Warning: Permanently added '[localhost]:26713' (ECDSA) to the list of known hosts. 2025/08/29 08:07:19 fuzzer started 2025/08/29 08:07:20 dialing manager at localhost:43077 syzkaller login: [ 50.394532] cgroup: Unknown subsys name 'net' [ 50.461195] cgroup: Unknown subsys name 'cpuset' [ 50.479910] cgroup: Unknown subsys name 'rlimit' 2025/08/29 08:07:31 syscalls: 2214 2025/08/29 08:07:31 code coverage: enabled 2025/08/29 08:07:31 comparison tracing: enabled 2025/08/29 08:07:31 extra coverage: enabled 2025/08/29 08:07:31 setuid sandbox: enabled 2025/08/29 08:07:31 namespace sandbox: enabled 2025/08/29 08:07:31 Android sandbox: enabled 2025/08/29 08:07:31 fault injection: enabled 2025/08/29 08:07:31 leak checking: enabled 2025/08/29 08:07:31 net packet injection: enabled 2025/08/29 08:07:31 net device setup: enabled 2025/08/29 08:07:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 08:07:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 08:07:31 USB emulation: enabled 2025/08/29 08:07:31 hci packet injection: enabled 2025/08/29 08:07:31 wifi device emulation: enabled 2025/08/29 08:07:31 802.15.4 emulation: enabled 2025/08/29 08:07:31 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 08:07:31 fetching corpus: 49, signal 21701/24646 (executing program) 2025/08/29 08:07:31 fetching corpus: 99, signal 34233/37696 (executing program) 2025/08/29 08:07:31 fetching corpus: 149, signal 43068/46790 (executing program) 2025/08/29 08:07:31 fetching corpus: 199, signal 47767/51783 (executing program) 2025/08/29 08:07:32 fetching corpus: 249, signal 51783/56087 (executing program) 2025/08/29 08:07:32 fetching corpus: 299, signal 55501/59897 (executing program) 2025/08/29 08:07:32 fetching corpus: 349, signal 61068/64896 (executing program) 2025/08/29 08:07:32 fetching corpus: 399, signal 64924/68355 (executing program) 2025/08/29 08:07:32 fetching corpus: 449, signal 68152/71172 (executing program) 2025/08/29 08:07:32 fetching corpus: 499, signal 72555/74674 (executing program) 2025/08/29 08:07:32 fetching corpus: 549, signal 76418/77555 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/78434 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/78514 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/78578 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/78651 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/78721 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/78786 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/78854 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/78941 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/78995 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/79047 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/79121 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/79196 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/79270 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/79347 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/79422 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/79493 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/79571 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/79636 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/79707 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/79763 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/79840 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/79901 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/79970 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/80029 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/80100 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/80168 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/80234 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/80299 (executing program) 2025/08/29 08:07:33 fetching corpus: 579, signal 77546/80299 (executing program) 2025/08/29 08:07:35 starting 8 fuzzer processes 08:07:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) 08:07:35 executing program 1: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:07:35 executing program 2: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:07:35 executing program 7: r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff03, 0x0) 08:07:35 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) pipe2$9p(&(0x7f00000004c0), 0x0) syz_io_uring_setup(0x363e, &(0x7f0000000640)={0x0, 0x78b4, 0x2, 0x0, 0xcf}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 08:07:35 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') pread64(r0, 0x0, 0x0, 0x0) 08:07:35 executing program 4: clone(0x7fc42f2c2fff, 0x0, 0x0, 0x0, 0x0) [ 65.734298] audit: type=1400 audit(1756454855.804:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:07:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)={0x1c, 0x6a, 0x101, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @binary="d5"}]}]}, 0x1c}], 0x1}, 0x0) [ 66.946877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.949588] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.952080] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.953777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.955924] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.962489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.967869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.970184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.973068] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.975815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.071249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.082259] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.094004] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.097373] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.106617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.113370] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.129335] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.140908] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.150790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.167158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.170225] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.182891] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.187368] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.191335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.193386] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.199462] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.201491] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.203474] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.212713] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.214317] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.219396] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.223160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.228943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.243130] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.251173] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.255360] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.270604] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.275040] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.284810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.323657] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 69.039478] Bluetooth: hci1: command tx timeout [ 69.039486] Bluetooth: hci0: command tx timeout [ 69.296864] Bluetooth: hci3: command tx timeout [ 69.298092] Bluetooth: hci5: command tx timeout [ 69.359754] Bluetooth: hci2: command tx timeout [ 69.422784] Bluetooth: hci6: command tx timeout [ 69.486973] Bluetooth: hci7: command tx timeout [ 69.487010] Bluetooth: hci4: command tx timeout [ 71.086822] Bluetooth: hci1: command tx timeout [ 71.087065] Bluetooth: hci0: command tx timeout [ 71.343727] Bluetooth: hci5: command tx timeout [ 71.343776] Bluetooth: hci3: command tx timeout [ 71.406846] Bluetooth: hci2: command tx timeout [ 71.470757] Bluetooth: hci6: command tx timeout [ 71.534762] Bluetooth: hci4: command tx timeout [ 71.534778] Bluetooth: hci7: command tx timeout [ 73.134829] Bluetooth: hci0: command tx timeout [ 73.136114] Bluetooth: hci1: command tx timeout [ 73.391795] Bluetooth: hci5: command tx timeout [ 73.391827] Bluetooth: hci3: command tx timeout [ 73.455888] Bluetooth: hci2: command tx timeout [ 73.518767] Bluetooth: hci6: command tx timeout [ 73.582904] Bluetooth: hci7: command tx timeout [ 73.583792] Bluetooth: hci4: command tx timeout [ 75.182882] Bluetooth: hci1: command tx timeout [ 75.182953] Bluetooth: hci0: command tx timeout [ 75.438746] Bluetooth: hci3: command tx timeout [ 75.438787] Bluetooth: hci5: command tx timeout [ 75.502977] Bluetooth: hci2: command tx timeout [ 75.567791] Bluetooth: hci6: command tx timeout [ 75.630749] Bluetooth: hci4: command tx timeout [ 75.633719] Bluetooth: hci7: command tx timeout [ 107.594377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.595079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.750901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.751483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.885200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.886354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.013843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.014499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.187761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.188348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.382501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.384150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.489353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 108.492042] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 08:08:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)={0x1c, 0x6a, 0x101, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @binary="d5"}]}]}, 0x1c}], 0x1}, 0x0) [ 108.594061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.594697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.613970] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 108.660242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.660907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.702593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.703588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.754979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.755609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.798695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.799289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.854115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.854786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.936640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.937497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.003357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.004044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.171027] audit: type=1400 audit(1756454899.241:8): avc: denied { open } for pid=3884 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 109.176748] audit: type=1400 audit(1756454899.241:9): avc: denied { kernel } for pid=3884 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 109.404652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.405348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.447691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.448322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:08:19 executing program 1: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:08:19 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) 08:08:19 executing program 7: r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff03, 0x0) 08:08:19 executing program 4: clone(0x7fc42f2c2fff, 0x0, 0x0, 0x0, 0x0) 08:08:19 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) pipe2$9p(&(0x7f00000004c0), 0x0) syz_io_uring_setup(0x363e, &(0x7f0000000640)={0x0, 0x78b4, 0x2, 0x0, 0xcf}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 08:08:19 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) pipe2$9p(&(0x7f00000004c0), 0x0) syz_io_uring_setup(0x363e, &(0x7f0000000640)={0x0, 0x78b4, 0x2, 0x0, 0xcf}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 08:08:19 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') pread64(r0, 0x0, 0x0, 0x0) 08:08:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)={0x1c, 0x6a, 0x101, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @binary="d5"}]}]}, 0x1c}], 0x1}, 0x0) [ 109.580315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 08:08:19 executing program 4: clone(0x7fc42f2c2fff, 0x0, 0x0, 0x0, 0x0) 08:08:19 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) pipe2$9p(&(0x7f00000004c0), 0x0) syz_io_uring_setup(0x363e, &(0x7f0000000640)={0x0, 0x78b4, 0x2, 0x0, 0xcf}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 08:08:19 executing program 1: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 192.110800] Bluetooth: hci6: command 0x0406 tx timeout [ 192.114451] Bluetooth: hci3: command 0x0406 tx timeout [ 192.115576] Bluetooth: hci0: command 0x0406 tx timeout [ 192.116729] Bluetooth: hci2: command 0x0406 tx timeout [ 192.117830] Bluetooth: hci5: command 0x0406 tx timeout [ 192.118913] Bluetooth: hci7: command 0x0406 tx timeout [ 192.119972] Bluetooth: hci1: command 0x0406 tx timeout [ 192.121062] Bluetooth: hci4: command 0x0406 tx timeout [ 255.086744] INFO: task kworker/u9:1:34 blocked for more than 143 seconds. [ 255.088108] Tainted: G W 6.17.0-rc3-next-20250829 #1 [ 255.089316] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.096600] task:kworker/u9:1 state:D stack:26864 pid:34 tgid:34 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 255.098523] Workqueue: iou_exit io_ring_exit_work [ 255.099394] Call Trace: [ 255.099880] [ 255.100280] __schedule+0xe7e/0x3590 [ 255.100973] ? __pfx___schedule+0x10/0x10 [ 255.101734] ? lock_acquire+0x15e/0x2f0 [ 255.102415] ? find_held_lock+0x2b/0x80 [ 255.103134] ? schedule+0x2c7/0x390 [ 255.103803] ? lock_release+0xc8/0x290 [ 255.104477] schedule+0xdb/0x390 [ 255.105098] schedule_timeout+0x244/0x280 [ 255.105833] ? __pfx_schedule_timeout+0x10/0x10 [ 255.106632] ? register_lock_class+0x41/0x560 [ 255.107434] ? mark_held_locks+0x49/0x80 [ 255.108181] do_wait_for_common+0x1b2/0x440 [ 255.108946] ? __pfx_schedule_timeout+0x10/0x10 [ 255.109767] ? __pfx_do_wait_for_common+0x10/0x10 [ 255.110593] ? do_raw_spin_lock+0x123/0x260 [ 255.111356] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 255.112199] wait_for_completion+0x4a/0x60 [ 255.112968] io_put_sq_data+0xb0/0x100 [ 255.113642] io_sq_thread_finish+0x1e1/0x290 [ 255.114435] io_ring_exit_work+0x7b6/0xf60 [ 255.115193] ? __pfx_io_ring_exit_work+0x10/0x10 [ 255.116038] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 255.116859] ? xen_error_entry+0x30/0x60 [ 255.117545] ? lock_release+0xc8/0x290 [ 255.118258] process_one_work+0x8e1/0x19c0 [ 255.119019] ? __pfx_process_one_work+0x10/0x10 [ 255.119847] ? move_linked_works+0x172/0x270 [ 255.120612] ? assign_work+0x196/0x240 [ 255.121309] worker_thread+0x67e/0xe90 [ 255.122010] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 255.122931] ? __pfx_worker_thread+0x10/0x10 [ 255.123776] kthread+0x3c8/0x740 [ 255.124375] ? __pfx_kthread+0x10/0x10 [ 255.125061] ? ret_from_fork+0x23/0x430 [ 255.125777] ? lock_release+0xc8/0x290 [ 255.126469] ? __pfx_kthread+0x10/0x10 [ 255.127166] ret_from_fork+0x34b/0x430 [ 255.127889] ? __pfx_kthread+0x10/0x10 [ 255.128555] ret_from_fork_asm+0x1a/0x30 [ 255.129295] [ 255.129795] [ 255.129795] Showing all locks held in the system: [ 255.130855] 1 lock held by khungtaskd/32: [ 255.131553] #0: ffffffff85c1c760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 255.133140] 2 locks held by kworker/u9:1/34: [ 255.133909] #0: ffff888009a6e948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1240/0x19c0 [ 255.135612] #1: ffff888009a97d30 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x857/0x19c0 [ 255.137444] 1 lock held by in:imklog/173: [ 255.138156] 1 lock held by iou-sqp-3923/3925: [ 255.138931] [ 255.139232] ============================================= [ 255.139232] VM DIAGNOSIS: 08:10:45 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff824617d5 RDX=ffff888016cb1b80 RSI=0000000000000000 RDI=0000000000000005 RBP=1ffff110027d3f5c RSP=ffff888013e9fad8 R8 =0000000000000000 R9 =fffffbfff0c8758a R10=0000000000000000 R11=0000000000000001 R12=ffffffff82461730 R13=0000000000000000 R14=ffff8880203830f0 R15=0000000000000001 RIP=ffffffff8173e126 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1a89a4b700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055fbefe2ccf8 CR3=0000000042b4d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003f847ae147ae147b XMM02=00000000000000000000000000000000 XMM03=00000000000000003f73fd4a54b8c146 XMM04=7320636578650a0073746e6968206365 XMM05=6c61746f7420636578650a0073646565 XMM06=617473657220726f7475636578651100 XMM07=6509006e656720636578650800737472 XMM08=20636578650a00657a696d696e696d20 XMM09=746e696820636578650a006873616d73 XMM10=650a00736465657320636578650a0073 XMM11=756365786511006c61746f7420636578 XMM12=78650800737472617473657220726f74 XMM13=7a7566206365786509006e6567206365 XMM14=74616469646e616320636578650e007a XMM15=000065676169727420636578650b0065 info registers vcpu 1 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff888009a87960 R8 =0000000000000000 R9 =ffffed10016d1046 R10=0000000000000079 R11=0000000000000001 R12=0000000000000079 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f26d03ed4d0 CR3=00000000216c8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=003f016c6c6f502e726567616e614d0c XMM02=6509006c61746f7420636578650a0a01 XMM03=6d20636578650d007a7a756620636578 XMM04=657320636578650a00657a696d696e69 XMM05=657220726f7475636578651100736465 XMM06=6e656720636578650800737472617473 XMM07=6574616469646e616320636578650e00 XMM08=7a7566206365786509006c61746f7420 XMM09=657a696d696e696d20636578650d007a XMM10=78651100736465657320636578650a00 XMM11=00737472617473657220726f74756365 XMM12=20636578650e006e6567206365786508 XMM13=20636578650b006574616469646e6163 XMM14=616d7320636578650a00656761697274 XMM15=000073746e696820636578650a006873