[ 439.888908][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.895248][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '10.128.1.252' (ED25519) to the list of known hosts. executing program [ 445.546995][ T5499] chnl_net:caif_netlink_parms(): no params data found [ 446.176118][ T5499] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.254097][ T5499] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.325989][ T5499] device bridge_slave_0 entered promiscuous mode [ 446.363730][ T5499] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.413956][ T5499] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.474806][ T5499] device bridge_slave_1 entered promiscuous mode [ 446.617339][ T5499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.684807][ T4664] Bluetooth: hci15: command 0x0409 tx timeout [ 446.705415][ T5499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.896670][ T5499] team0: Port device team_slave_0 added [ 446.955980][ T5499] team0: Port device team_slave_1 added [ 447.116784][ T5499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.123853][ T5499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.333386][ T5499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.404871][ T5499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.452327][ T5499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.610488][ T5499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.847200][ T5499] device hsr_slave_0 entered promiscuous mode [ 447.905307][ T5499] device hsr_slave_1 entered promiscuous mode [ 447.964622][ T5499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.994721][ T5499] Cannot create hsr debugfs directory [ 448.535931][ T5499] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.659637][ T5499] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.775044][ T5043] Bluetooth: hci15: command 0x041b tx timeout [ 448.800374][ T5499] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.975932][ T5499] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.385834][ T5499] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 449.446232][ T5499] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 449.505268][ T5499] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 449.567816][ T5499] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 450.025009][ T5499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.118342][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 450.151410][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 450.218639][ T5499] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.293498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 450.315633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 450.376778][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.383869][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.495587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 450.586027][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 450.605171][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 450.662906][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.670012][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.776984][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 450.835571][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 450.855040][ T4285] Bluetooth: hci15: command 0x040f tx timeout [ 450.895470][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 450.964787][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 451.080269][ T5499] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 451.145151][ T5499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.226654][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 451.245092][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 451.295907][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 451.365250][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 451.425980][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 451.475603][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 451.533100][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 451.595480][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 452.226011][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 452.233513][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 452.290357][ T5499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.924868][ T4285] Bluetooth: hci15: command 0x0419 tx timeout [ 453.166762][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 453.216338][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 453.315497][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 453.355321][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 453.395971][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 453.455627][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 453.507907][ T5499] device veth0_vlan entered promiscuous mode [ 453.585792][ T5499] device veth1_vlan entered promiscuous mode [ 453.725501][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 453.765819][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 453.827768][ T5499] device veth0_macvtap entered promiscuous mode [ 453.862142][ T5499] device veth1_macvtap entered promiscuous mode [ 453.994849][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.054725][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.064649][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.194817][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.204653][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.314724][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.324567][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.446616][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.516411][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.584781][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.594635][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.714713][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.724559][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.856795][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.934711][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.994703][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.004547][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.136575][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.186356][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.254262][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.354728][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.414735][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.424580][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.544706][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.554538][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.684706][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.694636][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.814938][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.866505][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.934741][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.007184][ T5499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.015274][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 456.023543][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 456.097428][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 456.155534][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 456.220991][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.285106][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.365581][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.436400][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.500166][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.564710][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.574544][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.695175][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.765097][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.844700][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.854541][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.974701][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.984538][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.095400][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.174744][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.237902][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.304803][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.324877][ T4663] Bluetooth: hci11: command 0x0406 tx timeout [ 457.358057][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.421725][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.485052][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.544715][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.626635][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.698009][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.764718][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.824711][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.884854][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.944709][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.014738][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.024577][ T5499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.164697][ T5499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.180230][ T5499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.231103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 458.265550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 458.337923][ T5499] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.385028][ T5499] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.393748][ T5499] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.494754][ T5499] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.819388][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.858852][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.975598][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 459.036453][ T549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.044498][ T549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.126336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 480.205481][ T27] INFO: task syz.0.26:5373 blocked for more than 143 seconds. [ 480.213214][ T27] Not tainted syzkaller #0 [ 480.256194][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 480.305302][ T27] task:syz.0.26 state:D stack:26240 pid: 5373 ppid: 5351 flags:0x00004004 [ 480.314607][ T27] Call Trace: [ 480.394722][ T27] [ 480.397706][ T27] __schedule+0x11bb/0x4390 [ 480.402265][ T27] ? release_firmware_map_entry+0x190/0x190 [ 480.494730][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 480.500763][ T27] ? lock_chain_count+0x20/0x20 [ 480.574757][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 480.579872][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 480.644737][ T27] schedule+0x11b/0x1e0 [ 480.648941][ T27] rwsem_down_write_slowpath+0xc46/0x11f0 [ 480.706349][ T27] ? rwsem_write_trylock+0x1b0/0x1b0 [ 480.711689][ T27] ? user_get_super+0xb8/0x240 [ 480.768361][ T27] ? rwsem_write_trylock+0x12f/0x1b0 [ 480.773707][ T27] user_get_super+0xcd/0x240 [ 480.834752][ T27] __se_sys_quotactl+0x45e/0x6c0 [ 480.839739][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 480.934816][ T27] ? __x64_sys_quotactl+0xa0/0xa0 [ 480.939896][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 481.005191][ T27] ? lock_chain_count+0x20/0x20 [ 481.010086][ T27] ? vtime_user_exit+0x2dc/0x400 [ 481.075432][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 481.080680][ T27] do_syscall_64+0x4c/0xa0 [ 481.146266][ T27] ? clear_bhb_loop+0x30/0x80 [ 481.150982][ T27] ? clear_bhb_loop+0x30/0x80 [ 481.204895][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 481.210836][ T27] RIP: 0033:0x7f21335eb929 [ 481.274724][ T27] RSP: 002b:00007f213285b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 481.325207][ T27] RAX: ffffffffffffffda RBX: 00007f2133812fa0 RCX: 00007f21335eb929 [ 481.335120][ T27] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffff80000302 [ 481.343193][ T27] RBP: 00007f213366db39 R08: 0000000000000000 R09: 0000000000000000 [ 481.434734][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.442746][ T27] R13: 0000000000000000 R14: 00007f2133812fa0 R15: 00007ffc6bed1e68 [ 481.534881][ T27] [ 481.565177][ T27] [ 481.565177][ T27] Showing all locks held in the system: [ 481.572923][ T27] 1 lock held by khungtaskd/27: [ 481.644917][ T27] #0: ffffffff8c11c660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 481.654283][ T27] 2 locks held by kworker/u4:3/549: [ 481.744781][ T27] 2 locks held by getty/3952: [ 481.749497][ T27] #0: ffff88802bd53098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 481.824748][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 481.894810][ T27] 3 locks held by syz.0.16/5078: [ 481.899790][ T27] 3 locks held by syz.1.17/5105: [ 481.955264][ T27] 3 locks held by syz.2.18/5127: [ 481.960242][ T27] 3 locks held by syz.3.19/5150: [ 482.026411][ T27] 3 locks held by syz.4.20/5185: [ 482.031404][ T27] 3 locks held by syz.5.21/5215: [ 482.094724][ T27] 3 locks held by syz.6.22/5245: [ 482.101337][ T27] 3 locks held by syz.7.23/5282: [ 482.144926][ T27] 3 locks held by syz.8.24/5311: [ 482.149931][ T27] 3 locks held by syz.9.25/5348: [ 482.204993][ T27] 1 lock held by syz.0.26/5373: [ 482.209878][ T27] #0: ffff888024a540e0 (&type->s_umount_key#53){+.+.}-{3:3}, at: user_get_super+0xcd/0x240 [ 482.294721][ T27] 1 lock held by syz.1.27/5396: [ 482.299714][ T27] #0: ffff888143fec0e0 (&type->s_umount_key#53){+.+.}-{3:3}, at: user_get_super+0xcd/0x240 [ 482.384792][ T27] 1 lock held by syz.2.28/5426: [ 482.389673][ T27] #0: ffff88807d11c0e0 (&type->s_umount_key#53){+.+.}-{3:3}, at: user_get_super+0xcd/0x240 [ 482.474732][ T27] 1 lock held by syz.3.29/5451: [ 482.479612][ T27] #0: ffff88807a51e0e0 (&type->s_umount_key#53){+.+.}-{3:3}, at: user_get_super+0xcd/0x240 [ 482.576570][ T27] 1 lock held by syz.4.30/5486: [ 482.581540][ T27] #0: ffff88805c7c60e0 (&type->s_umount_key#53){+.+.}-{3:3}, at: user_get_super+0xcd/0x240 [ 482.674688][ T27] 1 lock held by syz-executor115/5497: [ 482.680174][ T27] #0: ffff888024a540e0 (&type->s_umount_key#53){+.+.}-{3:3}, at: user_get_super+0xcd/0x240 [ 482.774715][ T27] 1 lock held by syz.5.31/5528: [ 482.785434][ T27] #0: ffff8880237ea0e0 (&type->s_umount_key#53){+.+.}-{3:3}, at: user_get_super+0xcd/0x240 [ 482.844898][ T27] [ 482.847252][ T27] ============================================= [ 482.847252][ T27] [ 482.915633][ T27] NMI backtrace for cpu 0 [ 482.920000][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 482.927309][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 482.937370][ T27] Call Trace: [ 482.940642][ T27] [ 482.943666][ T27] dump_stack_lvl+0x168/0x230 [ 482.948345][ T27] ? show_regs_print_info+0x20/0x20 [ 482.953543][ T27] ? load_image+0x3b0/0x3b0 [ 482.958039][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 482.963407][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 482.968536][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 482.973488][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 482.975115][ T5041] Bluetooth: hci12: command 0x0406 tx timeout [ 482.979638][ T27] ? _printk+0xcc/0x110 [ 482.989823][ T27] ? load_image+0x3b0/0x3b0 [ 482.994333][ T27] ? load_image+0x3b0/0x3b0 [ 482.998834][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 483.004895][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 483.010876][ T27] watchdog+0xe0f/0xe50 [ 483.015031][ T27] kthread+0x436/0x520 [ 483.019101][ T27] ? hungtask_pm_notify+0x40/0x40 [ 483.024120][ T27] ? kthread_blkcg+0xd0/0xd0 [ 483.028722][ T27] ret_from_fork+0x1f/0x30 [ 483.033149][ T27] [ 483.037781][ T27] Sending NMI from CPU 0 to CPUs 1: [ 483.042991][ C1] NMI backtrace for cpu 1 [ 483.043000][ C1] CPU: 1 PID: 5215 Comm: syz.5.21 Not tainted syzkaller #0 [ 483.043015][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 483.043023][ C1] RIP: 0010:lock_is_held_type+0x52/0x190 [ 483.043044][ C1] Code: 0f 84 03 01 00 00 65 8b 05 4b 88 59 76 85 c0 0f 85 f4 00 00 00 65 48 8b 1d bb 7e 59 76 83 bb ec 0a 00 00 00 0f 85 df 00 00 00 <41> 89 f7 49 89 fe 48 c7 04 24 00 00 00 00 9c 8f 04 24 4c 8b 2c 24 [ 483.043057][ C1] RSP: 0018:ffffc9000387f0f8 EFLAGS: 00000246 [ 483.043070][ C1] RAX: 0000000000000000 RBX: ffff88802ab9bb80 RCX: ffff88802ab9bb80 [ 483.043081][ C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8c11c6c0 [ 483.043090][ C1] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100e851492 [ 483.043100][ C1] R10: ffffed100e851492 R11: 1ffff1100e851491 R12: dffffc0000000000 [ 483.043111][ C1] R13: dffffc0000000000 R14: ffff88807428a488 R15: 00000000ffffffff [ 483.043121][ C1] FS: 00007efea160a6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 483.043134][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 483.043143][ C1] CR2: 00007f4f4fdbf6c8 CR3: 000000007597e000 CR4: 00000000003506e0 [ 483.043156][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 483.043164][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 483.043173][ C1] Call Trace: [ 483.043178][ C1] [ 483.043186][ C1] ___might_sleep+0xa3/0x600 [ 483.043204][ C1] ? __wake_up_bit+0x100/0x100 [ 483.043220][ C1] ? __might_sleep+0xf0/0xf0 [ 483.043232][ C1] ? __getblk_gfp+0x51/0xb70 [ 483.043248][ C1] ? ll_rw_block+0x221/0x240 [ 483.043266][ C1] search_by_key+0x780/0x4390 [ 483.043293][ C1] ? pathrelse+0x140/0x140 [ 483.043307][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 483.043328][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 483.043344][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 483.043362][ C1] ? search_by_entry_key+0x4cb/0x1370 [ 483.043381][ C1] search_by_entry_key+0x32/0x1370 [ 483.043398][ C1] ? __brelse+0x55/0x90 [ 483.043410][ C1] ? pathrelse+0xe2/0x140 [ 483.043425][ C1] reiserfs_find_entry+0xeec/0x18e0 [ 483.043448][ C1] ? reiserfs_get_parent+0x270/0x270 [ 483.043463][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 483.043483][ C1] ? mutex_lock_nested+0x17/0x20 [ 483.043499][ C1] reiserfs_lookup+0x1a7/0x420 [ 483.043516][ C1] ? reiserfs_find_entry+0x18e0/0x18e0 [ 483.043545][ C1] ? __init_waitqueue_head+0xa5/0x150 [ 483.043562][ C1] __lookup_slow+0x27d/0x3d0 [ 483.043578][ C1] ? lookup_one_len+0x2c0/0x2c0 [ 483.043599][ C1] lookup_one_len+0x18e/0x2c0 [ 483.043614][ C1] ? lookup_one_common+0x460/0x460 [ 483.043632][ C1] reiserfs_lookup_privroot+0x85/0x1e0 [ 483.043648][ C1] reiserfs_fill_super+0x1f65/0x23e0 [ 483.043669][ C1] ? reiserfs_kill_sb+0x140/0x140 [ 483.043682][ C1] ? snprintf+0xd7/0x120 [ 483.043699][ C1] ? vscnprintf+0x80/0x80 [ 483.043715][ C1] ? set_blocksize+0x1f1/0x370 [ 483.043732][ C1] ? sb_set_blocksize+0xa5/0xe0 [ 483.043748][ C1] mount_bdev+0x287/0x3c0 [ 483.043763][ C1] ? reiserfs_kill_sb+0x140/0x140 [ 483.043778][ C1] legacy_get_tree+0xe6/0x180 [ 483.043792][ C1] ? remove_save_link+0x3c0/0x3c0 [ 483.043807][ C1] vfs_get_tree+0x88/0x270 [ 483.043822][ C1] do_new_mount+0x24a/0xa40 [ 483.043841][ C1] __se_sys_mount+0x2d6/0x3c0 [ 483.043858][ C1] ? __x64_sys_mount+0xc0/0xc0 [ 483.043874][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 483.043888][ C1] ? __x64_sys_mount+0x1c/0xc0 [ 483.043908][ C1] do_syscall_64+0x4c/0xa0 [ 483.043920][ C1] ? clear_bhb_loop+0x30/0x80 [ 483.043933][ C1] ? clear_bhb_loop+0x30/0x80 [ 483.043947][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 483.043962][ C1] RIP: 0033:0x7efea239c0ca [ 483.043976][ C1] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.043988][ C1] RSP: 002b:00007efea1609e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 483.044002][ C1] RAX: ffffffffffffffda RBX: 00007efea1609ef0 RCX: 00007efea239c0ca [ 483.044013][ C1] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 00007efea1609eb0 [ 483.044023][ C1] RBP: 00002000000000c0 R08: 00007efea1609ef0 R09: 000000000000800c [ 483.044032][ C1] R10: 000000000000800c R11: 0000000000000246 R12: 0000200000000040 [ 483.044042][ C1] R13: 00007efea1609eb0 R14: 000000000000111c R15: 0000200000000300 [ 483.044058][ C1] [ 483.944138][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 483.951042][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 483.958281][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 483.968428][ T27] Call Trace: [ 483.971707][ T27] [ 483.974632][ T27] dump_stack_lvl+0x168/0x230 [ 483.979308][ T27] ? show_regs_print_info+0x20/0x20 [ 483.984592][ T27] ? load_image+0x3b0/0x3b0 [ 483.989103][ T27] panic+0x2c9/0x7f0 [ 483.992987][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 483.998615][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 484.003114][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 484.008658][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 484.014811][ T27] watchdog+0xe4e/0xe50 [ 484.018967][ T27] kthread+0x436/0x520 [ 484.023024][ T27] ? hungtask_pm_notify+0x40/0x40 [ 484.028036][ T27] ? kthread_blkcg+0xd0/0xd0 [ 484.032620][ T27] ret_from_fork+0x1f/0x30 [ 484.037039][ T27] [ 484.040243][ T27] Kernel Offset: disabled [ 484.044564][ T27] Rebooting in 86400 seconds..