last executing test programs: 5.211153695s ago: executing program 4 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='add .yz0 2', 0xb) 4.800137491s ago: executing program 4 (id=109): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0x200000}, 0x0) close(0x3) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 4.326654139s ago: executing program 4 (id=113): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x8, @loopback}, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac141410bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c) 4.21402343s ago: executing program 4 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 4.007125482s ago: executing program 4 (id=118): io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0xc469, 0x0, 0x2, 0x296}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 3.223404396s ago: executing program 3 (id=131): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x58, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}}, 0x0) 2.734689956s ago: executing program 3 (id=139): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 2.631848622s ago: executing program 0 (id=140): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) memfd_secret(0x0) 2.412605895s ago: executing program 3 (id=143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 2.116325649s ago: executing program 1 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/11, 0xb}], 0x2, 0xf7, 0x6662) 1.819141885s ago: executing program 1 (id=147): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400003e000000850000002600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 1.666810475s ago: executing program 4 (id=148): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000a80)={0x1}, 0x8) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000ac0)={0x1, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) close(r0) 1.354226426s ago: executing program 32 (id=148): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000a80)={0x1}, 0x8) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000ac0)={0x1, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) close(r0) 1.33250422s ago: executing program 1 (id=150): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000030529bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000fbffffffffff1b0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1, @ANYBLOB="0a000100aa"], 0x50}}, 0x0) 1.325475911s ago: executing program 2 (id=151): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='bridge_slave_0\x00', 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac14141a}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.2023325s ago: executing program 3 (id=152): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0xa24c68e5f41c431f, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24028844}, 0x0) 1.147278511s ago: executing program 2 (id=153): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40000000}) 1.110705105s ago: executing program 0 (id=154): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x80000000, 0x4) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 1.023484413s ago: executing program 0 (id=155): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000008000000e47f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f00000001c0), 0x0}, 0x20) 933.206447ms ago: executing program 0 (id=156): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x100, 0x80000000, 0x2, 0x10, 0xe, 0x5, 0x79, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfd, 0xfffffffb, 0x9, 0x100003, 0x7fffffff, 0x489, 0x7, 0xfffffffd, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) pread64(r0, 0x0, 0x0, 0x8000) 890.729785ms ago: executing program 2 (id=157): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xcf52, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r4, 0xc, &(0x7f0000000140)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0xfc, '\x00', 0x0}}) io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 782.013286ms ago: executing program 1 (id=158): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) 654.366279ms ago: executing program 2 (id=159): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000ac0)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000d00)={r1, &(0x7f0000000d40), &(0x7f0000000d80)=@tcp=r0}, 0x20) 624.038793ms ago: executing program 3 (id=160): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x11, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4847}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500182c"], 0x0) 369.70609ms ago: executing program 0 (id=161): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x13, r1, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010) 361.44666ms ago: executing program 3 (id=162): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000140)=0xc203400) pwritev(r0, &(0x7f0000001c40)=[{&(0x7f0000001ec0)="e14fc3ab5b42", 0x6}, {&(0x7f0000001a40)='\f', 0x1}], 0x2, 0xffffffff, 0x8) 342.041874ms ago: executing program 2 (id=163): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000000c0), 0x4) 327.103701ms ago: executing program 1 (id=164): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x4, 0x400}, {&(0x7f00000004c0)=""/4096, 0x1000}, &(0x7f0000001500)=[{&(0x7f0000000140)=""/30, 0x1e}], 0x1, 0x61, 0x5}}], 0x48}, 0x0) 101.116287ms ago: executing program 0 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x440, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f00000051c0)='./file0\x00', &(0x7f0000005200)) 55.045524ms ago: executing program 1 (id=166): r0 = bpf$ITER_CREATE(0xb, &(0x7f00000005c0), 0x0) close(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000b80)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 0s ago: executing program 2 (id=167): mkdir(&(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='r', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. [ 86.240794][ T5567] cgroup: Unknown subsys name 'net' [ 86.501953][ T5567] cgroup: Unknown subsys name 'cpuset' [ 86.566890][ T5567] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.563959][ T5567] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.495930][ T5584] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.544234][ T5588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.571990][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.593491][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.607660][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.619211][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.635178][ T5593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.653677][ T5593] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.653854][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.684937][ T5593] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.690065][ T5593] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.690590][ T5593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.698011][ T5593] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.700005][ T5593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.704065][ T5593] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.715073][ T4897] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.718851][ T4897] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.722001][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.734460][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.747508][ T5599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.751671][ T4897] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.754968][ T4897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.784244][ T4897] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.784398][ T4897] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.785205][ T4897] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.926801][ T35] cfg80211: failed to load regulatory.db [ 93.031468][ T5578] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.032795][ T5585] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 93.034249][ T5580] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 93.057279][ T5582] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 93.062895][ T5578] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.095420][ T5578] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.180679][ T5579] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 93.670494][ T5578] infiniband rxe0: set active [ 93.670515][ T5578] infiniband rxe0: added rxe_eth0 [ 93.738288][ T35] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.796380][ T5578] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 93.796429][ T5578] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 93.796476][ T5578] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 93.818687][ T5593] Bluetooth: hci4: command tx timeout [ 93.896291][ T5593] Bluetooth: hci0: command tx timeout [ 93.896416][ T5593] Bluetooth: hci1: command tx timeout [ 93.975166][ T5578] RDS/IB: rxe0: added [ 93.975815][ T5578] smc: adding ib device rxe0 with port count 1 [ 93.976375][ T60] Bluetooth: hci3: command tx timeout [ 93.976640][ T60] Bluetooth: hci2: command tx timeout [ 94.000877][ T5578] smc: ib device rxe0 port 1 has no pnetid [ 94.062166][ T35] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.117093][ T5578] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.163091][ T35] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.225222][ T1000] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.551412][ T5578] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.103058][ T5578] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.366668][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.366765][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.366884][ T5580] bridge_slave_0: entered allmulticast mode [ 95.371335][ T5580] bridge_slave_0: entered promiscuous mode [ 95.450735][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.450880][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.450993][ T5580] bridge_slave_1: entered allmulticast mode [ 95.455988][ T5580] bridge_slave_1: entered promiscuous mode [ 95.520804][ T5578] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.603513][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.603649][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.603835][ T5582] bridge_slave_0: entered allmulticast mode [ 95.635771][ T5582] bridge_slave_0: entered promiscuous mode [ 95.679643][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.679802][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.680348][ T5579] bridge_slave_0: entered allmulticast mode [ 95.683212][ T5579] bridge_slave_0: entered promiscuous mode [ 95.758820][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.758952][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.759114][ T5582] bridge_slave_1: entered allmulticast mode [ 95.762464][ T5582] bridge_slave_1: entered promiscuous mode [ 95.802865][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.803122][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.803245][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.803411][ T5579] bridge_slave_1: entered allmulticast mode [ 95.816828][ T5579] bridge_slave_1: entered promiscuous mode [ 95.887627][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.897696][ T5593] Bluetooth: hci4: command tx timeout [ 95.937920][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.938104][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.938600][ T5585] bridge_slave_0: entered allmulticast mode [ 95.941345][ T5585] bridge_slave_0: entered promiscuous mode [ 95.977338][ T5593] Bluetooth: hci1: command tx timeout [ 95.977346][ T60] Bluetooth: hci0: command tx timeout [ 96.035655][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.035784][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.035942][ T5585] bridge_slave_1: entered allmulticast mode [ 96.056473][ T5593] Bluetooth: hci2: command tx timeout [ 96.056527][ T5593] Bluetooth: hci3: command tx timeout [ 96.070260][ T5585] bridge_slave_1: entered promiscuous mode [ 96.080710][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.124932][ T5579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.157800][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.160530][ T5580] team0: Port device team_slave_0 added [ 96.165172][ T5579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.211743][ T5580] team0: Port device team_slave_1 added [ 96.240713][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.304791][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.309285][ T5582] team0: Port device team_slave_0 added [ 96.313478][ T5578] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.363860][ T5579] team0: Port device team_slave_0 added [ 96.396993][ T5582] team0: Port device team_slave_1 added [ 96.400204][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.400219][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.400247][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.405498][ T5579] team0: Port device team_slave_1 added [ 96.499495][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.499515][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.499544][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.554976][ T5585] team0: Port device team_slave_0 added [ 96.653776][ T5585] team0: Port device team_slave_1 added [ 96.654516][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.654533][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.654558][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.707685][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.707707][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.707730][ T5579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.770709][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.770735][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.770769][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.109290][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.109305][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.109325][ T5579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.195726][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.195748][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.195765][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.258452][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.258474][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.258492][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.291904][ T5580] hsr_slave_0: entered promiscuous mode [ 97.295939][ T5580] hsr_slave_1: entered promiscuous mode [ 97.393251][ T5582] hsr_slave_0: entered promiscuous mode [ 97.394205][ T5582] hsr_slave_1: entered promiscuous mode [ 97.394949][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 97.395041][ T5582] Cannot create hsr debugfs directory [ 97.456280][ T5579] hsr_slave_0: entered promiscuous mode [ 97.457281][ T5579] hsr_slave_1: entered promiscuous mode [ 97.458723][ T5579] debugfs: 'hsr0' already exists in 'hsr' [ 97.458747][ T5579] Cannot create hsr debugfs directory [ 97.534999][ T5585] hsr_slave_0: entered promiscuous mode [ 97.535890][ T5585] hsr_slave_1: entered promiscuous mode [ 97.538136][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 97.538159][ T5585] Cannot create hsr debugfs directory [ 97.976196][ T60] Bluetooth: hci4: command tx timeout [ 98.056393][ T60] Bluetooth: hci0: command tx timeout [ 98.056429][ T60] Bluetooth: hci1: command tx timeout [ 98.146467][ T5593] Bluetooth: hci3: command tx timeout [ 98.146502][ T5593] Bluetooth: hci2: command tx timeout [ 98.577242][ T5580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.621992][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.641028][ T5580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.671847][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.688622][ T5580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.723923][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.753848][ T5580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.769720][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.840250][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.840413][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.840537][ T5578] bridge_slave_0: entered allmulticast mode [ 98.842077][ T5578] bridge_slave_0: entered promiscuous mode [ 98.875549][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.875676][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.875858][ T5578] bridge_slave_1: entered allmulticast mode [ 98.883283][ T5578] bridge_slave_1: entered promiscuous mode [ 98.965722][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.992806][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.994547][ T5579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.040965][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.061555][ T5579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.090836][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.121023][ T5579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.150238][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.152697][ T5578] team0: Port device team_slave_0 added [ 99.183465][ T5579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.211451][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.228106][ T5578] team0: Port device team_slave_1 added [ 99.312808][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.312823][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.312842][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.371100][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.371117][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.371143][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.506548][ T5585] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.550053][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.581343][ T5585] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.611541][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.629581][ T5578] hsr_slave_0: entered promiscuous mode [ 99.631425][ T5578] hsr_slave_1: entered promiscuous mode [ 99.632437][ T5578] debugfs: 'hsr0' already exists in 'hsr' [ 99.632460][ T5578] Cannot create hsr debugfs directory [ 99.634887][ T5585] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.679725][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.707586][ T5585] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.740151][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.056279][ T60] Bluetooth: hci4: command tx timeout [ 100.095738][ T5582] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.130103][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.136632][ T5593] Bluetooth: hci0: command tx timeout [ 100.136772][ T60] Bluetooth: hci1: command tx timeout [ 100.175107][ T5582] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.202535][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.227204][ T60] Bluetooth: hci2: command tx timeout [ 100.227239][ T60] Bluetooth: hci3: command tx timeout [ 100.232761][ T5582] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.272987][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.294176][ T5582] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.322204][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.462264][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.616041][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.665815][ T5578] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.700817][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.705977][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.725653][ T5578] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.770648][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.797889][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.798035][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.801413][ T5578] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.850670][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.869402][ T5578] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.901090][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.924621][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.924780][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.002491][ T5579] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.051151][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.053470][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.053618][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.116959][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.117150][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.193890][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.241307][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.254145][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.255271][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.340361][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.340625][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.477512][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.543617][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.543767][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.610009][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.610123][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.804366][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.949639][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.042864][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.043094][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.149512][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.149799][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.958542][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.089996][ T5579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.109223][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.359568][ T5580] veth0_vlan: entered promiscuous mode [ 103.421031][ T5579] veth0_vlan: entered promiscuous mode [ 103.422670][ T5585] veth0_vlan: entered promiscuous mode [ 103.455793][ T5580] veth1_vlan: entered promiscuous mode [ 103.486844][ T5579] veth1_vlan: entered promiscuous mode [ 103.503942][ T5585] veth1_vlan: entered promiscuous mode [ 103.585404][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.691488][ T5580] veth0_macvtap: entered promiscuous mode [ 103.723062][ T5579] veth0_macvtap: entered promiscuous mode [ 103.744668][ T5580] veth1_macvtap: entered promiscuous mode [ 103.755797][ T5585] veth0_macvtap: entered promiscuous mode [ 103.789371][ T5579] veth1_macvtap: entered promiscuous mode [ 103.794660][ T5585] veth1_macvtap: entered promiscuous mode [ 103.822607][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.865773][ T5743] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.899859][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.963409][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.983028][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.995757][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.090388][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.121734][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.122713][ T5582] veth0_vlan: entered promiscuous mode [ 104.352217][ T5582] veth1_vlan: entered promiscuous mode [ 105.163355][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.163383][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.244943][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.244973][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.304048][ T5582] veth0_macvtap: entered promiscuous mode [ 105.365858][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.365880][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.389734][ T5582] veth1_macvtap: entered promiscuous mode [ 105.433473][ T5578] veth0_vlan: entered promiscuous mode [ 105.459573][ T278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.459592][ T278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.491665][ T5578] veth1_vlan: entered promiscuous mode [ 105.511335][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.614620][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.674750][ T1027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.674771][ T1027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.721074][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.721095][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.758600][ T5580] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.038332][ T5578] veth0_macvtap: entered promiscuous mode [ 106.190131][ T5578] veth1_macvtap: entered promiscuous mode [ 106.406730][ T278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.406751][ T278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.460039][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.510300][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.567305][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.779389][ T278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.779411][ T278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.881159][ T1184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.398277][ T278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.399487][ T278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.399764][ T278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.400399][ T278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.400655][ T278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.491746][ T5734] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.767035][ T278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.767711][ T278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.816500][ T5734] usb 3-1: Using ep0 maxpacket: 8 [ 107.819928][ T5734] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 107.832112][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.832161][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.894068][ T5734] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 107.894096][ T5734] usb 3-1: config 179 has no interface number 0 [ 107.894141][ T5734] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 107.894171][ T5734] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 107.894213][ T5734] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.894262][ T5734] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 107.894288][ T5734] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 107.894334][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.105363][ T5816] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.633447][ T5813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.686604][ T5813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.909860][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.909880][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.110071][ T1027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.111501][ T1027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.111736][ T1027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.189657][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 109.189748][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 109.189777][ T5594] usb 3-1: USB disconnect, device number 2 [ 109.359909][ T1027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.384061][ T161] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.390324][ T1015] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.411812][ T1015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.564719][ T5844] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.691713][ T36] audit: type=1326 audit(1792495532.441:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5845 comm="syz.0.17" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcda0f8e559 code=0x0 [ 109.847399][ T1015] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.847831][ T1015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.946158][ T278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.948278][ T278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.136353][ T5876] Zero length message leads to an empty skb [ 111.258098][ T1015] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.258464][ T1015] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.306200][ T1015] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.306249][ T1015] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.859591][ T1160] IPVS: starting estimator thread 0... [ 112.956253][ T5905] IPVS: using max 7 ests per chain, 16800 per kthread [ 113.946199][ T5821] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.139187][ T5821] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.157332][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.157368][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.157393][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.157438][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.234569][ T5821] usb 5-1: config 0 descriptor?? [ 114.772891][ T5821] plantronics 0003:047F:FFFF.0001: collection stack underflow [ 114.772927][ T5821] plantronics 0003:047F:FFFF.0001: item 0 0 0 12 parsing failed [ 114.791803][ T5821] plantronics 0003:047F:FFFF.0001: parse failed [ 114.791923][ T5821] plantronics 0003:047F:FFFF.0001: probe with driver plantronics failed with error -22 [ 115.031277][ T5594] usb 5-1: USB disconnect, device number 2 [ 116.156232][ T5594] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.156236][ T35] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.328831][ T5594] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 116.330687][ T5594] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.330735][ T5594] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 116.330773][ T5594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.347034][ T35] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 116.366324][ T35] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.526320][ T5587] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.767044][ T5587] usb 2-1: Using ep0 maxpacket: 8 [ 116.768423][ T5587] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 116.837972][ T5587] usb 2-1: config 0 has no interfaces? [ 116.858167][ T5587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.858254][ T5587] usb 2-1: Product: syz [ 116.858271][ T5587] usb 2-1: Manufacturer: syz [ 116.858286][ T5587] usb 2-1: SerialNumber: syz [ 116.970957][ T5594] rtsx_usb 4-1:1.0: probe with driver rtsx_usb failed with error -22 [ 116.992415][ T5587] usb 2-1: config 0 descriptor?? [ 117.086283][ T5594] usb 4-1: USB disconnect, device number 2 [ 117.242150][ T5589] usb 2-1: USB disconnect, device number 2 [ 117.291082][ T35] usb 3-1: Firmware: major: 0, minor: 64, hardware type: UNKNOWN (183) [ 117.517630][ T35] usb 3-1: failed to fetch extended address, random address set [ 117.517736][ T35] usb 3-1: atusb_probe: initialization failed, error = -524 [ 117.518332][ T35] atusb 3-1:1.0: probe with driver atusb failed with error -524 [ 117.634901][ T35] usb 3-1: USB disconnect, device number 3 [ 118.041667][ T5997] netlink: 72 bytes leftover after parsing attributes in process `syz.4.73'. [ 118.763381][ T6011] netlink: 164 bytes leftover after parsing attributes in process `syz.0.80'. [ 118.782656][ T6011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.80'. [ 118.889979][ T5821] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.059127][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 119.060464][ T5821] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 119.061781][ T5821] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 119.061818][ T5821] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 119.061892][ T5821] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 119.061919][ T5821] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 119.061945][ T5821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.145026][ T5821] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 119.145052][ T5821] usb 5-1: Product: syz [ 119.145066][ T5821] usb 5-1: Manufacturer: syz [ 119.145079][ T5821] usb 5-1: SerialNumber: syz [ 119.204893][ T5821] usb 5-1: config 0 descriptor?? [ 119.264439][ T6023] kAFS: bad VL server IP address [ 119.277445][ T5821] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 119.431277][ T5821] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 119.675964][ T5821] usb 5-1: USB disconnect, device number 3 [ 119.676184][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 119.697633][ T6005] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 119.770320][ T5821] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 119.770999][ T6032] netlink: 40 bytes leftover after parsing attributes in process `syz.1.89'. [ 120.413692][ T60] block nbd0: Receive control failed (result -32) [ 120.413775][ T5593] block nbd0: Receive control failed (result -32) [ 120.905743][ T6048] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 121.286016][ T6055] netlink: 14 bytes leftover after parsing attributes in process `syz.1.97'. [ 121.661944][ T6064] bonding: no command found in bonding_masters - use +ifname or -ifname [ 121.956385][ T5313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.001135][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.126396][ T5313] usb 3-1: Using ep0 maxpacket: 16 [ 122.165852][ T5313] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 122.185960][ T5313] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 122.226429][ T5313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.226458][ T5313] usb 3-1: Product: syz [ 122.226473][ T5313] usb 3-1: Manufacturer: syz [ 122.226489][ T5313] usb 3-1: SerialNumber: syz [ 122.333366][ T5313] r8152-cfgselector 3-1: Unknown version 0x0000 [ 122.333403][ T5313] r8152-cfgselector 3-1: config 0 descriptor?? [ 122.864348][ T5589] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 123.718615][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 124.140573][ T6141] sd 0:0:1:0: PR command failed: 1026 [ 124.140615][ T6141] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 124.140643][ T6141] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 124.824966][ T6159] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.862076][ T6159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.862092][ T6159] IPv6: NLM_F_CREATE should be set when creating new route [ 124.862244][ T6159] IPv6: NLM_F_CREATE should be set when creating new route [ 124.862276][ T6159] IPv6: NLM_F_CREATE should be set when creating new route [ 124.877619][ T6159] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.142'. [ 125.263854][ T1015] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.469619][ T6169] kAFS: bad VL server IP address [ 125.511105][ T6162] pimreg0: tun_chr_ioctl cmd 1074025677 [ 125.511276][ T6162] pimreg0: linktype set to 0 [ 125.945075][ T6176] netlink: 11 bytes leftover after parsing attributes in process `syz.1.150'. [ 126.065236][ T1015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.281912][ T6189] dlm: non-version read from control device 4096 [ 126.359131][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.390960][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.394260][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.415614][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.418470][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.795803][ T1015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.191579][ T6218] ======================================================= [ 127.191579][ T6218] WARNING: The mand mount option has been deprecated and [ 127.191579][ T6218] and is ignored by this kernel. Remove the mand [ 127.191579][ T6218] option from the mount to silence this warning. [ 127.191579][ T6218] ======================================================= [ 127.372345][ T1015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.443101][ T5594] [ 127.445501][ T5594] ====================================================== [ 127.452533][ T5594] WARNING: possible circular locking dependency detected [ 127.459585][ T5594] syzkaller #0 Not tainted [ 127.464021][ T5594] ------------------------------------------------------ [ 127.471055][ T5594] kworker/0:5/5594 is trying to acquire lock: [ 127.477148][ T5594] ffffffff90a21a40 (rds_trans_sem){++++}-{4:4}, at: rds_trans_get_preferred+0x133/0x3c0 [ 127.486973][ T5594] [ 127.486973][ T5594] but task is already holding lock: [ 127.494364][ T5594] ffff88805ec22450 (&id_priv->handler_mutex/1){+.+.}-{4:4}, at: cma_ib_req_handler+0x2ddb/0x50d0 [ 127.504955][ T5594] [ 127.504955][ T5594] which lock already depends on the new lock. [ 127.504955][ T5594] [ 127.515370][ T5594] [ 127.515370][ T5594] the existing dependency chain (in reverse order) is: [ 127.524395][ T5594] [ 127.524395][ T5594] -> #2 (&id_priv->handler_mutex/1){+.+.}-{4:4}: [ 127.532937][ T5594] mutex_lock_nested+0x5a/0x1d0 [ 127.538325][ T5594] cma_ib_req_handler+0x2ddb/0x50d0 [ 127.544057][ T5594] cm_process_work+0x51/0x420 [ 127.549281][ T5594] cm_work_handler+0x96b2/0xdfa0 [ 127.554752][ T5594] process_scheduled_works+0xc3d/0x1630 [ 127.560838][ T5594] worker_thread+0xa47/0xfb0 [ 127.565966][ T5594] kthread+0x38b/0x470 [ 127.570573][ T5594] ret_from_fork+0x514/0xb70 [ 127.575696][ T5594] ret_from_fork_asm+0x1a/0x30 [ 127.580997][ T5594] [ 127.580997][ T5594] -> #1 (&id_priv->handler_mutex){+.+.}-{4:4}: [ 127.589343][ T5594] mutex_lock_nested+0x5a/0x1d0 [ 127.594770][ T5594] rdma_destroy_id+0x1b/0x30 [ 127.599914][ T5594] rds_ib_laddr_check+0x373/0x630 [ 127.605505][ T5594] rds_trans_get_preferred+0x179/0x3c0 [ 127.611528][ T5594] rds_bind+0x687/0x870 [ 127.616254][ T5594] __sys_bind+0x2e9/0x410 [ 127.621122][ T5594] __x64_sys_bind+0x7a/0x90 [ 127.626157][ T5594] do_syscall_64+0x166/0x520 [ 127.631313][ T5594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.637734][ T5594] [ 127.637734][ T5594] -> #0 (rds_trans_sem){++++}-{4:4}: [ 127.645217][ T5594] __lock_acquire+0x164c/0x2de0 [ 127.650627][ T5594] lock_acquire+0x115/0x350 [ 127.655681][ T5594] down_read+0x97/0x200 [ 127.660372][ T5594] rds_trans_get_preferred+0x133/0x3c0 [ 127.666375][ T5594] __rds_conn_create+0xa29/0x2230 [ 127.671943][ T5594] rds_conn_create+0x43/0x60 [ 127.677085][ T5594] rds_ib_cm_handle_connect+0x446/0x1120 [ 127.683254][ T5594] rds_rdma_cm_event_handler_cmn+0x691/0xa30 [ 127.689784][ T5594] cma_cm_event_handler+0xac/0x2c0 [ 127.695431][ T5594] cma_ib_req_handler+0x3443/0x50d0 [ 127.701162][ T5594] cm_process_work+0x51/0x420 [ 127.706408][ T5594] cm_work_handler+0x96b2/0xdfa0 [ 127.711910][ T5594] process_scheduled_works+0xc3d/0x1630 [ 127.717990][ T5594] worker_thread+0xa47/0xfb0 [ 127.723117][ T5594] kthread+0x38b/0x470 [ 127.727719][ T5594] ret_from_fork+0x514/0xb70 [ 127.732841][ T5594] ret_from_fork_asm+0x1a/0x30 [ 127.738141][ T5594] [ 127.738141][ T5594] other info that might help us debug this: [ 127.738141][ T5594] [ 127.748374][ T5594] Chain exists of: [ 127.748374][ T5594] rds_trans_sem --> &id_priv->handler_mutex --> &id_priv->handler_mutex/1 [ 127.748374][ T5594] [ 127.762822][ T5594] Possible unsafe locking scenario: [ 127.762822][ T5594] [ 127.770281][ T5594] CPU0 CPU1 [ 127.775696][ T5594] ---- ---- [ 127.781066][ T5594] lock(&id_priv->handler_mutex/1); [ 127.786373][ T5594] lock(&id_priv->handler_mutex); [ 127.794043][ T5594] lock(&id_priv->handler_mutex/1); [ 127.801895][ T5594] rlock(rds_trans_sem); [ 127.806243][ T5594] [ 127.806243][ T5594] *** DEADLOCK *** [ 127.806243][ T5594] [ 127.814394][ T5594] locks held by kworker/0:5/5594: 4, last CPU#0: [ 127.820730][ T5594] #0: ffff8880320a1138 ((wq_completion)ib_cm){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 127.831628][ T5594] #1: ffffc90005777c40 ((work_completion)(&(&work->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 127.844172][ T5594] #2: ffff888033de9450 (&id_priv->handler_mutex){+.+.}-{4:4}, at: cma_ib_req_handler+0x218b/0x50d0 [ 127.854977][ T5594] #3: ffff88805ec22450 (&id_priv->handler_mutex/1){+.+.}-{4:4}, at: cma_ib_req_handler+0x2ddb/0x50d0 [ 127.865955][ T5594] [ 127.865955][ T5594] stack backtrace: [ 127.871874][ T5594] CPU: 0 UID: 0 PID: 5594 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.881793][ T5594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 127.891868][ T5594] Workqueue: ib_cm cm_work_handler [ 127.897009][ T5594] Call Trace: [ 127.900298][ T5594] [ 127.903244][ T5594] dump_stack_lvl+0xe8/0x150 [ 127.907855][ T5594] print_circular_bug+0x2e2/0x300 [ 127.912886][ T5594] check_noncircular+0x12f/0x150 [ 127.917849][ T5594] __lock_acquire+0x164c/0x2de0 [ 127.922725][ T5594] lock_acquire+0x115/0x350 [ 127.927251][ T5594] ? rds_trans_get_preferred+0x133/0x3c0 [ 127.932915][ T5594] down_read+0x97/0x200 [ 127.937094][ T5594] ? rds_trans_get_preferred+0x133/0x3c0 [ 127.942741][ T5594] ? __pfx_down_read+0x10/0x10 [ 127.947517][ T5594] ? rds_cong_from_addr+0x347/0x360 [ 127.952741][ T5594] rds_trans_get_preferred+0x133/0x3c0 [ 127.958227][ T5594] __rds_conn_create+0xa29/0x2230 [ 127.963267][ T5594] ? __rds_conn_create+0x2d7/0x2230 [ 127.968504][ T5594] ? __pfx___rds_conn_create+0x10/0x10 [ 127.973989][ T5594] ? lockdep_unlock+0x5c/0xd0 [ 127.978680][ T5594] ? __lock_acquire+0x1511/0x2de0 [ 127.983720][ T5594] rds_conn_create+0x43/0x60 [ 127.988327][ T5594] rds_ib_cm_handle_connect+0x446/0x1120 [ 127.993979][ T5594] ? __pfx_rds_ib_cm_handle_connect+0x10/0x10 [ 128.000057][ T5594] ? do_raw_spin_lock+0x12b/0x2f0 [ 128.005105][ T5594] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 128.010932][ T5594] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 128.016236][ T5594] ? reacquire_held_locks+0x117/0x1a0 [ 128.021623][ T5594] rds_rdma_cm_event_handler_cmn+0x691/0xa30 [ 128.027626][ T5594] ? __pfx_rds_rdma_cm_event_handler_cmn+0x10/0x10 [ 128.034146][ T5594] ? trace_cm_event_handler+0x81/0x1f0 [ 128.039628][ T5594] ? __pfx_rds_rdma_cm_event_handler+0x10/0x10 [ 128.045797][ T5594] ? cma_listen_handler+0x100/0x160 [ 128.050999][ T5594] cma_cm_event_handler+0xac/0x2c0 [ 128.056141][ T5594] cma_ib_req_handler+0x3443/0x50d0 [ 128.061376][ T5594] ? check_path+0x21/0x40 [ 128.065710][ T5594] ? __pfx_cma_ib_req_handler+0x10/0x10 [ 128.071266][ T5594] ? __lock_acquire+0x747/0x2de0 [ 128.076232][ T5594] ? do_raw_spin_lock+0x12b/0x2f0 [ 128.081307][ T5594] cm_process_work+0x51/0x420 [ 128.086016][ T5594] cm_work_handler+0x96b2/0xdfa0 [ 128.090974][ T5594] ? __pfx_cm_work_handler+0x10/0x10 [ 128.096276][ T5594] ? lock_acquire+0x115/0x350 [ 128.100977][ T5594] ? rcu_is_watching+0x16/0xb0 [ 128.105767][ T5594] ? process_scheduled_works+0x97a/0x1630 [ 128.111505][ T5594] process_scheduled_works+0xc3d/0x1630 [ 128.117083][ T5594] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.123085][ T5594] ? assign_work+0x3cf/0x5d0 [ 128.127696][ T5594] worker_thread+0xa47/0xfb0 [ 128.132316][ T5594] ? __kthread_parkme+0x71/0x1f0 [ 128.137286][ T5594] kthread+0x38b/0x470 [ 128.141367][ T5594] ? __pfx_worker_thread+0x10/0x10 [ 128.146492][ T5594] ? __pfx_kthread+0x10/0x10 [ 128.151098][ T5594] ret_from_fork+0x514/0xb70 [ 128.155701][ T5594] ? __pfx_ret_from_fork+0x10/0x10 [ 128.160839][ T5594] ? __switch_to+0xc89/0x1420 [ 128.165542][ T5594] ? __pfx_kthread+0x10/0x10 [ 128.170136][ T5594] ret_from_fork_asm+0x1a/0x30 [ 128.174924][ T5594] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 128.313140][ T5821] RDS/IB: Active conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 128.536449][ T5593] Bluetooth: hci0: command tx timeout [ 128.536592][ T5821] RDS/IB: Passive conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 129.746415][ T1015] bridge_slave_1: left allmulticast mode [ 129.746444][ T1015] bridge_slave_1: left promiscuous mode [ 129.746639][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.926850][ T1015] bridge_slave_0: left allmulticast mode [ 129.926879][ T1015] bridge_slave_0: left promiscuous mode [ 129.927039][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.536860][ T1015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.617122][ T1015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.637864][ T1015] bond0 (unregistering): Released all slaves [ 130.677351][ T5242] 8021q: adding VLAN 0 to HW filter on device eth1 [ 131.128229][ T5242] 8021q: adding VLAN 0 to HW filter on device eth2 [ 131.538287][ T5242] 8021q: adding VLAN 0 to HW filter on device eth3 [ 131.926297][ T1015] hsr_slave_0: left promiscuous mode [ 131.966203][ T1015] hsr_slave_1: left promiscuous mode [ 131.966825][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.966840][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.010061][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.010079][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.076814][ T1015] veth1_macvtap: left promiscuous mode [ 132.076888][ T1015] veth0_macvtap: left promiscuous mode [ 132.076990][ T1015] veth1_vlan: left promiscuous mode [ 132.077058][ T1015] veth0_vlan: left promiscuous mode [ 132.626564][ T1015] team0 (unregistering): Port device team_slave_1 removed [ 132.666833][ T1015] team0 (unregistering): Port device team_slave_0 removed [ 132.757844][ T5242] 8021q: adding VLAN 0 to HW filter on device eth4 [ 132.858121][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.858173][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.528437][ T1015] IPVS: stop unused estimator thread 0... [ 133.748705][ T1015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.957794][ T1015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.167364][ T1015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.387678][ T1015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.787770][ T1015] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.882679][ T5242] 8021q: adding VLAN 0 to HW filter on device eth5 [ 135.069287][ T1015] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.347657][ T1015] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.368031][ T5242] 8021q: adding VLAN 0 to HW filter on device eth6 [ 135.687575][ T1015] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.727356][ T5242] 8021q: adding VLAN 0 to HW filter on device eth7 [ 136.137311][ T1015] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.177403][ T5242] 8021q: adding VLAN 0 to HW filter on device eth8 [ 136.418842][ T1015] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.467312][ T5242] 8021q: adding VLAN 0 to HW filter on device eth9 [ 136.707732][ T1015] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.792511][ T5242] 8021q: adding VLAN 0 to HW filter on device eth10 [ 137.007814][ T1015] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.096995][ T5242] 8021q: adding VLAN 0 to HW filter on device eth11