syzkaller login: [ 91.907911][ T56] cfg80211: failed to load regulatory.db
Warning: Permanently added '[localhost]:22190' (ED25519) to the list of known hosts.
2025/11/15 08:45:45 parsed 1 programs
[ 200.038054][ T5342] cgroup: Unknown subsys name 'net'
[ 200.102669][ T5342] cgroup: Unknown subsys name 'cpuset'
[ 200.108388][ T5342] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 201.728342][ T5342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 204.972725][ T5350] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 207.381036][ T5376] chnl_net:caif_netlink_parms(): no params data found
[ 207.467079][ T5376] bridge0: port 1(bridge_slave_0) entered blocking state
[ 207.479253][ T5376] bridge0: port 1(bridge_slave_0) entered disabled state
[ 207.482268][ T5376] bridge_slave_0: entered allmulticast mode
[ 207.489051][ T5376] bridge_slave_0: entered promiscuous mode
[ 207.499843][ T5376] bridge0: port 2(bridge_slave_1) entered blocking state
[ 207.502896][ T5376] bridge0: port 2(bridge_slave_1) entered disabled state
[ 207.506038][ T5376] bridge_slave_1: entered allmulticast mode
[ 207.520129][ T5376] bridge_slave_1: entered promiscuous mode
[ 207.571763][ T5376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 207.591569][ T5376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 207.634351][ T5376] team0: Port device team_slave_0 added
[ 207.638437][ T5376] team0: Port device team_slave_1 added
[ 207.674424][ T5376] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 207.677464][ T5376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 207.688930][ T5376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 207.695126][ T5376] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 207.697936][ T5376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 207.708930][ T5376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 207.741488][ T5376] hsr_slave_0: entered promiscuous mode
[ 207.744610][ T5376] hsr_slave_1: entered promiscuous mode
[ 207.979860][ T5376] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 207.988288][ T5376] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 207.995185][ T5376] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 208.002228][ T5376] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 208.034511][ T5376] bridge0: port 2(bridge_slave_1) entered blocking state
[ 208.037977][ T5376] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 208.041872][ T5376] bridge0: port 1(bridge_slave_0) entered blocking state
[ 208.044893][ T5376] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 208.161354][ T5376] 8021q: adding VLAN 0 to HW filter on device bond0
[ 208.166706][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 208.172154][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 208.204483][ T5376] 8021q: adding VLAN 0 to HW filter on device team0
[ 208.214476][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 208.217546][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 208.241601][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state
[ 208.244692][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 208.582262][ T5376] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 208.657030][ T5376] veth0_vlan: entered promiscuous mode
[ 208.676262][ T5376] veth1_vlan: entered promiscuous mode
[ 208.722575][ T5376] veth0_macvtap: entered promiscuous mode
[ 208.728538][ T5376] veth1_macvtap: entered promiscuous mode
[ 208.743182][ T5376] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 208.753641][ T5376] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 208.763862][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 208.768596][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 208.783159][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 208.786345][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 209.024406][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 209.063000][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 209.099991][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 209.151253][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 209.347272][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 209.353899][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 209.403978][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 209.407079][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 209.976827][ T5416] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 209.984540][ T5416] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 209.987766][ T5416] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 210.000478][ T5416] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 210.003950][ T5416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 210.993452][ T12] bridge_slave_1: left allmulticast mode
[ 210.996631][ T12] bridge_slave_1: left promiscuous mode
[ 211.025809][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 211.044567][ T12] bridge_slave_0: left allmulticast mode
[ 211.046967][ T12] bridge_slave_0: left promiscuous mode
[ 211.064229][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 211.808224][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 211.814838][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 211.821093][ T12] bond0 (unregistering): Released all slaves
[ 211.933794][ T12] hsr_slave_0: left promiscuous mode
[ 211.948163][ T12] hsr_slave_1: left promiscuous mode
[ 211.952070][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 211.955175][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 211.970529][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 211.973631][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 211.996939][ T12] veth1_macvtap: left promiscuous mode
[ 212.009197][ T12] veth0_macvtap: left promiscuous mode
[ 212.011916][ T12] veth1_vlan: left promiscuous mode
[ 212.014298][ T12] veth0_vlan: left promiscuous mode
[ 212.443892][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 212.469688][ T12] team0 (unregistering): Port device team_slave_0 removed
2025/11/15 08:46:02 executed programs: 0
[ 215.369399][ T4668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 215.374574][ T4668] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 215.377825][ T4668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 215.381274][ T4668] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 215.384474][ T4668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 215.567972][ T5478] chnl_net:caif_netlink_parms(): no params data found
[ 215.627369][ T5478] bridge0: port 1(bridge_slave_0) entered blocking state
[ 215.630629][ T5478] bridge0: port 1(bridge_slave_0) entered disabled state
[ 215.633734][ T5478] bridge_slave_0: entered allmulticast mode
[ 215.637304][ T5478] bridge_slave_0: entered promiscuous mode
[ 215.642497][ T5478] bridge0: port 2(bridge_slave_1) entered blocking state
[ 215.645703][ T5478] bridge0: port 2(bridge_slave_1) entered disabled state
[ 215.649638][ T5478] bridge_slave_1: entered allmulticast mode
[ 215.653167][ T5478] bridge_slave_1: entered promiscuous mode
[ 215.674461][ T5478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 215.681365][ T5478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 215.702899][ T5478] team0: Port device team_slave_0 added
[ 215.707183][ T5478] team0: Port device team_slave_1 added
[ 215.726853][ T5478] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 215.730074][ T5478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 215.741365][ T5478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 215.747892][ T5478] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 215.750606][ T5478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 215.761041][ T5478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 215.794556][ T5478] hsr_slave_0: entered promiscuous mode
[ 215.797560][ T5478] hsr_slave_1: entered promiscuous mode
[ 216.236266][ T5478] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 216.242943][ T5478] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 216.259332][ T5478] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 216.270443][ T5478] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 216.405552][ T5478] 8021q: adding VLAN 0 to HW filter on device bond0
[ 216.450262][ T5478] 8021q: adding VLAN 0 to HW filter on device team0
[ 216.463157][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 216.466277][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 216.489944][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 216.493075][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 216.561037][ T5478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 216.844935][ T5478] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 216.920262][ T5478] veth0_vlan: entered promiscuous mode
[ 216.930966][ T5478] veth1_vlan: entered promiscuous mode
[ 216.989629][ T5478] veth0_macvtap: entered promiscuous mode
[ 216.994736][ T5478] veth1_macvtap: entered promiscuous mode
[ 217.032836][ T5478] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 217.052481][ T5478] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 217.071830][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 217.075347][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 217.083895][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 217.087778][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 217.214250][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 217.217553][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 217.275745][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 217.282046][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 217.428994][ T4668] Bluetooth: hci0: command tx timeout
[ 217.940940][ T5519] loop0: detected capacity change from 0 to 32768
[ 218.051118][ T25] audit: type=1800 audit(1763196365.657:2): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="bus" dev="loop0" ino=4096 res=0 errno=0
[ 218.094380][ T25] audit: type=1800 audit(1763196365.667:3): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 219.506210][ T4668] Bluetooth: hci0: command tx timeout
[ 221.579043][ T4668] Bluetooth: hci0: command tx timeout
[ 223.658845][ T4668] Bluetooth: hci0: command tx timeout
[ 232.418027][ T5416] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 232.422245][ T5416] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 232.425739][ T5416] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 232.430000][ T5416] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 232.433504][ T5416] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 232.792746][ T5538] chnl_net:caif_netlink_parms(): no params data found
[ 232.862195][ T5538] bridge0: port 1(bridge_slave_0) entered blocking state
[ 232.864828][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state
[ 232.867844][ T5538] bridge_slave_0: entered allmulticast mode
[ 232.871536][ T5538] bridge_slave_0: entered promiscuous mode
[ 232.877243][ T5538] bridge0: port 2(bridge_slave_1) entered blocking state
[ 232.881334][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state
[ 232.884383][ T5538] bridge_slave_1: entered allmulticast mode
[ 232.888108][ T5538] bridge_slave_1: entered promiscuous mode
[ 232.915940][ T5538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 232.922308][ T5538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 232.944534][ T5538] team0: Port device team_slave_0 added
[ 232.952967][ T5538] team0: Port device team_slave_1 added
[ 232.973940][ T5538] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 232.977062][ T5538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 232.991572][ T5538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 232.999303][ T5538] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 233.002388][ T5538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 233.017299][ T5538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 233.049821][ T5538] hsr_slave_0: entered promiscuous mode
[ 233.053783][ T5538] hsr_slave_1: entered promiscuous mode
[ 233.056671][ T5538] debugfs: 'hsr0' already exists in 'hsr'
[ 233.060109][ T5538] Cannot create hsr debugfs directory
[ 233.197289][ T5538] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 233.204090][ T5538] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 233.210714][ T5538] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 233.216654][ T5538] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 233.240428][ T5538] bridge0: port 2(bridge_slave_1) entered blocking state
[ 233.243462][ T5538] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 233.246906][ T5538] bridge0: port 1(bridge_slave_0) entered blocking state
[ 233.250130][ T5538] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 233.308416][ T5538] 8021q: adding VLAN 0 to HW filter on device bond0
[ 233.332125][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 233.335865][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 233.346625][ T5538] 8021q: adding VLAN 0 to HW filter on device team0
[ 233.357768][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 233.361074][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 233.380708][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 233.383908][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 233.554403][ T5538] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 233.597697][ T5538] veth0_vlan: entered promiscuous mode
[ 233.605873][ T5538] veth1_vlan: entered promiscuous mode
[ 233.629806][ T5538] veth0_macvtap: entered promiscuous mode
[ 233.634782][ T5538] veth1_macvtap: entered promiscuous mode
[ 233.648339][ T5538] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 233.659997][ T5538] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 233.670739][ T1048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 233.681338][ T1048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 233.685280][ T1048] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 233.695384][ T1048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 233.751129][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 233.754633][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 233.787240][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 233.792640][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/11/15 08:46:21 executed programs: 3
[ 234.459100][ T5416] Bluetooth: hci1: command tx timeout
[ 236.538891][ T5416] Bluetooth: hci1: command tx timeout
[ 238.619918][ T5416] Bluetooth: hci1: command tx timeout
2025/11/15 08:46:27 executed programs: 7
[ 240.699211][ T5416] Bluetooth: hci1: command tx timeout
2025/11/15 08:46:33 executed programs: 10
2025/11/15 08:46:39 executed programs: 14
2025/11/15 08:46:45 executed programs: 18
[ 260.862679][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[ 260.865472][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
2025/11/15 08:46:52 executed programs: 22
2025/11/15 08:46:58 executed programs: 26
2025/11/15 08:47:04 executed programs: 30
2025/11/15 08:47:10 executed programs: 34
2025/11/15 08:47:17 executed programs: 38
2025/11/15 08:47:23 executed programs: 42
2025/11/15 08:47:29 executed programs: 46
2025/11/15 08:47:36 executed programs: 50
2025/11/15 08:47:42 executed programs: 54
2025/11/15 08:47:48 executed programs: 58
[ 322.300938][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[ 322.303871][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
2025/11/15 08:47:55 executed programs: 62
2025/11/15 08:48:01 executed programs: 66
[ 339.742332][ T5416] Bluetooth: hci0: command 0x0406 tx timeout
2025/11/15 08:48:07 executed programs: 70
2025/11/15 08:48:13 executed programs: 74
2025/11/15 08:48:20 executed programs: 78
[ 355.101791][ T4668] Bluetooth: hci1: command 0x0406 tx timeout
2025/11/15 08:48:26 executed programs: 82
[ 363.901535][ T26] INFO: task syz.0.17:5519 blocked for more than 143 seconds.
[ 363.905067][ T26] Not tainted syzkaller #0
[ 363.909059][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 363.912520][ T26] task:syz.0.17 state:D stack:22536 pid:5519 tgid:5519 ppid:5478 task_flags:0x400140 flags:0x00080003
[ 363.917782][ T26] Call Trace:
[ 363.938774][ T26]
[ 363.940836][ T26] __schedule+0x1798/0x4cc0
[ 363.942877][ T26] ? blk_mq_flush_plug_list+0x41f/0x550
[ 363.945003][ T26] ? __lock_acquire+0xab9/0xd20
[ 363.947050][ T26] ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[ 363.959169][ T26] ? __pfx___schedule+0x10/0x10
[ 363.961246][ T26] ? schedule+0x91/0x360
[ 363.963130][ T26] schedule+0x165/0x360
[ 363.964975][ T26] io_schedule+0x80/0xd0
[ 363.966854][ T26] lock_metapage+0x1f3/0x400
[ 363.979892][ T26] ? lock_metapage+0x10b/0x400
[ 363.981835][ T26] ? __pfx_lock_metapage+0x10/0x10
[ 363.984021][ T26] ? __pfx_default_wake_function+0x10/0x10
[ 363.986551][ T26] ? __filemap_get_folio+0x79f/0xaf0
[ 363.999380][ T26] __get_metapage+0x497/0xde0
[ 364.001594][ T26] xtSplitPage+0x284/0x21a0
[ 364.003710][ T26] ? dbAlloc+0x7ae/0xba0
[ 364.005640][ T26] xtSplitUp+0x31b/0x1f40
[ 364.007480][ T26] ? folio_unlock+0x101/0x160
[ 364.018723][ T26] ? __get_metapage+0x865/0xde0
[ 364.020892][ T26] ? __pfx_xtSplitUp+0x10/0x10
[ 364.023989][ T26] xtInsert+0x415/0xe30
[ 364.025686][ T26] ? __lock_acquire+0xab9/0xd20
[ 364.027770][ T26] ? do_raw_spin_lock+0x121/0x290
[ 364.039106][ T26] ? __pfx_xtInsert+0x10/0x10
[ 364.041198][ T26] ? rcu_is_watching+0x15/0xb0
[ 364.043183][ T26] ? __mark_inode_dirty+0x3d2/0xe10
[ 364.045302][ T26] extAlloc+0xa9a/0xfb0
[ 364.047037][ T26] ? __pfx_extAlloc+0x10/0x10
[ 364.059434][ T26] ? down_write_nested+0x169/0x200
[ 364.061576][ T26] ? __pfx_down_write_nested+0x10/0x10
[ 364.063958][ T26] jfs_get_block+0x346/0xab0
[ 364.065896][ T26] ? __pfx_jfs_get_block+0x10/0x10
[ 364.068170][ T26] ? iov_iter_extract_bvec_pages+0x72e/0x7d0
[ 364.081036][ T26] ? blk_start_plug+0x6f/0x1b0
[ 364.083188][ T26] ? __pfx_jfs_get_block+0x10/0x10
[ 364.085375][ T26] __blockdev_direct_IO+0x16ff/0x3490
[ 364.087539][ T26] ? __pfx___blockdev_direct_IO+0x10/0x10
[ 364.099211][ T26] ? __pfx_invalidate_inode_pages2_range+0x10/0x10
[ 364.109828][ T26] ? __pfx_jfs_get_block+0x10/0x10
[ 364.112574][ T26] ? filemap_write_and_wait_range+0x18a/0x320
[ 364.114914][ T26] ? __pfx_filemap_write_and_wait_range+0x10/0x10
[ 364.117288][ T26] ? current_time+0x222/0x370
[ 364.126292][ T26] ? __pfx_current_time+0x10/0x10
[ 364.138838][ T26] jfs_direct_IO+0x119/0x220
[ 364.140942][ T26] generic_file_direct_write+0x1db/0x3e0
[ 364.143365][ T26] ? file_update_time+0x2da/0x490
[ 364.145582][ T26] __generic_file_write_iter+0x11d/0x230
[ 364.147983][ T26] ? generic_file_write_iter+0x103/0x550
[ 364.159358][ T26] generic_file_write_iter+0x117/0x550
[ 364.161361][ T26] ? __pfx_generic_file_write_iter+0x10/0x10
[ 364.163749][ T26] ? splice_from_pipe_next+0x61d/0x670
[ 364.165949][ T26] ? __asan_memset+0x22/0x50
[ 364.168218][ T26] iter_file_splice_write+0x975/0x10e0
[ 364.179242][ T26] ? __pfx_iter_file_splice_write+0x10/0x10
[ 364.188712][ T26] ? rcu_read_lock_any_held+0xb3/0x120
[ 364.190633][ T26] ? direct_splice_actor+0x10c/0x160
[ 364.193310][ T26] ? __pfx_iter_file_splice_write+0x10/0x10
[ 364.195901][ T26] direct_splice_actor+0x101/0x160
[ 364.198088][ T26] splice_direct_to_actor+0x5a8/0xcc0
[ 364.209454][ T26] ? __pfx_direct_splice_actor+0x10/0x10
[ 364.211857][ T26] ? __pfx_splice_direct_to_actor+0x10/0x10
[ 364.214256][ T26] ? futex_hash+0x40/0x2d0
[ 364.216053][ T26] ? futex_hash+0x2ad/0x2d0
[ 364.217619][ T26] do_splice_direct+0x181/0x270
[ 364.231206][ T26] ? __pfx_do_splice_direct+0x10/0x10
[ 364.233670][ T26] ? __pfx_direct_file_splice_eof+0x10/0x10
[ 364.236244][ T26] ? rw_verify_area+0x255/0x4d0
[ 364.238214][ T26] do_sendfile+0x4da/0x7e0
[ 364.248739][ T26] ? __pfx_do_sendfile+0x10/0x10
[ 364.258936][ T26] ? __se_sys_futex+0x36f/0x400
[ 364.261141][ T26] __se_sys_sendfile64+0x13e/0x190
[ 364.263337][ T26] ? __pfx___se_sys_futex+0x10/0x10
[ 364.265391][ T26] ? __pfx___se_sys_sendfile64+0x10/0x10
[ 364.267793][ T26] ? do_syscall_64+0xbe/0xfa0
[ 364.278727][ T26] do_syscall_64+0xfa/0xfa0
[ 364.280719][ T26] ? lockdep_hardirqs_on+0x9c/0x150
[ 364.289103][ T26] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 364.291777][ T26] ? clear_bhb_loop+0x60/0xb0
[ 364.293718][ T26] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 364.296079][ T26] RIP: 0033:0x7f9b1c58f6c9
[ 364.298087][ T26] RSP: 002b:00007ffe488ba688 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 364.314906][ T26] RAX: ffffffffffffffda RBX: 00007f9b1c7e5fa0 RCX: 00007f9b1c58f6c9
[ 364.318373][ T26] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006
[ 364.330842][ T26] RBP: 00007f9b1c611f91 R08: 0000000000000000 R09: 0000000000000000
[ 364.338738][ T26] R10: 000000080000000c R11: 0000000000000246 R12: 0000000000000000
[ 364.342332][ T26] R13: 00007f9b1c7e5fa0 R14: 00007f9b1c7e5fa0 R15: 0000000000000004
[ 364.356480][ T26]
[ 364.357913][ T26]
[ 364.357913][ T26] Showing all locks held in the system:
[ 364.369077][ T26] 1 lock held by khungtaskd/26:
[ 364.371350][ T26] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 364.379388][ T26] 4 locks held by kworker/u4:3/43:
[ 364.381722][ T26] #0: ffff888030f4e948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 364.397355][ T26] #1: ffffc900005e7ba0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 364.408737][ T26] #2: ffff8880118320e0 (&type->s_umount_key#54){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0
[ 364.413442][ T26] #3: ffff88801221b8b8 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: jfs_commit_inode+0x1ca/0x530
[ 364.428444][ T26] 2 locks held by getty/5106:
[ 364.430737][ T26] #0: ffff88803ec040a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 364.439353][ T26] #1: ffffc9000018e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 364.443644][ T26] 4 locks held by syz.0.17/5519:
[ 364.445844][ T26] #0: ffff888011832420 (sb_writers#12){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160
[ 364.468741][ T26] #1: ffff88801221ceb8 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: generic_file_write_iter+0xeb/0x550
[ 364.474002][ T26] #2: ffff88801221ca78 (&jfs_ip->rdwrlock#3){++++}-{4:4}, at: jfs_get_block+0x141/0xab0
[ 364.489686][ T26] #3: ffff88801221cb08 (&jfs_ip->commit_mutex){+.+.}-{4:4}, at: extAlloc+0x13c/0xfb0
[ 364.494298][ T26] 1 lock held by syz.1.100/5664:
[ 364.496499][ T26]
[ 364.497557][ T26] =============================================
[ 364.497557][ T26]
[ 364.509046][ T26] NMI backtrace for cpu 0
[ 364.509058][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full)
[ 364.509069][ T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 364.509073][ T26] Call Trace:
[ 364.509077][ T26]
[ 364.509080][ T26] dump_stack_lvl+0x189/0x250
[ 364.509094][ T26] ? __pfx_dump_stack_lvl+0x10/0x10
[ 364.509103][ T26] ? __pfx__printk+0x10/0x10
[ 364.509114][ T26] nmi_cpu_backtrace+0x39e/0x3d0
[ 364.509124][ T26] ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 364.509132][ T26] ? __pfx__printk+0x10/0x10
[ 364.509140][ T26] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 364.509152][ T26] nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 364.509161][ T26] watchdog+0xf60/0xfa0
[ 364.509170][ T26] ? watchdog+0x1e2/0xfa0
[ 364.509178][ T26] kthread+0x711/0x8a0
[ 364.509188][ T26] ? __pfx_watchdog+0x10/0x10
[ 364.509195][ T26] ? __pfx_kthread+0x10/0x10
[ 364.509204][ T26] ? _raw_spin_unlock_irq+0x23/0x50
[ 364.509213][ T26] ? lockdep_hardirqs_on+0x9c/0x150
[ 364.509222][ T26] ? __pfx_kthread+0x10/0x10
[ 364.509231][ T26] ret_from_fork+0x4bc/0x870
[ 364.509239][ T26] ? __pfx_ret_from_fork+0x10/0x10
[ 364.509248][ T26] ? __pfx_kthread+0x10/0x10
[ 364.509257][ T26] ret_from_fork_asm+0x1a/0x30
[ 364.509268][ T26]
2025/11/15 08:48:32 executed programs: 86
2025/11/15 08:48:39 executed programs: 90
VM DIAGNOSIS:
08:48:31 Registers:
info registers vcpu 0
CPU#0
RAX=1ffffffff335f060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99af85b0 RSP=ffffc900004d7630
R8 =ffff888033998237 R9 =1ffff11006733046 R10=dffffc0000000000 R11=ffffffff85167870
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99af8320 R15=0000000000000000
RIP=ffffffff851678e7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88808d730000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff65d84e40 CR3=0000000011b9a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff65d871e0 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1574413050
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f157441305d
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1574413057
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f157441306b
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15744130f1
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15744131cf
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000