last executing test programs: 0s ago: executing program 2 (id=3): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop14/queue/scheduler\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = fcntl$auto_F_GETOWN(r0, 0x9, 0xffffffffffffffff) prctl$auto(0x845, 0x5, r1, 0x3, 0x0) socket(0x18, 0x5, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xca, &(0x7f00000001c0)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7j\x00\x00\x00\x00\x00\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94-\xbb\x995\x1e\xcas\x99\xbb\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea6J\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8fW\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9', 0x2b) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/rcutree/parameters/qlowmark\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x8, 0x3c5e, 0x66) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.35' (ED25519) to the list of known hosts. [ 99.167279][ T5818] cgroup: Unknown subsys name 'net' [ 99.299622][ T5818] cgroup: Unknown subsys name 'cpuset' [ 99.308933][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.181726][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.167130][ T1776] cfg80211: failed to load regulatory.db [ 103.378561][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.387185][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.414830][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.423454][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.434806][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.460441][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.533697][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.541700][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.550152][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.558623][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.567106][ T5140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.576259][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.584161][ T5140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.591890][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.600866][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.645616][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.653932][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.665713][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.686947][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.695416][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.251166][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 104.289026][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 104.418148][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 104.652788][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.660738][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.668745][ T5828] bridge_slave_0: entered allmulticast mode [ 104.677078][ T5828] bridge_slave_0: entered promiscuous mode [ 104.686522][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.693710][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.701131][ T5835] bridge_slave_0: entered allmulticast mode [ 104.708595][ T5835] bridge_slave_0: entered promiscuous mode [ 104.716406][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 104.751444][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.758802][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.766189][ T5828] bridge_slave_1: entered allmulticast mode [ 104.773580][ T5828] bridge_slave_1: entered promiscuous mode [ 104.781302][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.788563][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.796101][ T5835] bridge_slave_1: entered allmulticast mode [ 104.803529][ T5835] bridge_slave_1: entered promiscuous mode [ 104.927965][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.935409][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.942851][ T5831] bridge_slave_0: entered allmulticast mode [ 104.951021][ T5831] bridge_slave_0: entered promiscuous mode [ 104.962367][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.976206][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.989024][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.005943][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.013158][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.020498][ T5831] bridge_slave_1: entered allmulticast mode [ 105.028147][ T5831] bridge_slave_1: entered promiscuous mode [ 105.065855][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.136275][ T5828] team0: Port device team_slave_0 added [ 105.176555][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.192055][ T5828] team0: Port device team_slave_1 added [ 105.219654][ T5835] team0: Port device team_slave_0 added [ 105.243313][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.268988][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.276071][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.302538][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.317390][ T5835] team0: Port device team_slave_1 added [ 105.324012][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.331144][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.357359][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.370619][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.378200][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.385716][ T5837] bridge_slave_0: entered allmulticast mode [ 105.393132][ T5837] bridge_slave_0: entered promiscuous mode [ 105.461221][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.468584][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.475919][ T5837] bridge_slave_1: entered allmulticast mode [ 105.483383][ T5837] bridge_slave_1: entered promiscuous mode [ 105.509522][ T5831] team0: Port device team_slave_0 added [ 105.517648][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.524784][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.526886][ T5834] Bluetooth: hci0: command tx timeout [ 105.550813][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.554029][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.574203][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.603070][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.640356][ T5831] team0: Port device team_slave_1 added [ 105.685943][ T5830] Bluetooth: hci1: command tx timeout [ 105.691818][ T5834] Bluetooth: hci2: command tx timeout [ 105.707016][ T5828] hsr_slave_0: entered promiscuous mode [ 105.713754][ T5828] hsr_slave_1: entered promiscuous mode [ 105.754764][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.761749][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.788006][ T5834] Bluetooth: hci3: command tx timeout [ 105.793565][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.824162][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.840386][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.865712][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.872708][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.899213][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.960417][ T5835] hsr_slave_0: entered promiscuous mode [ 105.967284][ T5835] hsr_slave_1: entered promiscuous mode [ 105.973552][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.981876][ T5835] Cannot create hsr debugfs directory [ 106.040008][ T5837] team0: Port device team_slave_0 added [ 106.049527][ T5837] team0: Port device team_slave_1 added [ 106.129804][ T5831] hsr_slave_0: entered promiscuous mode [ 106.136787][ T5831] hsr_slave_1: entered promiscuous mode [ 106.143039][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.151264][ T5831] Cannot create hsr debugfs directory [ 106.229064][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.236165][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.262198][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.304482][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.311526][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.337847][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.555900][ T5837] hsr_slave_0: entered promiscuous mode [ 106.562391][ T5837] hsr_slave_1: entered promiscuous mode [ 106.569016][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.577654][ T5837] Cannot create hsr debugfs directory [ 106.775363][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.803922][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.833531][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.870857][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.941637][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.956830][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.974383][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.988196][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.101517][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.116586][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.161047][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.176438][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.268210][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.282202][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.309384][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.337740][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.383477][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.406938][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.481125][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.508594][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.534316][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.541736][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.568163][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.575415][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.605429][ T5834] Bluetooth: hci0: command tx timeout [ 107.617935][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.625175][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.636961][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.644261][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.741143][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.752488][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.775022][ T5830] Bluetooth: hci1: command tx timeout [ 107.780648][ T5834] Bluetooth: hci2: command tx timeout [ 107.831664][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.845372][ T5834] Bluetooth: hci3: command tx timeout [ 107.872576][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.910358][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.917639][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.941301][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.949136][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.002425][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.009751][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.031484][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.038760][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.369445][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.542585][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.597884][ T5828] veth0_vlan: entered promiscuous mode [ 108.633622][ T5828] veth1_vlan: entered promiscuous mode [ 108.781314][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.822798][ T5828] veth0_macvtap: entered promiscuous mode [ 108.841749][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.857484][ T5835] veth0_vlan: entered promiscuous mode [ 108.872866][ T5828] veth1_macvtap: entered promiscuous mode [ 108.887570][ T5835] veth1_vlan: entered promiscuous mode [ 108.959907][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.983303][ T5837] veth0_vlan: entered promiscuous mode [ 108.995175][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.029544][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.038631][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.051453][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.061490][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.078585][ T5837] veth1_vlan: entered promiscuous mode [ 109.098128][ T5835] veth0_macvtap: entered promiscuous mode [ 109.126898][ T5831] veth0_vlan: entered promiscuous mode [ 109.164452][ T5831] veth1_vlan: entered promiscuous mode [ 109.183947][ T5835] veth1_macvtap: entered promiscuous mode [ 109.272144][ T5837] veth0_macvtap: entered promiscuous mode [ 109.298093][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.309419][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.320957][ T5837] veth1_macvtap: entered promiscuous mode [ 109.340534][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.400688][ T5831] veth0_macvtap: entered promiscuous mode [ 109.416695][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.443186][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.463542][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.473276][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.482706][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.492951][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.508711][ T5831] veth1_macvtap: entered promiscuous mode [ 109.518117][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.532173][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.541004][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.562813][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.572626][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.581592][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.590425][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.610924][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.643315][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.661524][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.671380][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.681361][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.690551][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.691022][ T5834] Bluetooth: hci0: command tx timeout [ 109.744014][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.845144][ T5834] Bluetooth: hci2: command tx timeout [ 109.851354][ T5830] Bluetooth: hci1: command tx timeout [ 109.935756][ T5830] Bluetooth: hci3: command tx timeout [ 109.987173][ T5889] [ 109.989568][ T5889] ====================================================== [ 109.996626][ T5889] WARNING: possible circular locking dependency detected [ 110.003675][ T5889] 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 Not tainted [ 110.010799][ T5889] ------------------------------------------------------ [ 110.017826][ T5889] syz.2.3/5889 is trying to acquire lock: [ 110.023552][ T5889] ffff888144792cd8 (&q->elevator_lock){+.+.}-{4:4}, at: elv_iosched_store+0x201/0x5f0 [ 110.033188][ T5889] [ 110.033188][ T5889] but task is already holding lock: [ 110.040566][ T5889] ffff8881447927a8 (&q->q_usage_counter(io)#31){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 110.051867][ T5889] [ 110.051867][ T5889] which lock already depends on the new lock. [ 110.051867][ T5889] [ 110.062289][ T5889] [ 110.062289][ T5889] the existing dependency chain (in reverse order) is: [ 110.071328][ T5889] [ 110.071328][ T5889] -> #2 (&q->q_usage_counter(io)#31){++++}-{0:0}: [ 110.079979][ T5889] blk_alloc_queue+0x619/0x760 [ 110.085322][ T5889] blk_mq_alloc_queue+0x179/0x290 [ 110.090935][ T5889] __blk_mq_alloc_disk+0x29/0x120 [ 110.096549][ T5889] loop_add+0x496/0xb70 [ 110.101276][ T5889] loop_init+0x164/0x270 [ 110.106078][ T5889] do_one_initcall+0x120/0x6e0 [ 110.111401][ T5889] kernel_init_freeable+0x5c2/0x900 [ 110.117164][ T5889] kernel_init+0x1c/0x2b0 [ 110.122040][ T5889] ret_from_fork+0x48/0x80 [ 110.127000][ T5889] ret_from_fork_asm+0x1a/0x30 [ 110.132321][ T5889] [ 110.132321][ T5889] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 110.139566][ T5889] fs_reclaim_acquire+0x102/0x150 [ 110.145163][ T5889] kmem_cache_alloc_noprof+0x53/0x3b0 [ 110.151087][ T5889] __kernfs_new_node+0xd2/0x8a0 [ 110.156504][ T5889] kernfs_new_node+0x13c/0x1e0 [ 110.161820][ T5889] kernfs_create_dir_ns+0x4c/0x1a0 [ 110.167486][ T5889] sysfs_create_dir_ns+0x13a/0x2b0 [ 110.173173][ T5889] kobject_add_internal+0x2c4/0x9b0 [ 110.178917][ T5889] kobject_add+0x16e/0x240 [ 110.183876][ T5889] elv_register_queue+0xd3/0x2a0 [ 110.189366][ T5889] blk_register_queue+0x3c4/0x560 [ 110.194939][ T5889] add_disk_fwnode+0x911/0x13a0 [ 110.200359][ T5889] nbd_dev_add+0x78e/0xbb0 [ 110.205325][ T5889] nbd_init+0x181/0x320 [ 110.210037][ T5889] do_one_initcall+0x120/0x6e0 [ 110.215360][ T5889] kernel_init_freeable+0x5c2/0x900 [ 110.221119][ T5889] kernel_init+0x1c/0x2b0 [ 110.225999][ T5889] ret_from_fork+0x48/0x80 [ 110.230957][ T5889] ret_from_fork_asm+0x1a/0x30 [ 110.236279][ T5889] [ 110.236279][ T5889] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 110.244137][ T5889] __lock_acquire+0x1173/0x1ba0 [ 110.249543][ T5889] lock_acquire+0x179/0x350 [ 110.254604][ T5889] __mutex_lock+0x199/0xb90 [ 110.259673][ T5889] elv_iosched_store+0x201/0x5f0 [ 110.265171][ T5889] queue_attr_store+0x273/0x310 [ 110.270562][ T5889] sysfs_kf_write+0xf2/0x150 [ 110.275706][ T5889] kernfs_fop_write_iter+0x351/0x510 [ 110.281544][ T5889] vfs_write+0x5ba/0x1180 [ 110.286417][ T5889] ksys_write+0x12a/0x240 [ 110.291286][ T5889] do_syscall_64+0xcd/0x230 [ 110.296344][ T5889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.302784][ T5889] [ 110.302784][ T5889] other info that might help us debug this: [ 110.302784][ T5889] [ 110.313022][ T5889] Chain exists of: [ 110.313022][ T5889] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#31 [ 110.313022][ T5889] [ 110.326802][ T5889] Possible unsafe locking scenario: [ 110.326802][ T5889] [ 110.334260][ T5889] CPU0 CPU1 [ 110.339648][ T5889] ---- ---- [ 110.345023][ T5889] lock(&q->q_usage_counter(io)#31); [ 110.350428][ T5889] lock(fs_reclaim); [ 110.356950][ T5889] lock(&q->q_usage_counter(io)#31); [ 110.364880][ T5889] lock(&q->elevator_lock); [ 110.369506][ T5889] [ 110.369506][ T5889] *** DEADLOCK *** [ 110.369506][ T5889] [ 110.377664][ T5889] 6 locks held by syz.2.3/5889: [ 110.382530][ T5889] #0: ffff888031b530b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 110.391653][ T5889] #1: ffff8880300f6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 110.400677][ T5889] #2: ffff88807c7d3088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 110.410571][ T5889] #3: ffff8880237733c8 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 110.420662][ T5889] #4: ffff8881447927a8 (&q->q_usage_counter(io)#31){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 110.432392][ T5889] #5: ffff8881447927e0 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 110.444381][ T5889] [ 110.444381][ T5889] stack backtrace: [ 110.450303][ T5889] CPU: 0 UID: 0 PID: 5889 Comm: syz.2.3 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) [ 110.450337][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.450357][ T5889] Call Trace: [ 110.450365][ T5889] [ 110.450379][ T5889] dump_stack_lvl+0x116/0x1f0 [ 110.450425][ T5889] print_circular_bug+0x275/0x350 [ 110.450461][ T5889] check_noncircular+0x14c/0x170 [ 110.450500][ T5889] __lock_acquire+0x1173/0x1ba0 [ 110.450542][ T5889] lock_acquire+0x179/0x350 [ 110.450576][ T5889] ? elv_iosched_store+0x201/0x5f0 [ 110.450613][ T5889] ? __pfx___might_resched+0x10/0x10 [ 110.450643][ T5889] ? do_raw_spin_lock+0x12c/0x2b0 [ 110.450686][ T5889] __mutex_lock+0x199/0xb90 [ 110.450726][ T5889] ? elv_iosched_store+0x201/0x5f0 [ 110.450762][ T5889] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 110.450800][ T5889] ? elv_iosched_store+0x201/0x5f0 [ 110.450834][ T5889] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.450873][ T5889] ? __pfx___mutex_lock+0x10/0x10 [ 110.450918][ T5889] ? __pfx_autoremove_wake_function+0x10/0x10 [ 110.450955][ T5889] ? elv_iosched_store+0x201/0x5f0 [ 110.450990][ T5889] elv_iosched_store+0x201/0x5f0 [ 110.451026][ T5889] ? __pfx_elv_iosched_store+0x10/0x10 [ 110.451063][ T5889] ? __mutex_trylock_common+0xe9/0x250 [ 110.451101][ T5889] ? __pfx_elv_iosched_store+0x10/0x10 [ 110.451137][ T5889] queue_attr_store+0x273/0x310 [ 110.451163][ T5889] ? __pfx_queue_attr_store+0x10/0x10 [ 110.451195][ T5889] ? find_held_lock+0x2b/0x80 [ 110.451221][ T5889] ? sysfs_file_kobj+0xe4/0x290 [ 110.451267][ T5889] ? __pfx_queue_attr_store+0x10/0x10 [ 110.451291][ T5889] sysfs_kf_write+0xf2/0x150 [ 110.451330][ T5889] kernfs_fop_write_iter+0x351/0x510 [ 110.451365][ T5889] ? __pfx_sysfs_kf_write+0x10/0x10 [ 110.451405][ T5889] vfs_write+0x5ba/0x1180 [ 110.451431][ T5889] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 110.451468][ T5889] ? __pfx___mutex_lock+0x10/0x10 [ 110.451510][ T5889] ? __pfx_vfs_write+0x10/0x10 [ 110.451546][ T5889] ksys_write+0x12a/0x240 [ 110.451571][ T5889] ? __pfx_ksys_write+0x10/0x10 [ 110.451596][ T5889] ? rcu_is_watching+0x12/0xc0 [ 110.451626][ T5889] do_syscall_64+0xcd/0x230 [ 110.451669][ T5889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.451696][ T5889] RIP: 0033:0x7f8eedd8e969 [ 110.451717][ T5889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.451742][ T5889] RSP: 002b:00007f8eeecb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.451766][ T5889] RAX: ffffffffffffffda RBX: 00007f8eedfb5fa0 RCX: 00007f8eedd8e969 [ 110.451784][ T5889] RDX: 0000000000000001 RSI: 0000200000003900 RDI: 0000000000000003 [ 110.451800][ T5889] RBP: 00007f8eede10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 110.451816][ T5889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.451832][ T5889] R13: 0000000000000000 R14: 00007f8eedfb5fa0 R15: 00007fffc99978c8 [ 110.451856][ T5889] [ 110.457208][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.753432][ T5835] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht' [ 110.767446][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.823069][ T5831] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 110.852156][ T1313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.860192][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.871434][ T5837] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 110.880077][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.888893][ T1313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.917522][ T5835] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 110.940791][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.942396][ T5831] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 110.956911][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.985057][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.999275][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.027654][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.040216][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.764817][ T5830] Bluetooth: hci0: command tx timeout [ 111.934847][ T5830] Bluetooth: hci1: command tx timeout [ 111.940406][ T5830] Bluetooth: hci2: command tx timeout [ 112.005241][ T5830] Bluetooth: hci3: command tx timeout