938934a51f969 b90846fd543d5a9b 7c8ff4fecff007fd 671c6fcfddec9c78 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000