Warning: Permanently added '[localhost]:4390' (ED25519) to the list of known hosts. 2025/11/01 15:57:01 parsed 1 programs syzkaller login: [ 89.156161][ T5311] cgroup: Unknown subsys name 'net' [ 89.230606][ T5311] cgroup: Unknown subsys name 'cpuset' [ 89.237941][ T5311] cgroup: Unknown subsys name 'rlimit' [ 90.831190][ T5311] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.956326][ T10] cfg80211: failed to load regulatory.db [ 96.073789][ T5327] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.658430][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.662452][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.669769][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.673548][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.677503][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.468035][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.471598][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.523875][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.527211][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.452935][ T5385] chnl_net:caif_netlink_parms(): no params data found [ 100.561390][ T5385] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.565324][ T5385] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.568412][ T5385] bridge_slave_0: entered allmulticast mode [ 100.585331][ T5385] bridge_slave_0: entered promiscuous mode [ 100.590804][ T5385] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.593971][ T5385] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.605079][ T5385] bridge_slave_1: entered allmulticast mode [ 100.608947][ T5385] bridge_slave_1: entered promiscuous mode [ 100.656564][ T5385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.677380][ T5385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.716071][ T5385] team0: Port device team_slave_0 added [ 100.720032][ T5385] team0: Port device team_slave_1 added [ 100.757320][ T5385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.760250][ T5385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.785212][ T5385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.805125][ T5385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.808158][ T5385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.835456][ T5385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.896355][ T5385] hsr_slave_0: entered promiscuous mode [ 100.899388][ T5385] hsr_slave_1: entered promiscuous mode [ 101.251723][ T5385] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.278195][ T5385] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.285225][ T5385] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.299077][ T5385] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.448152][ T5385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.476963][ T5385] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.490410][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.493730][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.529541][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.532439][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.840111][ T5385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.908864][ T5385] veth0_vlan: entered promiscuous mode [ 101.930912][ T5385] veth1_vlan: entered promiscuous mode [ 101.963987][ T5385] veth0_macvtap: entered promiscuous mode [ 101.971821][ T5385] veth1_macvtap: entered promiscuous mode [ 101.990321][ T5385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.003470][ T5385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.016606][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.030058][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.033941][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.049354][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.248911][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.346910][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.415846][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.487288][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.459195][ T43] bridge_slave_1: left allmulticast mode [ 104.461821][ T43] bridge_slave_1: left promiscuous mode [ 104.465264][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.534313][ T43] bridge_slave_0: left allmulticast mode [ 104.542466][ T43] bridge_slave_0: left promiscuous mode [ 104.556337][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.539121][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.566616][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.595239][ T43] bond0 (unregistering): Released all slaves [ 105.702081][ T43] hsr_slave_0: left promiscuous mode [ 105.724739][ T43] hsr_slave_1: left promiscuous mode [ 105.728038][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.731269][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.747726][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.751015][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.773390][ T43] veth1_macvtap: left promiscuous mode [ 105.777431][ T43] veth0_macvtap: left promiscuous mode [ 105.780057][ T43] veth1_vlan: left promiscuous mode [ 105.782423][ T43] veth0_vlan: left promiscuous mode 2025/11/01 15:57:21 executed programs: 0 [ 105.887589][ T4668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.891389][ T4668] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.895999][ T4668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.900110][ T4668] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.903678][ T4668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.138667][ T43] team0 (unregistering): Port device team_slave_1 removed [ 106.155989][ T43] team0 (unregistering): Port device team_slave_0 removed [ 106.869800][ T5426] chnl_net:caif_netlink_parms(): no params data found [ 107.121177][ T5426] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.125140][ T5426] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.128132][ T5426] bridge_slave_0: entered allmulticast mode [ 107.155208][ T5426] bridge_slave_0: entered promiscuous mode [ 107.166255][ T5426] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.169434][ T5426] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.172647][ T5426] bridge_slave_1: entered allmulticast mode [ 107.193656][ T5426] bridge_slave_1: entered promiscuous mode [ 107.268438][ T5426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.285355][ T5426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.348539][ T5426] team0: Port device team_slave_0 added [ 107.356154][ T5426] team0: Port device team_slave_1 added [ 107.406269][ T5426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.409515][ T5426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.435154][ T5426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.446001][ T5426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.449007][ T5426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.471085][ T5426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.547612][ T5426] hsr_slave_0: entered promiscuous mode [ 107.555769][ T5426] hsr_slave_1: entered promiscuous mode [ 107.936333][ T4668] Bluetooth: hci0: command tx timeout [ 108.217954][ T5426] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.239446][ T5426] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.279129][ T5426] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.287879][ T5426] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.507489][ T5426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.545271][ T5426] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.564210][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.567168][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.596924][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.599814][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.040347][ T5426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.131694][ T5426] veth0_vlan: entered promiscuous mode [ 109.157646][ T5426] veth1_vlan: entered promiscuous mode [ 109.203620][ T5426] veth0_macvtap: entered promiscuous mode [ 109.221165][ T5426] veth1_macvtap: entered promiscuous mode [ 109.257106][ T5426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.278779][ T5426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.298569][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.302437][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.317112][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.320742][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.433290][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.450187][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.515955][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.521878][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.015736][ T4668] Bluetooth: hci0: command tx timeout [ 110.237434][ T5482] loop0: detected capacity change from 0 to 32768 [ 110.283052][ T5482] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 110.297237][ T5482] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 110.356147][ T5482] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 110.367364][ T1375] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 110.370553][ T1375] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 110.473262][ T1375] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 102ms [ 110.497133][ T1375] gfs2: fsid=syz:syz.0: jid=0: Done [ 110.500048][ T5482] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 110.590149][ T5482] gfs2: fsid=syz:syz.0: found 1 quota changes [ 110.612829][ T5482] syz.0.17 uses obsolete (PF_INET,SOCK_PACKET) [ 112.094864][ T4668] Bluetooth: hci0: command tx timeout [ 114.175619][ T4668] Bluetooth: hci0: command tx timeout [ 125.735451][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.739562][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.742988][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 125.746727][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.755048][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.122868][ T5500] chnl_net:caif_netlink_parms(): no params data found [ 126.203100][ T5500] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.215132][ T5500] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.218810][ T5500] bridge_slave_0: entered allmulticast mode [ 126.235414][ T5500] bridge_slave_0: entered promiscuous mode [ 126.239926][ T5500] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.243073][ T5500] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.255450][ T5500] bridge_slave_1: entered allmulticast mode [ 126.259390][ T5500] bridge_slave_1: entered promiscuous mode [ 126.315589][ T5500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.321391][ T5500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.365259][ T5500] team0: Port device team_slave_0 added [ 126.375922][ T5500] team0: Port device team_slave_1 added [ 126.415040][ T5500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.417652][ T5500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.429150][ T5500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.434206][ T5500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.437068][ T5500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.448129][ T5500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.479335][ T5500] hsr_slave_0: entered promiscuous mode [ 126.482239][ T5500] hsr_slave_1: entered promiscuous mode [ 126.485530][ T5500] debugfs: 'hsr0' already exists in 'hsr' [ 126.487800][ T5500] Cannot create hsr debugfs directory [ 126.623643][ T5500] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 126.631951][ T5500] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 126.639340][ T5500] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 126.646145][ T5500] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 126.670665][ T5500] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.673901][ T5500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.677704][ T5500] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.680932][ T5500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.732866][ T5500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.747170][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.750549][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.761297][ T5500] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.770785][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.773892][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.790382][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.793562][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.953641][ T5500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.989442][ T5500] veth0_vlan: entered promiscuous mode [ 126.997121][ T5500] veth1_vlan: entered promiscuous mode [ 127.022680][ T5500] veth0_macvtap: entered promiscuous mode [ 127.028799][ T5500] veth1_macvtap: entered promiscuous mode [ 127.042761][ T5500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.057382][ T5500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.067068][ T1039] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.077764][ T1039] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.081529][ T1039] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.094278][ T1039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.155760][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.159135][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.196119][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.199360][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/01 15:57:42 executed programs: 4 [ 127.782071][ T48] Bluetooth: hci1: command tx timeout [ 129.858547][ T48] Bluetooth: hci1: command tx timeout [ 131.935748][ T48] Bluetooth: hci1: command tx timeout 2025/11/01 15:57:47 executed programs: 17 [ 134.014790][ T48] Bluetooth: hci1: command tx timeout 2025/11/01 15:57:52 executed programs: 32 [ 138.019403][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.022513][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 2025/11/01 15:57:57 executed programs: 45 2025/11/01 15:58:03 executed programs: 58 2025/11/01 15:58:08 executed programs: 71 2025/11/01 15:58:13 executed programs: 85 2025/11/01 15:58:18 executed programs: 101 2025/11/01 15:58:23 executed programs: 116 2025/11/01 15:58:28 executed programs: 132 2025/11/01 15:58:33 executed programs: 148 2025/11/01 15:58:39 executed programs: 165 2025/11/01 15:58:44 executed programs: 181 2025/11/01 15:58:49 executed programs: 197 [ 199.459088][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.461808][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 2025/11/01 15:58:55 executed programs: 213 2025/11/01 15:59:00 executed programs: 230 2025/11/01 15:59:05 executed programs: 246 2025/11/01 15:59:10 executed programs: 263 2025/11/01 15:59:15 executed programs: 280 2025/11/01 15:59:20 executed programs: 297 2025/11/01 15:59:26 executed programs: 314 [ 232.255981][ T4668] Bluetooth: hci0: command 0x0406 tx timeout 2025/11/01 15:59:31 executed programs: 330 2025/11/01 15:59:36 executed programs: 347 2025/11/01 15:59:41 executed programs: 363 2025/11/01 15:59:47 executed programs: 379 [ 252.739139][ T48] Bluetooth: hci1: command 0x0406 tx timeout 2025/11/01 15:59:52 executed programs: 395 [ 260.904788][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.907551][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 2025/11/01 15:59:57 executed programs: 411 2025/11/01 16:00:02 executed programs: 428 2025/11/01 16:00:07 executed programs: 445 [ 273.056345][ T26] INFO: task syz-executor:5426 blocked for more than 143 seconds. [ 273.059637][ T26] Not tainted syzkaller #0 [ 273.061932][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.074822][ T26] task:syz-executor state:D stack:21768 pid:5426 tgid:5426 ppid:1 task_flags:0x400140 flags:0x00080002 [ 273.081755][ T26] Call Trace: [ 273.083608][ T26] [ 273.094602][ T26] __schedule+0x1798/0x4cc0 [ 273.097028][ T26] ? __pfx___schedule+0x10/0x10 [ 273.099164][ T26] ? schedule+0x91/0x360 [ 273.101115][ T26] schedule+0x165/0x360 [ 273.103002][ T26] bit_wait+0x11/0xd0 [ 273.115273][ T26] __wait_on_bit+0xb9/0x310 [ 273.117246][ T26] ? __pfx_bit_wait+0x10/0x10 [ 273.119234][ T26] ? __pfx_bit_wait+0x10/0x10 [ 273.121242][ T26] out_of_line_wait_on_bit+0x123/0x170 [ 273.123537][ T26] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 273.137620][ T26] ? __pfx_wake_bit_function+0x10/0x10 [ 273.139829][ T26] ? do_raw_spin_unlock+0x4d/0x240 [ 273.141846][ T26] gfs2_glock_wait+0xbd/0x2a0 [ 273.143761][ T26] __gfs2_lookup+0x117/0x270 [ 273.151029][ T26] ? __lock_acquire+0xab9/0xd20 [ 273.153133][ T26] ? __pfx___gfs2_lookup+0x10/0x10 [ 273.155774][ T26] ? __lookup_slow+0x297/0x3d0 [ 273.157990][ T26] ? __raw_spin_lock_init+0x45/0x100 [ 273.160239][ T26] ? __init_waitqueue_head+0xa9/0x150 [ 273.162749][ T26] __lookup_slow+0x297/0x3d0 [ 273.166356][ T26] ? __pfx___lookup_slow+0x10/0x10 [ 273.168889][ T26] ? gfs2_dhash+0x59/0xb0 [ 273.170788][ T26] ? down_read+0x1ad/0x2e0 [ 273.172692][ T26] lookup_slow+0x53/0x70 [ 273.174959][ T26] walk_component+0x2d2/0x400 [ 273.177055][ T26] ? path_lookupat+0x156/0x430 [ 273.179346][ T26] path_lookupat+0x163/0x430 [ 273.181332][ T26] filename_lookup+0x212/0x570 [ 273.183405][ T26] ? __pfx_filename_lookup+0x10/0x10 [ 273.187166][ T26] ? strncpy_from_user+0x150/0x290 [ 273.189508][ T26] ? getname_flags+0x1e5/0x540 [ 273.191745][ T26] user_path_at+0x3a/0x60 [ 273.193478][ T26] __x64_sys_umount+0xee/0x160 [ 273.196676][ T26] ? __pfx___x64_sys_umount+0x10/0x10 [ 273.199010][ T26] ? do_syscall_64+0xbe/0xfa0 [ 273.201439][ T26] do_syscall_64+0xfa/0xfa0 [ 273.203470][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.206631][ T26] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.209192][ T26] ? clear_bhb_loop+0x60/0xb0 [ 273.211286][ T26] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.213991][ T26] RIP: 0033:0x7f0f179902f7 [ 273.217613][ T26] RSP: 002b:00007fffb40695e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 273.221219][ T26] RAX: ffffffffffffffda RBX: 00007f0f17a11d7d RCX: 00007f0f179902f7 [ 273.224986][ T26] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb40696a0 [ 273.228408][ T26] RBP: 00007fffb40696a0 R08: 0000000000000000 R09: 0000000000000000 [ 273.231920][ T26] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffb406a790 [ 273.235661][ T26] R13: 00007f0f17a11d7d R14: 000000000001af7c R15: 00007fffb406c950 [ 273.239052][ T26] [ 273.248532][ T26] [ 273.248532][ T26] Showing all locks held in the system: [ 273.252019][ T26] 1 lock held by khungtaskd/26: [ 273.254159][ T26] #0: ffffffff8df3d4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 273.274737][ T26] 2 locks held by getty/5108: [ 273.276943][ T26] #0: ffff88803e85c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 273.281399][ T26] #1: ffffc9000018e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 273.297161][ T26] 4 locks held by syz-execprog/5313: [ 273.299873][ T26] #0: ffff88801fe3a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 273.314676][ T26] #1: ffff88801fe24048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 273.319014][ T26] #2: ffff88801fe24048 (psi_seq){-.-.}-{0:0}, at: psi_task_change+0xd9/0x340 [ 273.323385][ T26] #3: ffffffff8df3d4e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160 [ 273.338648][ T26] 1 lock held by syz-executor/5426: [ 273.341266][ T26] #0: ffff888044e6de08 (&type->i_mutex_dir_key#8){++++}-{4:4}, at: lookup_slow+0x46/0x70 [ 273.354647][ T26] 3 locks held by syz.1.462/5991: [ 273.356974][ T26] [ 273.358107][ T26] ============================================= [ 273.358107][ T26] [ 273.361799][ T26] NMI backtrace for cpu 0 [ 273.361815][ T26] CPU: 0 UID: 0 PID: 26 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 273.361828][ T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 273.361835][ T26] Call Trace: [ 273.361842][ T26] [ 273.361848][ T26] dump_stack_lvl+0x189/0x250 [ 273.361872][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.361893][ T26] ? __pfx__printk+0x10/0x10 [ 273.361913][ T26] nmi_cpu_backtrace+0x39e/0x3d0 [ 273.361927][ T26] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 273.361940][ T26] ? __pfx__printk+0x10/0x10 [ 273.361954][ T26] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 273.361974][ T26] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 273.361987][ T26] watchdog+0xf60/0xfa0 [ 273.362002][ T26] ? watchdog+0x1e2/0xfa0 [ 273.362017][ T26] kthread+0x711/0x8a0 [ 273.362035][ T26] ? __pfx_watchdog+0x10/0x10 [ 273.362045][ T26] ? __pfx_kthread+0x10/0x10 [ 273.362060][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.362074][ T26] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.362087][ T26] ? __pfx_kthread+0x10/0x10 [ 273.362101][ T26] ret_from_fork+0x4bc/0x870 [ 273.362115][ T26] ? __pfx_ret_from_fork+0x10/0x10 [ 273.362132][ T26] ? __pfx_kthread+0x10/0x10 [ 273.362147][ T26] ret_from_fork_asm+0x1a/0x30 [ 273.362168][ T26] 2025/11/01 16:00:13 executed programs: 461 2025/11/01 16:00:18 executed programs: 477 VM DIAGNOSIS: 16:00:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900004d7690 R8 =ffff8880335b0237 R9 =1ffff110066b6046 R10=dffffc0000000000 R11=ffffffff85166e20 R12=dffffc0000000000 R13=ffffffff997e2902 R14=ffffffff99af6320 R15=0000000000000000 RIP=ffffffff85166e9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808d732000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbea5fff000 CR3=000000003eaa4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7415fc90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbeae012fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbeae012fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbeae012fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbeae012ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbeae01307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbeae01315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000