syzkaller login: [ 91.820348][ T50] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:9748' (ED25519) to the list of known hosts. 2025/07/16 02:16:01 ignoring optional flag "sandboxArg"="0" 2025/07/16 02:16:03 parsed 1 programs [ 240.468151][ T5362] cgroup: Unknown subsys name 'net' [ 240.538292][ T5362] cgroup: Unknown subsys name 'cpuset' [ 240.544133][ T5362] cgroup: Unknown subsys name 'rlimit' [ 242.144710][ T5362] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 246.397603][ T5371] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 248.455657][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.459325][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.494246][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.497505][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.375430][ T5425] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.379443][ T5425] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.386514][ T5425] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.390114][ T5425] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.394207][ T5425] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.665711][ T5441] chnl_net:caif_netlink_parms(): no params data found [ 250.741343][ T5441] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.745372][ T5441] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.748865][ T5441] bridge_slave_0: entered allmulticast mode [ 250.753983][ T5441] bridge_slave_0: entered promiscuous mode [ 250.759896][ T5441] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.763678][ T5441] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.767219][ T5441] bridge_slave_1: entered allmulticast mode [ 250.772784][ T5441] bridge_slave_1: entered promiscuous mode [ 250.818499][ T5441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.826374][ T5441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.859114][ T5441] team0: Port device team_slave_0 added [ 250.864385][ T5441] team0: Port device team_slave_1 added [ 250.892836][ T5441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.896102][ T5441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.908853][ T5441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.916736][ T5441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.920023][ T5441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.932191][ T5441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.974265][ T5441] hsr_slave_0: entered promiscuous mode [ 250.978049][ T5441] hsr_slave_1: entered promiscuous mode [ 251.149833][ T5441] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.162443][ T5441] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.172526][ T5441] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 251.179568][ T5441] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 251.218314][ T5441] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.221907][ T5441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.226059][ T5441] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.229851][ T5441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.298858][ T5441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.317087][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.321572][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.336427][ T5441] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.348112][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.351895][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.365513][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.368482][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.584350][ T5441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.626389][ T5441] veth0_vlan: entered promiscuous mode [ 251.639111][ T5441] veth1_vlan: entered promiscuous mode [ 251.674274][ T5441] veth0_macvtap: entered promiscuous mode [ 251.680687][ T5441] veth1_macvtap: entered promiscuous mode [ 251.700992][ T5441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.715659][ T5441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.724727][ T5441] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.728957][ T5441] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.741212][ T5441] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.746832][ T5441] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.929810][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.985252][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.037520][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.085125][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/07/16 02:16:17 executed programs: 0 [ 252.467058][ T5425] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.475119][ T5425] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.479009][ T5425] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.485058][ T5425] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.488675][ T5425] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.716995][ T5468] chnl_net:caif_netlink_parms(): no params data found [ 252.791151][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.796179][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.799340][ T5468] bridge_slave_0: entered allmulticast mode [ 252.804337][ T5468] bridge_slave_0: entered promiscuous mode [ 252.808760][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.813232][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.816554][ T5468] bridge_slave_1: entered allmulticast mode [ 252.820473][ T5468] bridge_slave_1: entered promiscuous mode [ 252.846860][ T5468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.858479][ T5468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.885204][ T5468] team0: Port device team_slave_0 added [ 252.891101][ T5468] team0: Port device team_slave_1 added [ 252.915782][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.919138][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.933510][ T5468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.942665][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.945500][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.957915][ T5468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.995125][ T5468] hsr_slave_0: entered promiscuous mode [ 252.998498][ T5468] hsr_slave_1: entered promiscuous mode [ 253.002414][ T5468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.006022][ T5468] Cannot create hsr debugfs directory [ 254.533030][ T5425] Bluetooth: hci0: command tx timeout [ 254.545910][ T12] bridge_slave_1: left allmulticast mode [ 254.548149][ T12] bridge_slave_1: left promiscuous mode [ 254.551135][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.574665][ T12] bridge_slave_0: left allmulticast mode [ 254.577006][ T12] bridge_slave_0: left promiscuous mode [ 254.579562][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.000026][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.006632][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.011273][ T12] bond0 (unregistering): Released all slaves [ 255.178400][ T12] hsr_slave_0: left promiscuous mode [ 255.185744][ T12] hsr_slave_1: left promiscuous mode [ 255.188601][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.193953][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.198916][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.207939][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.219989][ T12] veth1_macvtap: left promiscuous mode [ 255.223629][ T12] veth0_macvtap: left promiscuous mode [ 255.226965][ T12] veth1_vlan: left promiscuous mode [ 255.230137][ T12] veth0_vlan: left promiscuous mode [ 255.557398][ T12] team0 (unregistering): Port device team_slave_1 removed [ 255.579441][ T12] team0 (unregistering): Port device team_slave_0 removed [ 256.025299][ T5468] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 256.050797][ T5468] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 256.072869][ T5468] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 256.103070][ T5468] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 256.397005][ T5468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.423318][ T5468] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.449776][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.453024][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.468310][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.471842][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.509840][ T5468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.614416][ T5425] Bluetooth: hci0: command tx timeout [ 256.667686][ T5468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.708659][ T5468] veth0_vlan: entered promiscuous mode [ 256.718357][ T5468] veth1_vlan: entered promiscuous mode [ 256.746507][ T5468] veth0_macvtap: entered promiscuous mode [ 256.753085][ T5468] veth1_macvtap: entered promiscuous mode [ 256.767939][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.783260][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.791011][ T5468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.796366][ T5468] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.800336][ T5468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.806914][ T5468] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.887256][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.890682][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.929000][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.938468][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.209791][ T5501] loop0: detected capacity change from 0 to 32768 [ 258.691798][ T5425] Bluetooth: hci0: command tx timeout [ 260.774290][ T5425] Bluetooth: hci0: command tx timeout [ 260.778735][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.783166][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.078017][ T4688] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.083721][ T4688] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.087285][ T4688] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.090823][ T4688] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.094434][ T4688] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.858251][ T5503] chnl_net:caif_netlink_parms(): no params data found [ 272.995418][ T5503] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.002173][ T5503] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.005414][ T5503] bridge_slave_0: entered allmulticast mode [ 273.015752][ T5503] bridge_slave_0: entered promiscuous mode [ 273.033428][ T5503] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.036751][ T5503] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.040024][ T5503] bridge_slave_1: entered allmulticast mode [ 273.053650][ T5503] bridge_slave_1: entered promiscuous mode [ 273.106836][ T5503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.125274][ T5503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.183754][ T5503] team0: Port device team_slave_0 added [ 273.189054][ T5503] team0: Port device team_slave_1 added [ 273.235629][ T5503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.238708][ T5503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.271664][ T5503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.278250][ T5503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.281147][ T5503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.312934][ T5503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.388826][ T5503] hsr_slave_0: entered promiscuous mode [ 273.402466][ T5503] hsr_slave_1: entered promiscuous mode [ 273.739485][ T5503] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 273.754945][ T5503] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 273.773326][ T5503] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 273.783270][ T5503] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.950842][ T5503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.986259][ T5503] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.008096][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.012204][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.046241][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.049441][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.132929][ T4688] Bluetooth: hci1: command tx timeout [ 274.396194][ T5503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.465067][ T5503] veth0_vlan: entered promiscuous mode [ 274.486334][ T5503] veth1_vlan: entered promiscuous mode [ 274.530622][ T5503] veth0_macvtap: entered promiscuous mode [ 274.550480][ T5503] veth1_macvtap: entered promiscuous mode [ 274.584559][ T5503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.606156][ T5503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.624233][ T5503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.628285][ T5503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.651636][ T5503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.655553][ T5503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.783749][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.787174][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.855099][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.863730][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/16 02:16:40 executed programs: 3 [ 276.211927][ T4688] Bluetooth: hci1: command tx timeout [ 278.292093][ T4688] Bluetooth: hci1: command tx timeout 2025/07/16 02:16:45 executed programs: 12 [ 280.371808][ T4688] Bluetooth: hci1: command tx timeout 2025/07/16 02:16:50 executed programs: 22 2025/07/16 02:16:55 executed programs: 31 2025/07/16 02:17:00 executed programs: 41 2025/07/16 02:17:06 executed programs: 51 2025/07/16 02:17:11 executed programs: 61 2025/07/16 02:17:16 executed programs: 71 2025/07/16 02:17:21 executed programs: 81 2025/07/16 02:17:27 executed programs: 91 [ 322.221142][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.226251][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 2025/07/16 02:17:32 executed programs: 101 2025/07/16 02:17:37 executed programs: 111 2025/07/16 02:17:42 executed programs: 121 2025/07/16 02:17:47 executed programs: 131 2025/07/16 02:17:53 executed programs: 141 2025/07/16 02:17:58 executed programs: 151 2025/07/16 02:18:03 executed programs: 161 2025/07/16 02:18:09 executed programs: 171 2025/07/16 02:18:14 executed programs: 181 2025/07/16 02:18:19 executed programs: 191 [ 375.502681][ T4688] Bluetooth: hci0: command 0x0406 tx timeout 2025/07/16 02:18:25 executed programs: 201 [ 383.657916][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.662473][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 2025/07/16 02:18:30 executed programs: 211 2025/07/16 02:18:35 executed programs: 221 2025/07/16 02:18:40 executed programs: 231 [ 395.981207][ T4688] Bluetooth: hci1: command 0x0406 tx timeout 2025/07/16 02:18:45 executed programs: 241 2025/07/16 02:18:51 executed programs: 251 2025/07/16 02:18:56 executed programs: 261 2025/07/16 02:19:01 executed programs: 271 2025/07/16 02:19:06 executed programs: 280 2025/07/16 02:19:11 executed programs: 290 2025/07/16 02:19:16 executed programs: 300 2025/07/16 02:19:22 executed programs: 310 2025/07/16 02:19:27 executed programs: 320 [ 445.093156][ T26] INFO: task kworker/u4:4:1034 blocked for more than 143 seconds. [ 445.097396][ T26] Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 [ 445.105570][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.108479][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.131772][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.135905][ T26] task:kworker/u4:4 state:D stack:21416 pid:1034 tgid:1034 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 445.141249][ T26] Workqueue: writeback wb_workfn (flush-7:0) [ 445.167469][ T26] Call Trace: [ 445.176727][ T26] [ 445.178283][ T26] __schedule+0x16f5/0x4d00 [ 445.180721][ T26] ? blk_mq_flush_plug_list+0x48b/0x550 [ 445.203415][ T26] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 445.206208][ T26] ? schedule+0x165/0x360 [ 445.208175][ T26] ? __pfx___schedule+0x10/0x10 [ 445.210336][ T26] ? schedule+0x91/0x360 [ 445.231565][ T26] schedule+0x165/0x360 [ 445.233556][ T26] schedule_preempt_disabled+0x13/0x30 [ 445.236044][ T26] __mutex_lock+0x724/0xe80 [ 445.238048][ T26] ? __mutex_lock+0x51b/0xe80 [ 445.240279][ T26] ? jfs_commit_inode+0x1ca/0x530 [ 445.271651][ T26] ? __pfx___mutex_lock+0x10/0x10 [ 445.281794][ T26] ? __lock_acquire+0xab9/0xd20 [ 445.284197][ T26] jfs_commit_inode+0x1ca/0x530 [ 445.286557][ T26] ? __pfx_jfs_commit_inode+0x10/0x10 [ 445.288978][ T26] jfs_write_inode+0x145/0x220 [ 445.291123][ T26] __writeback_single_inode+0x6ee/0xff0 [ 445.316601][ T26] writeback_sb_inodes+0x6b5/0x1000 [ 445.319031][ T26] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 445.341613][ T26] ? __pfx___up_read+0x10/0x10 [ 445.343887][ T26] __writeback_inodes_wb+0x111/0x240 [ 445.346295][ T26] wb_writeback+0x44f/0xaf0 [ 445.348465][ T26] ? queue_io+0x3b1/0x590 [ 445.350471][ T26] ? __pfx_wb_writeback+0x10/0x10 [ 445.371611][ T26] wb_workfn+0xaef/0xef0 [ 445.373729][ T26] ? __pfx_wb_workfn+0x10/0x10 [ 445.376070][ T26] ? __lock_acquire+0xab9/0xd20 [ 445.378153][ T26] ? process_scheduled_works+0x9ef/0x17b0 [ 445.380733][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.405540][ T26] ? process_scheduled_works+0x9ef/0x17b0 [ 445.422463][ T26] ? process_scheduled_works+0x9ef/0x17b0 [ 445.431579][ T26] process_scheduled_works+0xae1/0x17b0 [ 445.434015][ T26] ? __pfx_process_scheduled_works+0x10/0x10 [ 445.436672][ T26] worker_thread+0x8a0/0xda0 [ 445.438995][ T26] kthread+0x70e/0x8a0 [ 445.441009][ T26] ? __pfx_worker_thread+0x10/0x10 [ 445.471557][ T26] ? __pfx_kthread+0x10/0x10 [ 445.473908][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.476237][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.478520][ T26] ? __pfx_kthread+0x10/0x10 [ 445.480619][ T26] ret_from_fork+0x3fc/0x770 [ 445.501608][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 445.510013][ T26] ? __pfx_kthread+0x10/0x10 [ 445.515378][ T26] ret_from_fork_asm+0x1a/0x30 [ 445.517649][ T26] [ 445.533467][ T26] [ 445.533467][ T26] Showing all locks held in the system: [ 445.536915][ T26] 1 lock held by khungtaskd/26: [ 445.539114][ T26] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 445.570218][ T26] 4 locks held by kworker/u4:4/1034: [ 445.582404][ T26] #0: ffff888030fb2148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 445.587346][ T26] #1: ffffc900024afbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 445.617847][ T26] #2: ffff8880596fe0e0 (&type->s_umount_key#54){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 445.631794][ T26] #3: ffff888042c82fe0 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: jfs_commit_inode+0x1ca/0x530 [ 445.651689][ T26] 2 locks held by getty/5126: [ 445.661638][ T26] #0: ffff8880003a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 445.666314][ T26] #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 445.670856][ T26] 4 locks held by syz.0.16/5501: [ 445.692621][ T26] 3 locks held by syz.1.340/5882: [ 445.694955][ T26] 2 locks held by dhcpcd/5883: [ 445.697117][ T26] #0: ffff88804e1cc258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 445.721580][ T26] #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 445.747180][ T26] [ 445.748380][ T26] ============================================= [ 445.748380][ T26] [ 445.763129][ T26] NMI backtrace for cpu 0 [ 445.763143][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 445.763158][ T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 445.763165][ T26] Call Trace: [ 445.763170][ T26] [ 445.763175][ T26] dump_stack_lvl+0x189/0x250 [ 445.763200][ T26] ? __wake_up_klogd+0xd9/0x110 [ 445.763223][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.763237][ T26] ? __pfx__printk+0x10/0x10 [ 445.763262][ T26] nmi_cpu_backtrace+0x39e/0x3d0 [ 445.763282][ T26] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 445.763296][ T26] ? _printk+0xcf/0x120 [ 445.763319][ T26] ? __pfx__printk+0x10/0x10 [ 445.763340][ T26] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 445.763353][ T26] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 445.763372][ T26] watchdog+0xfee/0x1030 [ 445.763385][ T26] ? watchdog+0x1de/0x1030 [ 445.763407][ T26] kthread+0x70e/0x8a0 [ 445.763426][ T26] ? __pfx_watchdog+0x10/0x10 [ 445.763436][ T26] ? __pfx_kthread+0x10/0x10 [ 445.763454][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.763472][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.763494][ T26] ? __pfx_kthread+0x10/0x10 [ 445.763510][ T26] ret_from_fork+0x3fc/0x770 [ 445.763525][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 445.763542][ T26] ? __pfx_kthread+0x10/0x10 [ 445.763560][ T26] ret_from_fork_asm+0x1a/0x30 [ 445.763586][ T26] [ 445.763594][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 445.832926][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 445.837994][ T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 445.842529][ T26] Call Trace: [ 445.844070][ T26] [ 445.845337][ T26] dump_stack_lvl+0x99/0x250 [ 445.847344][ T26] ? __asan_memcpy+0x40/0x70 [ 445.849478][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.851875][ T26] ? __pfx__printk+0x10/0x10 [ 445.854083][ T26] panic+0x2db/0x790 [ 445.855832][ T26] ? __pfx_panic+0x10/0x10 [ 445.857906][ T26] ? nmi_backtrace_stall_check+0x433/0x440 [ 445.860486][ T26] ? irq_work_queue+0xc3/0x140 [ 445.862632][ T26] watchdog+0x102d/0x1030 [ 445.864635][ T26] ? watchdog+0x1de/0x1030 [ 445.866603][ T26] kthread+0x70e/0x8a0 [ 445.868693][ T26] ? __pfx_watchdog+0x10/0x10 [ 445.870983][ T26] ? __pfx_kthread+0x10/0x10 [ 445.873226][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.875513][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.877803][ T26] ? __pfx_kthread+0x10/0x10 [ 445.879897][ T26] ret_from_fork+0x3fc/0x770 [ 445.882022][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 445.884324][ T26] ? __pfx_kthread+0x10/0x10 [ 445.886446][ T26] ret_from_fork_asm+0x1a/0x30 [ 445.888585][ T26] [ 445.890277][ T26] Kernel Offset: disabled [ 445.892134][ T26] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:19:30 Registers: info registers vcpu 0 CPU#0 RAX=1ffffffff33bfc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dfe990 RSP=ffffc900004d7670 R8 =ffff888033d58237 R9 =1ffff110067ab046 R10=dffffc0000000000 R11=ffffffff85479650 R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfe700 R15=0000000000000000 RIP=ffffffff854796c7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808d21b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe2a6bff000 CR3=000000004e81b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffddea211a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2af011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2af011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2af011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2af011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2af011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2af011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000