syzkaller login: [ 91.913774][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:42636' (ED25519) to the list of known hosts. 2026/01/05 04:51:01 parsed 1 programs [ 218.509519][ T5354] cgroup: Unknown subsys name 'net' [ 218.571551][ T5354] cgroup: Unknown subsys name 'cpuset' [ 218.577465][ T5354] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 220.436198][ T5354] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 225.616995][ T5364] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 225.878893][ T4679] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.883017][ T4679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.886927][ T4679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.891358][ T4679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.894861][ T4679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.570902][ T3055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.574143][ T3055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.640740][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.644074][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.781470][ T5394] chnl_net:caif_netlink_parms(): no params data found [ 228.917961][ T5394] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.921616][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.924596][ T5394] bridge_slave_0: entered allmulticast mode [ 228.929205][ T5394] bridge_slave_0: entered promiscuous mode [ 228.939418][ T5394] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.948132][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.951221][ T5394] bridge_slave_1: entered allmulticast mode [ 228.967882][ T5394] bridge_slave_1: entered promiscuous mode [ 229.011439][ T5394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.023384][ T5394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.070422][ T5394] team0: Port device team_slave_0 added [ 229.079843][ T5394] team0: Port device team_slave_1 added [ 229.126023][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.138011][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.158293][ T5394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.168186][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.171044][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.197802][ T5394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.269463][ T5394] hsr_slave_0: entered promiscuous mode [ 229.272515][ T5394] hsr_slave_1: entered promiscuous mode [ 229.530591][ T5394] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.540327][ T5394] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 229.546197][ T5394] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.553507][ T5394] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.582591][ T5394] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.585649][ T5394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.589695][ T5394] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.592724][ T5394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.670614][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.675411][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.720196][ T5394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.750012][ T5394] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.762686][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.765432][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.784071][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.787317][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.092726][ T5394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.154929][ T5394] veth0_vlan: entered promiscuous mode [ 230.179979][ T5394] veth1_vlan: entered promiscuous mode [ 230.225805][ T5394] veth0_macvtap: entered promiscuous mode [ 230.241800][ T5394] veth1_macvtap: entered promiscuous mode [ 230.269014][ T5394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.292031][ T5394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.313517][ T3055] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.317136][ T3055] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.333936][ T3055] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.354422][ T3055] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.611094][ T3055] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.699862][ T3055] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.756452][ T3055] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.710047][ T3055] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.439210][ T3055] bridge_slave_1: left allmulticast mode [ 233.441860][ T3055] bridge_slave_1: left promiscuous mode [ 233.445024][ T3055] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.561345][ T3055] bridge_slave_0: left allmulticast mode [ 233.563774][ T3055] bridge_slave_0: left promiscuous mode [ 233.566261][ T3055] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.940996][ T3055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.947159][ T3055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.952490][ T3055] bond0 (unregistering): Released all slaves [ 234.039029][ T3055] hsr_slave_0: left promiscuous mode [ 234.041914][ T3055] hsr_slave_1: left promiscuous mode [ 234.044919][ T3055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.050380][ T3055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.054452][ T3055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.058094][ T3055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.074594][ T3055] veth1_macvtap: left promiscuous mode [ 234.078425][ T3055] veth0_macvtap: left promiscuous mode [ 234.081743][ T3055] veth1_vlan: left promiscuous mode [ 234.084101][ T3055] veth0_vlan: left promiscuous mode [ 234.411941][ T3055] team0 (unregistering): Port device team_slave_1 removed [ 234.437943][ T3055] team0 (unregistering): Port device team_slave_0 removed 2026/01/05 04:51:21 executed programs: 0 [ 236.723601][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.727423][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.731287][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.734834][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.739423][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.917257][ T5491] chnl_net:caif_netlink_parms(): no params data found [ 236.979452][ T5491] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.982605][ T5491] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.985734][ T5491] bridge_slave_0: entered allmulticast mode [ 236.989454][ T5491] bridge_slave_0: entered promiscuous mode [ 236.993565][ T5491] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.996269][ T5491] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.999539][ T5491] bridge_slave_1: entered allmulticast mode [ 237.002832][ T5491] bridge_slave_1: entered promiscuous mode [ 237.026446][ T5491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.032254][ T5491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.056640][ T5491] team0: Port device team_slave_0 added [ 237.061075][ T5491] team0: Port device team_slave_1 added [ 237.080436][ T5491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.083342][ T5491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.094961][ T5491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.102127][ T5491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.105077][ T5491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.116056][ T5491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.151308][ T5491] hsr_slave_0: entered promiscuous mode [ 237.154601][ T5491] hsr_slave_1: entered promiscuous mode [ 237.590042][ T5491] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 237.612089][ T5491] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 237.622487][ T5491] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 237.641096][ T5491] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 237.691311][ T5491] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.694532][ T5491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.697999][ T5491] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.701197][ T5491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.815625][ T5491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.837148][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.849162][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.859145][ T5491] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.876518][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.879708][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.902161][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.905377][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.239142][ T5491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.306467][ T5491] veth0_vlan: entered promiscuous mode [ 238.328147][ T5491] veth1_vlan: entered promiscuous mode [ 238.370271][ T5491] veth0_macvtap: entered promiscuous mode [ 238.375281][ T5491] veth1_macvtap: entered promiscuous mode [ 238.412265][ T5491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.425890][ T5491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.444586][ T3000] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.462320][ T3000] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.509781][ T3000] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.515551][ T3000] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.652313][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.655717][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.733471][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.736906][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.789885][ T46] Bluetooth: hci0: command tx timeout [ 239.412384][ T5536] loop0: detected capacity change from 0 to 32768 [ 240.867864][ T46] Bluetooth: hci0: command tx timeout [ 242.948496][ T46] Bluetooth: hci0: command tx timeout [ 245.027735][ T46] Bluetooth: hci0: command tx timeout [ 253.955770][ T4679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.960013][ T4679] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.963452][ T4679] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.966997][ T4679] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.971467][ T4679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.553082][ T5555] chnl_net:caif_netlink_parms(): no params data found [ 254.759502][ T5555] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.768539][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.771862][ T5555] bridge_slave_0: entered allmulticast mode [ 254.790509][ T5555] bridge_slave_0: entered promiscuous mode [ 254.794824][ T5555] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.807837][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.811248][ T5555] bridge_slave_1: entered allmulticast mode [ 254.815330][ T5555] bridge_slave_1: entered promiscuous mode [ 254.879273][ T5555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.888371][ T5555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.940619][ T5555] team0: Port device team_slave_0 added [ 254.944688][ T5555] team0: Port device team_slave_1 added [ 254.990035][ T5555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.993225][ T5555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.018776][ T5555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.037798][ T5555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.041025][ T5555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.067682][ T5555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.130218][ T5555] hsr_slave_0: entered promiscuous mode [ 255.138585][ T5555] hsr_slave_1: entered promiscuous mode [ 255.148172][ T5555] debugfs: 'hsr0' already exists in 'hsr' [ 255.150685][ T5555] Cannot create hsr debugfs directory [ 255.441499][ T5555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 255.461005][ T5555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.468276][ T5555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.480130][ T5555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 255.612121][ T5555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.634495][ T5555] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.653377][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.656456][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.676018][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.679309][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.980766][ T5555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.990155][ T4679] Bluetooth: hci1: command tx timeout [ 256.044939][ T5555] veth0_vlan: entered promiscuous mode [ 256.062489][ T5555] veth1_vlan: entered promiscuous mode [ 256.103812][ T5555] veth0_macvtap: entered promiscuous mode [ 256.121532][ T5555] veth1_macvtap: entered promiscuous mode [ 256.144166][ T5555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.163439][ T5555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.181256][ T1038] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.200150][ T1038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.231491][ T1038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.235375][ T1038] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.328801][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.332138][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.415609][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.420697][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/05 04:51:41 executed programs: 3 [ 258.068437][ T4679] Bluetooth: hci1: command tx timeout [ 260.147711][ T4679] Bluetooth: hci1: command tx timeout 2026/01/05 04:51:47 executed programs: 14 [ 262.227924][ T4679] Bluetooth: hci1: command tx timeout [ 265.999236][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.002642][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 2026/01/05 04:51:52 executed programs: 25 2026/01/05 04:51:57 executed programs: 37 2026/01/05 04:52:02 executed programs: 48 2026/01/05 04:52:08 executed programs: 59 2026/01/05 04:52:13 executed programs: 70 2026/01/05 04:52:18 executed programs: 81 2026/01/05 04:52:23 executed programs: 92 2026/01/05 04:52:29 executed programs: 104 2026/01/05 04:52:34 executed programs: 116 2026/01/05 04:52:39 executed programs: 127 2026/01/05 04:52:44 executed programs: 138 2026/01/05 04:52:49 executed programs: 149 [ 327.434300][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.437157][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 2026/01/05 04:52:55 executed programs: 161 2026/01/05 04:53:00 executed programs: 172 2026/01/05 04:53:05 executed programs: 184 2026/01/05 04:53:11 executed programs: 196 2026/01/05 04:53:16 executed programs: 207 2026/01/05 04:53:21 executed programs: 219 [ 360.239079][ T46] Bluetooth: hci0: command 0x0406 tx timeout 2026/01/05 04:53:27 executed programs: 231 2026/01/05 04:53:32 executed programs: 243 2026/01/05 04:53:37 executed programs: 255 2026/01/05 04:53:43 executed programs: 267 [ 380.708854][ T4679] Bluetooth: hci1: command 0x0406 tx timeout 2026/01/05 04:53:48 executed programs: 279 2026/01/05 04:53:53 executed programs: 291 [ 388.880355][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.883639][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 2026/01/05 04:53:59 executed programs: 303 2026/01/05 04:54:04 executed programs: 315 2026/01/05 04:54:09 executed programs: 327 2026/01/05 04:54:15 executed programs: 339 2026/01/05 04:54:20 executed programs: 350 2026/01/05 04:54:25 executed programs: 361 [ 423.429012][ T27] INFO: task kworker/u4:16:3000 blocked for more than 143 seconds. [ 423.432383][ T27] Not tainted syzkaller #0 [ 423.434511][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.447698][ T27] task:kworker/u4:16 state:D stack:24568 pid:3000 tgid:3000 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 423.452430][ T27] Workqueue: writeback wb_workfn (flush-7:0) [ 423.455215][ T27] Call Trace: [ 423.456708][ T27] [ 423.478050][ T27] __schedule+0x149b/0x4fd0 [ 423.480129][ T27] ? blk_mq_flush_plug_list+0x48b/0x550 [ 423.482522][ T27] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 423.484882][ T27] ? __blk_flush_plug+0x3fc/0x4b0 [ 423.486987][ T27] ? __pfx___schedule+0x10/0x10 [ 423.516265][ T27] ? schedule+0x91/0x360 [ 423.527710][ T27] schedule+0x165/0x360 [ 423.529506][ T27] schedule_preempt_disabled+0x13/0x30 [ 423.531677][ T27] __mutex_lock+0x7e6/0x1350 [ 423.533757][ T27] ? __mutex_lock+0x5bb/0x1350 [ 423.535768][ T27] ? jfs_commit_inode+0x1ca/0x530 [ 423.557784][ T27] ? __pfx___mutex_lock+0x10/0x10 [ 423.560028][ T27] ? __lock_acquire+0x6b6/0x2cf0 [ 423.562130][ T27] jfs_commit_inode+0x1ca/0x530 [ 423.564117][ T27] ? __pfx_jfs_commit_inode+0x10/0x10 [ 423.566505][ T27] jfs_write_inode+0x145/0x220 [ 423.588036][ T27] __writeback_single_inode+0x7e1/0x1240 [ 423.590455][ T27] writeback_sb_inodes+0x93a/0x1870 [ 423.592612][ T27] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 423.609031][ T27] ? __pfx_down_read_trylock+0x10/0x10 [ 423.611618][ T27] ? __pfx___up_read+0x10/0x10 [ 423.613735][ T27] __writeback_inodes_wb+0x111/0x240 [ 423.636542][ T27] wb_writeback+0x43f/0xaa0 [ 423.638777][ T27] ? queue_io+0x211/0x450 [ 423.640789][ T27] ? __pfx_wb_writeback+0x10/0x10 [ 423.642721][ T27] ? do_raw_spin_lock+0x121/0x290 [ 423.644760][ T27] wb_workfn+0x8ee/0xed0 [ 423.646437][ T27] ? __pfx_wb_workfn+0x10/0x10 [ 423.667925][ T27] ? __pfx___schedule+0x10/0x10 [ 423.670329][ T27] ? do_raw_spin_unlock+0x4d/0x240 [ 423.672536][ T27] ? process_scheduled_works+0x9ef/0x1770 [ 423.675144][ T27] ? preempt_schedule_thunk+0x16/0x30 [ 423.677381][ T27] ? process_scheduled_works+0x9ef/0x1770 [ 423.711314][ T27] ? process_scheduled_works+0x9ef/0x1770 [ 423.713729][ T27] process_scheduled_works+0xad1/0x1770 [ 423.716172][ T27] ? __pfx_process_scheduled_works+0x10/0x10 [ 423.727665][ T27] ? do_raw_spin_lock+0x121/0x290 [ 423.729866][ T27] worker_thread+0x8a0/0xda0 [ 423.731822][ T27] kthread+0x711/0x8a0 [ 423.733467][ T27] ? __pfx_worker_thread+0x10/0x10 [ 423.735629][ T27] ? __pfx_kthread+0x10/0x10 [ 423.737432][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 423.768846][ T27] ? __pfx_kthread+0x10/0x10 [ 423.777849][ T27] ret_from_fork+0x510/0xa50 [ 423.779910][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 423.787700][ T27] ? __switch_to+0xc9e/0x1480 [ 423.790490][ T27] ? __pfx_kthread+0x10/0x10 [ 423.793233][ T27] ret_from_fork_asm+0x1a/0x30 [ 423.813782][ T27] [ 423.818306][ T27] [ 423.818306][ T27] Showing all locks held in the system: [ 423.821607][ T27] 1 lock held by khungtaskd/27: [ 423.823879][ T27] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 423.867706][ T27] 4 locks held by kworker/u4:16/3000: [ 423.869948][ T27] #0: ffff888030aa8148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 423.874881][ T27] #1: ffffc90008b6fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 423.908203][ T27] #2: ffff888030b3a0e0 (&type->s_umount_key#55){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 423.912447][ T27] #3: ffff888046a8af90 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: jfs_commit_inode+0x1ca/0x530 [ 423.937794][ T27] 2 locks held by getty/5119: [ 423.940096][ T27] #0: ffff8880428fc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 423.944266][ T27] #1: ffffc9000194e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 423.968136][ T27] 4 locks held by syz.0.17/5536: [ 423.970424][ T27] 2 locks held by syz.1.383/5967: [ 423.972873][ T27] [ 423.974000][ T27] ============================================= [ 423.974000][ T27] [ 423.977449][ T27] NMI backtrace for cpu 0 [ 423.977460][ T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 423.977470][ T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 423.977477][ T27] Call Trace: [ 423.977483][ T27] [ 423.977489][ T27] dump_stack_lvl+0xe8/0x150 [ 423.977506][ T27] nmi_cpu_backtrace+0x274/0x2d0 [ 423.977520][ T27] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 423.977534][ T27] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 423.977543][ T27] sys_info+0x135/0x170 [ 423.977550][ T27] watchdog+0xf95/0xfe0 [ 423.977560][ T27] ? watchdog+0x20a/0xfe0 [ 423.977584][ T27] kthread+0x711/0x8a0 [ 423.977596][ T27] ? __pfx_watchdog+0x10/0x10 [ 423.977604][ T27] ? __pfx_kthread+0x10/0x10 [ 423.977613][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 423.977622][ T27] ? __pfx_kthread+0x10/0x10 [ 423.977630][ T27] ret_from_fork+0x510/0xa50 [ 423.977638][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 423.977643][ T27] ? __switch_to+0xc9e/0x1480 [ 423.977653][ T27] ? __pfx_kthread+0x10/0x10 [ 423.977661][ T27] ret_from_fork_asm+0x1a/0x30 [ 423.977677][ T27] [ 424.150812][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 424.153921][ T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 424.158482][ T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 424.162572][ T27] Call Trace: [ 424.164095][ T27] [ 424.165721][ T27] vpanic+0x1e0/0x670 [ 424.167751][ T27] panic+0xb9/0xc0 [ 424.169504][ T27] ? __pfx_panic+0x10/0x10 [ 424.171499][ T27] ? preempt_schedule_thunk+0x16/0x30 [ 424.173881][ T27] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 424.176562][ T27] watchdog+0xfdf/0xfe0 [ 424.178424][ T27] ? watchdog+0x20a/0xfe0 [ 424.180365][ T27] kthread+0x711/0x8a0 [ 424.182240][ T27] ? __pfx_watchdog+0x10/0x10 [ 424.184395][ T27] ? __pfx_kthread+0x10/0x10 [ 424.186486][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 424.188718][ T27] ? __pfx_kthread+0x10/0x10 [ 424.190664][ T27] ret_from_fork+0x510/0xa50 [ 424.192671][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 424.194756][ T27] ? __switch_to+0xc9e/0x1480 [ 424.196892][ T27] ? __pfx_kthread+0x10/0x10 [ 424.198767][ T27] ret_from_fork_asm+0x1a/0x30 [ 424.200814][ T27] [ 424.202496][ T27] Kernel Offset: disabled [ 424.204358][ T27] Rebooting in 86400 seconds..