last executing test programs: 0s ago: executing program 1 (id=2): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/block/loop1/queue/wbt_lat_usec\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x9) ioctl$auto(r0, 0x400454ca, 0x38) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/hid/drivers/zeroplus/uevent\x00', 0x121681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)='-', 0x1) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x60800, 0x0) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r4, &(0x7f0000000280)=""/49, 0x31) io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff3, 0xffffffffffffffff, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x57, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x20003, 0x0, 0x0, 0xfffffffa, 0xc}}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) mmap$auto(0x8000000000002001, 0x20009, 0xdf, 0x15, r5, 0x8000) io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(r3, 0x11, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x511000, 0x0) ioctl$auto(r6, 0x5609, 0xffffffffffffffff) madvise$auto(0x0, 0x20499d, 0x9) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000180)=0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. [ 97.992731][ T5820] cgroup: Unknown subsys name 'net' [ 98.172495][ T5820] cgroup: Unknown subsys name 'cpuset' [ 98.182565][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.981523][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.210504][ T979] cfg80211: failed to load regulatory.db [ 102.247117][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.255754][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.263402][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.272291][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.281009][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.289163][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.341422][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.358396][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.359551][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.366160][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.376700][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.384862][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.388092][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.395040][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.403989][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.418050][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.426646][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.433809][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.452931][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.460920][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.952882][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 103.162819][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 103.193424][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 103.301539][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 103.334130][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.341443][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.349521][ T5831] bridge_slave_0: entered allmulticast mode [ 103.357178][ T5831] bridge_slave_0: entered promiscuous mode [ 103.394365][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.401854][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.409492][ T5831] bridge_slave_1: entered allmulticast mode [ 103.416850][ T5831] bridge_slave_1: entered promiscuous mode [ 103.536817][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.544447][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.552368][ T5835] bridge_slave_0: entered allmulticast mode [ 103.560497][ T5835] bridge_slave_0: entered promiscuous mode [ 103.571572][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.584435][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.614552][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.622106][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.629894][ T5835] bridge_slave_1: entered allmulticast mode [ 103.637263][ T5835] bridge_slave_1: entered promiscuous mode [ 103.674037][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.681280][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.689305][ T5836] bridge_slave_0: entered allmulticast mode [ 103.696633][ T5836] bridge_slave_0: entered promiscuous mode [ 103.748351][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.756025][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.764373][ T5836] bridge_slave_1: entered allmulticast mode [ 103.771999][ T5836] bridge_slave_1: entered promiscuous mode [ 103.809900][ T5831] team0: Port device team_slave_0 added [ 103.816102][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.823288][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.830817][ T5840] bridge_slave_0: entered allmulticast mode [ 103.838294][ T5840] bridge_slave_0: entered promiscuous mode [ 103.864277][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.875578][ T5831] team0: Port device team_slave_1 added [ 103.897496][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.905119][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.912861][ T5840] bridge_slave_1: entered allmulticast mode [ 103.921514][ T5840] bridge_slave_1: entered promiscuous mode [ 103.946355][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.958602][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.004325][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.028631][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.035643][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.064231][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.079898][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.116189][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.123452][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.149813][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.172430][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.200258][ T5835] team0: Port device team_slave_0 added [ 104.214476][ T5835] team0: Port device team_slave_1 added [ 104.238584][ T5836] team0: Port device team_slave_0 added [ 104.290947][ T5836] team0: Port device team_slave_1 added [ 104.300052][ T5840] team0: Port device team_slave_0 added [ 104.322036][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.329678][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.356087][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.369036][ T5845] Bluetooth: hci0: command tx timeout [ 104.373836][ T5840] team0: Port device team_slave_1 added [ 104.408438][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.415434][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.441555][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.503180][ T5831] hsr_slave_0: entered promiscuous mode [ 104.509780][ T5831] hsr_slave_1: entered promiscuous mode [ 104.524691][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.531865][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.558042][ T5845] Bluetooth: hci3: command tx timeout [ 104.561958][ T5845] Bluetooth: hci2: command tx timeout [ 104.563731][ T5833] Bluetooth: hci1: command tx timeout [ 104.570735][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.588254][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.595234][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.621322][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.633327][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.640476][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.666624][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.679694][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.686757][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.713677][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.853791][ T5835] hsr_slave_0: entered promiscuous mode [ 104.860643][ T5835] hsr_slave_1: entered promiscuous mode [ 104.866930][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.875224][ T5835] Cannot create hsr debugfs directory [ 104.921746][ T5836] hsr_slave_0: entered promiscuous mode [ 104.928625][ T5836] hsr_slave_1: entered promiscuous mode [ 104.935605][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.943790][ T5836] Cannot create hsr debugfs directory [ 104.955696][ T5840] hsr_slave_0: entered promiscuous mode [ 104.962208][ T5840] hsr_slave_1: entered promiscuous mode [ 104.969343][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.976934][ T5840] Cannot create hsr debugfs directory [ 105.419498][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.456932][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.475530][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.512820][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.588465][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.602398][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.625395][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.651607][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.710323][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.735043][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.753795][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.786563][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.877811][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.890843][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.903339][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.917037][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.006701][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.081482][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.124181][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.131565][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.159362][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.166537][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.184656][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.239669][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.292090][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.306502][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.324091][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.356017][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.363248][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.374473][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.381717][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.417549][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.424873][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.437244][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.444440][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.449321][ T5833] Bluetooth: hci0: command tx timeout [ 106.490208][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.543204][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.550436][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.613603][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.614147][ T5833] Bluetooth: hci1: command tx timeout [ 106.620871][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.626192][ T5845] Bluetooth: hci2: command tx timeout [ 106.643648][ T51] Bluetooth: hci3: command tx timeout [ 106.888888][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.063680][ T5831] veth0_vlan: entered promiscuous mode [ 107.128174][ T5831] veth1_vlan: entered promiscuous mode [ 107.223026][ T5831] veth0_macvtap: entered promiscuous mode [ 107.270423][ T5831] veth1_macvtap: entered promiscuous mode [ 107.346782][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.372809][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.387210][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.422357][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.443094][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.452094][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.461290][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.472610][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.504077][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.567677][ T5836] veth0_vlan: entered promiscuous mode [ 107.616267][ T5840] veth0_vlan: entered promiscuous mode [ 107.665750][ T5836] veth1_vlan: entered promiscuous mode [ 107.697526][ T5840] veth1_vlan: entered promiscuous mode [ 107.725334][ T5835] veth0_vlan: entered promiscuous mode [ 107.733196][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.742989][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.815003][ T5835] veth1_vlan: entered promiscuous mode [ 107.832487][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.843786][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.852395][ T5840] veth0_macvtap: entered promiscuous mode [ 107.864657][ T5840] veth1_macvtap: entered promiscuous mode [ 107.874735][ T5836] veth0_macvtap: entered promiscuous mode [ 107.915945][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.936634][ T5836] veth1_macvtap: entered promiscuous mode [ 107.955014][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.982834][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.993589][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.996798][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.006279][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.030414][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.053774][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.096817][ T5835] veth0_macvtap: entered promiscuous mode [ 108.114343][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.168438][ T5835] veth1_macvtap: entered promiscuous mode [ 108.192754][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.203127][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.213169][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.222715][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.273219][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.339621][ T5924] [ 108.342025][ T5924] ====================================================== [ 108.349088][ T5924] WARNING: possible circular locking dependency detected [ 108.353067][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.356138][ T5924] 6.15.0-syzkaller-13743-g8630c59e9936 #0 Not tainted [ 108.370141][ T5924] ------------------------------------------------------ [ 108.377193][ T5924] syz.1.2/5924 is trying to acquire lock: [ 108.382949][ T5924] ffffffff8e266b50 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_slow_inc+0x12/0x30 [ 108.392538][ T5924] [ 108.392538][ T5924] but task is already holding lock: [ 108.399943][ T5924] ffff888025e729c8 (&q->rq_qos_mutex){+.+.}-{4:4}, at: wbt_init+0x393/0x540 [ 108.408739][ T5924] [ 108.408739][ T5924] which lock already depends on the new lock. [ 108.408739][ T5924] [ 108.419179][ T5924] [ 108.419179][ T5924] the existing dependency chain (in reverse order) is: [ 108.428229][ T5924] [ 108.428229][ T5924] -> #3 (&q->rq_qos_mutex){+.+.}-{4:4}: [ 108.436029][ T5924] __mutex_lock+0x199/0xb90 [ 108.441105][ T5924] wbt_init+0x393/0x540 [ 108.445833][ T5924] queue_wb_lat_store+0x354/0x3d0 [ 108.451427][ T5924] queue_attr_store+0x279/0x320 [ 108.456847][ T5924] sysfs_kf_write+0xef/0x150 [ 108.462013][ T5924] kernfs_fop_write_iter+0x351/0x510 [ 108.467874][ T5924] vfs_write+0x6c7/0x1150 [ 108.472784][ T5924] ksys_write+0x12a/0x250 [ 108.477702][ T5924] do_syscall_64+0xcd/0x490 [ 108.482772][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.489259][ T5924] [ 108.489259][ T5924] -> #2 (&q->q_usage_counter(io)#18){++++}-{0:0}: [ 108.497938][ T5924] blk_alloc_queue+0x619/0x760 [ 108.503288][ T5924] blk_mq_alloc_queue+0x175/0x290 [ 108.508893][ T5924] __blk_mq_alloc_disk+0x29/0x120 [ 108.514501][ T5924] loop_add+0x49e/0xb70 [ 108.519231][ T5924] loop_init+0x164/0x270 [ 108.524053][ T5924] do_one_initcall+0x120/0x6e0 [ 108.528580][ T5845] Bluetooth: hci0: command tx timeout [ 108.529366][ T5924] kernel_init_freeable+0x5c2/0x900 [ 108.540506][ T5924] kernel_init+0x1c/0x2b0 [ 108.545413][ T5924] ret_from_fork+0x5d7/0x6f0 [ 108.550594][ T5924] ret_from_fork_asm+0x1a/0x30 [ 108.555951][ T5924] [ 108.555951][ T5924] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 108.563230][ T5924] fs_reclaim_acquire+0x102/0x150 [ 108.568851][ T5924] __kmalloc_cache_node_noprof+0x53/0x420 [ 108.575166][ T5924] create_worker+0x10f/0x7e0 [ 108.580341][ T5924] workqueue_prepare_cpu+0xb5/0x160 [ 108.586111][ T5924] cpuhp_invoke_callback+0x3d5/0xa10 [ 108.591969][ T5924] __cpuhp_invoke_callback_range+0x101/0x210 [ 108.598531][ T5924] _cpu_up+0x3f5/0x930 [ 108.603174][ T5924] cpu_up+0x1dc/0x240 [ 108.607726][ T5924] cpuhp_bringup_mask+0xd8/0x210 [ 108.613252][ T5924] bringup_nonboot_cpus+0x176/0x1c0 [ 108.619034][ T5924] smp_init+0x34/0x160 [ 108.623672][ T5924] kernel_init_freeable+0x3a8/0x900 [ 108.629452][ T5924] kernel_init+0x1c/0x2b0 [ 108.634364][ T5924] ret_from_fork+0x5d7/0x6f0 [ 108.639531][ T5924] ret_from_fork_asm+0x1a/0x30 [ 108.644864][ T5924] [ 108.644864][ T5924] -> #0 (cpu_hotplug_lock){++++}-{0:0}: [ 108.652661][ T5924] __lock_acquire+0x126f/0x1c90 [ 108.658091][ T5924] lock_acquire+0x179/0x350 [ 108.663178][ T5924] cpus_read_lock+0x42/0x160 [ 108.668341][ T5924] static_key_slow_inc+0x12/0x30 [ 108.673860][ T5924] rq_qos_add+0x2f8/0x4b0 [ 108.679029][ T5924] wbt_init+0x3a9/0x540 [ 108.683759][ T5924] queue_wb_lat_store+0x354/0x3d0 [ 108.688585][ T5845] Bluetooth: hci2: command tx timeout [ 108.689332][ T5924] queue_attr_store+0x279/0x320 [ 108.694729][ T5845] Bluetooth: hci1: command tx timeout [ 108.700090][ T5924] sysfs_kf_write+0xef/0x150 [ 108.700128][ T5924] kernfs_fop_write_iter+0x351/0x510 [ 108.700161][ T5924] vfs_write+0x6c7/0x1150 [ 108.706582][ T5833] Bluetooth: hci3: command tx timeout [ 108.710645][ T5924] ksys_write+0x12a/0x250 [ 108.731678][ T5924] do_syscall_64+0xcd/0x490 [ 108.736751][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.743211][ T5924] [ 108.743211][ T5924] other info that might help us debug this: [ 108.743211][ T5924] [ 108.753472][ T5924] Chain exists of: [ 108.753472][ T5924] cpu_hotplug_lock --> &q->q_usage_counter(io)#18 --> &q->rq_qos_mutex [ 108.753472][ T5924] [ 108.767739][ T5924] Possible unsafe locking scenario: [ 108.767739][ T5924] [ 108.775225][ T5924] CPU0 CPU1 [ 108.780621][ T5924] ---- ---- [ 108.786015][ T5924] lock(&q->rq_qos_mutex); [ 108.790581][ T5924] lock(&q->q_usage_counter(io)#18); [ 108.798538][ T5924] lock(&q->rq_qos_mutex); [ 108.805612][ T5924] rlock(cpu_hotplug_lock); [ 108.810249][ T5924] [ 108.810249][ T5924] *** DEADLOCK *** [ 108.810249][ T5924] [ 108.818420][ T5924] 7 locks held by syz.1.2/5924: [ 108.823298][ T5924] #0: ffff8880304dc478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 108.832454][ T5924] #1: ffff888035ece428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 108.841531][ T5924] #2: ffff88803220bc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 108.851389][ T5924] #3: ffff888025e1f2d8 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 108.861502][ T5924] #4: ffff888025e727c8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 108.873277][ T5924] #5: ffff888025e72800 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 108.885311][ T5924] #6: ffff888025e729c8 (&q->rq_qos_mutex){+.+.}-{4:4}, at: wbt_init+0x393/0x540 [ 108.894544][ T5924] [ 108.894544][ T5924] stack backtrace: [ 108.900477][ T5924] CPU: 0 UID: 0 PID: 5924 Comm: syz.1.2 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 108.900517][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.900540][ T5924] Call Trace: [ 108.900554][ T5924] [ 108.900570][ T5924] dump_stack_lvl+0x116/0x1f0 [ 108.900607][ T5924] print_circular_bug+0x275/0x350 [ 108.900649][ T5924] check_noncircular+0x14c/0x170 [ 108.900694][ T5924] __lock_acquire+0x126f/0x1c90 [ 108.900743][ T5924] lock_acquire+0x179/0x350 [ 108.900783][ T5924] ? static_key_slow_inc+0x12/0x30 [ 108.900842][ T5924] ? __pfx___might_resched+0x10/0x10 [ 108.900880][ T5924] cpus_read_lock+0x42/0x160 [ 108.900911][ T5924] ? static_key_slow_inc+0x12/0x30 [ 108.900953][ T5924] static_key_slow_inc+0x12/0x30 [ 108.900997][ T5924] rq_qos_add+0x2f8/0x4b0 [ 108.901043][ T5924] wbt_init+0x3a9/0x540 [ 108.901079][ T5924] queue_wb_lat_store+0x354/0x3d0 [ 108.901111][ T5924] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 108.901144][ T5924] ? __mutex_trylock_common+0xe9/0x250 [ 108.901188][ T5924] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 108.901217][ T5924] queue_attr_store+0x279/0x320 [ 108.901248][ T5924] ? __pfx_queue_attr_store+0x10/0x10 [ 108.901277][ T5924] ? __lock_acquire+0x622/0x1c90 [ 108.901326][ T5924] ? find_held_lock+0x2b/0x80 [ 108.901356][ T5924] ? sysfs_file_kobj+0xe4/0x290 [ 108.901398][ T5924] ? __pfx_queue_attr_store+0x10/0x10 [ 108.901428][ T5924] sysfs_kf_write+0xef/0x150 [ 108.901467][ T5924] kernfs_fop_write_iter+0x351/0x510 [ 108.901501][ T5924] ? __pfx_sysfs_kf_write+0x10/0x10 [ 108.901544][ T5924] vfs_write+0x6c7/0x1150 [ 108.901593][ T5924] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 108.901631][ T5924] ? __pfx___mutex_lock+0x10/0x10 [ 108.901661][ T5924] ? __pfx_vfs_write+0x10/0x10 [ 108.901721][ T5924] ksys_write+0x12a/0x250 [ 108.901766][ T5924] ? __pfx_ksys_write+0x10/0x10 [ 108.901826][ T5924] do_syscall_64+0xcd/0x490 [ 108.901859][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.901891][ T5924] RIP: 0033:0x7f26fb18e929 [ 108.901920][ T5924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.901948][ T5924] RSP: 002b:00007f26fbf79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.901977][ T5924] RAX: ffffffffffffffda RBX: 00007f26fb3b6160 RCX: 00007f26fb18e929 [ 108.901998][ T5924] RDX: 0000000000000009 RSI: 00002000000001c0 RDI: 0000000000000004 [ 108.902016][ T5924] RBP: 00007f26fb210b39 R08: 0000000000000000 R09: 0000000000000000 [ 108.902034][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.902051][ T5924] R13: 0000000000000000 R14: 00007f26fb3b6160 R15: 00007ffcab7daf98 [ 108.902080][ T5924] [ 109.206283][ T5840] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht' [ 109.216058][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.227937][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.249528][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.259288][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.270473][ T5923] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 109.289347][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.307966][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.380793][ T5836] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 109.466753][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.491206][ T5835] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 109.503849][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.634207][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.656348][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.681012][ T5836] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 109.708770][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.729469][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.748602][ T5835] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 109.772154][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.781765][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.819231][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.827137][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.608097][ T5845] Bluetooth: hci0: command tx timeout [ 110.768227][ T5845] Bluetooth: hci1: command tx timeout [ 110.773714][ T5833] Bluetooth: hci3: command tx timeout [ 110.777242][ T5845] Bluetooth: hci2: command tx timeout