last executing test programs: 221.674863ms ago: executing program 2 (id=3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='27', 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) r2 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) write$smackfs_cipsonum(r2, &(0x7f0000000280)=0x1, 0x14) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000a40)=0x11) 88.11615ms ago: executing program 2 (id=6): mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) (async) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = syz_io_uring_setup(0x6c36, &(0x7f0000000600)={0x0, 0x82773, 0x200, 0x23, 0x33}, &(0x7f0000000680)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000700)=0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000780)={r10, 0x1, 0x6, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f00000007c0)=@assoc_value, &(0x7f0000000800)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f00000007c0)=@assoc_value={0x0}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000840)={r11, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000880)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r4}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r3]) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='+io'], 0x10) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x5, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000300)={0x0, {0x1, 0x0}, 0x0, 0x6}) (async) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000300)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$FS_IOC_FIEMAP(r9, 0xc020660b, &(0x7f0000000900)={0x9, 0x5, 0x0, 0x4, 0x1, 0x0, [{0x8a, 0x8000000000000000, 0xf0, '\x00', 0x600}]}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000340)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r0, 0x400c0930, &(0x7f0000000380)) pwrite64(r0, &(0x7f00000003c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) (async) pwrite64(r0, &(0x7f00000003c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) pread64(r0, &(0x7f0000000400)=""/512, 0x200, 0x10000) ioctl$STOP_ARRAY(r0, 0x932, 0x0) (async) ioctl$STOP_ARRAY(r0, 0x932, 0x0) 0s ago: executing program 3 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 28.445957][ T4702] cgroup: Unknown subsys name 'net' [ 28.616121][ T4702] cgroup: Unknown subsys name 'cpuset' [ 28.618500][ T4702] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.769741][ T4702] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.622953][ T4727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.623041][ T4728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.623974][ T4728] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.625066][ T4728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.625319][ T4728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.625514][ T4728] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.625604][ T4728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.625912][ T4728] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.626092][ T4728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.626397][ T4728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.626640][ T4728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.626805][ T4728] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.626917][ T4728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.627089][ T4728] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.628369][ T4728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.628643][ T4728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.628814][ T4728] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.629557][ T4727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.629841][ T4728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.630124][ T4728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.630349][ T4728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.634031][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.635408][ T4730] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.637142][ T4730] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.646511][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.826714][ T4719] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.827030][ T4719] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.827267][ T4724] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.827972][ T4713] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.834304][ T4719] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.857642][ T4718] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.883024][ T4714] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.898985][ T4719] infiniband rxe0: set active [ 29.899505][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.899586][ T4719] infiniband rxe0: added rxe_eth0 [ 29.906249][ T4714] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.924413][ T4719] RDS/IB: rxe0: added [ 29.924567][ T4719] smc: adding ib device rxe0 with port count 1 [ 29.924592][ T4719] smc: ib device rxe0 port 1 has no pnetid [ 29.943315][ T26] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.979695][ T4719] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.017211][ T4719] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.052312][ T4719] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.130081][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.130400][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.130469][ T4724] bridge_slave_0: entered allmulticast mode [ 30.130866][ T4724] bridge_slave_0: entered promiscuous mode [ 30.141236][ T4719] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.146987][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.147026][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.147081][ T4724] bridge_slave_1: entered allmulticast mode [ 30.147549][ T4724] bridge_slave_1: entered promiscuous mode [ 30.172111][ T4724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.173044][ T4724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.189172][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.189291][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.189342][ T4713] bridge_slave_0: entered allmulticast mode [ 30.189875][ T4713] bridge_slave_0: entered promiscuous mode [ 30.199268][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.199381][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.199479][ T4714] bridge_slave_0: entered allmulticast mode [ 30.199822][ T4714] bridge_slave_0: entered promiscuous mode [ 30.205096][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.205120][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.205208][ T4714] bridge_slave_1: entered allmulticast mode [ 30.205555][ T4714] bridge_slave_1: entered promiscuous mode [ 30.206438][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.206464][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.206563][ T4713] bridge_slave_1: entered allmulticast mode [ 30.207056][ T4713] bridge_slave_1: entered promiscuous mode [ 30.220225][ T4724] team0: Port device team_slave_0 added [ 30.221305][ T4724] team0: Port device team_slave_1 added [ 30.234812][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.235148][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.235382][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.235446][ T4718] bridge_slave_0: entered allmulticast mode [ 30.235884][ T4718] bridge_slave_0: entered promiscuous mode [ 30.236773][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.236781][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.236792][ T4724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.237534][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.237541][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.237553][ T4724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.243153][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.252063][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.252099][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.252157][ T4718] bridge_slave_1: entered allmulticast mode [ 30.252551][ T4718] bridge_slave_1: entered promiscuous mode [ 30.264290][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.274921][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.276394][ T4724] hsr_slave_0: entered promiscuous mode [ 30.276705][ T4724] hsr_slave_1: entered promiscuous mode [ 30.277934][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.283414][ T4718] team0: Port device team_slave_0 added [ 30.284095][ T4718] team0: Port device team_slave_1 added [ 30.290381][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.305117][ T4714] team0: Port device team_slave_0 added [ 30.309466][ T4713] team0: Port device team_slave_0 added [ 30.310197][ T4713] team0: Port device team_slave_1 added [ 30.318460][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.318470][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.318485][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.319021][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.319028][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.319041][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.328904][ T4713] hsr_slave_0: entered promiscuous mode [ 30.329202][ T4713] hsr_slave_1: entered promiscuous mode [ 30.329417][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 30.329425][ T4713] Cannot create hsr debugfs directory [ 30.344977][ T4714] team0: Port device team_slave_1 added [ 30.347706][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.347715][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.347728][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.362248][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.362267][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.362278][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.372784][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.372793][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.372806][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.382924][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.382933][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.382945][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.392964][ T4718] hsr_slave_0: entered promiscuous mode [ 30.393227][ T4718] hsr_slave_1: entered promiscuous mode [ 30.393390][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 30.393398][ T4718] Cannot create hsr debugfs directory [ 30.442377][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.442439][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.442531][ T4719] bridge_slave_0: entered allmulticast mode [ 30.442916][ T4719] bridge_slave_0: entered promiscuous mode [ 30.450467][ T4714] hsr_slave_0: entered promiscuous mode [ 30.450741][ T4714] hsr_slave_1: entered promiscuous mode [ 30.450904][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 30.450911][ T4714] Cannot create hsr debugfs directory [ 30.462169][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.462196][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.462251][ T4719] bridge_slave_1: entered allmulticast mode [ 30.462672][ T4719] bridge_slave_1: entered promiscuous mode [ 30.486005][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.492891][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.508192][ T4719] team0: Port device team_slave_0 added [ 30.509017][ T4719] team0: Port device team_slave_1 added [ 30.522462][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.522472][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.522484][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.523994][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.524000][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.524013][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.536440][ T4713] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.542860][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.551744][ T4713] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.553626][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.568371][ T4719] hsr_slave_0: entered promiscuous mode [ 30.568652][ T4719] hsr_slave_1: entered promiscuous mode [ 30.568829][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 30.568839][ T4719] Cannot create hsr debugfs directory [ 30.568921][ T4724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.570322][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.570513][ T4713] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.571506][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.571797][ T4713] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.572927][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.587095][ T4724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.588445][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.588760][ T4724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.589699][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.599092][ T4724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.600545][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.630735][ T4718] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.633765][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.634141][ T4718] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.639190][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.639521][ T4718] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.640766][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.641165][ T4718] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.642080][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.642901][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.642931][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.643081][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.643111][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.657969][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.657994][ T4724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.658092][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.658121][ T4724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.670309][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.670335][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.670398][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.670427][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.696816][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.700186][ T3353] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.700689][ T3353] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.701813][ T3353] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.702719][ T3353] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.703419][ T3353] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.703952][ T3353] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.721502][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.724126][ T4724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.724442][ T4714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.727501][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.727791][ T4714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.728779][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.729559][ T4714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.731847][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.740213][ T4714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.741256][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.742987][ T3353] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.743018][ T3353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.743405][ T3353] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.743425][ T3353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.747045][ T4724] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.757101][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.757127][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.757501][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.757521][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.775799][ T4719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.776779][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.782321][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.786052][ T4719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.787057][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.787354][ T4719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.788590][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.796635][ T4719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.797890][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.809855][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.812749][ T4718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.812762][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.827646][ T3353] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.827676][ T3353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.828241][ T3353] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.828262][ T3353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.851532][ T4713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.851547][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.880094][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.893246][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.900689][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.910328][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.910355][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.910694][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.910715][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.923620][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.931871][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.931899][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.943241][ T4714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.943255][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.956320][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.956347][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.021250][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.053496][ T4724] veth0_vlan: entered promiscuous mode [ 31.057575][ T4724] veth1_vlan: entered promiscuous mode [ 31.089942][ T4724] veth0_macvtap: entered promiscuous mode [ 31.096159][ T4724] veth1_macvtap: entered promiscuous mode [ 31.103424][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.104440][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.119742][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.156634][ T3480] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.156894][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.156921][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.177990][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.185763][ T3353] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.187942][ T4718] veth0_vlan: entered promiscuous mode [ 31.191165][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.195758][ T4718] veth1_vlan: entered promiscuous mode [ 31.201672][ T4718] veth0_macvtap: entered promiscuous mode [ 31.202733][ T4718] veth1_macvtap: entered promiscuous mode [ 31.208300][ T3646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.208311][ T3646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.228046][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.228057][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.233509][ T4713] veth0_vlan: entered promiscuous mode [ 31.241502][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.242487][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.263087][ T4713] veth1_vlan: entered promiscuous mode [ 31.299564][ T4713] veth0_macvtap: entered promiscuous mode [ 31.305555][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.308455][ T4713] veth1_macvtap: entered promiscuous mode [ 31.313770][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.320200][ T4719] veth0_vlan: entered promiscuous mode [ 31.322401][ T3796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.322580][ T4719] veth1_vlan: entered promiscuous mode [ 31.337907][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.338870][ T4724] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.355155][ T3353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.355325][ T3353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.355343][ T3353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.355359][ T3353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.355375][ T3353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.355391][ T3353] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.355406][ T3353] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.357817][ T4719] veth0_macvtap: entered promiscuous mode [ 31.358847][ T4719] veth1_macvtap: entered promiscuous mode [ 31.380684][ T4906] FAULT_INJECTION: forcing a failure. [ 31.380684][ T4906] name failslab, interval 1, probability 0, space 0, times 1 [ 31.380701][ T4906] CPU: 1 UID: 0 PID: 4906 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT [ 31.380711][ T4906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 31.380717][ T4906] Call trace: [ 31.380719][ T4906] show_stack+0x2c/0x3c (C) [ 31.380735][ T4906] __dump_stack+0x30/0x40 [ 31.380743][ T4906] dump_stack_lvl+0xd8/0x12c [ 31.380751][ T4906] dump_stack+0x1c/0x28 [ 31.380759][ T4906] should_fail_ex+0x3fc/0x570 [ 31.380773][ T4906] should_failslab+0xc4/0x120 [ 31.380782][ T4906] __kmalloc_cache_noprof+0x94/0x5fc [ 31.380791][ T4906] smk_cipso_doi+0x1c8/0x4c8 [ 31.380803][ T4906] smk_write_doi+0xd8/0x160 [ 31.380814][ T4906] vfs_write+0x2a4/0xa0c [ 31.380823][ T4906] ksys_write+0x12c/0x228 [ 31.380831][ T4906] __arm64_sys_write+0x84/0x98 [ 31.380839][ T4906] invoke_syscall+0x98/0x244 [ 31.380848][ T4906] el0_svc_common+0xec/0x23c [ 31.380856][ T4906] do_el0_svc+0x4c/0x5c [ 31.380863][ T4906] el0_svc+0x60/0x1d8 [ 31.380874][ T4906] el0t_64_sync_handler+0x44/0x104 [ 31.380884][ T4906] el0t_64_sync+0x198/0x19c [ 31.384118][ T4906] can0: slcan on ptm0. [ 31.404012][ T4714] veth0_vlan: entered promiscuous mode [ 31.409442][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.409452][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.417413][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.421699][ T3353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.421709][ T3353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.423593][ T4714] veth1_vlan: entered promiscuous mode [ 31.441076][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.464967][ T4905] can0 (unregistered): slcan off ptm0. [ 31.470535][ T4714] veth0_macvtap: entered promiscuous mode [ 31.475480][ T3353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.475492][ T3353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.476493][ T3353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.477069][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.477113][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.477143][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.498775][ T4714] veth1_macvtap: entered promiscuous mode [ 31.502055][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.503029][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.527243][ T3480] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.527293][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.527301][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.527391][ T3480] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.545817][ T3796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.545829][ T3796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.553058][ T4910] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 31.553130][ T4910] block device autoloading is deprecated and will be removed. [ 31.563843][ T4911] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 31.563855][ T4911] block device autoloading is deprecated and will be removed. [ 31.570575][ T3353] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.570889][ T3353] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.570918][ T3353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.570925][ T3353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.600369][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.600381][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.602450][ T3353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.602461][ T3353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.631422][ T4910] [ 31.631947][ T4910] ====================================================== [ 31.633389][ T4910] WARNING: possible circular locking dependency detected [ 31.634881][ T4910] syzkaller #0 Not tainted [ 31.635880][ T4910] ------------------------------------------------------ [ 31.637498][ T4910] syz.2.6/4910 is trying to acquire lock: [ 31.638735][ T4910] ffff800089e4c0e0 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x3c/0x158 [ 31.640741][ T4910] [ 31.640741][ T4910] but task is already holding lock: [ 31.642385][ T4910] ffff0000ccd28358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x4c/0xd8 [ 31.644596][ T4910] [ 31.644596][ T4910] which lock already depends on the new lock. [ 31.644596][ T4910] [ 31.646742][ T4910] [ 31.646742][ T4910] the existing dependency chain (in reverse order) is: [ 31.648434][ T4910] [ 31.648434][ T4910] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 31.650057][ T4910] __mutex_lock+0x164/0x10b8 [ 31.651113][ T4910] mutex_lock_nested+0x24/0x30 [ 31.652176][ T4910] md_alloc+0x670/0xa18 [ 31.653177][ T4910] md_alloc_and_put+0x28/0x84 [ 31.654294][ T4910] md_probe+0x6c/0x88 [ 31.655259][ T4910] blk_probe_dev+0x12c/0x158 [ 31.656271][ T4910] blk_request_module+0x24/0xc0 [ 31.657386][ T4910] blkdev_get_no_open+0x4c/0xf8 [ 31.658547][ T4910] blkdev_open+0xfc/0x408 [ 31.659580][ T4910] do_dentry_open+0x5bc/0xfb4 [ 31.660706][ T4910] vfs_open_consume+0x54/0x2ec [ 31.661840][ T4910] path_openat+0x1098/0x1910 [ 31.662974][ T4910] do_file_open+0x1c8/0x2e8 [ 31.664008][ T4910] do_sys_openat2+0x114/0x1ec [ 31.665034][ T4910] do_sys_open+0xb0/0xe0 [ 31.665996][ T4910] __arm64_sys_openat+0xa8/0xc4 [ 31.667015][ T4910] invoke_syscall+0x98/0x244 [ 31.668127][ T4910] el0_svc_common+0xec/0x23c [ 31.669238][ T4910] do_el0_svc+0x4c/0x5c [ 31.670216][ T4910] el0_svc+0x60/0x1d8 [ 31.671115][ T4910] el0t_64_sync_handler+0x44/0x104 [ 31.672282][ T4910] el0t_64_sync+0x198/0x19c [ 31.673333][ T4910] [ 31.673333][ T4910] -> #1 (disks_mutex){+.+.}-{4:4}: [ 31.674801][ T4910] __mutex_lock+0x164/0x10b8 [ 31.675809][ T4910] mutex_lock_nested+0x24/0x30 [ 31.676848][ T4910] md_alloc+0x54/0xa18 [ 31.677781][ T4910] md_alloc_and_put+0x28/0x84 [ 31.678818][ T4910] md_probe+0x6c/0x88 [ 31.679724][ T4910] blk_probe_dev+0x12c/0x158 [ 31.680298][ T4923] openvswitch: netlink: EtherType 0 is less than min 600 [ 31.682088][ T4910] blk_request_module+0x24/0xc0 [ 31.683142][ T4910] blkdev_get_no_open+0x4c/0xf8 [ 31.684191][ T4910] blkdev_open+0xfc/0x408 [ 31.685223][ T4910] do_dentry_open+0x5bc/0xfb4 [ 31.686360][ T4910] vfs_open_consume+0x54/0x2ec [ 31.687509][ T4910] path_openat+0x1098/0x1910 [ 31.688633][ T4910] do_file_open+0x1c8/0x2e8 [ 31.689727][ T4910] do_sys_openat2+0x114/0x1ec [ 31.690372][ T4923] FAULT_INJECTION: forcing a failure. [ 31.690372][ T4923] name fail_futex, interval 1, probability 0, space 0, times 1 [ 31.690387][ T4923] CPU: 1 UID: 0 PID: 4923 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT [ 31.690397][ T4923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 31.690402][ T4923] Call trace: [ 31.690405][ T4923] show_stack+0x2c/0x3c (C) [ 31.690418][ T4923] __dump_stack+0x30/0x40 [ 31.690426][ T4923] dump_stack_lvl+0xd8/0x12c [ 31.690433][ T4923] dump_stack+0x1c/0x28 [ 31.690440][ T4923] should_fail_ex+0x3fc/0x570 [ 31.690454][ T4923] should_fail+0x14/0x24 [ 31.690466][ T4923] get_futex_key+0x1e0/0x118c [ 31.690476][ T4923] futex_wait_setup+0x58/0x674 [ 31.690488][ T4923] __futex_wait+0x11c/0x2b8 [ 31.690499][ T4923] futex_wait+0x108/0x2c0 [ 31.690510][ T4923] do_futex+0x320/0x378 [ 31.690520][ T4923] __arm64_sys_futex+0x2e4/0x418 [ 31.690531][ T4923] invoke_syscall+0x98/0x244 [ 31.690539][ T4923] el0_svc_common+0xec/0x23c [ 31.690546][ T4923] do_el0_svc+0x4c/0x5c [ 31.690554][ T4923] el0_svc+0x60/0x1d8 [ 31.690563][ T4923] el0t_64_sync_handler+0x44/0x104 [ 31.690572][ T4923] el0t_64_sync+0x198/0x19c [ 31.692867][ T4923] can0: slcan on ptm0. [ 31.704592][ T4721] Bluetooth: hci4: command tx timeout [ 31.704611][ T4721] Bluetooth: hci3: command tx timeout [ 31.704623][ T4721] Bluetooth: hci1: command tx timeout [ 31.704634][ T4721] Bluetooth: hci2: command tx timeout [ 31.720958][ T4910] do_sys_open+0xb0/0xe0 [ 31.721952][ T4910] __arm64_sys_openat+0xa8/0xc4 [ 31.723122][ T4910] invoke_syscall+0x98/0x244 [ 31.724246][ T4910] el0_svc_common+0xec/0x23c [ 31.725384][ T4910] do_el0_svc+0x4c/0x5c [ 31.726377][ T4910] el0_svc+0x60/0x1d8 [ 31.727295][ T4910] el0t_64_sync_handler+0x44/0x104 [ 31.728469][ T4910] el0t_64_sync+0x198/0x19c [ 31.729558][ T4910] [ 31.729558][ T4910] -> #0 (major_names_lock){+.+.}-{4:4}: [ 31.731243][ T4910] __lock_acquire+0x1660/0x2b08 [ 31.732423][ T4910] lock_acquire+0x13c/0x320 [ 31.733466][ T4910] __mutex_lock+0x164/0x10b8 [ 31.734492][ T4910] mutex_lock_nested+0x24/0x30 [ 31.735574][ T4910] blk_probe_dev+0x3c/0x158 [ 31.736657][ T4910] blk_request_module+0x24/0xc0 [ 31.737826][ T4910] blkdev_get_no_open+0x4c/0xf8 [ 31.739000][ T4910] bdev_file_open_by_dev+0x80/0x1d8 [ 31.740248][ T4910] md_import_device+0xfc/0x354 [ 31.741412][ T4910] md_add_new_disk+0x24c/0x144c [ 31.742596][ T4910] md_ioctl+0x1d78/0x23e4 [ 31.743671][ T4910] blkdev_ioctl+0x574/0x904 [ 31.744751][ T4910] __arm64_sys_ioctl+0x154/0x1cc [ 31.745925][ T4910] invoke_syscall+0x98/0x244 [ 31.747045][ T4910] el0_svc_common+0xec/0x23c [ 31.748170][ T4910] do_el0_svc+0x4c/0x5c [ 31.749182][ T4910] el0_svc+0x60/0x1d8 [ 31.750161][ T4910] el0t_64_sync_handler+0x44/0x104 [ 31.751367][ T4910] el0t_64_sync+0x198/0x19c [ 31.752431][ T4910] [ 31.752431][ T4910] other info that might help us debug this: [ 31.752431][ T4910] [ 31.754601][ T4910] Chain exists of: [ 31.754601][ T4910] major_names_lock --> disks_mutex --> &mddev->reconfig_mutex [ 31.754601][ T4910] [ 31.757608][ T4910] Possible unsafe locking scenario: [ 31.757608][ T4910] [ 31.759304][ T4910] CPU0 CPU1 [ 31.760529][ T4910] ---- ---- [ 31.761758][ T4910] lock(&mddev->reconfig_mutex); [ 31.762947][ T4910] lock(disks_mutex); [ 31.764375][ T4910] lock(&mddev->reconfig_mutex); [ 31.766048][ T4910] lock(major_names_lock); [ 31.767080][ T4910] [ 31.767080][ T4910] *** DEADLOCK *** [ 31.767080][ T4910] [ 31.768911][ T4910] locks held by syz.2.6/4910: 1, last CPU#0: [ 31.770287][ T4910] #0: ffff0000ccd28358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x4c/0xd8 [ 31.772696][ T4910] [ 31.772696][ T4910] stack backtrace: [ 31.774005][ T4910] CPU: 0 UID: 0 PID: 4910 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT [ 31.775924][ T4910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 31.778159][ T4910] Call trace: [ 31.778906][ T4910] show_stack+0x2c/0x3c (C) [ 31.779951][ T4910] __dump_stack+0x30/0x40 [ 31.780948][ T4910] dump_stack_lvl+0xd8/0x12c [ 31.782003][ T4910] dump_stack+0x1c/0x28 [ 31.782941][ T4910] print_circular_bug+0x328/0x330 [ 31.784016][ T4910] check_noncircular+0x158/0x174 [ 31.785067][ T4910] __lock_acquire+0x1660/0x2b08 [ 31.786105][ T4910] lock_acquire+0x13c/0x320 [ 31.787060][ T4910] __mutex_lock+0x164/0x10b8 [ 31.788029][ T4910] mutex_lock_nested+0x24/0x30 [ 31.789001][ T4910] blk_probe_dev+0x3c/0x158 [ 31.789903][ T4910] blk_request_module+0x24/0xc0 [ 31.791024][ T4910] blkdev_get_no_open+0x4c/0xf8 [ 31.792096][ T4910] bdev_file_open_by_dev+0x80/0x1d8 [ 31.793239][ T4910] md_import_device+0xfc/0x354 [ 31.794240][ T4910] md_add_new_disk+0x24c/0x144c [ 31.795274][ T4910] md_ioctl+0x1d78/0x23e4 [ 31.796157][ T4910] blkdev_ioctl+0x574/0x904 [ 31.797078][ T4910] __arm64_sys_ioctl+0x154/0x1cc [ 31.797991][ T4910] invoke_syscall+0x98/0x244 [ 31.798911][ T4910] el0_svc_common+0xec/0x23c [ 31.799789][ T4910] do_el0_svc+0x4c/0x5c [ 31.800608][ T4910] el0_svc+0x60/0x1d8 [ 31.801374][ T4910] el0t_64_sync_handler+0x44/0x104 [ 31.802390][ T4910] el0t_64_sync+0x198/0x19c [ 31.804591][ T4716] Bluetooth: hci0: command tx timeout [ 31.827303][ T4910] md: could not open device unknown-block(0,0). [ 31.827328][ T4910] md: md_import_device returned -6 [ 31.853655][ T4911] md: could not open device unknown-block(0,0). [ 31.853679][ T4911] md: md_import_device returned -6 [ 31.868647][ T4924] md: could not open device unknown-block(0,0). [ 31.868668][ T4924] md: md_import_device returned -6 [ 31.876174][ T4922] can0 (unregistered): slcan off ptm0. [ 31.905750][ T4911] md: md2 stopped. [ 33.784518][ T4716] Bluetooth: hci2: command tx timeout [ 33.784532][ T4721] Bluetooth: hci1: command tx timeout [ 33.784542][ T4716] Bluetooth: hci3: command tx timeout [ 33.784551][ T4721] Bluetooth: hci4: command tx timeout [ 33.864508][ T4722] Bluetooth: hci0: command tx timeout [ 35.865052][ T4722] Bluetooth: hci4: command tx timeout [ 35.865066][ T4716] Bluetooth: hci3: command tx timeout [ 35.865075][ T4722] Bluetooth: hci2: command tx timeout [ 35.865095][ T4716] Bluetooth: hci1: command tx timeout [ 35.944763][ T4722] Bluetooth: hci0: command tx timeout [ 37.944510][ T4722] Bluetooth: hci1: command tx timeout [ 37.944521][ T4721] Bluetooth: hci2: command tx timeout [ 37.944534][ T4722] Bluetooth: hci3: command tx timeout [ 37.944540][ T4721] Bluetooth: hci4: command tx timeout [ 38.024769][ T4716] Bluetooth: hci0: command tx timeout [ 41.010531][ T4842] rxe_eth0 speed is unknown, defaulting to 1000