[ 442.268463][ T5538] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 442.325008][ T5538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 442.472400][ T5538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 442.520056][ T5538] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 442.561317][ T5538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 442.606996][ T5538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 442.822588][ T1107] Bluetooth: hci16: command 0x0409 tx timeout
[ 442.915925][ T5538] device hsr_slave_0 entered promiscuous mode
[ 442.981223][ T5538] device hsr_slave_1 entered promiscuous mode
[ 443.003885][ T5538] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 443.048477][ T5538] Cannot create hsr debugfs directory
[ 443.681982][ T5538] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 443.829559][ T5538] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 444.046904][ T5538] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 444.175429][ T5538] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 444.578266][ T5538] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 444.658231][ T5538] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 444.743730][ T5538] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 444.803063][ T5538] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 444.902969][ T4338] Bluetooth: hci16: command 0x041b tx timeout
[ 445.478472][ T5538] 8021q: adding VLAN 0 to HW filter on device bond0
[ 445.653353][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 445.686637][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 445.761475][ T5538] 8021q: adding VLAN 0 to HW filter on device team0
[ 445.793743][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 445.823426][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 445.832055][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state
[ 445.839251][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 445.929125][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 445.979734][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 446.032737][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state
[ 446.039823][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 446.109938][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 446.168812][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 446.291423][ T5538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 446.303471][ T5538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 446.423014][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 446.431878][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 446.510291][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 446.573592][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 446.597728][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 446.648689][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 446.770044][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 446.848686][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 446.930735][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 446.982822][ T4299] Bluetooth: hci16: command 0x040f tx timeout
[ 447.005068][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 447.090087][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts.
[ 447.953591][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 447.961159][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 448.114928][ T5538] 8021q: adding VLAN 0 to HW filter on device batadv0
executing program
[ 448.777462][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 448.805013][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 449.062520][ T4299] Bluetooth: hci16: command 0x0419 tx timeout
[ 449.104008][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 449.157155][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 449.237633][ T5538] device veth0_vlan entered promiscuous mode
[ 449.290109][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 449.316679][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 449.397282][ T5538] device veth1_vlan entered promiscuous mode
[ 449.600674][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 449.636227][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 449.671365][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 449.717958][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 449.741425][ T5538] device veth0_macvtap entered promiscuous mode
[ 449.761954][ T5538] device veth1_macvtap entered promiscuous mode
[ 449.820286][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 449.870845][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 449.987268][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 450.017934][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 450.069101][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 450.087482][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 450.105089][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 450.118561][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 450.196303][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 450.227794][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 450.261419][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 450.278896][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 450.311250][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 450.362839][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 450.381682][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 450.393176][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 450.415391][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 450.428478][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 450.454576][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 450.469257][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 450.503000][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 450.533455][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 450.578221][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 450.595314][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 450.648736][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 450.787616][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 450.874870][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 451.042710][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 451.077566][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 451.104754][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 451.128464][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 451.149018][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 451.264197][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 451.281824][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 451.338011][ T5538] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 451.397529][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 451.452373][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 451.484146][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 451.497455][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 451.584234][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 451.662532][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 451.731836][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 451.834181][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 451.849048][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 451.860769][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 451.886535][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 451.898121][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 451.930213][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 451.941206][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 451.979847][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 451.999326][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 452.027886][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 452.058332][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 452.089129][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 452.118753][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 452.133088][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 452.158749][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 452.171400][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 452.203828][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 452.222724][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 452.394402][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 452.408035][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 452.442712][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 452.457972][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 452.472353][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 452.491545][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 452.502954][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 452.620356][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 452.709547][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 452.778436][ T5538] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 452.828837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 452.889006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 452.992236][ T5538] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 453.026711][ T5538] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 453.044157][ T5538] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 453.055491][ T5538] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 453.370028][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 453.446112][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 453.510128][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 453.597094][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 453.643203][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 453.687356][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 461.713222][ T27] INFO: task syz.0.26:5391 blocked for more than 143 seconds.
[ 461.720975][ T27] Not tainted 5.15.189-syzkaller #0
[ 461.763321][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 461.772041][ T27] task:syz.0.26 state:D stack:26432 pid: 5391 ppid: 5368 flags:0x00004004
[ 461.792187][ T27] Call Trace:
[ 461.812820][ T27]
[ 461.852723][ T27] __schedule+0x11b8/0x43b0
[ 461.866559][ T27] ? release_firmware_map_entry+0x190/0x190
[ 461.905042][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 461.918369][ T27] ? lock_chain_count+0x20/0x20
[ 461.938578][ T27] ? _raw_spin_lock_irq+0xab/0xe0
[ 462.013906][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 462.019461][ T27] schedule+0x11b/0x1e0
[ 462.024813][ T27] schedule_preempt_disabled+0xf/0x20
[ 462.032072][ T27] rwsem_down_read_slowpath+0x528/0x990
[ 462.093100][ T27] ? down_write_killable_nested+0x90/0x90
[ 462.098875][ T27] ? read_lock_is_recursive+0x10/0x10
[ 462.176718][ T27] ? __lock_acquire+0x7c60/0x7c60
[ 462.181793][ T27] ? __rwlock_init+0x140/0x140
[ 462.189779][ T27] down_read+0x96/0x2e0
[ 462.204914][ T27] user_get_super+0x118/0x240
[ 462.214638][ T27] __se_sys_quotactl+0x45e/0x6c0
[ 462.220511][ T27] ? __lock_acquire+0x7c60/0x7c60
[ 462.270700][ T27] ? __x64_sys_quotactl+0xa0/0xa0
[ 462.278205][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 462.294641][ T27] ? lock_chain_count+0x20/0x20
[ 462.299636][ T27] ? vtime_user_exit+0x2dc/0x400
[ 462.309416][ T27] ? lockdep_hardirqs_on+0x94/0x140
[ 462.318630][ T27] do_syscall_64+0x4c/0xa0
[ 462.364570][ T27] ? clear_bhb_loop+0x30/0x80
[ 462.369600][ T27] ? clear_bhb_loop+0x30/0x80
[ 462.383177][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 462.396749][ T27] RIP: 0033:0x7f8badc4d969
[ 462.401497][ T27] RSP: 002b:00007f8bacebd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[ 462.410898][ T27] RAX: ffffffffffffffda RBX: 00007f8bade74fa0 RCX: 00007f8badc4d969
[ 462.426451][ T27] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffff80000800
[ 462.502731][ T4342] Bluetooth: hci12: command 0x0406 tx timeout
[ 462.530380][ T27] RBP: 00007f8badccfab1 R08: 0000000000000000 R09: 0000000000000000
[ 462.615211][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 462.680239][ T27] R13: 0000000000000000 R14: 00007f8bade74fa0 R15: 00007ffe644c8b58
[ 462.741932][ T27]
[ 462.773030][ T27]
[ 462.773030][ T27] Showing all locks held in the system:
[ 462.800938][ T27] 1 lock held by khungtaskd/27:
[ 462.826358][ T27] #0: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[ 462.868236][ T27] 2 locks held by getty/3945:
[ 462.922912][ T27] #0: ffff88802bd26098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[ 462.957200][ T27] #1: ffffc900025ce2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30
[ 463.032137][ T27] 2 locks held by kworker/u4:4/4219:
[ 463.055931][ T27] 3 locks held by syz.0.16/5091:
[ 463.061596][ T27] #0: ffff88807bb440e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[ 463.232560][ T27] #1: ffffc900033a10f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0
[ 463.284162][ T27] #2: ffffc900033a1180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0
[ 463.298933][ T27] 3 locks held by syz.1.17/5116:
[ 463.313089][ T27] #0: ffff88805e6ee0e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[ 463.367595][ T27] #1: ffffc900034d10f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0
[ 463.394840][ T27] #2: ffffc900034d1180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0
[ 463.405801][ T27] 3 locks held by syz.2.18/5140:
[ 463.444170][ T27] 6 locks held by syz.3.19/5165:
[ 463.450375][ T27] #0: ffff8880694d20e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[ 463.501940][ T27] #1: ffffc900037210f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0
[ 463.527789][ T27] #2: ffffc90003721180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0
[ 463.543758][ T27] #3: ffff88804f5fc090 (&jl->j_commit_mutex){+.+.}-{3:3}, at: flush_commit_list+0x6d8/0x1d70
[ 463.567123][ T27] #4: ffff8880b913a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[ 463.712686][ T27] #5: ffffe8ffffd7aac8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x495/0x810
[ 463.725586][ T27] 4 locks held by syz.4.20/5199:
[ 463.730555][ T27] #0: ffff888074b3c0e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[ 463.760624][ T27] #1: ffffc900038510f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0
[ 463.829615][ T27] #2: ffffc90003851180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0
[ 463.841060][ T27] #3: ffff88801e50f890 (&jl->j_commit_mutex){+.+.}-{3:3}, at: flush_commit_list+0x6d8/0x1d70
[ 463.884102][ T27] 4 locks held by syz.5.21/5227:
[ 463.890857][ T27] 4 locks held by syz.6.22/5260:
[ 463.899626][ T27] #0: ffff88802002e0e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[ 463.999116][ T27] #1: ffffc90003b210f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0
[ 464.061702][ T27] #2: ffffc90003b21180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0
[ 464.137228][ T27] #3: ffff8880b913a318 (&rq->__lock){-.-.}-{2:2}, at: flush_commit_list+0x6d8/0x1d70
[ 464.273294][ T27] 4 locks held by syz.7.23/5298:
[ 464.278285][ T27] 3 locks held by syz.8.24/5329:
[ 464.337757][ T27] #0: ffff88801c4e00e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[ 464.372214][ T27] #1: ffffc90003fe10f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0
[ 464.385493][ T27] #2: ffffc90003fe1180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0
[ 464.432251][ T27] 3 locks held by syz.9.25/5359:
[ 464.441293][ T27] #0: ffff88807b50e0e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[ 464.517232][ T27] #1: ffffc900041410f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0
[ 464.569865][ T27] #2: ffffc90004141180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0
[ 464.595694][ T27] 1 lock held by syz.0.26/5391:
[ 464.600692][ T27] #0: ffff88807bb440e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[ 464.628950][ T27] 1 lock held by syz.1.27/5414:
[ 464.665907][ T27] #0: ffff88805e6ee0e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[ 464.726311][ T27] 1 lock held by syz.2.28/5444:
[ 464.761578][ T27] #0: ffff888077f7e0e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[ 464.841460][ T27] 1 lock held by syz.3.29/5469:
[ 464.876471][ T27] #0: ffff8880694d20e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[ 464.896182][ T27] 1 lock held by syz.4.30/5499:
[ 464.901184][ T27] #0: ffff888074b3c0e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[ 464.995527][ T27] 1 lock held by syz.5.31/5534:
[ 465.020034][ T27] #0: ffff8880584160e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[ 465.033930][ T27] 1 lock held by syz-executor344/5573:
[ 465.039996][ T27] #0: ffff88807bb440e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[ 465.052985][ T27] 1 lock held by syz.6.32/5577:
[ 465.112811][ T27] #0: ffff88802002e0e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[ 465.198526][ T27]
[ 465.218489][ T27] =============================================
[ 465.218489][ T27]
[ 465.231883][ T27] NMI backtrace for cpu 1
[ 465.236338][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0
[ 465.244330][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 465.254573][ T27] Call Trace:
[ 465.258054][ T27]
[ 465.261077][ T27] dump_stack_lvl+0x168/0x230
[ 465.265775][ T27] ? show_regs_print_info+0x20/0x20
[ 465.270990][ T27] ? load_image+0x3b0/0x3b0
[ 465.275595][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0
[ 465.281202][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0
[ 465.286507][ T27] nmi_cpu_backtrace+0x397/0x3d0
[ 465.291590][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280
[ 465.297759][ T27] ? _printk+0xcc/0x110
[ 465.301932][ T27] ? load_image+0x3b0/0x3b0
[ 465.306555][ T27] ? load_image+0x3b0/0x3b0
[ 465.311194][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 465.317278][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280
[ 465.323273][ T27] watchdog+0xe0f/0xe50
[ 465.327494][ T27] kthread+0x436/0x520
[ 465.331587][ T27] ? hungtask_pm_notify+0x40/0x40
[ 465.336623][ T27] ? kthread_blkcg+0xd0/0xd0
[ 465.341229][ T27] ret_from_fork+0x1f/0x30
[ 465.345672][ T27]
[ 465.350572][ T27] Sending NMI from CPU 1 to CPUs 0:
[ 465.356272][ C0] NMI backtrace for cpu 0
[ 465.356285][ C0] CPU: 0 PID: 5140 Comm: syz.2.18 Not tainted 5.15.189-syzkaller #0
[ 465.356302][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 465.356310][ C0] RIP: 0010:lock_is_held_type+0x61/0x190
[ 465.356333][ C0] Code: 0f 85 f4 00 00 00 65 48 8b 1d 9b 3f 5a 76 83 bb ec 0a 00 00 00 0f 85 df 00 00 00 41 89 f7 49 89 fe 48 c7 04 24 00 00 00 00 9c <8f> 04 24 4c 8b 2c 24 fa 48 c7 c7 c0 23 0b 8a e8 4b 0e 00 00 65 ff
[ 465.356345][ C0] RSP: 0018:ffffc900035ef340 EFLAGS: 00000246
[ 465.356358][ C0] RAX: 0000000000000000 RBX: ffff88801a1cd940 RCX: 3692dde1f27d5100
[ 465.356369][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8c11c360
[ 465.356378][ C0] RBP: 00000000ffffffff R08: dffffc0000000000 R09: fffffbfff1ff6e19
[ 465.356388][ C0] R10: fffffbfff1ff6e19 R11: 1ffffffff1ff6e18 R12: ffffc900035ef480
[ 465.356398][ C0] R13: ffff888016cf4390 R14: ffffffff8c11c360 R15: 00000000ffffffff
[ 465.356409][ C0] FS: 00007f5ab4bf46c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[ 465.356422][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 465.356431][ C0] CR2: 000055a1f3a1ba48 CR3: 0000000021285000 CR4: 00000000003506f0
[ 465.356445][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 465.356453][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 465.356461][ C0] Call Trace:
[ 465.356466][ C0]
[ 465.356473][ C0] xas_descend+0x101/0x3b0
[ 465.356489][ C0] xas_load+0xba/0x140
[ 465.356502][ C0] pagecache_get_page+0x19d/0xef0
[ 465.356523][ C0] ? page_cache_prev_miss+0x360/0x360
[ 465.356543][ C0] ? __find_get_block+0x244/0x10b0
[ 465.356562][ C0] __find_get_block+0x366/0x10b0
[ 465.356579][ C0] ? lock_chain_count+0x20/0x20
[ 465.356595][ C0] ? write_boundary_block+0x140/0x140
[ 465.356615][ C0] ? rcu_lock_acquire+0x30/0x30
[ 465.356631][ C0] __getblk_gfp+0x2c/0xb70
[ 465.356643][ C0] ? journal_mark_dirty+0xb4b/0xdf0
[ 465.356663][ C0] do_journal_end+0x22ee/0x42d0
[ 465.356694][ C0] do_journal_begin_r+0xa36/0x1010
[ 465.356719][ C0] ? journal_join_abort+0xe0/0xe0
[ 465.356739][ C0] journal_begin+0x148/0x350
[ 465.356755][ C0] reiserfs_fill_super+0x1654/0x23e0
[ 465.356774][ C0] ? reiserfs_kill_sb+0x140/0x140
[ 465.356786][ C0] ? snprintf+0xd7/0x120
[ 465.356803][ C0] ? vscnprintf+0x80/0x80
[ 465.356818][ C0] ? set_blocksize+0x1f1/0x370
[ 465.356835][ C0] ? sb_set_blocksize+0xa5/0xe0
[ 465.356851][ C0] mount_bdev+0x287/0x3c0
[ 465.356865][ C0] ? reiserfs_kill_sb+0x140/0x140
[ 465.356879][ C0] legacy_get_tree+0xe6/0x180
[ 465.356893][ C0] ? remove_save_link+0x3c0/0x3c0
[ 465.356907][ C0] vfs_get_tree+0x88/0x270
[ 465.356921][ C0] do_new_mount+0x24a/0xa40
[ 465.356938][ C0] __se_sys_mount+0x2d6/0x3c0
[ 465.356954][ C0] ? __x64_sys_mount+0xc0/0xc0
[ 465.356969][ C0] ? lockdep_hardirqs_on+0x94/0x140
[ 465.356982][ C0] ? __x64_sys_mount+0x1c/0xc0
[ 465.356996][ C0] do_syscall_64+0x4c/0xa0
[ 465.357011][ C0] ? clear_bhb_loop+0x30/0x80
[ 465.357024][ C0] ? clear_bhb_loop+0x30/0x80
[ 465.357037][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 465.357053][ C0] RIP: 0033:0x7f5ab598610a
[ 465.357066][ C0] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 465.357077][ C0] RSP: 002b:00007f5ab4bf3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 465.357091][ C0] RAX: ffffffffffffffda RBX: 00007f5ab4bf3ef0 RCX: 00007f5ab598610a
[ 465.357101][ C0] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007f5ab4bf3eb0
[ 465.357110][ C0] RBP: 0000200000000080 R08: 00007f5ab4bf3ef0 R09: 000000000000800c
[ 465.357119][ C0] R10: 000000000000800c R11: 0000000000000246 R12: 0000200000000040
[ 465.357138][ C0] R13: 00007f5ab4bf3eb0 R14: 000000000000112d R15: 0000200000000300
[ 465.357153][ C0]
[ 465.810606][ T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 465.817613][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0
[ 465.825601][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 465.835754][ T27] Call Trace:
[ 465.839076][ T27]
[ 465.842243][ T27] dump_stack_lvl+0x168/0x230
[ 465.846941][ T27] ? show_regs_print_info+0x20/0x20
[ 465.852342][ T27] ? load_image+0x3b0/0x3b0
[ 465.856875][ T27] panic+0x2c9/0x7f0
[ 465.860787][ T27] ? schedule_preempt_disabled+0x20/0x20
[ 465.866439][ T27] ? bpf_jit_dump+0xd0/0xd0
[ 465.870961][ T27] ? __irq_work_queue_local+0x12c/0x190
[ 465.876532][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280
[ 465.882775][ T27] watchdog+0xe4e/0xe50
[ 465.886956][ T27] kthread+0x436/0x520
[ 465.891037][ T27] ? hungtask_pm_notify+0x40/0x40
[ 465.896131][ T27] ? kthread_blkcg+0xd0/0xd0
[ 465.900748][ T27] ret_from_fork+0x1f/0x30
[ 465.905194][ T27]
[ 465.908510][ T27] Kernel Offset: disabled
[ 465.912918][ T27] Rebooting in 86400 seconds..