[ 439.818735][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.825087][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.746966][ T5523] chnl_net:caif_netlink_parms(): no params data found [ 443.025367][ T5523] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.032911][ T5523] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.054978][ T5523] device bridge_slave_0 entered promiscuous mode [ 443.064053][ T5523] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.071246][ T5523] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.079515][ T5523] device bridge_slave_1 entered promiscuous mode [ 443.112308][ T5523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.124414][ T5523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.167058][ T5523] team0: Port device team_slave_0 added [ 443.175738][ T5523] team0: Port device team_slave_1 added [ 443.285558][ T5523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.299841][ T5523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.379598][ T5523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.424202][ T5523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.439020][ T5523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.471047][ T5523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.770613][ T5523] device hsr_slave_0 entered promiscuous mode [ 443.877207][ T5523] device hsr_slave_1 entered promiscuous mode [ 443.901805][ T4240] Bluetooth: hci16: command 0x0409 tx timeout [ 443.939577][ T5523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.965660][ T5523] Cannot create hsr debugfs directory [ 444.604199][ T5523] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.809852][ T5523] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.054250][ T5523] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.261202][ T5523] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts. [ 445.734142][ T5523] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 445.783112][ T5523] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 445.896398][ T5523] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 445.971492][ T1325] Bluetooth: hci16: command 0x041b tx timeout [ 446.014718][ T5523] netdevsim netdevsim6 netdevsim3: renamed from eth3 executing program [ 446.502025][ T5523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.614181][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 446.635508][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 446.704301][ T5523] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.791986][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 446.809107][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 446.868350][ T5397] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.875463][ T5397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.951696][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 447.007602][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 447.064074][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 447.097641][ T5397] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.104794][ T5397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.179073][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 447.225865][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 447.251289][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 447.303940][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 447.312835][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 447.322245][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 447.336268][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 447.359649][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 447.373061][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 447.382423][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 447.430949][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 447.460550][ T5523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 448.052133][ T1325] Bluetooth: hci16: command 0x040f tx timeout [ 448.283027][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 448.290628][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 448.368416][ T5523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.480557][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 449.505661][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 449.568706][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 449.614432][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.669626][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 449.710783][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 449.736991][ T5523] device veth0_vlan entered promiscuous mode [ 449.853981][ T5523] device veth1_vlan entered promiscuous mode [ 450.077201][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 450.087761][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 450.131693][ T7] Bluetooth: hci16: command 0x0419 tx timeout [ 450.180169][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 450.281812][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 450.305312][ T5523] device veth0_macvtap entered promiscuous mode [ 450.376508][ T5523] device veth1_macvtap entered promiscuous mode [ 450.497229][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 450.562471][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 450.609731][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.627919][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.650504][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.665363][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.717115][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.817203][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.830647][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.868709][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.882846][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.894142][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.936491][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.952239][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.984076][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.015412][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.029218][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.106420][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.122696][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.135069][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.151829][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.165432][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.176158][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.186964][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.197073][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.207964][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.222036][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.304010][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.324046][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.421564][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.458931][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.531394][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.541235][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.615670][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.668320][ T5523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.716273][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.736379][ T5293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.827752][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.923260][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.948666][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.046792][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.069514][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.091063][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.144953][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.160739][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.200685][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.212777][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.223638][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.243621][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.256771][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.270927][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.294294][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.313680][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.336477][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.351229][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.413826][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.435589][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.460584][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.507789][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.518179][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.550600][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.588750][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.602744][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.618090][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.634752][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.661943][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.661962][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.661977][ T5523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.661989][ T5523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.701399][ T5523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.779267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 452.828345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 452.909020][ T5523] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.955130][ T5523] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.978576][ T5523] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.993111][ T5523] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.340375][ T5293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.423923][ T5293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.476980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 453.518716][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.566152][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.631296][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 460.298848][ T27] INFO: task syz.0.26:5373 blocked for more than 143 seconds. [ 460.319870][ T27] Not tainted syzkaller #0 [ 460.361093][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 460.380106][ T27] task:syz.0.26 state:D stack:26240 pid: 5373 ppid: 5351 flags:0x00004004 [ 460.427838][ T27] Call Trace: [ 460.465508][ T27] [ 460.468659][ T27] __schedule+0x11bb/0x4390 [ 460.539709][ T27] ? release_firmware_map_entry+0x190/0x190 [ 460.556274][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 460.576966][ T27] ? lock_chain_count+0x20/0x20 [ 460.641888][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 460.646959][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 460.716254][ T27] schedule+0x11b/0x1e0 [ 460.743571][ T27] schedule_preempt_disabled+0xf/0x20 [ 460.788035][ T27] rwsem_down_read_slowpath+0x528/0x990 [ 460.828271][ T27] ? down_write_killable_nested+0x90/0x90 [ 460.836588][ T27] ? read_lock_is_recursive+0x10/0x10 [ 460.864165][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 460.910185][ T27] ? __rwlock_init+0x140/0x140 [ 460.949693][ T27] down_read+0x96/0x2e0 [ 460.963221][ T27] user_get_super+0x118/0x240 [ 460.967938][ T27] __se_sys_quotactl+0x45e/0x6c0 [ 460.993452][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 461.039491][ T27] ? __x64_sys_quotactl+0xa0/0xa0 [ 461.068003][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 461.074674][ T27] ? lock_chain_count+0x20/0x20 [ 461.083138][ T27] ? vtime_user_exit+0x2dc/0x400 [ 461.098457][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 461.114486][ T27] do_syscall_64+0x4c/0xa0 [ 461.140216][ T27] ? clear_bhb_loop+0x30/0x80 [ 461.189357][ T27] ? clear_bhb_loop+0x30/0x80 [ 461.232959][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 461.238905][ T27] RIP: 0033:0x7f8471e97969 [ 461.306772][ T27] RSP: 002b:00007f8471107038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 461.325855][ T27] RAX: ffffffffffffffda RBX: 00007f84720befa0 RCX: 00007f8471e97969 [ 461.376678][ T27] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffff80000800 [ 461.414953][ T27] RBP: 00007f8471f19ab1 R08: 0000000000000000 R09: 0000000000000000 [ 461.434837][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.443267][ T27] R13: 0000000000000000 R14: 00007f84720befa0 R15: 00007ffe976574a8 [ 461.451698][ T27] [ 461.457283][ T27] [ 461.457283][ T27] Showing all locks held in the system: [ 461.493862][ T27] 1 lock held by khungtaskd/27: [ 461.510823][ T27] #0: ffffffff8c11c720 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 461.535495][ T27] 4 locks held by kworker/u4:2/154: [ 461.540742][ T27] 2 locks held by getty/3945: [ 461.590694][ T27] #0: ffff88802c137098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 461.608493][ T27] #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 461.661138][ T27] 4 locks held by syz.0.16/5077: [ 461.758904][ T27] 3 locks held by syz.1.17/5104: [ 461.819746][ T27] 4 locks held by syz.2.18/5127: [ 461.869708][ T27] #0: ffff88807e7420e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 461.900393][ T27] #1: ffffc900034f10f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0 [ 461.955298][ T27] #2: ffffc900034f1180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0 [ 461.975257][ T27] #3: ffff888060973890 (&jl->j_commit_mutex){+.+.}-{3:3}, at: flush_commit_list+0x6d8/0x1d70 [ 462.022251][ T27] 3 locks held by syz.3.19/5151: [ 462.027225][ T27] 3 locks held by syz.4.20/5186: [ 462.065440][ T27] 4 locks held by syz.5.21/5216: [ 462.071845][ T27] 4 locks held by syz.6.22/5245: [ 462.076791][ T27] #0: ffff8880258b00e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 462.095781][ T27] #1: ffffc900039c10f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0 [ 462.203260][ T27] #2: ffffc900039c1180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0 [ 462.246792][ T27] #3: ffff88804f32b090 (&jl->j_commit_mutex){+.+.}-{3:3}, at: flush_commit_list+0x6d8/0x1d70 [ 462.268794][ T27] 4 locks held by syz.7.23/5280: [ 462.281222][ T27] #0: ffff88801b1f60e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 462.299050][ T27] #1: ffffc90003d310f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0 [ 462.371517][ T4232] Bluetooth: hci12: command 0x0406 tx timeout [ 462.449394][ T27] #2: ffffc90003d31180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0 [ 462.468719][ T27] #3: ffff88805db3b090 (&jl->j_commit_mutex){+.+.}-{3:3}, at: flush_commit_list+0x6d8/0x1d70 [ 462.534545][ T27] 5 locks held by syz.8.24/5312: [ 462.539518][ T27] 5 locks held by syz.9.25/5342: [ 462.556539][ T27] #0: ffff88807b45a0e0 (&type->s_umount_key#25/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 462.594577][ T27] #1: ffffc90003fb10f0 (&journal->j_mutex){+.+.}-{3:3}, at: do_journal_end+0x304/0x42d0 [ 462.642607][ T27] #2: ffffc90003fb1180 (&journal->j_flush_mutex){+.+.}-{3:3}, at: flush_journal_list+0x180/0x1ba0 [ 462.667646][ T27] #3: ffff888050933890 (&jl->j_commit_mutex){+.+.}-{3:3}, at: flush_commit_list+0x6d8/0x1d70 [ 462.695581][ T27] #4: ffff8880b9127888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x4d6/0x810 [ 462.717586][ T27] 1 lock held by syz.0.26/5373: [ 462.722572][ T27] #0: ffff8880764460e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240 [ 462.734746][ T27] 1 lock held by syz.1.27/5396: [ 462.739606][ T27] #0: ffff8880791dc0e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240 [ 462.754743][ T27] 1 lock held by syz.2.28/5427: [ 462.759601][ T27] #0: ffff88807e7420e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240 [ 462.770296][ T27] 1 lock held by syz.3.29/5450: [ 462.798370][ T27] #0: ffff88807e0c80e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240 [ 462.912466][ T27] 1 lock held by syz.4.30/5481: [ 462.917552][ T27] #0: ffff888057a620e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240 [ 462.930925][ T27] 1 lock held by syz.5.31/5517: [ 462.948651][ T27] #0: ffff888057fe40e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240 [ 462.990643][ T27] 1 lock held by syz-executor123/5542: [ 463.013995][ T27] #0: ffff8880764460e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240 [ 463.027776][ T27] 1 lock held by syz.6.32/5557: [ 463.041543][ T27] #0: ffff8880258b00e0 (&type->s_umount_key#53){.+.+}-{3:3}, at: user_get_super+0x118/0x240 [ 463.057718][ T27] [ 463.060057][ T27] ============================================= [ 463.060057][ T27] [ 463.108643][ T27] NMI backtrace for cpu 0 [ 463.112998][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 463.120202][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.130258][ T27] Call Trace: [ 463.133544][ T27] [ 463.136480][ T27] dump_stack_lvl+0x168/0x230 [ 463.141166][ T27] ? show_regs_print_info+0x20/0x20 [ 463.146368][ T27] ? load_image+0x3b0/0x3b0 [ 463.150873][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 463.156254][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 463.161373][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 463.166316][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 463.172474][ T27] ? _printk+0xcc/0x110 [ 463.176630][ T27] ? load_image+0x3b0/0x3b0 [ 463.181141][ T27] ? load_image+0x3b0/0x3b0 [ 463.185647][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 463.191719][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 463.197709][ T27] watchdog+0xe0f/0xe50 [ 463.201874][ T27] kthread+0x436/0x520 [ 463.205943][ T27] ? hungtask_pm_notify+0x40/0x40 [ 463.210966][ T27] ? kthread_blkcg+0xd0/0xd0 [ 463.215558][ T27] ret_from_fork+0x1f/0x30 [ 463.219987][ T27] [ 463.224332][ T27] Sending NMI from CPU 0 to CPUs 1: [ 463.229565][ C1] NMI backtrace for cpu 1 [ 463.229574][ C1] CPU: 1 PID: 5245 Comm: syz.6.22 Not tainted syzkaller #0 [ 463.229589][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.229597][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 463.229616][ C1] Code: 84 00 00 00 00 00 53 48 89 fb e8 17 00 00 00 48 8b 3d d0 6b f1 0b 48 89 de 5b e9 d7 9e 43 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d a4 a3 8a 7e 65 8b 15 a5 a3 8a 7e 81 e2 00 01 ff 00 74 [ 463.229627][ C1] RSP: 0018:ffffc900039beeb8 EFLAGS: 00000286 [ 463.229640][ C1] RAX: ffffffff83c2f2c1 RBX: ffff88805d904780 RCX: ffff88802110bb80 [ 463.229651][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.229659][ C1] RBP: ffffc900039bf030 R08: dffffc0000000000 R09: ffffed10040839b6 [ 463.229669][ C1] R10: ffffed10040839b6 R11: 1ffff110040839b5 R12: ffff88802029d5a8 [ 463.229680][ C1] R13: 0000000000000000 R14: ffffc900039bef60 R15: dffffc0000000000 [ 463.229690][ C1] FS: 00007f397ecbd6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 463.229702][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.229712][ C1] CR2: 00007f9784a12d60 CR3: 0000000059ebd000 CR4: 00000000003506e0 [ 463.229724][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.229733][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 463.229742][ C1] Call Trace: [ 463.229746][ C1] [ 463.229750][ C1] blk_mq_submit_bio+0x471/0x17b0 [ 463.229771][ C1] ? blk_mq_try_issue_list_directly+0x530/0x530 [ 463.229789][ C1] ? __submit_bio+0x810/0x810 [ 463.229806][ C1] ? blk_try_enter_queue+0x399/0x4d0 [ 463.229822][ C1] __submit_bio+0x7bd/0x810 [ 463.229841][ C1] ? rcu_lock_release+0x20/0x20 [ 463.229859][ C1] ? rcu_lock_release+0x5/0x20 [ 463.229872][ C1] ? rcu_lock_release+0x5/0x20 [ 463.229885][ C1] submit_bio_noacct+0x5f1/0x6d0 [ 463.229902][ C1] ? blk_put_request+0x20/0x20 [ 463.229916][ C1] ? rcu_lock_release+0x5/0x20 [ 463.229927][ C1] ? __bio_add_page+0x304/0x510 [ 463.229943][ C1] ? bio_add_page+0x2d6/0x460 [ 463.229956][ C1] submit_bio+0x2be/0x560 [ 463.229969][ C1] ? guard_bio_eod+0xee/0x130 [ 463.229981][ C1] ? submit_bio_noacct+0x6d0/0x6d0 [ 463.229999][ C1] submit_bh+0x23/0x30 [ 463.230012][ C1] flush_journal_list+0x89d/0x1ba0 [ 463.230035][ C1] flush_used_journal_lists+0x126e/0x15d0 [ 463.230056][ C1] ? do_journal_end+0x2ed8/0x42d0 [ 463.230070][ C1] ? flush_journal_list+0x1ba0/0x1ba0 [ 463.230085][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 463.230101][ C1] ? memset+0x1e/0x40 [ 463.230116][ C1] ? lockdep_init_map_type+0x9d/0x850 [ 463.230131][ C1] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 463.230149][ C1] ? mutex_unlock+0x10/0x10 [ 463.230170][ C1] do_journal_end+0x3615/0x42d0 [ 463.230200][ C1] do_journal_begin_r+0xa36/0x1010 [ 463.230224][ C1] ? journal_join_abort+0xe0/0xe0 [ 463.230244][ C1] journal_begin+0x148/0x350 [ 463.230259][ C1] reiserfs_fill_super+0x1654/0x23e0 [ 463.230284][ C1] ? reiserfs_kill_sb+0x140/0x140 [ 463.230296][ C1] ? snprintf+0xd7/0x120 [ 463.230313][ C1] ? vscnprintf+0x80/0x80 [ 463.230328][ C1] ? set_blocksize+0x1f1/0x370 [ 463.230344][ C1] ? sb_set_blocksize+0xa5/0xe0 [ 463.230359][ C1] mount_bdev+0x287/0x3c0 [ 463.230374][ C1] ? reiserfs_kill_sb+0x140/0x140 [ 463.230387][ C1] legacy_get_tree+0xe6/0x180 [ 463.230402][ C1] ? remove_save_link+0x3c0/0x3c0 [ 463.230415][ C1] vfs_get_tree+0x88/0x270 [ 463.230429][ C1] do_new_mount+0x24a/0xa40 [ 463.230446][ C1] __se_sys_mount+0x2d6/0x3c0 [ 463.230461][ C1] ? __x64_sys_mount+0xc0/0xc0 [ 463.230476][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 463.230491][ C1] ? __x64_sys_mount+0x1c/0xc0 [ 463.230505][ C1] do_syscall_64+0x4c/0xa0 [ 463.230518][ C1] ? clear_bhb_loop+0x30/0x80 [ 463.230531][ C1] ? clear_bhb_loop+0x30/0x80 [ 463.230545][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 463.230558][ C1] RIP: 0033:0x7f397fa4f10a [ 463.230571][ C1] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.230582][ C1] RSP: 002b:00007f397ecbce68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 463.230595][ C1] RAX: ffffffffffffffda RBX: 00007f397ecbcef0 RCX: 00007f397fa4f10a [ 463.230605][ C1] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007f397ecbceb0 [ 463.230615][ C1] RBP: 0000200000000080 R08: 00007f397ecbcef0 R09: 000000000000800c [ 463.230624][ C1] R10: 000000000000800c R11: 0000000000000246 R12: 0000200000000040 [ 463.230633][ C1] R13: 00007f397ecbceb0 R14: 000000000000112d R15: 0000200000000300 [ 463.230649][ C1] [ 463.786064][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 463.792949][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 463.800151][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.810214][ T27] Call Trace: [ 463.813496][ T27] [ 463.816430][ T27] dump_stack_lvl+0x168/0x230 [ 463.821112][ T27] ? show_regs_print_info+0x20/0x20 [ 463.826312][ T27] ? load_image+0x3b0/0x3b0 [ 463.830826][ T27] panic+0x2c9/0x7f0 [ 463.834725][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 463.840380][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 463.844889][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 463.850445][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 463.856607][ T27] watchdog+0xe4e/0xe50 [ 463.860776][ T27] kthread+0x436/0x520 [ 463.864854][ T27] ? hungtask_pm_notify+0x40/0x40 [ 463.869878][ T27] ? kthread_blkcg+0xd0/0xd0 [ 463.874475][ T27] ret_from_fork+0x1f/0x30 [ 463.878905][ T27] [ 463.882253][ T27] Kernel Offset: disabled [ 463.886578][ T27] Rebooting in 86400 seconds..