[ 442.038519][ T4678] Bluetooth: hci11: command 0x0406 tx timeout
Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts.
executing program
[ 448.361762][ T5516] chnl_net:caif_netlink_parms(): no params data found
[ 448.746551][ T5516] bridge0: port 1(bridge_slave_0) entered blocking state
[ 448.754047][ T5516] bridge0: port 1(bridge_slave_0) entered disabled state
[ 448.765423][ T5516] device bridge_slave_0 entered promiscuous mode
[ 448.774609][ T5516] bridge0: port 2(bridge_slave_1) entered blocking state
[ 448.783906][ T5516] bridge0: port 2(bridge_slave_1) entered disabled state
[ 448.792703][ T5516] device bridge_slave_1 entered promiscuous mode
[ 448.825181][ T5516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 448.839866][ T5516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 448.994959][ T5516] team0: Port device team_slave_0 added
[ 449.037877][ T5516] team0: Port device team_slave_1 added
[ 449.169859][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 449.176836][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 449.245335][ T5516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 449.318435][ T4678] Bluetooth: hci16: command 0x0409 tx timeout
[ 449.343226][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 449.412523][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 449.449907][ T5516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 449.666950][ T5516] device hsr_slave_0 entered promiscuous mode
[ 449.727950][ T5516] device hsr_slave_1 entered promiscuous mode
[ 449.778240][ T5516] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 449.847525][ T5516] Cannot create hsr debugfs directory
[ 450.537089][ T5516] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 450.674512][ T5516] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 450.950368][ T5516] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 451.183828][ T5516] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 451.398473][ T4675] Bluetooth: hci16: command 0x041b tx timeout
[ 451.573204][ T5516] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 451.627609][ T5516] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 451.667808][ T5516] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 451.697768][ T5516] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 452.091565][ T5516] 8021q: adding VLAN 0 to HW filter on device bond0
[ 452.156277][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 452.177230][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 452.208078][ T5516] 8021q: adding VLAN 0 to HW filter on device team0
[ 452.259464][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 452.276854][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 452.311610][ T4206] bridge0: port 1(bridge_slave_0) entered blocking state
[ 452.318858][ T4206] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 452.367050][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 452.430753][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 452.451049][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 452.523594][ T4206] bridge0: port 2(bridge_slave_1) entered blocking state
[ 452.530784][ T4206] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 452.719479][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 452.757876][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 452.771731][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 452.783924][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 452.796891][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 452.848867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 452.990067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 453.077270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 453.110193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 453.127551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 453.147325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 453.193648][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 453.478561][ T4681] Bluetooth: hci16: command 0x040f tx timeout
[ 453.925337][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 453.951285][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 454.003208][ T5516] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 454.662924][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 454.687311][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 454.806275][ T5516] device veth0_vlan entered promiscuous mode
[ 454.871550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 454.910698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 454.927568][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 455.003462][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 455.070301][ T5516] device veth1_vlan entered promiscuous mode
[ 455.192492][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 455.208132][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 455.245474][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 455.264111][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 455.286629][ T5516] device veth0_macvtap entered promiscuous mode
[ 455.328312][ T5516] device veth1_macvtap entered promiscuous mode
[ 455.362800][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 455.378213][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 455.391564][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 455.411998][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 455.429801][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 455.455482][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 455.476806][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 455.488174][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 455.498488][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 455.524049][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 455.553476][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 455.559163][ T4675] Bluetooth: hci16: command 0x0419 tx timeout
[ 455.576638][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 455.586645][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 455.600377][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 455.647368][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 455.685235][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 455.715411][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 455.740637][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 455.751312][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 455.787609][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 455.809711][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 455.844209][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 455.866492][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 455.881458][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 455.969027][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 456.017514][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 456.041791][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 456.056660][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 456.073549][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 456.179916][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 456.285715][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 456.375731][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 456.485222][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 456.515358][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 456.574815][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 456.686387][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 456.699627][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 456.713624][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 456.735848][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 456.764203][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 456.861021][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 456.931645][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 456.970324][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 457.097683][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 457.129106][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 457.176025][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 457.230812][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 457.244325][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 457.267563][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 457.283727][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 457.305606][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 457.319788][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 457.340469][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 457.379426][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 457.426011][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 457.452423][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 457.558043][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 457.620733][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 457.635837][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 457.679853][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 457.694173][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 457.732695][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 457.747402][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 457.761785][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 457.806226][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 457.820228][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 457.888009][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 457.904560][ T5516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 457.918609][ T5516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 457.934576][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 457.948922][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 457.963856][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 458.044780][ T5516] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 458.079436][ T5516] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 458.088858][ T5516] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 458.120323][ T5516] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 458.574385][ T4647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 458.703638][ T4647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 458.791093][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 458.823688][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 458.829176][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 458.912550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 461.080748][ T27] INFO: task syz.0.26:5360 blocked for more than 143 seconds.
[ 461.102132][ T27] Not tainted syzkaller #0
[ 461.144170][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 461.196697][ T27] task:syz.0.26 state:D stack:26240 pid: 5360 ppid: 5339 flags:0x00004004
[ 461.265620][ T27] Call Trace:
[ 461.282098][ T27]
[ 461.288891][ T27] __schedule+0x11bb/0x4390
[ 461.293475][ T27] ? release_firmware_map_entry+0x190/0x190
[ 461.347787][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 461.361339][ T27] ? lock_chain_count+0x20/0x20
[ 461.386200][ T27] ? _raw_spin_lock_irq+0xab/0xe0
[ 461.391846][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 461.417553][ T27] schedule+0x11b/0x1e0
[ 461.436225][ T27] schedule_preempt_disabled+0xf/0x20
[ 461.459986][ T27] rwsem_down_read_slowpath+0x528/0x990
[ 461.489878][ T27] ? down_write_killable_nested+0x90/0x90
[ 461.550545][ T27] ? read_lock_is_recursive+0x10/0x10
[ 461.556159][ T27] ? __lock_acquire+0x7c60/0x7c60
[ 461.600446][ T27] ? __rwlock_init+0x140/0x140
[ 461.605984][ T27] down_read+0x96/0x2e0
[ 461.613320][ T27] user_get_super+0x118/0x240
[ 461.634654][ T27] __se_sys_quotactl+0x45e/0x6c0
[ 461.655883][ T27] ? __lock_acquire+0x7c60/0x7c60
[ 461.663846][ T27] ? __x64_sys_quotactl+0xa0/0xa0
[ 461.673030][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 461.685072][ T27] ? lock_chain_count+0x20/0x20
[ 461.692628][ T27] ? vtime_user_exit+0x2dc/0x400
[ 461.741135][ T27] ? lockdep_hardirqs_on+0x94/0x140
[ 461.746421][ T27] do_syscall_64+0x4c/0xa0
[ 461.773000][ T27] ? clear_bhb_loop+0x30/0x80
[ 461.777727][ T27] ? clear_bhb_loop+0x30/0x80
[ 461.837712][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 461.872064][ T27] RIP: 0033:0x7fbe72ba1969
[ 461.902633][ T27] RSP: 002b:00007fbe71e11038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[ 462.004517][ T27] RAX: ffffffffffffffda RBX: 00007fbe72dc8fa0 RCX: 00007fbe72ba1969
[ 462.061756][ T27] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffff80000800
[ 462.075927][ T27] RBP: 00007fbe72c23ab1 R08: 0000000000000000 R09: 0000000000000000
[ 462.086532][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 462.132531][ T27] R13: 0000000000000000 R14: 00007fbe72dc8fa0 R15: 00007fff1f0e3a28
[ 462.244500][ T27]
[ 462.247636][ T27]
[ 462.247636][ T27] Showing all locks held in the system:
[ 462.370654][ T27] 2 locks held by kworker/u4:0/9:
[ 462.402034][ T27] 1 lock held by khungtaskd/27:
[ 462.407065][ T27] #0: ffffffff8c11c660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[ 462.525456][ T27] 2 locks held by getty/3946:
[ 462.543274][ T27] #0: ffff88802c045098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[ 462.563647][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30
[ 462.587448][ T27] 4 locks held by syz.0.16/5064:
[ 462.647557][ T27] 3 locks held by syz.1.17/5089:
[ 462.693155][ T27] #0: ffff88807a0d20e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[ 462.789091][ T27] #1: ffffc900034710f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0
[ 462.858391][ T27] #2: ffffc90003471180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0
[ 462.893120][ T27] 4 locks held by syz.2.18/5112:
[ 462.898090][ T27] 3 locks held by syz.3.19/5136:
[ 463.015453][ T27] 3 locks held by kworker/u4:7/5169:
[ 463.056635][ T27] 4 locks held by syz.4.20/5171:
[ 463.091199][ T27] #0: ffff888022bec0e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[ 463.148093][ T27] #1: ffffc900038010f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0
[ 463.173430][ T27] #2: ffffc90003801180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0
[ 463.227477][ T27] #3: ffff8880784bf490 (&jl->j_commit_mutex){+.+.}-{3:3}, at: flush_commit_list+0x6d8/0x1d70
[ 463.280384][ T27] 3 locks held by syz.5.21/5200:
[ 463.324390][ T27] #0: ffff88807abf00e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[ 463.339732][ T27] #1: ffffc900039710f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0
[ 463.415067][ T27] #2: ffffc90003971180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0
[ 463.450115][ T27] 4 locks held by syz.6.22/5230:
[ 463.455089][ T27] #0: ffff88801e90c0e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[ 463.511731][ T27] #1: ffffc90003ab10f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0
[ 463.596435][ T27] #2: ffffc90003ab1180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0
[ 463.660244][ T27] #3: ffff8880505cb090 (&jl->j_commit_mutex){+.+.}-{3:3}, at: flush_commit_list+0x6d8/0x1d70
[ 463.684404][ T27] 4 locks held by syz.7.23/5267:
[ 463.689912][ T27] #0: ffff88805b3100e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[ 463.818982][ T27] #1: ffffc90003e210f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0
[ 463.868191][ T27] #2: ffffc90003e21180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0
[ 463.884847][ T27] #3: ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[ 463.907367][ T27] 4 locks held by syz.8.24/5299:
[ 463.916036][ T27] #0: ffff8880545440e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[ 463.948456][ T27] #1: ffffc90003f810f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0
[ 463.959858][ T27] #2: ffffc90003f81180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0
[ 463.976423][ T27] #3: ffff88805c5fe090 (&jl->j_commit_mutex){+.+.}-{3:3}, at: flush_commit_list+0x6d8/0x1d70
[ 463.993134][ T27] 3 locks held by syz.9.25/5330:
[ 463.998104][ T27] #0: ffff888020f020e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[ 464.019696][ T27] #1: ffffc900040d10f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0
[ 464.142213][ T27] #2: ffffc900040d1180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0
[ 464.201093][ T27] 1 lock held by syz.0.26/5360:
[ 464.250751][ T27] #0: ffff88807bca20e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[ 464.284786][ T27] 1 lock held by syz.1.27/5386:
[ 464.293911][ T27] #0: ffff88807a0d20e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[ 464.401450][ T27] 1 lock held by syz.2.28/5416:
[ 464.406333][ T27] #0: ffff88805e0420e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[ 464.430096][ T27] 1 lock held by syz.3.29/5441:
[ 464.461681][ T27] #0: ffff8880226560e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[ 464.579733][ T27] 1 lock held by syz.4.30/5471:
[ 464.589676][ T27] #0: ffff888022bec0e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[ 464.662662][ T27] 1 lock held by syz.5.31/5506:
[ 464.667561][ T27] #0: ffff88807abf00e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[ 464.698202][ T27] 1 lock held by syz-executor316/5521:
[ 464.706739][ T27] #0: ffff88807bca20e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[ 464.724992][ T27] 1 lock held by syz.6.32/5545:
[ 464.750962][ T27] #0: ffff88801e90c0e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240
[ 464.764771][ T27]
[ 464.778982][ T27] =============================================
[ 464.778982][ T27]
[ 464.796991][ T27] NMI backtrace for cpu 1
[ 464.801363][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[ 464.808618][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 464.818991][ T27] Call Trace:
[ 464.822331][ T27]
[ 464.825295][ T27] dump_stack_lvl+0x168/0x230
[ 464.829991][ T27] ? show_regs_print_info+0x20/0x20
[ 464.835207][ T27] ? load_image+0x3b0/0x3b0
[ 464.839723][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0
[ 464.845115][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0
[ 464.850691][ T27] nmi_cpu_backtrace+0x397/0x3d0
[ 464.855836][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280
[ 464.862003][ T27] ? _printk+0xcc/0x110
[ 464.866191][ T27] ? load_image+0x3b0/0x3b0
[ 464.870712][ T27] ? load_image+0x3b0/0x3b0
[ 464.875575][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 464.881656][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280
[ 464.887659][ T27] watchdog+0xe0f/0xe50
[ 464.891874][ T27] kthread+0x436/0x520
[ 464.896041][ T27] ? hungtask_pm_notify+0x40/0x40
[ 464.901181][ T27] ? kthread_blkcg+0xd0/0xd0
[ 464.905791][ T27] ret_from_fork+0x1f/0x30
[ 464.910228][ T27]
[ 464.914892][ T27] Sending NMI from CPU 1 to CPUs 0:
[ 464.921398][ C0] NMI backtrace for cpu 0
[ 464.921410][ C0] CPU: 0 PID: 5163 Comm: kworker/u4:6 Not tainted syzkaller #0
[ 464.921437][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 464.921446][ C0] Workqueue: phy17 ieee80211_iface_work
[ 464.921468][ C0] RIP: 0010:__lock_acquire+0x58b/0x7c60
[ 464.921488][ C0] Code: 6c 24 30 0f 85 34 63 00 00 83 3d af 3c b0 14 00 0f 84 fe 01 00 00 31 db 48 81 c3 b8 00 00 00 48 89 d8 48 c1 e8 03 0f b6 04 10 <84> c0 0f 85 97 61 00 00 44 0f b6 33 48 8b 44 24 58 0f b6 04 10 84
[ 464.921500][ C0] RSP: 0018:ffffc9000378f8a0 EFLAGS: 00000806
[ 464.921512][ C0] RAX: 0000000000000000 RBX: ffffffff8f9c0578 RCX: ffffffff815c027b
[ 464.921523][ C0] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff8ffbd208
[ 464.921533][ C0] RBP: ffffc9000378faf0 R08: dffffc0000000000 R09: fffffbfff1ff7a42
[ 464.921543][ C0] R10: fffffbfff1ff7a42 R11: 1ffffffff1ff7a41 R12: ffff88802baa0b10
[ 464.921553][ C0] R13: ffff88802baa0000 R14: 0000000000000000 R15: ffff88802baa0af0
[ 464.921563][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[ 464.921576][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 464.921586][ C0] CR2: 00005636bafd1a38 CR3: 0000000075765000 CR4: 00000000003506f0
[ 464.921599][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 464.921608][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 464.921617][ C0] Call Trace:
[ 464.921621][ C0]
[ 464.921627][ C0] ? verify_lock_unused+0x140/0x140
[ 464.921644][ C0] ? __lock_acquire+0x7c60/0x7c60
[ 464.921663][ C0] ? __mutex_unlock_slowpath+0x19e/0x6a0
[ 464.921680][ C0] ? verify_lock_unused+0x140/0x140
[ 464.921696][ C0] ? try_to_wake_up+0x3d4/0x1050
[ 464.921712][ C0] ? __lock_acquire+0x7c60/0x7c60
[ 464.921727][ C0] ? __rwlock_init+0x140/0x140
[ 464.921741][ C0] lock_acquire+0x197/0x3f0
[ 464.921755][ C0] ? process_one_work+0x760/0x1000
[ 464.921771][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 464.921787][ C0] ? read_lock_is_recursive+0x10/0x10
[ 464.921803][ C0] ? try_to_wake_up+0x6cf/0x1050
[ 464.921817][ C0] ? _raw_spin_unlock_irq+0x1f/0x40
[ 464.921832][ C0] process_one_work+0x79f/0x1000
[ 464.921844][ C0] ? process_one_work+0x760/0x1000
[ 464.921862][ C0] ? worker_detach_from_pool+0x240/0x240
[ 464.921875][ C0] ? lockdep_hardirqs_off+0x70/0x100
[ 464.921892][ C0] ? _raw_spin_lock_irq+0xab/0xe0
[ 464.921904][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 464.921917][ C0] ? wq_worker_running+0x97/0x170
[ 464.921930][ C0] worker_thread+0xaa8/0x12a0
[ 464.921944][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100
[ 464.921957][ C0] ? lockdep_hardirqs_on+0x94/0x140
[ 464.921972][ C0] ? lockdep_hardirqs_on+0x94/0x140
[ 464.921986][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 464.922003][ C0] kthread+0x436/0x520
[ 464.922014][ C0] ? rcu_lock_release+0x20/0x20
[ 464.922027][ C0] ? kthread_blkcg+0xd0/0xd0
[ 464.922039][ C0] ret_from_fork+0x1f/0x30
[ 464.922058][ C0]
[ 465.197630][ T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 465.197651][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[ 465.197671][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 465.197681][ T27] Call Trace:
[ 465.197688][ T27]
[ 465.197696][ T27] dump_stack_lvl+0x168/0x230
[ 465.197723][ T27] ? show_regs_print_info+0x20/0x20
[ 465.197743][ T27] ? load_image+0x3b0/0x3b0
[ 465.197772][ T27] panic+0x2c9/0x7f0
[ 465.197789][ T27] ? schedule_preempt_disabled+0x20/0x20
[ 465.197811][ T27] ? bpf_jit_dump+0xd0/0xd0
[ 465.197828][ T27] ? __irq_work_queue_local+0x12c/0x190
[ 465.197852][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280
[ 465.197877][ T27] watchdog+0xe4e/0xe50
[ 465.197903][ T27] kthread+0x436/0x520
[ 465.197919][ T27] ? hungtask_pm_notify+0x40/0x40
[ 465.197935][ T27] ? kthread_blkcg+0xd0/0xd0
[ 465.197953][ T27] ret_from_fork+0x1f/0x30
[ 465.197982][ T27]
[ 465.198267][ T27] Kernel Offset: disabled
[ 465.495570][ T27] Rebooting in 86400 seconds..