last executing test programs: 3.566388646s ago: executing program 1 (id=2): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x7, 0x2220004, 0x3, 0xeb1, 0xffffffffffffffff, 0x81) close_range$auto(0x2, 0x8, 0x0) writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x1000000000004}, 0x2bc) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_seqnum\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001dc0)=""/195, 0xc3) io_uring_register$auto(0x2, 0x17, &(0x7f00000000c0), 0x1) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/kvm/mmu_flooded\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x2) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x0, 0x0) prctl$auto(0x23, 0xc, 0x2008, 0xfffffffffffffff6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x79, 0x4, 0x300000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd4\x00', 0x40001, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) socket(0x1, 0x1, 0x7d93) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x28082, 0x0) eventfd$auto(0x0) r3 = io_uring_setup$auto(0x4, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto(r4, 0xc1205531, r3) socket(0xa, 0x3, 0x3a) r5 = socketpair$auto(0x5, 0x6, 0x8bb, 0x0) mmap$auto(0x4, 0x7, 0x2, 0x40eb2, r2, 0x300000000000) r6 = socket(0xa, 0x801, 0x84) setsockopt$auto(r6, 0x10000000084, 0x22, 0x0, 0x10) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) 3.166579658s ago: executing program 0 (id=1): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0250046", @ANYRES16=r0, @ANYRES64], 0x2c0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) mmap$auto(0x0, 0x2020009, 0xc, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2b, 0x1, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) listen$auto(0x3, 0x81) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/input/event2\x00', 0x40800, 0x0) ioctl$auto_EVIOCSKEYCODE(r3, 0x40084504, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.6/usb22/dev\x00', 0x2862, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, 0x0, 0x5b4) mmap$auto(0xfbffffffffffffff, 0x400000002, 0x10001, 0x100008b56, r2, 0x80000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x8, 0x2, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) r6 = socket(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) read$auto(r2, 0x0, 0x80) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0xfffffffffffffffc, 0x400005, 0xe3, 0x18, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) 2.999020202s ago: executing program 2 (id=3): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0) write$auto(r0, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8) setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)=0xce) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) setsockopt$auto_SO_RXQ_OVFL(r2, 0x1, 0x28, 0x0, 0x7) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x101000, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x12d280, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) pipe$auto(0x0) write$auto(0x3, 0x0, 0x200ffd8) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r3 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r3, 0x29, 0xd1, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x454, 0x9) 2.743938275s ago: executing program 3 (id=4): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r3}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r4, 0x5646, r4) read$auto_v4l2_fops_v4l2_dev(r4, &(0x7f0000000280)=""/40, 0x28) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 2.686955814s ago: executing program 1 (id=5): openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x1, 0x3, 0x3, 0xec91, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x5}, 0x3) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) pwrite64$auto(r2, &(0x7f0000000040)='/dev/vcsa\x00', 0x7b05, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) r4 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000180)=0x7) madvise$auto(0x7f, 0x80000000, 0x100000003) read$auto(r1, 0x0, 0x20) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYBLOB="746cb551e830601e0d16aabb95291469d303f663aee02f11c85470d52aad0e1a83597ff7ee28603127a63aa61486d9def84244b955e043f80e4863109603599904e43691d52f8b8db3f762b23603e1aeea28c050892624ce04b9aa085cc103b84b27b4f6399119f1c648753803ada83ef75d2f83473afa338a9363aec6fc7e290c779f559a7721508685a053719936c59213308d23b1d3d1e8555c43793617dd0492ab7c5024ad50f8abd13c2b5ea6b33cb1b1730c67f78ba2a77fcf21948b126604c380be7ebf"], 0x40}, 0x1, 0x0, 0x0, 0x2408c810}, 0x40418c0) mmap$auto(0xff0f200000000000, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) madvise$auto(0x7000000, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000a40), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x64) io_uring_setup$auto(0x6, 0x0) 2.277295771s ago: executing program 0 (id=6): close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) sysfs$auto(0x2, 0x10000000000002d, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x521341, 0xe) umount2$auto(0x0, 0x4) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/28t\x00', 0x2100, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/loop5\x00', 0x40, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000001040)={"23eb1cc7ffaa3115a2dec531678b36b23cf9d72dbd7f1bc81cf095baa2c7d9f6", 0x4, 0x3, 0x80000, 0x6, 0x1}) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRES16=0x0, @ANYRES64=r1, @ANYRESDEC=r3, @ANYBLOB="080004"], 0x68}, 0x1, 0x0, 0x0, 0x20040804}, 0x44004854) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_msr_fops_msr(0xffffffffffffff9c, 0x0, 0xc40, 0x0) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x33bc}, 0x3) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) ioctl$auto_MON_IOCX_GET(r4, 0x40189206, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram6\x00', 0x0, 0x0) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000004c0)={"141aa80f010000002dcac92008f5ef6c6ab6650b603d7fb9fe94f9d26800", 0x3, 0x4, 0x4510}) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r3, r4, 0x0) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008081}, 0x10004010) socket(0x2, 0x80802, 0x0) ioctl$auto_MEMREADOOB(r0, 0xc0104d04, &(0x7f0000000280)={0x80000000, 0x5, &(0x7f0000000140)='/dev/ram6\x00'}) 1.655122316s ago: executing program 2 (id=7): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/ifb0/queues/tx-0/byte_queue_limits/limit_max\x00', 0xb02, 0x0) madvise$auto_MADV_MERGEABLE(0x8, 0x5, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8003) r3 = socket(0x0, 0x801, 0x84) sysfs$auto(0x2, 0x100000000000036, 0x0) getsockopt$auto(r3, 0x84, 0x7b, 0x0, 0x0) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f5ab73ee1dc603f80500a26d5c683ad3cdf750ccc0d6bbde65ec034aca8bedd3e452f202e50f34b2d7175ba99bf94ddfe65b44df146287de6ea02072dcdf12c0b5a3a81eea146d69398eed450c02f8321782d33f0e396f1d1f1ad16353f67eebcd6dc2984357cadd839ae5fb03d0da0a235b23157b645b1adc77720f809ee2fd486fbb42f25bcff1e608f7ea77398d56a7fddf010548a41a1634423a7341c9ef224935b3f7f0d9c2f968a0ff546f2dea9c87802f27e4ef6aa69017f0813c4502ffaf0d04681ddebadc326001fe1f3eae492cf1a800484a62dc4fb153edfd1f41ededa7995a69979da866178247904ceed09066ac0f97c0d3a85549cad8115172b4473363e0e98ad708091b0ef7df9772d22478427c6df9b201ccc9ba44eccb14f214559056057af4e6c96fde023b2f49576afc73daa617e08c06c418a120364b5a41e0774bf7452087cff2938d688a63d3e2717f6710a9a945dfe497e1ef327e9541a129682bb53fa5b4265033", @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf25021b6d0004001d80"], 0x18}}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NFC_CMD_SE_IO(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x1ff}, @NFC_ATTR_LLC_SDP={0x19, 0x13, 0x0, 0x1, [@generic="cb346a0caa4f84987d5f21dbde98fce43a26e764b5"]}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x2c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) write$auto(0x3, 0x0, 0xffd7) 1.056399971s ago: executing program 0 (id=8): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) msgctl$auto_IPC_INFO(0x2, 0x3, 0x0) mmap$auto(0x9, 0x6230000000000000, 0xfffffffffffffffd, 0x400009b72, 0x2, 0x80000000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(0xffffffffffffffff, r1, 0x0, 0x48) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto_mousedev_fops_mousedev(r0, &(0x7f00000000c0)="13", 0x1) mmap$auto(0x3, 0x6020008, 0x3, 0xeb4, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x22, 0x80a, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @empty}, 0x6b) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRES64=r0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="0a0006001fc82117366d0000"], 0x28}}, 0x4000000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2f212cbd8966efb91b2e351f000008000300", @ANYRES64], 0x28}}, 0x4081) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="09072b5498f0eddbdf250300000005"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x2}]}, 0x1c}}, 0x24004040) socket(0x2, 0x1, 0x84) r7 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/bdi/1:2/wb_stats\x00', 0x10100, 0x0) write$auto(r7, 0x0, 0x7e) unshare$auto(0x40000080) 647.071686ms ago: executing program 1 (id=9): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1, 0x7356, 0x33, 0x65f, 0x1ffde, 0x7, 0xffffffffffffffff, 0x20000009, 0x4, 0x3, 0x6, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x87, 0x4, 0x9, 0x400, 0x2, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9bb]}, 0x1fe, 0x800d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder0\x00', 0x189160, 0x0) ioctl$auto_BINDER_VERSION(r1, 0xc0046209, 0x0) mmap$auto(0x0, 0x40009, 0x2, 0x9b72, 0x2, 0x28000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x9, 0x3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x40842, 0x8) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/kvm/nmi_window_exits\x00', 0x4c2, 0x0) io_uring_setup$auto(0x8, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) 187.093462ms ago: executing program 3 (id=10): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r5 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999"}) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x4, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x0, 0x4, 0x8, 0xbc, 0x1, 0x4, 0x0, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) ioctl$auto_SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000040)=0x8) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="2f212cbd7000fcdbdf253100000008000300"], 0x48}}, 0x4000000) sendmsg$auto_NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="44010000", @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10) ioperm$auto(0x3, 0x38c, 0x9) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x20000, 0x0) sendfile$auto(r6, r6, 0x0, 0x7fff) unshare$auto(0x40000080) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0xfc441, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xff, 0x9b72, 0xffffffffffffffff, 0x8000) 0s ago: executing program 0 (id=11): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = dup$auto(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000240)={0x2, 0x0, "8ce3cca0932057312ef9be259b7b7df7", "105aaa3396c04f8e8226a55c96cf852e", "66694af9c3153abc8239a69871113bdaa57957457fe3a0bd42f82d3e51e57ccf", "4512fe968be92c9d520d940b596a7f5e9d09fa185c12279ef1a9b2f0004f996dc7441572cbcc953158468a268fca3dc3301df9bb8a305835aaaf7245ceaf20204a4dfd49f04134d3b42c833ad64443fa", "2fbe7cb67fd0ec8cefe4056804e237f7", "714bafcde5d7583fd6f5ac502aa34906bbfbb000414eaec2e5c7b9e8298da083d79481d9618df102be1c36f2972a442652a171f3b53f7089a34d06309c53187594ff460fa62439e747aeadf02d3ca06d", "e641306c7dd6770ec567df06f891d0d94610b3b4f2fc9dd61f677af25f935ff76e2ac2cbedc7a81e8daaff7ec75eb3ba9d47f9a8e35f41f4fc23c60eed6055e8bfb2680ed198fb3c49a68fef3f9b8eab8e302ffc21dc49ad37e3a0ffecf705260f35ad30af9502f7d56790bac28ee74e6945ad86b358afcc7a82f6f2826af00d"}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x1, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyr3\x00', 0xf7f64efdce38df56, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f00000001c0)="06067400bd1373ade283e29ef03b962ce2532b902d293cb9ffbe57505c7425ffcc92c9a9d8602b56a825a02f8e7d905e4856d3295886aba91b45", 0x3a) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) close_range$auto(0xffffffffffffffff, 0x8, 0x1000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop12/queue/nr_requests\x00', 0x80302, 0x0) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8002008000) write$auto(0x3, 0x0, 0x3f00) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) read$auto(0x3, 0x0, 0xf34) read$auto(r1, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x5) write$auto(0x3, 0x0, 0xffd8) openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/auxv\x00', 0x101100, 0x0) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019c6139ce8761b5d52", 0x60) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. [ 79.521783][ T5817] cgroup: Unknown subsys name 'net' [ 79.650925][ T5817] cgroup: Unknown subsys name 'cpuset' [ 79.660333][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.223802][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.138168][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.150406][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.158099][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.165967][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.175155][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.183595][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.191480][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.199709][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.208314][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.214798][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.216153][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.231611][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.238919][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.257926][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.267830][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.277224][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.284765][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.292337][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.303599][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.329074][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.842681][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 83.971765][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 84.029999][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 84.131554][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.138885][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.146329][ T5832] bridge_slave_0: entered allmulticast mode [ 84.155868][ T5832] bridge_slave_0: entered promiscuous mode [ 84.171050][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 84.226436][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.233818][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.241387][ T5832] bridge_slave_1: entered allmulticast mode [ 84.248461][ T5832] bridge_slave_1: entered promiscuous mode [ 84.331971][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.360215][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.367593][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.374882][ T5826] bridge_slave_0: entered allmulticast mode [ 84.382155][ T5826] bridge_slave_0: entered promiscuous mode [ 84.392622][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.418220][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.425414][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.434537][ T5826] bridge_slave_1: entered allmulticast mode [ 84.442262][ T5826] bridge_slave_1: entered promiscuous mode [ 84.508654][ T5832] team0: Port device team_slave_0 added [ 84.529650][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.537706][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.544879][ T5836] bridge_slave_0: entered allmulticast mode [ 84.552194][ T5836] bridge_slave_0: entered promiscuous mode [ 84.574069][ T5832] team0: Port device team_slave_1 added [ 84.592784][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.600264][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.607873][ T5836] bridge_slave_1: entered allmulticast mode [ 84.615420][ T5836] bridge_slave_1: entered promiscuous mode [ 84.626078][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.639262][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.707346][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.714330][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.740663][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.752743][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.760283][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.768664][ T5827] bridge_slave_0: entered allmulticast mode [ 84.775686][ T5827] bridge_slave_0: entered promiscuous mode [ 84.811354][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.818604][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.844576][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.861176][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.868483][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.875965][ T5827] bridge_slave_1: entered allmulticast mode [ 84.883903][ T5827] bridge_slave_1: entered promiscuous mode [ 84.908217][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.921421][ T5826] team0: Port device team_slave_0 added [ 84.931085][ T5826] team0: Port device team_slave_1 added [ 84.954020][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.979878][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.026565][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.047160][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.054238][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.080250][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.122142][ T5836] team0: Port device team_slave_0 added [ 85.128859][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.135840][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.162317][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.180258][ T5832] hsr_slave_0: entered promiscuous mode [ 85.186626][ T5832] hsr_slave_1: entered promiscuous mode [ 85.207383][ T5836] team0: Port device team_slave_1 added [ 85.241669][ T5827] team0: Port device team_slave_0 added [ 85.271059][ T5827] team0: Port device team_slave_1 added [ 85.343095][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.350410][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.376372][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.387635][ T5837] Bluetooth: hci1: command tx timeout [ 85.387639][ T5840] Bluetooth: hci3: command tx timeout [ 85.390397][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.393730][ T5830] Bluetooth: hci2: command tx timeout [ 85.398819][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.398847][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.413391][ T5837] Bluetooth: hci0: command tx timeout [ 85.463353][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.470490][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.497067][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.522071][ T5826] hsr_slave_0: entered promiscuous mode [ 85.528440][ T5826] hsr_slave_1: entered promiscuous mode [ 85.534503][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.542369][ T5826] Cannot create hsr debugfs directory [ 85.554463][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.562146][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.588502][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.667527][ T5827] hsr_slave_0: entered promiscuous mode [ 85.673810][ T5827] hsr_slave_1: entered promiscuous mode [ 85.680649][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.688371][ T5827] Cannot create hsr debugfs directory [ 85.738709][ T5836] hsr_slave_0: entered promiscuous mode [ 85.745026][ T5836] hsr_slave_1: entered promiscuous mode [ 85.751675][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.759331][ T5836] Cannot create hsr debugfs directory [ 86.150970][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.163302][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.175380][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.196458][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.261959][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.288289][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.300307][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.333492][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.394045][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.405453][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.420808][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.432712][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.543951][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.556288][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.572595][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.583093][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.649113][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.674299][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.731717][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.741360][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.748823][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.769913][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.777100][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.801598][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.828085][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.871259][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.897684][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.904866][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.914904][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.922079][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.934392][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.941588][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.024911][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.032080][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.182297][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.233765][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.296058][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.359206][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.366397][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.419488][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.426743][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.466884][ T5837] Bluetooth: hci0: command tx timeout [ 87.467240][ T5830] Bluetooth: hci3: command tx timeout [ 87.472316][ T5837] Bluetooth: hci2: command tx timeout [ 87.483298][ T5840] Bluetooth: hci1: command tx timeout [ 87.810872][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.879656][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.921155][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.980485][ T5832] veth0_vlan: entered promiscuous mode [ 88.021134][ T5832] veth1_vlan: entered promiscuous mode [ 88.041383][ T5827] veth0_vlan: entered promiscuous mode [ 88.080967][ T5827] veth1_vlan: entered promiscuous mode [ 88.114189][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.139577][ T5826] veth0_vlan: entered promiscuous mode [ 88.155079][ T5832] veth0_macvtap: entered promiscuous mode [ 88.174842][ T5832] veth1_macvtap: entered promiscuous mode [ 88.205855][ T5826] veth1_vlan: entered promiscuous mode [ 88.264827][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.282480][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.291092][ T5827] veth0_macvtap: entered promiscuous mode [ 88.319090][ T5827] veth1_macvtap: entered promiscuous mode [ 88.335317][ T5826] veth0_macvtap: entered promiscuous mode [ 88.345485][ T5836] veth0_vlan: entered promiscuous mode [ 88.355861][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.366130][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.375210][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.384308][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.403735][ T5836] veth1_vlan: entered promiscuous mode [ 88.432546][ T5826] veth1_macvtap: entered promiscuous mode [ 88.456135][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.467897][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.480463][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.513660][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.524783][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.539966][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.548991][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.560142][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.570234][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.581433][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.593394][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.619278][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.628839][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.639793][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.648858][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.664904][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.676937][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.687782][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.698428][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.711004][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.723856][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.732892][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.742414][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.751619][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.799049][ T5836] veth0_macvtap: entered promiscuous mode [ 88.836406][ T5836] veth1_macvtap: entered promiscuous mode [ 88.851673][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.863279][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.921283][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.934923][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.969668][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.987437][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.998170][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.008847][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.019486][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.030405][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.049952][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.062356][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.073160][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.083188][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.093770][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.103633][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.114085][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.125702][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.149564][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.175472][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.185650][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.196660][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.206523][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.262702][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.298539][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.336441][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.355796][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.436360][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.455110][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.510587][ T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.531783][ T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.539418][ T5840] Bluetooth: hci3: command tx timeout [ 89.539459][ T5840] Bluetooth: hci0: command tx timeout [ 89.548671][ T5835] Bluetooth: hci1: command tx timeout [ 89.556177][ T5835] Bluetooth: hci2: command tx timeout [ 89.599816][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.657123][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.783672][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.814697][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.011981][ T5907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 90.274995][ T5907] team0: Port device team_slave_0 removed [ 90.297264][ T5916] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 90.376990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.471897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.718995][ T5907] Zero length message leads to an empty skb [ 91.113511][ T5916] vivid-007: ================= START STATUS ================= [ 91.122831][ T5916] vivid-007: Generate PTS: true [ 91.147937][ T5916] vivid-007: Generate SCR: true [ 91.156930][ T5916] tpg source WxH: 640x360 (Y'CbCr) [ 91.209840][ T5916] tpg field: 1 [ 91.213270][ T5916] tpg crop: (0,0)/640x360 [ 91.259764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 91.299242][ T5916] tpg compose: (0,0)/640x360 [ 91.304189][ T5916] tpg colorspace: 8 [ 91.316878][ T5916] tpg transfer function: 0/0 [ 91.321970][ T5916] tpg Y'CbCr encoding: 0/0 [ 91.341662][ T5916] tpg quantization: 0/0 [ 91.374387][ T5916] tpg RGB range: 0/2 [ 91.380228][ T5916] vivid-007: ================== END STATUS ================== syzkaller syzkaller login: [ 91.617659][ T5835] Bluetooth: hci2: command tx timeout [ 91.623671][ T5840] Bluetooth: hci1: command tx timeout [ 91.629726][ T5837] Bluetooth: hci0: command tx timeout [ 91.629759][ T5830] Bluetooth: hci3: command tx timeout [ 91.977146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.099813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.118786][ T10] cfg80211: failed to load regulatory.db [ 92.850842][ T5945] Invalid ELF header magic: != ELF [ 93.117811][ T5950] [ 93.120206][ T5950] ====================================================== [ 93.127281][ T5950] WARNING: possible circular locking dependency detected [ 93.134313][ T5950] 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 Not tainted [ 93.141429][ T5950] ------------------------------------------------------ [ 93.148446][ T5950] syz.0.11/5950 is trying to acquire lock: [ 93.154256][ T5950] ffff888143fe7118 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 93.164109][ T5950] [ 93.164109][ T5950] but task is already holding lock: [ 93.171466][ T5950] ffff888143fe6be8 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 93.182727][ T5950] [ 93.182727][ T5950] which lock already depends on the new lock. [ 93.182727][ T5950] [ 93.193129][ T5950] [ 93.193129][ T5950] the existing dependency chain (in reverse order) is: [ 93.202139][ T5950] [ 93.202139][ T5950] -> #2 (&q->q_usage_counter(io)#29){++++}-{0:0}: [ 93.210767][ T5950] blk_alloc_queue+0x619/0x760 [ 93.216065][ T5950] blk_mq_alloc_queue+0x179/0x290 [ 93.221627][ T5950] __blk_mq_alloc_disk+0x29/0x120 [ 93.227226][ T5950] loop_add+0x496/0xb70 [ 93.231923][ T5950] loop_init+0x164/0x270 [ 93.236698][ T5950] do_one_initcall+0x120/0x6e0 [ 93.242011][ T5950] kernel_init_freeable+0x5c2/0x900 [ 93.247748][ T5950] kernel_init+0x1c/0x2b0 [ 93.252606][ T5950] ret_from_fork+0x48/0x80 [ 93.257547][ T5950] ret_from_fork_asm+0x1a/0x30 [ 93.262951][ T5950] [ 93.262951][ T5950] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 93.270178][ T5950] fs_reclaim_acquire+0x102/0x150 [ 93.275748][ T5950] kmem_cache_alloc_noprof+0x53/0x3b0 [ 93.281654][ T5950] __kernfs_new_node+0xd2/0x8a0 [ 93.287031][ T5950] kernfs_new_node+0x13c/0x1e0 [ 93.292324][ T5950] kernfs_create_dir_ns+0x4c/0x1a0 [ 93.297978][ T5950] sysfs_create_dir_ns+0x13a/0x2b0 [ 93.303630][ T5950] kobject_add_internal+0x2c4/0x9b0 [ 93.309370][ T5950] kobject_add+0x16e/0x240 [ 93.314310][ T5950] elv_register_queue+0xd3/0x2a0 [ 93.319778][ T5950] blk_register_queue+0x3c4/0x560 [ 93.325327][ T5950] add_disk_fwnode+0x911/0x13a0 [ 93.330715][ T5950] nbd_dev_add+0x78e/0xbb0 [ 93.335655][ T5950] nbd_init+0x181/0x320 [ 93.340348][ T5950] do_one_initcall+0x120/0x6e0 [ 93.345661][ T5950] kernel_init_freeable+0x5c2/0x900 [ 93.351404][ T5950] kernel_init+0x1c/0x2b0 [ 93.356260][ T5950] ret_from_fork+0x48/0x80 [ 93.361201][ T5950] ret_from_fork_asm+0x1a/0x30 [ 93.366495][ T5950] [ 93.366495][ T5950] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 93.374325][ T5950] __lock_acquire+0x1173/0x1ba0 [ 93.379709][ T5950] lock_acquire+0x179/0x350 [ 93.384773][ T5950] __mutex_lock+0x199/0xb90 [ 93.390005][ T5950] queue_requests_store+0x1c7/0x310 [ 93.395749][ T5950] queue_attr_store+0x273/0x310 [ 93.401131][ T5950] sysfs_kf_write+0xef/0x150 [ 93.406271][ T5950] kernfs_fop_write_iter+0x354/0x510 [ 93.412082][ T5950] vfs_write+0x5bd/0x1180 [ 93.416936][ T5950] ksys_write+0x12a/0x240 [ 93.421787][ T5950] do_syscall_64+0xcd/0x230 [ 93.426821][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.433240][ T5950] [ 93.433240][ T5950] other info that might help us debug this: [ 93.433240][ T5950] [ 93.443476][ T5950] Chain exists of: [ 93.443476][ T5950] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#29 [ 93.443476][ T5950] [ 93.457238][ T5950] Possible unsafe locking scenario: [ 93.457238][ T5950] [ 93.464687][ T5950] CPU0 CPU1 [ 93.470052][ T5950] ---- ---- [ 93.475409][ T5950] lock(&q->q_usage_counter(io)#29); [ 93.480804][ T5950] lock(fs_reclaim); [ 93.487313][ T5950] lock(&q->q_usage_counter(io)#29); [ 93.495220][ T5950] lock(&q->elevator_lock); [ 93.499811][ T5950] [ 93.499811][ T5950] *** DEADLOCK *** [ 93.499811][ T5950] [ 93.507951][ T5950] 6 locks held by syz.0.11/5950: [ 93.512884][ T5950] #0: ffff888034015438 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 93.521955][ T5950] #1: ffff88802f474420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 93.530942][ T5950] #2: ffff88802bc24088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 93.540799][ T5950] #3: ffff888143b20a58 (kn->active#64){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 93.550839][ T5950] #4: ffff888143fe6be8 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 93.562554][ T5950] #5: ffff888143fe6c20 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 93.574622][ T5950] [ 93.574622][ T5950] stack backtrace: [ 93.580539][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: syz.0.11 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 93.580567][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.580583][ T5950] Call Trace: [ 93.580590][ T5950] [ 93.580602][ T5950] dump_stack_lvl+0x116/0x1f0 [ 93.580638][ T5950] print_circular_bug+0x275/0x350 [ 93.580665][ T5950] check_noncircular+0x14c/0x170 [ 93.580692][ T5950] __lock_acquire+0x1173/0x1ba0 [ 93.580721][ T5950] lock_acquire+0x179/0x350 [ 93.580745][ T5950] ? queue_requests_store+0x1c7/0x310 [ 93.580766][ T5950] ? __pfx___might_resched+0x10/0x10 [ 93.580789][ T5950] ? do_raw_spin_lock+0x12c/0x2b0 [ 93.580818][ T5950] __mutex_lock+0x199/0xb90 [ 93.580845][ T5950] ? queue_requests_store+0x1c7/0x310 [ 93.580866][ T5950] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 93.580892][ T5950] ? queue_requests_store+0x1c7/0x310 [ 93.580911][ T5950] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.580937][ T5950] ? __pfx___mutex_lock+0x10/0x10 [ 93.580967][ T5950] ? __pfx_autoremove_wake_function+0x10/0x10 [ 93.580994][ T5950] ? queue_requests_store+0x1c7/0x310 [ 93.581013][ T5950] queue_requests_store+0x1c7/0x310 [ 93.581033][ T5950] ? __pfx_queue_requests_store+0x10/0x10 [ 93.581059][ T5950] ? __mutex_trylock_common+0xe9/0x250 [ 93.581085][ T5950] ? __pfx_queue_requests_store+0x10/0x10 [ 93.581105][ T5950] queue_attr_store+0x273/0x310 [ 93.581124][ T5950] ? __pfx_queue_attr_store+0x10/0x10 [ 93.581170][ T5950] ? find_held_lock+0x2b/0x80 [ 93.581189][ T5950] ? sysfs_file_kobj+0xe4/0x290 [ 93.581218][ T5950] ? __pfx_queue_attr_store+0x10/0x10 [ 93.581248][ T5950] sysfs_kf_write+0xef/0x150 [ 93.581276][ T5950] kernfs_fop_write_iter+0x354/0x510 [ 93.581300][ T5950] ? __pfx_sysfs_kf_write+0x10/0x10 [ 93.581328][ T5950] vfs_write+0x5bd/0x1180 [ 93.581348][ T5950] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 93.581373][ T5950] ? __pfx___mutex_lock+0x10/0x10 [ 93.581399][ T5950] ? __pfx_vfs_write+0x10/0x10 [ 93.581426][ T5950] ksys_write+0x12a/0x240 [ 93.581445][ T5950] ? __pfx_ksys_write+0x10/0x10 [ 93.581468][ T5950] do_syscall_64+0xcd/0x230 [ 93.581501][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.581522][ T5950] RIP: 0033:0x7f0c7038e969 [ 93.581538][ T5950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.581558][ T5950] RSP: 002b:00007f0c71189038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.581577][ T5950] RAX: ffffffffffffffda RBX: 00007f0c705b6160 RCX: 00007f0c7038e969 [ 93.581591][ T5950] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 93.581603][ T5950] RBP: 00007f0c70410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 93.581615][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.581627][ T5950] R13: 0000000000000001 R14: 00007f0c705b6160 R15: 00007ffe854f0ec8 [ 93.581646][ T5950] [ 93.880992][ T5928] bond0: option all_slaves_active: invalid value ()