last executing test programs: 5.276402331s ago: executing program 4 (id=582): listxattr(&(0x7f0000000000), &(0x7f0000000000), 0x0) 5.256249695s ago: executing program 4 (id=586): socket$l2tp(0x2, 0x2, 0x73) 5.185070369s ago: executing program 4 (id=588): semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)) 5.184563882s ago: executing program 4 (id=591): signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 4.635640525s ago: executing program 4 (id=595): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 3.882691359s ago: executing program 4 (id=599): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2.268344571s ago: executing program 3 (id=605): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.056120874s ago: executing program 0 (id=617): syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000140), 0xa, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180), 0xa, 0x1) syz_open_dev$sndpcmc(&(0x7f00000001c0), 0xa, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000200), 0xa, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000240), 0x14, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000280), 0x14, 0x1) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x14, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x14, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1e, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000380), 0x1e, 0x1) syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x1e, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000400), 0x1e, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000440), 0x28, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x28, 0x1) syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x28, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000500), 0x28, 0x800) 1.035640018s ago: executing program 0 (id=618): syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$usbfs(&(0x7f0000000140), 0xa, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0xa, 0x1) syz_open_dev$usbfs(&(0x7f00000001c0), 0xa, 0x2) syz_open_dev$usbfs(&(0x7f0000000200), 0xa, 0x800) syz_open_dev$usbfs(&(0x7f0000000240), 0x14, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x14, 0x1) syz_open_dev$usbfs(&(0x7f00000002c0), 0x14, 0x2) syz_open_dev$usbfs(&(0x7f0000000300), 0x14, 0x800) syz_open_dev$usbfs(&(0x7f0000000340), 0x1e, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0x1e, 0x1) syz_open_dev$usbfs(&(0x7f00000003c0), 0x1e, 0x2) syz_open_dev$usbfs(&(0x7f0000000400), 0x1e, 0x800) syz_open_dev$usbfs(&(0x7f0000000440), 0x28, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x28, 0x1) syz_open_dev$usbfs(&(0x7f00000004c0), 0x28, 0x2) syz_open_dev$usbfs(&(0x7f0000000500), 0x28, 0x800) 1.024839415s ago: executing program 3 (id=610): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 579.929372ms ago: executing program 0 (id=619): expanding glob: /sys/**/* 292.335412ms ago: executing program 3 (id=620): syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1, 0x1) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000140), 0xb, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xb, 0x1) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0xb, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000200), 0xb, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x15, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000280), 0x15, 0x1) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x15, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x15, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x1f, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380), 0x1f, 0x1) syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x1f, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1f, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x29, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x29, 0x1) syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x29, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x29, 0x800) 290.213281ms ago: executing program 2 (id=621): syz_open_dev$sndmidi(&(0x7f0000000040), 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x1, 0x1) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x1, 0x2) syz_open_dev$sndmidi(&(0x7f0000000100), 0x1, 0x800) syz_open_dev$sndmidi(&(0x7f0000000140), 0xb, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180), 0xb, 0x1) syz_open_dev$sndmidi(&(0x7f00000001c0), 0xb, 0x2) syz_open_dev$sndmidi(&(0x7f0000000200), 0xb, 0x800) syz_open_dev$sndmidi(&(0x7f0000000240), 0x15, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280), 0x15, 0x1) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x15, 0x2) syz_open_dev$sndmidi(&(0x7f0000000300), 0x15, 0x800) syz_open_dev$sndmidi(&(0x7f0000000340), 0x1f, 0x0) syz_open_dev$sndmidi(&(0x7f0000000380), 0x1f, 0x1) syz_open_dev$sndmidi(&(0x7f00000003c0), 0x1f, 0x2) syz_open_dev$sndmidi(&(0x7f0000000400), 0x1f, 0x800) syz_open_dev$sndmidi(&(0x7f0000000440), 0x29, 0x0) syz_open_dev$sndmidi(&(0x7f0000000480), 0x29, 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x29, 0x2) syz_open_dev$sndmidi(&(0x7f0000000500), 0x29, 0x800) 280.299657ms ago: executing program 1 (id=622): syz_open_dev$sndhw(&(0x7f0000000040), 0x1, 0x0) syz_open_dev$sndhw(&(0x7f0000000080), 0x1, 0x1) syz_open_dev$sndhw(&(0x7f00000000c0), 0x1, 0x2) syz_open_dev$sndhw(&(0x7f0000000100), 0x1, 0x800) syz_open_dev$sndhw(&(0x7f0000000140), 0xb, 0x0) syz_open_dev$sndhw(&(0x7f0000000180), 0xb, 0x1) syz_open_dev$sndhw(&(0x7f00000001c0), 0xb, 0x2) syz_open_dev$sndhw(&(0x7f0000000200), 0xb, 0x800) syz_open_dev$sndhw(&(0x7f0000000240), 0x15, 0x0) syz_open_dev$sndhw(&(0x7f0000000280), 0x15, 0x1) syz_open_dev$sndhw(&(0x7f00000002c0), 0x15, 0x2) syz_open_dev$sndhw(&(0x7f0000000300), 0x15, 0x800) syz_open_dev$sndhw(&(0x7f0000000340), 0x1f, 0x0) syz_open_dev$sndhw(&(0x7f0000000380), 0x1f, 0x1) syz_open_dev$sndhw(&(0x7f00000003c0), 0x1f, 0x2) syz_open_dev$sndhw(&(0x7f0000000400), 0x1f, 0x800) syz_open_dev$sndhw(&(0x7f0000000440), 0x29, 0x0) syz_open_dev$sndhw(&(0x7f0000000480), 0x29, 0x1) syz_open_dev$sndhw(&(0x7f00000004c0), 0x29, 0x2) syz_open_dev$sndhw(&(0x7f0000000500), 0x29, 0x800) 266.984869ms ago: executing program 1 (id=624): syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x1, 0x800) syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x1) syz_open_dev$usbfs(&(0x7f00000001c0), 0xb, 0x2) syz_open_dev$usbfs(&(0x7f0000000200), 0xb, 0x800) syz_open_dev$usbfs(&(0x7f0000000240), 0x15, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x15, 0x1) syz_open_dev$usbfs(&(0x7f00000002c0), 0x15, 0x2) syz_open_dev$usbfs(&(0x7f0000000300), 0x15, 0x800) syz_open_dev$usbfs(&(0x7f0000000340), 0x1f, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0x1f, 0x1) syz_open_dev$usbfs(&(0x7f00000003c0), 0x1f, 0x2) syz_open_dev$usbfs(&(0x7f0000000400), 0x1f, 0x800) syz_open_dev$usbfs(&(0x7f0000000440), 0x29, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x29, 0x1) syz_open_dev$usbfs(&(0x7f00000004c0), 0x29, 0x2) syz_open_dev$usbfs(&(0x7f0000000500), 0x29, 0x800) 247.073687ms ago: executing program 2 (id=625): syz_open_dev$sndhw(&(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndhw(&(0x7f0000000080), 0x2, 0x1) syz_open_dev$sndhw(&(0x7f00000000c0), 0x2, 0x2) syz_open_dev$sndhw(&(0x7f0000000100), 0x2, 0x800) syz_open_dev$sndhw(&(0x7f0000000140), 0xc, 0x0) syz_open_dev$sndhw(&(0x7f0000000180), 0xc, 0x1) syz_open_dev$sndhw(&(0x7f00000001c0), 0xc, 0x2) syz_open_dev$sndhw(&(0x7f0000000200), 0xc, 0x800) syz_open_dev$sndhw(&(0x7f0000000240), 0x16, 0x0) syz_open_dev$sndhw(&(0x7f0000000280), 0x16, 0x1) syz_open_dev$sndhw(&(0x7f00000002c0), 0x16, 0x2) syz_open_dev$sndhw(&(0x7f0000000300), 0x16, 0x800) syz_open_dev$sndhw(&(0x7f0000000340), 0x20, 0x0) syz_open_dev$sndhw(&(0x7f0000000380), 0x20, 0x1) syz_open_dev$sndhw(&(0x7f00000003c0), 0x20, 0x2) syz_open_dev$sndhw(&(0x7f0000000400), 0x20, 0x800) syz_open_dev$sndhw(&(0x7f0000000440), 0x2a, 0x0) syz_open_dev$sndhw(&(0x7f0000000480), 0x2a, 0x1) syz_open_dev$sndhw(&(0x7f00000004c0), 0x2a, 0x2) syz_open_dev$sndhw(&(0x7f0000000500), 0x2a, 0x800) 200.93247ms ago: executing program 1 (id=626): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x1) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x2) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x800) syz_open_dev$sndmidi(&(0x7f0000000140), 0xc, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180), 0xc, 0x1) syz_open_dev$sndmidi(&(0x7f00000001c0), 0xc, 0x2) syz_open_dev$sndmidi(&(0x7f0000000200), 0xc, 0x800) syz_open_dev$sndmidi(&(0x7f0000000240), 0x16, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280), 0x16, 0x1) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x16, 0x2) syz_open_dev$sndmidi(&(0x7f0000000300), 0x16, 0x800) syz_open_dev$sndmidi(&(0x7f0000000340), 0x20, 0x0) syz_open_dev$sndmidi(&(0x7f0000000380), 0x20, 0x1) syz_open_dev$sndmidi(&(0x7f00000003c0), 0x20, 0x2) syz_open_dev$sndmidi(&(0x7f0000000400), 0x20, 0x800) syz_open_dev$sndmidi(&(0x7f0000000440), 0x2a, 0x0) syz_open_dev$sndmidi(&(0x7f0000000480), 0x2a, 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2a, 0x2) syz_open_dev$sndmidi(&(0x7f0000000500), 0x2a, 0x800) 200.034348ms ago: executing program 1 (id=627): syz_open_dev$usbfs(&(0x7f0000000040), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x2, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x2, 0x800) syz_open_dev$usbfs(&(0x7f0000000140), 0xc, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0xc, 0x1) syz_open_dev$usbfs(&(0x7f00000001c0), 0xc, 0x2) syz_open_dev$usbfs(&(0x7f0000000200), 0xc, 0x800) syz_open_dev$usbfs(&(0x7f0000000240), 0x16, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x16, 0x1) syz_open_dev$usbfs(&(0x7f00000002c0), 0x16, 0x2) syz_open_dev$usbfs(&(0x7f0000000300), 0x16, 0x800) syz_open_dev$usbfs(&(0x7f0000000340), 0x20, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0x20, 0x1) syz_open_dev$usbfs(&(0x7f00000003c0), 0x20, 0x2) syz_open_dev$usbfs(&(0x7f0000000400), 0x20, 0x800) syz_open_dev$usbfs(&(0x7f0000000440), 0x2a, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x2a, 0x1) syz_open_dev$usbfs(&(0x7f00000004c0), 0x2a, 0x2) syz_open_dev$usbfs(&(0x7f0000000500), 0x2a, 0x800) 199.293744ms ago: executing program 2 (id=628): syz_open_dev$sndmidi(&(0x7f0000000040), 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x3, 0x1) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x3, 0x2) syz_open_dev$sndmidi(&(0x7f0000000100), 0x3, 0x800) syz_open_dev$sndmidi(&(0x7f0000000140), 0xd, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180), 0xd, 0x1) syz_open_dev$sndmidi(&(0x7f00000001c0), 0xd, 0x2) syz_open_dev$sndmidi(&(0x7f0000000200), 0xd, 0x800) syz_open_dev$sndmidi(&(0x7f0000000240), 0x17, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280), 0x17, 0x1) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x17, 0x2) syz_open_dev$sndmidi(&(0x7f0000000300), 0x17, 0x800) syz_open_dev$sndmidi(&(0x7f0000000340), 0x21, 0x0) syz_open_dev$sndmidi(&(0x7f0000000380), 0x21, 0x1) syz_open_dev$sndmidi(&(0x7f00000003c0), 0x21, 0x2) syz_open_dev$sndmidi(&(0x7f0000000400), 0x21, 0x800) syz_open_dev$sndmidi(&(0x7f0000000440), 0x2b, 0x0) syz_open_dev$sndmidi(&(0x7f0000000480), 0x2b, 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2b, 0x2) syz_open_dev$sndmidi(&(0x7f0000000500), 0x2b, 0x800) 198.991625ms ago: executing program 3 (id=629): syz_open_dev$sndpcmp(&(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x2, 0x1) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x2, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x2, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000140), 0xc, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xc, 0x1) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0xc, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000200), 0xc, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x16, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000280), 0x16, 0x1) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x16, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x16, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x20, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380), 0x20, 0x1) syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x20, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x20, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x2a, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x2a, 0x1) syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x2a, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x2a, 0x800) 162.869766ms ago: executing program 1 (id=630): syz_open_dev$sndhw(&(0x7f0000000040), 0x3, 0x0) syz_open_dev$sndhw(&(0x7f0000000080), 0x3, 0x1) syz_open_dev$sndhw(&(0x7f00000000c0), 0x3, 0x2) syz_open_dev$sndhw(&(0x7f0000000100), 0x3, 0x800) syz_open_dev$sndhw(&(0x7f0000000140), 0xd, 0x0) syz_open_dev$sndhw(&(0x7f0000000180), 0xd, 0x1) syz_open_dev$sndhw(&(0x7f00000001c0), 0xd, 0x2) syz_open_dev$sndhw(&(0x7f0000000200), 0xd, 0x800) syz_open_dev$sndhw(&(0x7f0000000240), 0x17, 0x0) syz_open_dev$sndhw(&(0x7f0000000280), 0x17, 0x1) syz_open_dev$sndhw(&(0x7f00000002c0), 0x17, 0x2) syz_open_dev$sndhw(&(0x7f0000000300), 0x17, 0x800) syz_open_dev$sndhw(&(0x7f0000000340), 0x21, 0x0) syz_open_dev$sndhw(&(0x7f0000000380), 0x21, 0x1) syz_open_dev$sndhw(&(0x7f00000003c0), 0x21, 0x2) syz_open_dev$sndhw(&(0x7f0000000400), 0x21, 0x800) syz_open_dev$sndhw(&(0x7f0000000440), 0x2b, 0x0) syz_open_dev$sndhw(&(0x7f0000000480), 0x2b, 0x1) syz_open_dev$sndhw(&(0x7f00000004c0), 0x2b, 0x2) syz_open_dev$sndhw(&(0x7f0000000500), 0x2b, 0x800) 158.976945ms ago: executing program 3 (id=631): syz_open_dev$usbfs(&(0x7f0000000040), 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x3, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x3, 0x800) syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0xd, 0x1) syz_open_dev$usbfs(&(0x7f00000001c0), 0xd, 0x2) syz_open_dev$usbfs(&(0x7f0000000200), 0xd, 0x800) syz_open_dev$usbfs(&(0x7f0000000240), 0x17, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x17, 0x1) syz_open_dev$usbfs(&(0x7f00000002c0), 0x17, 0x2) syz_open_dev$usbfs(&(0x7f0000000300), 0x17, 0x800) syz_open_dev$usbfs(&(0x7f0000000340), 0x21, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0x21, 0x1) syz_open_dev$usbfs(&(0x7f00000003c0), 0x21, 0x2) syz_open_dev$usbfs(&(0x7f0000000400), 0x21, 0x800) syz_open_dev$usbfs(&(0x7f0000000440), 0x2b, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x2b, 0x1) syz_open_dev$usbfs(&(0x7f00000004c0), 0x2b, 0x2) syz_open_dev$usbfs(&(0x7f0000000500), 0x2b, 0x800) 147.416633ms ago: executing program 0 (id=623): syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x1, 0x1) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x1, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000140), 0xb, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180), 0xb, 0x1) syz_open_dev$sndpcmc(&(0x7f00000001c0), 0xb, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000200), 0xb, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000240), 0x15, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000280), 0x15, 0x1) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x15, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x15, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1f, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000380), 0x1f, 0x1) syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x1f, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000400), 0x1f, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000440), 0x29, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x29, 0x1) syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x29, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000500), 0x29, 0x800) 118.370583ms ago: executing program 2 (id=632): syz_open_dev$sndpcmp(&(0x7f0000000040), 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x1) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x3, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x3, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000140), 0xd, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xd, 0x1) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0xd, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000200), 0xd, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x17, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000280), 0x17, 0x1) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x17, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x17, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x21, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380), 0x21, 0x1) syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x21, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x21, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x2b, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x2b, 0x1) syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x2b, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x2b, 0x800) 109.749875ms ago: executing program 1 (id=633): syz_open_dev$sndhw(&(0x7f0000000040), 0x4, 0x0) syz_open_dev$sndhw(&(0x7f0000000080), 0x4, 0x1) syz_open_dev$sndhw(&(0x7f00000000c0), 0x4, 0x2) syz_open_dev$sndhw(&(0x7f0000000100), 0x4, 0x800) syz_open_dev$sndhw(&(0x7f0000000140), 0xe, 0x0) syz_open_dev$sndhw(&(0x7f0000000180), 0xe, 0x1) syz_open_dev$sndhw(&(0x7f00000001c0), 0xe, 0x2) syz_open_dev$sndhw(&(0x7f0000000200), 0xe, 0x800) syz_open_dev$sndhw(&(0x7f0000000240), 0x18, 0x0) syz_open_dev$sndhw(&(0x7f0000000280), 0x18, 0x1) syz_open_dev$sndhw(&(0x7f00000002c0), 0x18, 0x2) syz_open_dev$sndhw(&(0x7f0000000300), 0x18, 0x800) syz_open_dev$sndhw(&(0x7f0000000340), 0x22, 0x0) syz_open_dev$sndhw(&(0x7f0000000380), 0x22, 0x1) syz_open_dev$sndhw(&(0x7f00000003c0), 0x22, 0x2) syz_open_dev$sndhw(&(0x7f0000000400), 0x22, 0x800) syz_open_dev$sndhw(&(0x7f0000000440), 0x2c, 0x0) syz_open_dev$sndhw(&(0x7f0000000480), 0x2c, 0x1) syz_open_dev$sndhw(&(0x7f00000004c0), 0x2c, 0x2) syz_open_dev$sndhw(&(0x7f0000000500), 0x2c, 0x800) 109.183675ms ago: executing program 3 (id=634): syz_open_dev$sndmidi(&(0x7f0000000040), 0x4, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x4, 0x1) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x4, 0x2) syz_open_dev$sndmidi(&(0x7f0000000100), 0x4, 0x800) syz_open_dev$sndmidi(&(0x7f0000000140), 0xe, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180), 0xe, 0x1) syz_open_dev$sndmidi(&(0x7f00000001c0), 0xe, 0x2) syz_open_dev$sndmidi(&(0x7f0000000200), 0xe, 0x800) syz_open_dev$sndmidi(&(0x7f0000000240), 0x18, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280), 0x18, 0x1) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x18, 0x2) syz_open_dev$sndmidi(&(0x7f0000000300), 0x18, 0x800) syz_open_dev$sndmidi(&(0x7f0000000340), 0x22, 0x0) syz_open_dev$sndmidi(&(0x7f0000000380), 0x22, 0x1) syz_open_dev$sndmidi(&(0x7f00000003c0), 0x22, 0x2) syz_open_dev$sndmidi(&(0x7f0000000400), 0x22, 0x800) syz_open_dev$sndmidi(&(0x7f0000000440), 0x2c, 0x0) syz_open_dev$sndmidi(&(0x7f0000000480), 0x2c, 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2c, 0x2) syz_open_dev$sndmidi(&(0x7f0000000500), 0x2c, 0x800) 63.191382ms ago: executing program 2 (id=635): syz_open_dev$usbfs(&(0x7f0000000040), 0x4, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x4, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x4, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x800) syz_open_dev$usbfs(&(0x7f0000000140), 0xe, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0xe, 0x1) syz_open_dev$usbfs(&(0x7f00000001c0), 0xe, 0x2) syz_open_dev$usbfs(&(0x7f0000000200), 0xe, 0x800) syz_open_dev$usbfs(&(0x7f0000000240), 0x18, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x18, 0x1) syz_open_dev$usbfs(&(0x7f00000002c0), 0x18, 0x2) syz_open_dev$usbfs(&(0x7f0000000300), 0x18, 0x800) syz_open_dev$usbfs(&(0x7f0000000340), 0x22, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0x22, 0x1) syz_open_dev$usbfs(&(0x7f00000003c0), 0x22, 0x2) syz_open_dev$usbfs(&(0x7f0000000400), 0x22, 0x800) syz_open_dev$usbfs(&(0x7f0000000440), 0x2c, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x2c, 0x1) syz_open_dev$usbfs(&(0x7f00000004c0), 0x2c, 0x2) syz_open_dev$usbfs(&(0x7f0000000500), 0x2c, 0x800) 38.744381ms ago: executing program 0 (id=636): syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x4, 0x1) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x4, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x4, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000140), 0xe, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xe, 0x1) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0xe, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000200), 0xe, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x18, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000280), 0x18, 0x1) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x18, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x18, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x22, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380), 0x22, 0x1) syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x22, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x22, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x2c, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x2c, 0x1) syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x2c, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x2c, 0x800) 1.808784ms ago: executing program 2 (id=637): syz_open_dev$sndpcmc(&(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x2, 0x1) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x2, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x2, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000140), 0xc, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180), 0xc, 0x1) syz_open_dev$sndpcmc(&(0x7f00000001c0), 0xc, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000200), 0xc, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000240), 0x16, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000280), 0x16, 0x1) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x16, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x16, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x20, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000380), 0x20, 0x1) syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x20, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000400), 0x20, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000440), 0x2a, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x2a, 0x1) syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x2a, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000500), 0x2a, 0x800) 0s ago: executing program 0 (id=638): syz_open_dev$sndpcmc(&(0x7f0000000040), 0x3, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x3, 0x1) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x3, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x3, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000140), 0xd, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180), 0xd, 0x1) syz_open_dev$sndpcmc(&(0x7f00000001c0), 0xd, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000200), 0xd, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000240), 0x17, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000280), 0x17, 0x1) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x17, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x17, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x21, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000380), 0x21, 0x1) syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x21, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000400), 0x21, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000440), 0x2b, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x2b, 0x1) syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x2b, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000500), 0x2b, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.56' (ED25519) to the list of known hosts. [ 59.671701][ T5819] cgroup: Unknown subsys name 'net' [ 59.809806][ T5819] cgroup: Unknown subsys name 'cpuset' [ 59.818194][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.080840][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.766033][ T5950] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.929626][ T6187] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.035688][ T6408] mmap: syz.4.537 (6408) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.964160][ T6470] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.958126][ T6512] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.967990][ T6512] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.979652][ T6512] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.987923][ T6512] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.995504][ T6512] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.003326][ T6512] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.102734][ T6493] chnl_net:caif_netlink_parms(): no params data found [ 71.523984][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.553925][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.563581][ T6493] bridge_slave_0: entered allmulticast mode [ 71.572366][ T6493] bridge_slave_0: entered promiscuous mode [ 71.595362][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.627841][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.635079][ T6493] bridge_slave_1: entered allmulticast mode [ 71.663532][ T6493] bridge_slave_1: entered promiscuous mode [ 71.761698][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.769584][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.840591][ T6493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.881855][ T6493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.341295][ T6493] team0: Port device team_slave_0 added [ 72.381024][ T6493] team0: Port device team_slave_1 added [ 72.489769][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.497199][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.524973][ T6493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.539770][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.547351][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.574013][ T6493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.630748][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.648581][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.809815][ T6493] hsr_slave_0: entered promiscuous mode [ 72.816598][ T6493] hsr_slave_1: entered promiscuous mode [ 72.973170][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.001939][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.560587][ T6493] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.663470][ T6493] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.700630][ T6493] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.021491][ T6493] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.089733][ T6493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.115460][ T6493] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.131254][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.138645][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.159007][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.166136][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.247139][ T6493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.338417][ T204] [ 74.340903][ T204] ====================================================== [ 74.341051][ T6493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.347909][ T204] WARNING: possible circular locking dependency detected [ 74.347918][ T204] 6.13.0-syzkaller-08265-g9c5968db9e62 #0 Not tainted [ 74.347926][ T204] ------------------------------------------------------ [ 74.347931][ T204] kworker/u8:5/204 is trying to acquire lock: [ 74.347939][ T204] ffffffff8fcc3b08 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xac2/0x2030 [ 74.348013][ T204] [ 74.348013][ T204] but task is already holding lock: [ 74.348018][ T204] ffff888020758768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 74.348062][ T204] [ 74.348062][ T204] which lock already depends on the new lock. [ 74.348062][ T204] [ 74.378626][ T6493] veth0_vlan: entered promiscuous mode [ 74.381725][ T204] [ 74.381725][ T204] the existing dependency chain (in reverse order) is: [ 74.381735][ T204] [ 74.381735][ T204] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 74.442612][ T204] lock_acquire+0x1ed/0x550 [ 74.447637][ T204] __mutex_lock+0x19c/0x1010 [ 74.452752][ T204] wiphy_register+0x1a49/0x27b0 [ 74.458112][ T204] ieee80211_register_hw+0x354e/0x4240 [ 74.464257][ T204] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 74.470508][ T204] init_mac80211_hwsim+0x87a/0xb00 [ 74.476146][ T204] do_one_initcall+0x248/0x870 [ 74.481521][ T204] do_initcall_level+0x157/0x210 [ 74.486972][ T204] do_initcalls+0x3f/0x80 [ 74.491898][ T204] kernel_init_freeable+0x435/0x5d0 [ 74.497614][ T204] kernel_init+0x1d/0x2b0 [ 74.502459][ T204] ret_from_fork+0x4b/0x80 [ 74.507390][ T204] ret_from_fork_asm+0x1a/0x30 [ 74.512675][ T204] [ 74.512675][ T204] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 74.519879][ T204] validate_chain+0x18ef/0x5920 [ 74.525240][ T204] __lock_acquire+0x1397/0x2100 [ 74.530605][ T204] lock_acquire+0x1ed/0x550 [ 74.535620][ T204] __mutex_lock+0x19c/0x1010 [ 74.540719][ T204] unregister_netdevice_many_notify+0xac2/0x2030 [ 74.547555][ T204] unregister_netdevice_queue+0x303/0x370 [ 74.553787][ T204] _cfg80211_unregister_wdev+0x163/0x590 [ 74.559930][ T204] ieee80211_remove_interfaces+0x4ef/0x700 [ 74.566265][ T204] ieee80211_unregister_hw+0x5d/0x2c0 [ 74.572155][ T204] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 74.578215][ T204] hwsim_exit_net+0x5c1/0x670 [ 74.583404][ T204] cleanup_net+0x812/0xd60 [ 74.588330][ T204] process_scheduled_works+0xa66/0x1840 [ 74.594388][ T204] worker_thread+0x870/0xd30 [ 74.599578][ T204] kthread+0x7a9/0x920 [ 74.604157][ T204] ret_from_fork+0x4b/0x80 [ 74.609087][ T204] ret_from_fork_asm+0x1a/0x30 [ 74.614363][ T204] [ 74.614363][ T204] other info that might help us debug this: [ 74.614363][ T204] [ 74.624584][ T204] Possible unsafe locking scenario: [ 74.624584][ T204] [ 74.632044][ T204] CPU0 CPU1 [ 74.637840][ T204] ---- ---- [ 74.643287][ T204] lock(&rdev->wiphy.mtx); [ 74.647804][ T204] lock(rtnl_mutex); [ 74.654334][ T204] lock(&rdev->wiphy.mtx); [ 74.661345][ T204] lock(rtnl_mutex); [ 74.665488][ T204] [ 74.665488][ T204] *** DEADLOCK *** [ 74.665488][ T204] [ 74.673624][ T204] 4 locks held by kworker/u8:5/204: [ 74.678804][ T204] #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 74.689681][ T204] #1: ffffc900030a7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 74.700208][ T204] #2: ffffffff8fcb7550 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 74.709698][ T204] #3: ffff888020758768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 74.720482][ T204] [ 74.720482][ T204] stack backtrace: [ 74.726503][ T204] CPU: 0 UID: 0 PID: 204 Comm: kworker/u8:5 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 74.726519][ T204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 74.726528][ T204] Workqueue: netns cleanup_net [ 74.726550][ T204] Call Trace: [ 74.726556][ T204] [ 74.726563][ T204] dump_stack_lvl+0x241/0x360 [ 74.726579][ T204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.726591][ T204] ? __pfx__printk+0x10/0x10 [ 74.726613][ T204] print_circular_bug+0x13a/0x1b0 [ 74.726628][ T204] check_noncircular+0x36a/0x4a0 [ 74.726641][ T204] ? __pfx_check_noncircular+0x10/0x10 [ 74.726654][ T204] ? lockdep_lock+0x123/0x2b0 [ 74.726670][ T204] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 74.726687][ T204] validate_chain+0x18ef/0x5920 [ 74.726704][ T204] ? __schedule+0x1916/0x4c90 [ 74.726719][ T204] ? __pfx_validate_chain+0x10/0x10 [ 74.726734][ T204] ? __pfx___schedule+0x10/0x10 [ 74.726746][ T204] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 74.726760][ T204] ? do_raw_spin_unlock+0x13c/0x8b0 [ 74.726776][ T204] ? try_to_wake_up+0x959/0x1470 [ 74.726795][ T204] ? mark_lock+0x9a/0x360 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 74.726813][ T204] __lock_acquire+0x1397/0x2100 [ 74.726833][ T204] lock_acquire+0x1ed/0x550 [ 74.726848][ T204] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 74.726864][ T204] ? __pfx_lock_acquire+0x10/0x10 [ 74.726880][ T204] ? __pfx___might_resched+0x10/0x10 [ 74.726895][ T204] ? finish_wait+0xd4/0x1e0 [ 74.726912][ T204] __mutex_lock+0x19c/0x1010 [ 74.726933][ T204] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 74.726949][ T204] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 74.726962][ T204] ? __pfx___mutex_lock+0x10/0x10 [ 74.726976][ T204] ? __pfx___might_resched+0x10/0x10 [ 74.726991][ T204] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 74.727005][ T204] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 74.727019][ T204] unregister_netdevice_many_notify+0xac2/0x2030 [ 74.727032][ T204] ? mark_lock+0x9a/0x360 [ 74.727052][ T204] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 74.727065][ T204] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 74.727079][ T204] ? __pfx_lock_release+0x10/0x10 [ 74.727105][ T204] unregister_netdevice_queue+0x303/0x370 [ 74.727124][ T204] ? __pfx_up_write+0x10/0x10 [ 74.727136][ T204] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 74.727156][ T204] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 74.727169][ T204] _cfg80211_unregister_wdev+0x163/0x590 [ 74.727186][ T204] ieee80211_remove_interfaces+0x4ef/0x700 [ 74.727207][ T204] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 74.727225][ T204] ? rcu_is_watching+0x15/0xb0 [ 74.727239][ T204] ieee80211_unregister_hw+0x5d/0x2c0 [ 74.727261][ T204] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 74.727283][ T204] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 74.727304][ T204] hwsim_exit_net+0x5c1/0x670 [ 74.727320][ T204] ? __pfx_hwsim_exit_net+0x10/0x10 [ 74.727336][ T204] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 74.727353][ T204] cleanup_net+0x812/0xd60 [ 74.727370][ T204] ? __pfx_cleanup_net+0x10/0x10 [ 74.727387][ T204] ? process_scheduled_works+0x976/0x1840 [ 74.727402][ T204] process_scheduled_works+0xa66/0x1840 [ 74.727429][ T204] ? __pfx_process_scheduled_works+0x10/0x10 [ 74.727446][ T204] ? assign_work+0x364/0x3d0 [ 74.727460][ T204] worker_thread+0x870/0xd30 [ 74.727477][ T204] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 74.727491][ T204] ? __kthread_parkme+0x169/0x1d0 [ 74.727507][ T204] ? __pfx_worker_thread+0x10/0x10 [ 74.727521][ T204] kthread+0x7a9/0x920 [ 74.727537][ T204] ? __pfx_kthread+0x10/0x10 [ 74.727553][ T204] ? __pfx_worker_thread+0x10/0x10 [ 74.727568][ T204] ? __pfx_kthread+0x10/0x10 [ 74.727583][ T204] ? __pfx_kthread+0x10/0x10 [ 74.727599][ T204] ? __pfx_kthread+0x10/0x10 [ 74.727614][ T204] ? _raw_spin_unlock_irq+0x23/0x50 [ 74.727626][ T204] ? lockdep_hardirqs_on+0x99/0x150 [ 74.727640][ T204] ? __pfx_kthread+0x10/0x10 [ 74.727656][ T204] ret_from_fork+0x4b/0x80 [ 74.727671][ T204] ? __pfx_kthread+0x10/0x10 [ 74.727687][ T204] ret_from_fork_asm+0x1a/0x30 [ 74.727705][ T204] [ 74.732731][ T6493] veth1_vlan: entered promiscuous mode [ 77.564296][ T204] bridge_slave_1: left allmulticast mode [ 77.570579][ T204] bridge_slave_1: left promiscuous mode [ 77.580024][ T204] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.589843][ T204] bridge_slave_0: left allmulticast mode [ 77.595513][ T204] bridge_slave_0: left promiscuous mode [ 77.602026][ T204] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.774383][ T204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.784117][ T204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.793440][ T204] bond0 (unregistering): Released all slaves [ 77.902866][ T204] hsr_slave_0: left promiscuous mode [ 77.911813][ T204] hsr_slave_1: left promiscuous mode [ 77.918072][ T204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.925686][ T204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.934727][ T204] veth1_vlan: left promiscuous mode [ 77.940831][ T204] veth0_vlan: left promiscuous mode [ 78.053944][ T204] team0 (unregistering): Port device team_slave_1 removed [ 78.074227][ T204] team0 (unregistering): Port device team_slave_0 removed [ 81.996562][ T46] cfg80211: failed to load regulatory.db