syzkaller login: [ 91.786799][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:26774' (ED25519) to the list of known hosts. executing program [ 316.973362][ T5353] loop0: detected capacity change from 0 to 32768 [ 317.115035][ T5353] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 317.138306][ T5353] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 317.138306][ T5353] allowing incompatible features above 0.0: (unknown version) [ 317.150574][ T5353] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 317.154194][ T5353] bcachefs (loop0): Version upgrade required: [ 317.154194][ T5353] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 317.154194][ T5353] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 317.154194][ T5353] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 317.183769][ T5353] bcachefs (loop0): dropping and reconstructing all alloc info [ 317.193140][ T5353] bcachefs (loop0): accounting_read... done [ 317.196111][ T5353] bcachefs (loop0): alloc_read... done [ 317.198874][ T5353] bcachefs (loop0): snapshots_read... done [ 317.201898][ T5353] bcachefs (loop0): done starting filesystem [ 317.228923][ T5353] syz-executor105 (5353) used greatest stack depth: 19816 bytes left [ 317.241469][ T5352] bcachefs (loop0): shutting down [ 317.309300][ T5352] bcachefs (loop0): shutdown complete executing program [ 318.161597][ T5364] loop0: detected capacity change from 0 to 32768 [ 318.226864][ T5364] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 318.263044][ T5364] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 318.263044][ T5364] allowing incompatible features above 0.0: (unknown version) [ 318.278281][ T5364] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 318.282503][ T5364] bcachefs (loop0): Version upgrade required: [ 318.282503][ T5364] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 318.282503][ T5364] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 318.282503][ T5364] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 318.311429][ T5364] bcachefs (loop0): dropping and reconstructing all alloc info [ 318.321275][ T5364] bcachefs (loop0): accounting_read... done [ 318.323922][ T5364] bcachefs (loop0): alloc_read... done [ 318.326303][ T5364] bcachefs (loop0): snapshots_read... done [ 318.329584][ T5364] bcachefs (loop0): done starting filesystem [ 318.359471][ T5352] bcachefs (loop0): shutting down [ 318.418705][ T5352] bcachefs (loop0): shutdown complete executing program [ 319.241034][ T5373] loop0: detected capacity change from 0 to 32768 [ 319.311614][ T5373] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 319.343828][ T5373] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 319.343828][ T5373] allowing incompatible features above 0.0: (unknown version) [ 319.356776][ T5373] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 319.360898][ T5373] bcachefs (loop0): Version upgrade required: [ 319.360898][ T5373] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 319.360898][ T5373] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 319.360898][ T5373] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 319.395260][ T5373] bcachefs (loop0): dropping and reconstructing all alloc info [ 319.405247][ T5373] bcachefs (loop0): accounting_read... done [ 319.408297][ T5373] bcachefs (loop0): alloc_read... done [ 319.410526][ T5373] bcachefs (loop0): snapshots_read... done [ 319.413312][ T5373] bcachefs (loop0): done starting filesystem [ 319.458665][ T5352] bcachefs (loop0): shutting down [ 578.177893][ T27] INFO: task syz-executor105:5352 blocked for more than 143 seconds. [ 578.181460][ T27] Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 [ 578.185755][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.195481][ T27] task:syz-executor105 state:D stack:24280 pid:5352 tgid:5352 ppid:5351 task_flags:0x400100 flags:0x00004002 [ 578.201559][ T27] Call Trace: [ 578.203073][ T27] [ 578.204364][ T27] __schedule+0x16e2/0x4cd0 [ 578.206864][ T27] ? __lock_acquire+0xaac/0xd20 [ 578.209790][ T27] ? do_raw_spin_lock+0x121/0x290 [ 578.211943][ T27] ? schedule+0x165/0x360 [ 578.213781][ T27] ? __pfx___schedule+0x10/0x10 [ 578.215861][ T27] ? schedule+0x91/0x360 [ 578.218347][ T27] schedule+0x165/0x360 [ 578.220283][ T27] __bch2_fs_stop+0x3ce/0x5a0 [ 578.222502][ T27] ? __pfx___bch2_fs_stop+0x10/0x10 [ 578.224721][ T27] ? __pfx_autoremove_wake_function+0x10/0x10 [ 578.227878][ T27] ? __pfx_evict_inodes+0x10/0x10 [ 578.230054][ T27] ? bch2_sync_fs+0x107/0x2e0 [ 578.232031][ T27] ? __pfx_bch2_put_super+0x10/0x10 [ 578.234001][ T27] generic_shutdown_super+0x135/0x2c0 [ 578.236329][ T27] bch2_kill_sb+0x41/0x50 [ 578.238669][ T27] deactivate_locked_super+0xb9/0x130 [ 578.240818][ T27] cleanup_mnt+0x425/0x4c0 [ 578.242717][ T27] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.244846][ T27] task_work_run+0x1d1/0x260 [ 578.246852][ T27] ? __pfx_task_work_run+0x10/0x10 [ 578.249868][ T27] resume_user_mode_work+0x5e/0x80 [ 578.252133][ T27] syscall_exit_to_user_mode+0x9a/0x120 [ 578.254489][ T27] do_syscall_64+0x103/0x210 [ 578.256447][ T27] ? clear_bhb_loop+0x60/0xb0 [ 578.259035][ T27] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.262363][ T27] RIP: 0033:0x7f57d2bd9a87 [ 578.264960][ T27] RSP: 002b:00007ffcc8032fd8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 578.271017][ T27] RAX: 0000000000000000 RBX: 000000000004ddd0 RCX: 00007f57d2bd9a87 [ 578.275767][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc8033090 [ 578.280215][ T27] RBP: 00007ffcc8033090 R08: 0000000000000000 R09: 0000000000000000 [ 578.283525][ T27] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffcc8034100 [ 578.286786][ T27] R13: 000055556ff487c0 R14: 431bde82d7b634db R15: 00007ffcc8034120 [ 578.290477][ T27] [ 578.291824][ T27] [ 578.291824][ T27] Showing all locks held in the system: [ 578.295090][ T27] 1 lock held by khungtaskd/27: [ 578.297990][ T27] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 578.302954][ T27] 2 locks held by getty/5107: [ 578.305115][ T27] #0: ffff88801c5f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 578.310296][ T27] #1: ffffc9000018e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 578.315067][ T27] 1 lock held by syz-executor105/5352: [ 578.317731][ T27] #0: ffff8880354100e0 (&type->s_umount_key#42){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 578.321946][ T27] [ 578.322968][ T27] ============================================= [ 578.322968][ T27] [ 578.326362][ T27] NMI backtrace for cpu 0 [ 578.326370][ T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 578.326378][ T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 578.326382][ T27] Call Trace: [ 578.326387][ T27] [ 578.326391][ T27] dump_stack_lvl+0x189/0x250 [ 578.326404][ T27] ? __wake_up_klogd+0xd9/0x110 [ 578.326414][ T27] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.326423][ T27] ? __pfx__printk+0x10/0x10 [ 578.326434][ T27] nmi_cpu_backtrace+0x39e/0x3d0 [ 578.326444][ T27] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 578.326450][ T27] ? _printk+0xcf/0x120 [ 578.326458][ T27] ? __pfx__printk+0x10/0x10 [ 578.326465][ T27] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 578.326473][ T27] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 578.326485][ T27] watchdog+0xfee/0x1030 [ 578.326501][ T27] ? watchdog+0x1de/0x1030 [ 578.326514][ T27] kthread+0x70e/0x8a0 [ 578.326526][ T27] ? __pfx_watchdog+0x10/0x10 [ 578.326538][ T27] ? __pfx_kthread+0x10/0x10 [ 578.326550][ T27] ? __pfx_kthread+0x10/0x10 [ 578.326561][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 578.326573][ T27] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.326587][ T27] ? __pfx_kthread+0x10/0x10 [ 578.326597][ T27] ret_from_fork+0x4b/0x80 [ 578.326607][ T27] ? __pfx_kthread+0x10/0x10 [ 578.326618][ T27] ret_from_fork_asm+0x1a/0x30 [ 578.326636][ T27] [ 578.326642][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 578.391196][ T27] CPU: 0 UID: 0 PID: 27 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 578.395889][ T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 578.400185][ T27] Call Trace: [ 578.401571][ T27] [ 578.402808][ T27] dump_stack_lvl+0x99/0x250 [ 578.404741][ T27] ? __asan_memcpy+0x40/0x70 [ 578.406600][ T27] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.408773][ T27] ? __pfx__printk+0x10/0x10 [ 578.410622][ T27] panic+0x2db/0x790 [ 578.412248][ T27] ? __pfx_panic+0x10/0x10 [ 578.414159][ T27] ? nmi_backtrace_stall_check+0x433/0x440 [ 578.416577][ T27] ? irq_work_queue+0xc3/0x140 [ 578.418627][ T27] watchdog+0x102d/0x1030 [ 578.420452][ T27] ? watchdog+0x1de/0x1030 [ 578.422297][ T27] kthread+0x70e/0x8a0 [ 578.423993][ T27] ? __pfx_watchdog+0x10/0x10 [ 578.425960][ T27] ? __pfx_kthread+0x10/0x10 [ 578.427810][ T27] ? __pfx_kthread+0x10/0x10 [ 578.429752][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 578.431924][ T27] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.434094][ T27] ? __pfx_kthread+0x10/0x10 [ 578.435972][ T27] ret_from_fork+0x4b/0x80 [ 578.437774][ T27] ? __pfx_kthread+0x10/0x10 [ 578.439626][ T27] ret_from_fork_asm+0x1a/0x30 [ 578.441635][ T27] [ 578.443256][ T27] Kernel Offset: disabled [ 578.445061][ T27] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:32:38 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900004ef770 R8 =ffff888000d50237 R9 =1ffff110001aa046 R10=dffffc0000000000 R11=ffffffff853e18b0 R12=dffffc0000000000 R13=ffffffff99850c70 R14=ffffffff99b55c40 R15=0000000000000000 RIP=ffffffff853e192c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808d6c2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055bbd3980168 CR3=000000000dd38000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000000002b Opmask01=0000000020003fff Opmask02=00000000bfffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4af641a45cb2151e 4ed96f53ffc1a638 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c6a3b9408d949173 cdde5528f60a973c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f2e15d4fb37fcf09 69f71e85745d6b13 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d584da93c948545e 3921c8ccf00746e8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000068 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000028 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3c29625db7fb9210 0000000100000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fd6f9a5600000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e20db1aa81940869 bf04b8188f09e64f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000f8457da4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 eb5025ec6bd2724b 5d909c28d4291790 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 639cfd16f82e18c7 d7428d554edf7f0e ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6f726620796c64 657463657078656e 7520646574697865 2073257325732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 484a5743055c4941 40514640555d404b 50054140514c5d40 0556005600560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc9359076 00007ffdc935906a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000a0 00007fc71a246b20 000055bbd39a6700 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc9359076 00007ffdc935906a 00007ffdc9358fed ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc9358fe2 00007ffdc9358fd4 00007ffdc9358fc7 00007ffdc9358fb9 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc9358fac 00007ffdc9358f99 00007ffdc9358f8b 00007ffdc9358f7b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006001493947862 f8e250ea00000000 000080fe00010014 00000005fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000