syzkaller login: [ 92.115365][ T54] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:15768' (ED25519) to the list of known hosts. [ 219.174476][ T5347] chnl_net:caif_netlink_parms(): no params data found [ 219.251368][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.255264][ T5347] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.259251][ T5347] bridge_slave_0: entered allmulticast mode [ 219.264433][ T5347] bridge_slave_0: entered promiscuous mode [ 219.270215][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.274451][ T5347] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.277882][ T5347] bridge_slave_1: entered allmulticast mode [ 219.283000][ T5347] bridge_slave_1: entered promiscuous mode [ 219.313702][ T5347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.324671][ T5347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.355191][ T5347] team0: Port device team_slave_0 added [ 219.360079][ T5347] team0: Port device team_slave_1 added [ 219.382691][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.385853][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.398329][ T5347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.406436][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.409532][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.422573][ T5347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.461891][ T5347] hsr_slave_0: entered promiscuous mode [ 219.465808][ T5347] hsr_slave_1: entered promiscuous mode [ 219.629418][ T5347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 219.638711][ T5347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 219.646491][ T5347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 219.653855][ T5347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 219.695873][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.699504][ T5347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.703531][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.706874][ T5347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.764567][ T5347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.782697][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.788103][ T1035] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.802466][ T5347] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.811967][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.815923][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.826159][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.829861][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.916136][ T5347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.963719][ T5347] veth0_vlan: entered promiscuous mode [ 219.973546][ T5347] veth1_vlan: entered promiscuous mode [ 220.003236][ T5347] veth0_macvtap: entered promiscuous mode [ 220.010142][ T5347] veth1_macvtap: entered promiscuous mode [ 220.029650][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.042367][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.049981][ T5347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.055023][ T5347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.058952][ T5347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.064316][ T5347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 220.629578][ C0] hrtimer: interrupt took 480972096 ns [ 482.381095][ C0] sched: DL replenish lagged too much [ 482.460367][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 482.463439][ C0] rcu: 0-...!: (1 ticks this GP) idle=5eac/1/0x4000000000000000 softirq=29245/29245 fqs=0 [ 482.469963][ C0] rcu: (t=22749 jiffies g=20877 q=107 ncpus=1) [ 482.472663][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 22748 jiffies! g20877 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 482.477942][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=14158 [ 482.481820][ C0] rcu: rcu_preempt kthread starved for 22749 jiffies! g20877 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 482.486630][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 482.491059][ C0] rcu: RCU grace-period kthread stack dump: [ 482.494228][ C0] task:rcu_preempt state:I stack:28824 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 482.499643][ C0] Call Trace: [ 482.501209][ C0] [ 482.502683][ C0] __schedule+0x16f5/0x4d00 [ 482.505040][ C0] ? do_raw_spin_unlock+0x4d/0x240 [ 482.507444][ C0] ? schedule+0x165/0x360 [ 482.509415][ C0] ? __lock_acquire+0xab9/0xd20 [ 482.511817][ C0] ? __pfx___schedule+0x10/0x10 [ 482.514367][ C0] ? schedule+0x91/0x360 [ 482.516229][ C0] schedule+0x165/0x360 [ 482.517922][ C0] schedule_timeout+0x12b/0x270 [ 482.520204][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 482.522369][ C0] ? __pfx_process_timeout+0x10/0x10 [ 482.524726][ C0] ? prepare_to_swait_event+0x341/0x380 [ 482.527857][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 482.530607][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 482.532828][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.534924][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 482.537042][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 482.539265][ C0] ? finish_swait+0xcd/0x1f0 [ 482.541239][ C0] rcu_gp_kthread+0x99/0x390 [ 482.543488][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 482.546379][ C0] ? __kthread_parkme+0x7b/0x200 [ 482.549005][ C0] ? __kthread_parkme+0x1a1/0x200 [ 482.551292][ C0] kthread+0x70e/0x8a0 [ 482.553120][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 482.555207][ C0] ? __pfx_kthread+0x10/0x10 [ 482.557066][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 482.559478][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.561765][ C0] ? __pfx_kthread+0x10/0x10 [ 482.563860][ C0] ret_from_fork+0x3f9/0x770 [ 482.565979][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 482.568505][ C0] ? __pfx_kthread+0x10/0x10 [ 482.571016][ C0] ret_from_fork_asm+0x1a/0x30 [ 482.573592][ C0] [ 482.575670][ C0] CPU: 0 UID: 0 PID: 1040 Comm: kworker/u4:7 Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 482.575686][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 482.575694][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 482.578329][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 482.578342][ C0] Code: 74 05 e8 fb 6b 5f f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d3 5a 28 f6 65 8b 05 bc 63 34 07 85 c0 74 40 48 c7 04 24 0e 36 [ 482.578348][ C0] RSP: 0018:ffffc90002526060 EFLAGS: 00000206 [ 482.578354][ C0] RAX: 26a42c60e2c79400 RBX: 0000000000000a06 RCX: 26a42c60e2c79400 [ 482.578359][ C0] RDX: 0000000000000007 RSI: ffffffff8d981621 RDI: 0000000000000001 [ 482.578363][ C0] RBP: ffffc900025260f0 R08: ffffffff8fa112f7 R09: 1ffffffff1f4225e [ 482.578367][ C0] R10: dffffc0000000000 R11: fffffbfff1f4225f R12: dffffc0000000000 [ 482.578371][ C0] R13: 0000000000000a06 R14: ffff888034b94800 R15: 1ffff920004a4c0c [ 482.578375][ C0] FS: 0000000000000000(0000) GS:ffff88808d252000(0000) knlGS:0000000000000000 [ 482.578380][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 482.578384][ C0] CR2: 00007fa555ec7e10 CR3: 000000000df38000 CR4: 0000000000352ef0 [ 482.578409][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 482.578414][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 482.578418][ C0] Call Trace: [ 482.578424][ C0] [ 482.578428][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 482.578439][ C0] ? __pfx_ata_scsi_rw_xlat+0x10/0x10 [ 482.578495][ C0] ata_scsi_queuecmd+0x3f0/0x5c0 [ 482.578512][ C0] scsi_queue_rq+0x1c91/0x2cc0 [ 482.578534][ C0] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 482.578550][ C0] ? sbitmap_find_bit+0x3ff/0x490 [ 482.578572][ C0] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 482.578585][ C0] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 482.578602][ C0] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 482.578628][ C0] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 482.578647][ C0] ? blk_mq_run_hw_queue+0x239/0x4f0 [ 482.578665][ C0] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 482.578679][ C0] ? blk_mq_run_hw_queue+0x239/0x4f0 [ 482.578689][ C0] blk_mq_run_hw_queue+0x404/0x4f0 [ 482.578703][ C0] blk_mq_dispatch_list+0xd0c/0xe00 [ 482.578719][ C0] ? blk_mq_dispatch_list+0x180/0xe00 [ 482.578731][ C0] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 482.578739][ C0] ? dd_prepare_request+0xd/0x50 [ 482.578748][ C0] blk_mq_flush_plug_list+0x469/0x550 [ 482.578758][ C0] ? update_io_ticks+0x21f/0x260 [ 482.578768][ C0] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 482.578780][ C0] blk_add_rq_to_plug+0x175/0x450 [ 482.578790][ C0] blk_mq_submit_bio+0xbd3/0x22d0 [ 482.578801][ C0] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 482.578809][ C0] ? wb_workfn+0xaef/0xef0 [ 482.578823][ C0] __submit_bio+0x207/0x5a0 [ 482.578829][ C0] ? __pfx___submit_bio+0x10/0x10 [ 482.578835][ C0] ? blk_cgroup_bio_start+0x291/0x640 [ 482.578856][ C0] submit_bio_noacct_nocheck+0x505/0xb50 [ 482.578872][ C0] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 482.578897][ C0] ext4_io_submit+0xe0/0x150 [ 482.578915][ C0] ext4_do_writepages+0x12d8/0x3f30 [ 482.578929][ C0] ? unwind_next_frame+0xa5/0x2390 [ 482.578971][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 482.579003][ C0] ? rcu_read_lock_any_held+0xb3/0x120 [ 482.579022][ C0] ext4_writepages+0x205/0x350 [ 482.579035][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 482.579052][ C0] ? __lock_acquire+0xab9/0xd20 [ 482.579069][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 482.579080][ C0] do_writepages+0x32b/0x550 [ 482.579101][ C0] __writeback_single_inode+0x145/0xff0 [ 482.579107][ C0] ? wbc_attach_and_unlock_inode+0x3f0/0x5d0 [ 482.579116][ C0] writeback_sb_inodes+0x6b5/0x1000 [ 482.579142][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 482.579178][ C0] ? __pfx_move_expired_inodes+0x10/0x10 [ 482.579192][ C0] __writeback_inodes_wb+0x111/0x240 [ 482.579207][ C0] wb_writeback+0x44f/0xaf0 [ 482.579225][ C0] ? queue_io+0x2f1/0x590 [ 482.579241][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 482.579262][ C0] wb_workfn+0xaef/0xef0 [ 482.579282][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 482.579296][ C0] ? __lock_acquire+0xab9/0xd20 [ 482.579322][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 482.579340][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 482.579352][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 482.579365][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 482.579400][ C0] process_scheduled_works+0xae1/0x17b0 [ 482.579432][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 482.579455][ C0] worker_thread+0x8a0/0xda0 [ 482.579469][ C0] kthread+0x70e/0x8a0 [ 482.579478][ C0] ? __pfx_worker_thread+0x10/0x10 [ 482.579483][ C0] ? __pfx_kthread+0x10/0x10 [ 482.579491][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 482.579498][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.579508][ C0] ? __pfx_kthread+0x10/0x10 [ 482.579515][ C0] ret_from_fork+0x3f9/0x770 [ 482.579525][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 482.579535][ C0] ? __pfx_kthread+0x10/0x10 [ 482.579542][ C0] ret_from_fork_asm+0x1a/0x30 [ 482.579556][ C0] VM DIAGNOSIS: 19:29:56 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000063 RBX=0000000000000063 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073f0 R8 =ffff888033c10237 R9 =1ffff11006782046 R10=dffffc0000000000 R11=ffffffff8546fe70 R12=dffffc0000000000 R13=ffffffff99ac38eb R14=ffffffff99dc8780 R15=0000000000000000 RIP=ffffffff8546feec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808d252000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa555ec7e10 CR3=000000000df38000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c000d0 Opmask01=0000000000000fff Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a60ce07b 00000000cec3662e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f133d0865c8c8c6 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa555ede24e 00007fa555f1a080 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa555ede25d 0000000000000006 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa555ede265 0000000000000006 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa555ede0d2 0000000000000006 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa500000018 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa555f11a08 00007fa555f11a00 00007fa555f11a00 00007fa555f19d80 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d40004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000