last executing test programs: 2.91300447s ago: executing program 2 (id=3): socket(0x1e, 0x4, 0x2) mmap$auto(0x0, 0xe983, 0xe1, 0x800000000000eb1, 0x401, 0x8000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x73d, 0x4, 0x0, 0xff, "50cfeeca8e00"}) arch_prctl$auto(0x1003, 0x7) socket(0x2, 0x80802, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x12) socket(0x21, 0x3, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/neigh/dummy0/delay_first_probe_time\x00', 0x42202, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x101001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x1, 0x5, 0x0) socket(0x10, 0x2, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyze\x00', 0x10b003, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) fchownat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) sendto$auto(0xffffffffffffffff, &(0x7f0000000580)="0e75ef1f547f82b34fe02bf76cc85dcb94af7f2dee6d39b1ea7726359994345fad9132ff7de608fa70ba93ee692ff19e7b95578df0b0cb995c1cc12b9173bc9abc0d2565fa0adfb8a462e1cd8441c1ffa4f37432a354e79a8b08366f9c7614f4c380e59fbd8defbc38d136c1805fe0714ffcfcaf786e74ef928c4491d6c7da81daa5020949bc5d8bd96ee2f4cfee9080eec4a2ab080e4afc06fb7eaa4f7e265bb23549444ebb61d135f22260dd4ac66288ecf58e618ee9", 0x7fff, 0x1, &(0x7f0000000340)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0xcc0) open(&(0x7f0000000840)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x22240, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=&(0x7f00000000c0)='/dev/dmmidi2\x00', &(0x7f0000000180)=&(0x7f0000000140)='/dev/dmmidi2\x00') 1.874260273s ago: executing program 1 (id=2): r0 = socket(0x28, 0x5, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x0) bind$auto(r0, &(0x7f0000000080)=@in={0x28, 0x4e20, @multicast2}, 0x68) mlockall$auto(0x7) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x8, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeaf, 0x804}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf2501"], 0x1c}}, 0x40000) sendmsg$auto_ILA_CMD_FLUSH(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000540)={0x14, r3, 0x1, 0x2, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40844) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r4, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r4, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000098cd01ea90ed3143dd98b13abfb42000", @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c010}, 0x810) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) r7 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r7, &(0x7f0000000440)="110000000500000000", 0x9) socket$nl_generic(0x10, 0x3, 0x10) r8 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) sendmsg$auto_IPVS_CMD_GET_SERVICE(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x80800) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x5, 0x2020009, 0x3, 0xffffffffffffffff, r5, 0x7) write$auto(0x3, 0x0, 0x100082) r9 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0xc, 0xbc5, 0x13, 0x3, 0x8000) lseek$auto(r9, 0x7ffffffffffffffc, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 1.444231165s ago: executing program 2 (id=5): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(r0, &(0x7f0000000200)={{&(0x7f0000000040)="3fdf6e611f0e43164e27ab77a82ed07688613cb81966dd3ed7727223a09c3f1046f9b60398efbd5dd48cc4637e025fd6df9de8b334572899f8faf4735c6a68c101afe7f9738f9fd98bd5cb9949615889277cbbc103f2a56ea66a740a148f6a0771ee", 0xc5, &(0x7f0000000140)={&(0x7f00000000c0)="9f05c8edbedc24638c919b850f2ceff77adaf4a7059924", 0x126}, 0x6, &(0x7f0000000180)="2ddb6e326461d5426c0fdba4d9842382656aeffca4fa8c893e29f522952a4c06c24bf41071b3f63071358be8c5ef56c9e95421a1b628eba8bfd2003364181698d3", 0xffffffffffffffff, 0xf8ad}, 0x8}, 0x43, 0x4, &(0x7f0000000240)={0x4, 0xe000000000}) ioctl$auto(0x3, 0x4020565b, 0x38) 1.096713134s ago: executing program 0 (id=1): unshare$auto(0x40000080) close_range$auto(0x2, 0xfffffffffffff000, 0x2) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r0, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r1, 0x2) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto_mousedev_fops_mousedev(r2, 0x0, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) bpf$auto_BPF_MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)=@enable_stats={0x60870000}, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x15, 0x5, 0x0) getsockopt$auto(r4, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000003c0)="80e08ca631b90e5e9a4997a0a2f075172c2529fea5d2b4b06119e7cc493e3c68f5e114fe74f6ec1d4e94daec10b05cb281b0922bcba475cea32ccf0eda11471e9c15d15fbcc3bebe4bc005053b7459c5ecbae956634304a2b3c20d024a0df7b468626e493968743cc5ed35ab320b6ffd85d87720f947e83e96c03fca21e0c585095bf40d010cd4fba6c371232889fd43cb084df47b56ff93efb0f707d371175d4dcd1c13802f7a4550e4ef765842dadd3e2bc2df160655b78b5a9438f2f8be466e2b3782469b16c9310ff6307403770f5c225820d582ab93c7ca472e799fe10d61abbfc87ea3846f44cb04eef9ed7c16b2483588") mmap$auto(0x450cecf1, 0x9, 0x3, 0xeb2, r1, 0x7ffe) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000, 0x0) waitid$auto(0x0, 0x5c5, 0x0, 0x4, 0x0) setregid$auto(0x0, 0x3) epoll_create$auto(0x7) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.007474799s ago: executing program 3 (id=4): socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x40009, 0x5, 0x9b72, 0x0, 0x28000) futex_wake$auto(0x0, 0x8, 0x7, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = socket(0x2, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x10, 0x0, &(0x7f0000000140)=0x4) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fstat$auto(r1, &(0x7f00000001c0)={0x4, 0xc5bd, 0x6, 0x1000006, 0x0, 0x0, 0x0, 0xa, 0x10000, 0x6, 0x5, 0x6, 0x8, 0xcc, 0x4, 0x6, 0x10000}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/nbd8/queue/atomic_write_max_bytes\x00', 0x34200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_GET_TXSC(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000001940)={0x14, r3, 0x186f202170196f7b, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x8241, 0x154) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r4) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 812.71283ms ago: executing program 1 (id=6): listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x8000001c, 0xfffffffffffffff7, 0x2}, 0x0, 0x4ded, 0x0) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40103d0b, 0x0) unshare$auto(0x40000080) 645.940864ms ago: executing program 2 (id=7): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nullb0/queue/io_poll\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) keyctl$auto(0xa, 0x3, 0x0, 0x802000, 0xe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.14/usb37/bConfigurationValue\x00', 0x0, 0x0) 587.336135ms ago: executing program 3 (id=8): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nullb0/queue/io_poll\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) io_uring_setup$auto(0x48, 0x0) keyctl$auto(0xa, 0x3, 0x0, 0x802000, 0xe) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.14/usb37/bConfigurationValue\x00', 0x0, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x44, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdb7f}, 0x14}, 0x1, 0x0, 0x0, 0x20004041}, 0x4004040) 459.069518ms ago: executing program 2 (id=9): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop12/queue/wbt_lat_usec\x00', 0x102, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0x501, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = memfd_create$auto(0x0, 0x4) r2 = socket(0x11, 0x2, 0x3a) statx$auto(r1, 0x0, 0x1000, 0xbdfc, 0x0) setsockopt$auto(r2, 0x29, 0x14, 0x0, 0x56b) setsockopt$auto(r2, 0x29, 0x14, 0x0, 0x10052b) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8080, 0x0) ioctl$auto_LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x4044820) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb2, 0x6, 0x102) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x6) write$auto(0x3, 0x0, 0xfdef) 327.921308ms ago: executing program 3 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={0x0, 0x44, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd25, 0x25dfdb7f}, 0x14}, 0x1, 0x0, 0x0, 0x20004041}, 0x4004040) 137.64099ms ago: executing program 3 (id=11): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nullb0/queue/io_poll\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) io_uring_setup$auto(0x48, 0x0) keyctl$auto(0xa, 0x3, 0x0, 0x802000, 0xe) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.14/usb37/bConfigurationValue\x00', 0x0, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) 69.139081ms ago: executing program 1 (id=12): openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x3) socket(0x2, 0x1, 0x0) listen$auto(0x3, 0xfffffffa) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty30\x00', 0x62c00, 0x0) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xdff1, 0xfffffffffffffffd, 0xd4, 0xffffffffffffffc0, 0x6, 0x0, 0x80009, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0xc, 0x5, 0x29a, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) fcntl$getown(r0, 0x9) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r1, 0x4, 0x8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) 0s ago: executing program 0 (id=13): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nullb0/queue/io_poll\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) io_uring_setup$auto(0x48, 0x0) keyctl$auto(0xa, 0x3, 0x0, 0x802000, 0xe) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.14/usb37/bConfigurationValue\x00', 0x0, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. [ 75.285718][ T5819] cgroup: Unknown subsys name 'net' [ 75.398445][ T5819] cgroup: Unknown subsys name 'cpuset' [ 75.407247][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.799080][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.796429][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.804065][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.812053][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.820015][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.827843][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.846139][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.853718][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.862265][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.865716][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.869798][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.885746][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.896174][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.897776][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.911741][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.918958][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.920450][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.944903][ T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.955240][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.965046][ T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.975915][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.444110][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 79.551522][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 79.581974][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 79.626758][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 79.743627][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.752043][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.759798][ T5828] bridge_slave_0: entered allmulticast mode [ 79.767001][ T5828] bridge_slave_0: entered promiscuous mode [ 79.819955][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.827381][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.834533][ T5828] bridge_slave_1: entered allmulticast mode [ 79.841821][ T5828] bridge_slave_1: entered promiscuous mode [ 79.856032][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.863165][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.872148][ T5829] bridge_slave_0: entered allmulticast mode [ 79.879309][ T5829] bridge_slave_0: entered promiscuous mode [ 79.888489][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.895750][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.903089][ T5829] bridge_slave_1: entered allmulticast mode [ 79.910350][ T5829] bridge_slave_1: entered promiscuous mode [ 79.955635][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.962822][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.970169][ T5834] bridge_slave_0: entered allmulticast mode [ 79.977461][ T5834] bridge_slave_0: entered promiscuous mode [ 79.986422][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.993605][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.001318][ T5834] bridge_slave_1: entered allmulticast mode [ 80.009653][ T5834] bridge_slave_1: entered promiscuous mode [ 80.068972][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.103141][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.115973][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.125577][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.132729][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.140035][ T5836] bridge_slave_0: entered allmulticast mode [ 80.148334][ T5836] bridge_slave_0: entered promiscuous mode [ 80.157965][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.169242][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.180860][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.214450][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.223432][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.230764][ T5836] bridge_slave_1: entered allmulticast mode [ 80.238613][ T5836] bridge_slave_1: entered promiscuous mode [ 80.287973][ T5828] team0: Port device team_slave_0 added [ 80.308311][ T5829] team0: Port device team_slave_0 added [ 80.329466][ T5828] team0: Port device team_slave_1 added [ 80.338024][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.349571][ T5829] team0: Port device team_slave_1 added [ 80.369654][ T5834] team0: Port device team_slave_0 added [ 80.380472][ T5834] team0: Port device team_slave_1 added [ 80.400224][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.459301][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.468089][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.494182][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.518644][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.525760][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.552016][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.575236][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.582228][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.608506][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.620544][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.631229][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.657353][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.669287][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.676542][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.702526][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.718003][ T5836] team0: Port device team_slave_0 added [ 80.738826][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.746552][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.772544][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.792839][ T5836] team0: Port device team_slave_1 added [ 80.824089][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.831121][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.857083][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.869829][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.876870][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.902849][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.945629][ T5843] Bluetooth: hci1: command tx timeout [ 80.945633][ T56] Bluetooth: hci0: command tx timeout [ 80.994499][ T5834] hsr_slave_0: entered promiscuous mode [ 81.001547][ T5834] hsr_slave_1: entered promiscuous mode [ 81.025448][ T5843] Bluetooth: hci2: command tx timeout [ 81.025472][ T56] Bluetooth: hci3: command tx timeout [ 81.059305][ T5828] hsr_slave_0: entered promiscuous mode [ 81.065622][ T5828] hsr_slave_1: entered promiscuous mode [ 81.071684][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.079456][ T5828] Cannot create hsr debugfs directory [ 81.091700][ T5836] hsr_slave_0: entered promiscuous mode [ 81.098505][ T5836] hsr_slave_1: entered promiscuous mode [ 81.104520][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.112848][ T5836] Cannot create hsr debugfs directory [ 81.123154][ T5829] hsr_slave_0: entered promiscuous mode [ 81.129535][ T5829] hsr_slave_1: entered promiscuous mode [ 81.135868][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.143442][ T5829] Cannot create hsr debugfs directory [ 81.601974][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.614223][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.637343][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.657465][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.703050][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.738375][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.760145][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.779461][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.817046][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.842944][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.871387][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.900437][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.914362][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.932917][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.943091][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.965093][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.041126][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.102827][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.138711][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.146042][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.157044][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.164159][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.230425][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.278828][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.311412][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.361523][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.368774][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.403295][ T1534] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.410532][ T1534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.423953][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.442842][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.470771][ T1534] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.477969][ T1534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.502475][ T1534] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.509718][ T1534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.556270][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.609230][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.616695][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.650799][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.663129][ T1534] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.670342][ T1534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.899127][ T5829] veth0_vlan: entered promiscuous mode [ 82.932824][ T5829] veth1_vlan: entered promiscuous mode [ 82.976079][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.018023][ T5829] veth0_macvtap: entered promiscuous mode [ 83.026259][ T5843] Bluetooth: hci0: command tx timeout [ 83.028926][ T56] Bluetooth: hci1: command tx timeout [ 83.059134][ T5829] veth1_macvtap: entered promiscuous mode [ 83.106842][ T56] Bluetooth: hci3: command tx timeout [ 83.107151][ T5843] Bluetooth: hci2: command tx timeout [ 83.141215][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.169863][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.200282][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.210315][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.219227][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.228080][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.240569][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.256860][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.286254][ T5836] veth0_vlan: entered promiscuous mode [ 83.326402][ T5836] veth1_vlan: entered promiscuous mode [ 83.420877][ T5828] veth0_vlan: entered promiscuous mode [ 83.446653][ T5834] veth0_vlan: entered promiscuous mode [ 83.458338][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.470975][ T5836] veth0_macvtap: entered promiscuous mode [ 83.473280][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.490964][ T5834] veth1_vlan: entered promiscuous mode [ 83.531506][ T5836] veth1_macvtap: entered promiscuous mode [ 83.541164][ T5828] veth1_vlan: entered promiscuous mode [ 83.566650][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.572189][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.586422][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.592523][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.605912][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.616628][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.627292][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.640858][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.661850][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.684740][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.693488][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.702805][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.776805][ T5834] veth0_macvtap: entered promiscuous mode [ 83.797769][ T5834] veth1_macvtap: entered promiscuous mode [ 83.857914][ T5828] veth0_macvtap: entered promiscuous mode [ 83.867729][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.872353][ T5828] veth1_macvtap: entered promiscuous mode [ 83.904087][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.917016][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.928120][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.939073][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.954120][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.979315][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.992960][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.042436][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.057371][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.068684][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.079419][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.089630][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.100148][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.112553][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.122909][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.140833][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.151527][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.162551][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.173655][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.199686][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.210734][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.221126][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.233112][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.244102][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.268033][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.292960][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.340330][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.359290][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.370375][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.381777][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.419168][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.446304][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.469059][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.485902][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.498389][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.508650][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.105228][ T5843] Bluetooth: hci0: command tx timeout [ 85.110765][ T5843] Bluetooth: hci1: command tx timeout [ 85.185534][ T5843] Bluetooth: hci3: command tx timeout [ 85.185554][ T56] Bluetooth: hci2: command tx timeout [ 85.232681][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.335496][ T1534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.343364][ T1534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.374683][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.494917][ T1534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.502790][ T1534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.569515][ T1534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.604867][ T1534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.345622][ T5926] writes to the poll attribute are ignored. [ 86.354340][ T5926] please use driver specific parameters instead. [ 86.449231][ T5928] writes to the poll attribute are ignored. [ 86.485350][ T5928] please use driver specific parameters instead. [ 86.877947][ T5940] writes to the poll attribute are ignored. [ 86.878322][ T5934] [ 86.884059][ T5940] please use driver specific parameters instead. [ 86.886214][ T5934] ====================================================== [ 86.886224][ T5934] WARNING: possible circular locking dependency detected [ 86.886246][ T5934] 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 Not tainted [ 86.886260][ T5934] ------------------------------------------------------ [ 86.886267][ T5934] syz.2.9/5934 is trying to acquire lock: [ 86.886279][ T5934] ffff888025dd7118 (&q->elevator_lock){+.+.}-{4:4}, at: queue_wb_lat_store+0x187/0x3d0 [ 86.936166][ T5934] [ 86.936166][ T5934] but task is already holding lock: [ 86.936176][ T5934] ffff888025dd6be8 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 86.936241][ T5934] [ 86.936241][ T5934] which lock already depends on the new lock. [ 86.936241][ T5934] [ 86.936248][ T5934] [ 86.936248][ T5934] the existing dependency chain (in reverse order) is: [ 86.936255][ T5934] [ 86.936255][ T5934] -> #2 (&q->q_usage_counter(io)#29){++++}-{0:0}: [ 86.936288][ T5934] blk_alloc_queue+0x619/0x760 [ 86.936311][ T5934] blk_mq_alloc_queue+0x179/0x290 [ 86.936336][ T5934] __blk_mq_alloc_disk+0x29/0x120 [ 86.936362][ T5934] loop_add+0x496/0xb70 [ 86.936384][ T5934] loop_init+0x164/0x270 [ 86.936411][ T5934] do_one_initcall+0x120/0x6e0 [ 86.936437][ T5934] kernel_init_freeable+0x5c2/0x900 [ 86.936456][ T5934] kernel_init+0x1c/0x2b0 [ 86.936482][ T5934] ret_from_fork+0x45/0x80 [ 86.936508][ T5934] ret_from_fork_asm+0x1a/0x30 [ 86.936533][ T5934] [ 86.936533][ T5934] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 86.936561][ T5934] fs_reclaim_acquire+0x102/0x150 [ 86.936587][ T5934] kmem_cache_alloc_noprof+0x53/0x3b0 [ 86.936607][ T5934] __kernfs_new_node+0xd2/0x8a0 [ 86.936634][ T5934] kernfs_new_node+0x13c/0x1e0 [ 86.936652][ T5934] kernfs_create_dir_ns+0x4c/0x1a0 [ 86.936671][ T5934] sysfs_create_dir_ns+0x13a/0x2b0 [ 86.936696][ T5934] kobject_add_internal+0x2c4/0x9b0 [ 86.936720][ T5934] kobject_add+0x16e/0x240 [ 86.936743][ T5934] elv_register_queue+0xd3/0x2a0 [ 86.936763][ T5934] blk_register_queue+0x3c4/0x560 [ 86.936791][ T5934] add_disk_fwnode+0x911/0x13a0 [ 86.936815][ T5934] nbd_dev_add+0x78e/0xbb0 [ 86.936830][ T5934] nbd_init+0x181/0x320 [ 86.936855][ T5934] do_one_initcall+0x120/0x6e0 [ 86.936878][ T5934] kernel_init_freeable+0x5c2/0x900 [ 86.936895][ T5934] kernel_init+0x1c/0x2b0 [ 86.936918][ T5934] ret_from_fork+0x45/0x80 [ 86.936949][ T5934] ret_from_fork_asm+0x1a/0x30 [ 86.936973][ T5934] [ 86.936973][ T5934] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 86.937000][ T5934] __lock_acquire+0x1173/0x1ba0 [ 86.937022][ T5934] lock_acquire+0x179/0x350 [ 86.937042][ T5934] __mutex_lock+0x199/0xb90 [ 86.937062][ T5934] queue_wb_lat_store+0x187/0x3d0 [ 86.937087][ T5934] queue_attr_store+0x270/0x310 [ 86.937111][ T5934] sysfs_kf_write+0xef/0x150 [ 86.937133][ T5934] kernfs_fop_write_iter+0x351/0x510 [ 86.937154][ T5934] vfs_write+0x5ba/0x1180 [ 86.937169][ T5934] ksys_write+0x12a/0x240 [ 86.937185][ T5934] do_syscall_64+0xcd/0x230 [ 86.937206][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.937224][ T5934] [ 86.937224][ T5934] other info that might help us debug this: [ 86.937224][ T5934] [ 86.937230][ T5934] Chain exists of: [ 86.937230][ T5934] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#29 [ 86.937230][ T5934] [ 86.937265][ T5934] Possible unsafe locking scenario: [ 86.937265][ T5934] [ 86.937271][ T5934] CPU0 CPU1 [ 86.937276][ T5934] ---- ---- [ 86.937281][ T5934] lock(&q->q_usage_counter(io)#29); [ 86.937299][ T5934] lock(fs_reclaim); [ 86.937313][ T5934] lock(&q->q_usage_counter(io)#29); [ 86.937332][ T5934] lock(&q->elevator_lock); [ 86.937344][ T5934] [ 86.937344][ T5934] *** DEADLOCK *** [ 86.937344][ T5934] [ 86.937349][ T5934] 6 locks held by syz.2.9/5934: [ 86.937360][ T5934] #0: ffff88807d9dad38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 86.937404][ T5934] #1: ffff8880363b6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 86.937451][ T5934] #2: ffff888035648888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 86.937499][ T5934] #3: ffff888143742698 (kn->active#57){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 86.937552][ T5934] #4: ffff888025dd6be8 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 86.937606][ T5934] #5: ffff888025dd6c20 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 86.937660][ T5934] [ 86.937660][ T5934] stack backtrace: [ 86.937684][ T5934] CPU: 1 UID: 0 PID: 5934 Comm: syz.2.9 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 86.937708][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 86.937722][ T5934] Call Trace: [ 86.937729][ T5934] [ 86.937740][ T5934] dump_stack_lvl+0x116/0x1f0 [ 86.937762][ T5934] print_circular_bug+0x275/0x350 [ 86.937784][ T5934] check_noncircular+0x14c/0x170 [ 86.937809][ T5934] __lock_acquire+0x1173/0x1ba0 [ 86.937835][ T5934] lock_acquire+0x179/0x350 [ 86.937856][ T5934] ? queue_wb_lat_store+0x187/0x3d0 [ 86.937883][ T5934] ? __pfx___might_resched+0x10/0x10 [ 86.937903][ T5934] ? do_raw_spin_lock+0x12c/0x2b0 [ 86.937935][ T5934] __mutex_lock+0x199/0xb90 [ 86.937956][ T5934] ? queue_wb_lat_store+0x187/0x3d0 [ 86.937982][ T5934] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.938002][ T5934] ? queue_wb_lat_store+0x187/0x3d0 [ 86.938027][ T5934] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.938047][ T5934] ? __pfx___mutex_lock+0x10/0x10 [ 86.938071][ T5934] ? __pfx_autoremove_wake_function+0x10/0x10 [ 86.938094][ T5934] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 86.938121][ T5934] ? queue_wb_lat_store+0x187/0x3d0 [ 86.938146][ T5934] queue_wb_lat_store+0x187/0x3d0 [ 86.938173][ T5934] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 86.938201][ T5934] ? __mutex_trylock_common+0xe9/0x250 [ 86.938225][ T5934] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 86.938251][ T5934] queue_attr_store+0x270/0x310 [ 86.938278][ T5934] ? __pfx_queue_attr_store+0x10/0x10 [ 86.938305][ T5934] ? ath10k_wmi_event_temperature.isra.0+0x71/0xb0 [ 86.938330][ T5934] ? find_held_lock+0x2b/0x80 [ 86.938347][ T5934] ? sysfs_file_kobj+0xe4/0x290 [ 86.938372][ T5934] ? __pfx_queue_attr_store+0x10/0x10 [ 86.938398][ T5934] sysfs_kf_write+0xef/0x150 [ 86.938422][ T5934] kernfs_fop_write_iter+0x351/0x510 [ 86.938444][ T5934] ? __pfx_sysfs_kf_write+0x10/0x10 [ 86.938469][ T5934] vfs_write+0x5ba/0x1180 [ 86.938486][ T5934] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 86.938509][ T5934] ? __pfx___mutex_lock+0x10/0x10 [ 86.938530][ T5934] ? __pfx_vfs_write+0x10/0x10 [ 86.938553][ T5934] ksys_write+0x12a/0x240 [ 86.938569][ T5934] ? __pfx_ksys_write+0x10/0x10 [ 86.938585][ T5934] ? rcu_is_watching+0x12/0xc0 [ 86.938605][ T5934] do_syscall_64+0xcd/0x230 [ 86.938626][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.938645][ T5934] RIP: 0033:0x7f7f2958e969 [ 86.938660][ T5934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.938678][ T5934] RSP: 002b:00007f7f2a3f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.938694][ T5934] RAX: ffffffffffffffda RBX: 00007f7f297b5fa0 RCX: 00007f7f2958e969 [ 86.938707][ T5934] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 86.938718][ T5934] RBP: 00007f7f29610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 86.938730][ T5934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.938741][ T5934] R13: 0000000000000000 R14: 00007f7f297b5fa0 R15: 00007ffd69afaac8 [ 86.938758][ T5934] [ 87.027112][ T5947] writes to the poll attribute are ignored. [ 87.027135][ T5947] please use driver specific parameters instead. [ 87.190041][ T5843] Bluetooth: hci1: command tx timeout [ 87.204920][ T5843] Bluetooth: hci0: command tx timeout [ 87.268874][ T5843] Bluetooth: hci3: command tx timeout [ 87.275101][ T5843] Bluetooth: hci2: command tx timeout [ 88.096580][ T5943] tty tty30: ldisc open failed (-12), clearing slot 29 [ 91.907288][ T24] cfg80211: failed to load regulatory.db