last executing test programs: 3.331044043s ago: executing program 3 (id=4): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) socket$packet(0x11, 0x2, 0x300) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = accept4$x25(r0, &(0x7f0000000700)={0x9, @remote}, &(0x7f0000000740)=0x12, 0x800) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000780)) bind$tipc(r2, &(0x7f0000000200)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0xd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000380)={0x30, r5, 0x1, 0x70bd25, 0x25dfdc02, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0xfffffffffffffe01, 0x8, '\x00', 0x0, &(0x7f0000000000)=[0x0]}) bind$inet6(r1, &(0x7f00000005c0)={0xa, 0x4e23, 0x2, @empty, 0x2}, 0x1c) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000040)=""/165) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101441, 0x146) fallocate(r9, 0x20, 0x0, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='cachefiles_io_error\x00', r9}, 0x18) 2.950057092s ago: executing program 0 (id=1): r0 = io_uring_setup(0x7982, &(0x7f0000000100)={0x0, 0x89ba, 0x0, 0x2, 0x24f}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001800)={0xffff0001, 0x0, &(0x7f0000000580)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1) 2.729131631s ago: executing program 0 (id=6): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x12, r0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 2.429420448s ago: executing program 0 (id=7): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x58, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x893}, 0x2404c084) 1.774315845s ago: executing program 0 (id=8): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) 410.241958ms ago: executing program 3 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x14, 0x511, 0x0, 0x0, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [], [0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) read$FUSE(r4, &(0x7f0000004080)={0x2020}, 0x2020) 409.056699ms ago: executing program 0 (id=10): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fb", 0x42}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 317.953312ms ago: executing program 2 (id=3): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x20, 0x0, 0x0, 0x0) 176.533986ms ago: executing program 0 (id=11): syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x1b0, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x7, 0x1, 0x6, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xda, 0x4}}}}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=2): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.240' (ED25519) to the list of known hosts. [ 92.071101][ T1891] cfg80211: failed to load regulatory.db [ 92.180176][ T5823] cgroup: Unknown subsys name 'net' [ 92.391814][ T5823] cgroup: Unknown subsys name 'cpuset' [ 92.455548][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.430933][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.510017][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.513987][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.522459][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.529725][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.530517][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.538738][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.540324][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.542345][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.545445][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.546880][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.549885][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.553162][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.554248][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.556300][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.557581][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.562148][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.565383][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.567350][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.567706][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.570041][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.571121][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.571750][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.573124][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.573576][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.746699][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.802655][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 98.853243][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 98.923191][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 99.016368][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 99.191899][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 99.586569][ T5153] Bluetooth: hci0: command tx timeout [ 99.779084][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.781695][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.782283][ T5835] bridge_slave_0: entered allmulticast mode [ 99.784438][ T5835] bridge_slave_0: entered promiscuous mode [ 99.824984][ T5846] Bluetooth: hci3: command tx timeout [ 99.825041][ T5850] Bluetooth: hci4: command tx timeout [ 99.825265][ T5846] Bluetooth: hci2: command tx timeout [ 99.825396][ T5153] Bluetooth: hci1: command tx timeout [ 99.979604][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.979737][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.979906][ T5835] bridge_slave_1: entered allmulticast mode [ 99.981846][ T5835] bridge_slave_1: entered promiscuous mode [ 100.070120][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.070264][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.070483][ T5836] bridge_slave_0: entered allmulticast mode [ 100.073269][ T5836] bridge_slave_0: entered promiscuous mode [ 100.327656][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.327808][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.328294][ T5836] bridge_slave_1: entered allmulticast mode [ 100.331442][ T5836] bridge_slave_1: entered promiscuous mode [ 100.360160][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.360329][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.360634][ T5837] bridge_slave_0: entered allmulticast mode [ 100.363892][ T5837] bridge_slave_0: entered promiscuous mode [ 100.457898][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.458050][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.458290][ T5845] bridge_slave_0: entered allmulticast mode [ 100.461287][ T5845] bridge_slave_0: entered promiscuous mode [ 100.616165][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.616287][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.616450][ T5837] bridge_slave_1: entered allmulticast mode [ 100.618456][ T5837] bridge_slave_1: entered promiscuous mode [ 100.624100][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.624569][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.637906][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.638614][ T5845] bridge_slave_1: entered allmulticast mode [ 100.641933][ T5845] bridge_slave_1: entered promiscuous mode [ 100.881522][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.971325][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.971602][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.971762][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.972022][ T5840] bridge_slave_0: entered allmulticast mode [ 100.976345][ T5840] bridge_slave_0: entered promiscuous mode [ 101.292123][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.292447][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.292560][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.292697][ T5840] bridge_slave_1: entered allmulticast mode [ 101.294601][ T5840] bridge_slave_1: entered promiscuous mode [ 101.310155][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.411464][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.579356][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.581381][ T5835] team0: Port device team_slave_0 added [ 101.588424][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.665867][ T5153] Bluetooth: hci0: command tx timeout [ 101.848902][ T5835] team0: Port device team_slave_1 added [ 101.905087][ T5839] Bluetooth: hci1: command tx timeout [ 101.905125][ T5839] Bluetooth: hci3: command tx timeout [ 101.905151][ T5839] Bluetooth: hci2: command tx timeout [ 101.905348][ T5153] Bluetooth: hci4: command tx timeout [ 101.958780][ T5836] team0: Port device team_slave_0 added [ 101.971093][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.242884][ T5836] team0: Port device team_slave_1 added [ 102.253454][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.459216][ T5837] team0: Port device team_slave_0 added [ 102.529605][ T5845] team0: Port device team_slave_0 added [ 102.668624][ T5837] team0: Port device team_slave_1 added [ 102.670531][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.670547][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.670574][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.682265][ T5845] team0: Port device team_slave_1 added [ 102.958593][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.958608][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.958628][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.090247][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.090262][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.090281][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.092859][ T5840] team0: Port device team_slave_0 added [ 103.290386][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.290407][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.290448][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.293878][ T5840] team0: Port device team_slave_1 added [ 103.305441][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.305462][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.305504][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.423558][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.423576][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.423596][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.537071][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.537092][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.537121][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.539511][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.539523][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.539542][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.746713][ T5153] Bluetooth: hci0: command tx timeout [ 103.777547][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.777566][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.777592][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.967391][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.967409][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.967438][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.990666][ T5835] hsr_slave_0: entered promiscuous mode [ 103.992390][ T5835] hsr_slave_1: entered promiscuous mode [ 103.994833][ T5153] Bluetooth: hci4: command tx timeout [ 103.994868][ T5153] Bluetooth: hci2: command tx timeout [ 103.994893][ T5153] Bluetooth: hci3: command tx timeout [ 103.994916][ T5153] Bluetooth: hci1: command tx timeout [ 104.297934][ T5836] hsr_slave_0: entered promiscuous mode [ 104.299275][ T5836] hsr_slave_1: entered promiscuous mode [ 104.300515][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 104.300605][ T5836] Cannot create hsr debugfs directory [ 104.451014][ T5837] hsr_slave_0: entered promiscuous mode [ 104.452440][ T5837] hsr_slave_1: entered promiscuous mode [ 104.453248][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 104.453266][ T5837] Cannot create hsr debugfs directory [ 104.546642][ T5845] hsr_slave_0: entered promiscuous mode [ 104.549125][ T5845] hsr_slave_1: entered promiscuous mode [ 104.549805][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 104.549830][ T5845] Cannot create hsr debugfs directory [ 105.033816][ T5840] hsr_slave_0: entered promiscuous mode [ 105.035423][ T5840] hsr_slave_1: entered promiscuous mode [ 105.036785][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 105.036819][ T5840] Cannot create hsr debugfs directory [ 105.827302][ T5839] Bluetooth: hci0: command tx timeout [ 106.066275][ T5839] Bluetooth: hci1: command tx timeout [ 106.066307][ T5839] Bluetooth: hci3: command tx timeout [ 106.066342][ T5839] Bluetooth: hci2: command tx timeout [ 106.066364][ T5839] Bluetooth: hci4: command tx timeout [ 106.627675][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.677941][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.712500][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.751980][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.892172][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.931719][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.978926][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.036606][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.194304][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.249587][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.309298][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.382195][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.546257][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.608355][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.642012][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.699729][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.879865][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.880187][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.927336][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.983130][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.031991][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.140804][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.163182][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.200469][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.201532][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.263084][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.263244][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.330338][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.388063][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.388291][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.430941][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.471087][ T764] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.471353][ T764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.587064][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.648318][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.648556][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.673135][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.729885][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.730173][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.857671][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.900057][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.938529][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.944976][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.023859][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.024026][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.132366][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.226405][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.226567][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.303027][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.303313][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.379324][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.567836][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.808507][ T5835] veth0_vlan: entered promiscuous mode [ 109.917710][ T5835] veth1_vlan: entered promiscuous mode [ 110.092073][ T5836] veth0_vlan: entered promiscuous mode [ 110.127950][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.179581][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.191839][ T5836] veth1_vlan: entered promiscuous mode [ 110.214083][ T5835] veth0_macvtap: entered promiscuous mode [ 110.254033][ T5835] veth1_macvtap: entered promiscuous mode [ 110.300969][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.383972][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.452530][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.463952][ T5836] veth0_macvtap: entered promiscuous mode [ 110.522306][ T5837] veth0_vlan: entered promiscuous mode [ 110.524056][ T5836] veth1_macvtap: entered promiscuous mode [ 110.571918][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.611076][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.614439][ T5845] veth0_vlan: entered promiscuous mode [ 110.619092][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.640576][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.656649][ T5837] veth1_vlan: entered promiscuous mode [ 110.760113][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.763023][ T5845] veth1_vlan: entered promiscuous mode [ 110.863335][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.983841][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.004407][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.016659][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.024648][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.151344][ T5837] veth0_macvtap: entered promiscuous mode [ 111.180497][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.180522][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.248728][ T5837] veth1_macvtap: entered promiscuous mode [ 111.254590][ T5845] veth0_macvtap: entered promiscuous mode [ 111.370390][ T5845] veth1_macvtap: entered promiscuous mode [ 111.420275][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.420296][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.506079][ T5840] veth0_vlan: entered promiscuous mode [ 111.513175][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.554346][ T764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.554367][ T764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.592429][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.617818][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.639238][ T5840] veth1_vlan: entered promiscuous mode [ 111.658118][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.740397][ T990] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.794942][ T990] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.796183][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.796202][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.811705][ T764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.863863][ T764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.881143][ T764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.900304][ T764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.950812][ T764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.954485][ T764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.024564][ T5954] nbd: must specify a size in bytes for the device [ 112.327256][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.400036][ T5840] veth0_macvtap: entered promiscuous mode [ 112.492370][ T5840] veth1_macvtap: entered promiscuous mode [ 112.504850][ T45] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 112.504917][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.512218][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.512239][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.531661][ T45] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 112.531706][ T45] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 112.531731][ T45] usb 4-1: Manufacturer: syz [ 112.615612][ T45] usb 4-1: config 0 descriptor?? [ 112.717774][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.717797][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.788983][ T45] rc_core: IR keymap rc-hauppauge not found [ 112.789004][ T45] Registered IR keymap rc-empty [ 112.814466][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.821944][ T45] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 112.863680][ T45] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 112.890988][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 112.995763][ T45] usb 4-1: USB disconnect, device number 2 [ 113.177882][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.179633][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.179652][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.265266][ T990] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.330399][ T143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.331131][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.331149][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.332971][ T143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.334463][ T143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.052303][ T5973] [ 115.052318][ T5973] ====================================================== [ 115.052328][ T5973] WARNING: possible circular locking dependency detected [ 115.052346][ T5973] syzkaller #0 Not tainted [ 115.052359][ T5973] ------------------------------------------------------ [ 115.052366][ T5973] syz.3.9/5973 is trying to acquire lock: [ 115.052379][ T5973] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 115.052447][ T5973] [ 115.052447][ T5973] but task is already holding lock: [ 115.052454][ T5973] ffffffff8efa6548 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 115.052504][ T5973] [ 115.052504][ T5973] which lock already depends on the new lock. [ 115.052504][ T5973] [ 115.052512][ T5973] [ 115.052512][ T5973] the existing dependency chain (in reverse order) is: [ 115.052520][ T5973] [ 115.052520][ T5973] -> #1 (smc_v4_hashinfo.lock){++.+}-{3:3}: [ 115.052548][ T5973] lock_acquire+0x120/0x360 [ 115.052575][ T5973] rt_write_lock+0x6a/0x110 [ 115.052594][ T5973] smc_hash_sk+0x8f/0x2a0 [ 115.052612][ T5973] smc_sk_init+0x5a1/0x7f0 [ 115.052631][ T5973] __smc_create+0x10d/0x280 [ 115.052657][ T5973] __sock_create+0x4b3/0x9f0 [ 115.052677][ T5973] __sys_socket+0xd7/0x1b0 [ 115.052703][ T5973] __x64_sys_socket+0x7a/0x90 [ 115.052724][ T5973] do_syscall_64+0xfa/0x3b0 [ 115.052750][ T5973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.052770][ T5973] [ 115.052770][ T5973] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 115.052797][ T5973] validate_chain+0xb9b/0x2140 [ 115.052826][ T5973] __lock_acquire+0xab9/0xd20 [ 115.052850][ T5973] reacquire_held_locks+0x127/0x1d0 [ 115.052879][ T5973] lock_release+0x1b4/0x3e0 [ 115.052903][ T5973] __local_bh_enable_ip+0x10c/0x270 [ 115.052926][ T5973] sock_i_ino+0xa9/0xc0 [ 115.052953][ T5973] smc_diag_dump_proto+0xa4c/0x1fb0 [ 115.052975][ T5973] smc_diag_dump+0x27/0xa0 [ 115.052994][ T5973] netlink_dump+0x6e4/0xe90 [ 115.053014][ T5973] __netlink_dump_start+0x5cb/0x7e0 [ 115.053035][ T5973] smc_diag_handler_dump+0x178/0x210 [ 115.053056][ T5973] sock_diag_rcv_msg+0x4c9/0x600 [ 115.053075][ T5973] netlink_rcv_skb+0x205/0x470 [ 115.053096][ T5973] netlink_unicast+0x843/0xa10 [ 115.053114][ T5973] netlink_sendmsg+0x805/0xb30 [ 115.053137][ T5973] __sock_sendmsg+0x219/0x270 [ 115.053155][ T5973] ____sys_sendmsg+0x508/0x820 [ 115.053181][ T5973] ___sys_sendmsg+0x21f/0x2a0 [ 115.053207][ T5973] __x64_sys_sendmsg+0x1a1/0x260 [ 115.053234][ T5973] do_syscall_64+0xfa/0x3b0 [ 115.053258][ T5973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.053277][ T5973] [ 115.053277][ T5973] other info that might help us debug this: [ 115.053277][ T5973] [ 115.053284][ T5973] Possible unsafe locking scenario: [ 115.053284][ T5973] [ 115.053290][ T5973] CPU0 CPU1 [ 115.053296][ T5973] ---- ---- [ 115.053302][ T5973] rlock(smc_v4_hashinfo.lock); [ 115.053316][ T5973] lock((softirq_ctrl.lock)); [ 115.053331][ T5973] lock(smc_v4_hashinfo.lock); [ 115.053346][ T5973] lock((softirq_ctrl.lock)); [ 115.053360][ T5973] [ 115.053360][ T5973] *** DEADLOCK *** [ 115.053360][ T5973] [ 115.053365][ T5973] 3 locks held by syz.3.9/5973: [ 115.053377][ T5973] #0: ffff888029a62908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 115.053428][ T5973] #1: ffffffff8efa6548 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 115.053480][ T5973] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 115.053527][ T5973] [ 115.053527][ T5973] stack backtrace: [ 115.053550][ T5973] CPU: 0 UID: 0 PID: 5973 Comm: syz.3.9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.053574][ T5973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.053595][ T5973] Call Trace: [ 115.053603][ T5973] [ 115.053612][ T5973] dump_stack_lvl+0x189/0x250 [ 115.053648][ T5973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.053680][ T5973] ? __pfx__printk+0x10/0x10 [ 115.053709][ T5973] ? print_lock_name+0xde/0x100 [ 115.053732][ T5973] print_circular_bug+0x2ee/0x310 [ 115.053753][ T5973] check_noncircular+0x134/0x160 [ 115.053791][ T5973] validate_chain+0xb9b/0x2140 [ 115.053823][ T5973] ? validate_chain+0x897/0x2140 [ 115.053864][ T5973] __lock_acquire+0xab9/0xd20 [ 115.053895][ T5973] reacquire_held_locks+0x127/0x1d0 [ 115.053927][ T5973] ? __local_bh_disable_ip+0x264/0x400 [ 115.053956][ T5973] lock_release+0x1b4/0x3e0 [ 115.053982][ T5973] ? __local_bh_enable_ip+0x100/0x270 [ 115.054010][ T5973] __local_bh_enable_ip+0x10c/0x270 [ 115.054035][ T5973] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 115.054065][ T5973] ? rt_read_unlock+0x65/0xa0 [ 115.054086][ T5973] ? sock_i_ino+0x24/0xc0 [ 115.054115][ T5973] sock_i_ino+0xa9/0xc0 [ 115.054145][ T5973] smc_diag_dump_proto+0xa4c/0x1fb0 [ 115.054181][ T5973] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 115.054206][ T5973] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 115.054243][ T5973] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 115.054278][ T5973] ? __phys_addr+0xd3/0x180 [ 115.054309][ T5973] ? __kasan_kmalloc_large+0x85/0xa0 [ 115.054338][ T5973] ? rcu_is_watching+0x15/0xb0 [ 115.054372][ T5973] ? rcu_is_watching+0x15/0xb0 [ 115.054403][ T5973] ? trace_kmalloc+0x1f/0xd0 [ 115.054429][ T5973] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 115.054463][ T5973] ? __build_skb_around+0x257/0x3e0 [ 115.054493][ T5973] smc_diag_dump+0x27/0xa0 [ 115.054516][ T5973] netlink_dump+0x6e4/0xe90 [ 115.054546][ T5973] ? __pfx_netlink_dump+0x10/0x10 [ 115.054568][ T5973] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 115.054597][ T5973] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.054635][ T5973] __netlink_dump_start+0x5cb/0x7e0 [ 115.054663][ T5973] smc_diag_handler_dump+0x178/0x210 [ 115.054700][ T5973] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 115.054722][ T5973] ? __pfx_smc_diag_dump+0x10/0x10 [ 115.054746][ T5973] ? sock_diag_lock_handler+0x19/0x290 [ 115.054767][ T5973] ? sock_diag_lock_handler+0x19/0x290 [ 115.054791][ T5973] sock_diag_rcv_msg+0x4c9/0x600 [ 115.054815][ T5973] netlink_rcv_skb+0x205/0x470 [ 115.054840][ T5973] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 115.054863][ T5973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.054891][ T5973] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.054920][ T5973] netlink_unicast+0x843/0xa10 [ 115.054945][ T5973] ? __pfx_netlink_unicast+0x10/0x10 [ 115.054968][ T5973] ? netlink_sendmsg+0x642/0xb30 [ 115.054991][ T5973] ? skb_put+0x11b/0x210 [ 115.055020][ T5973] netlink_sendmsg+0x805/0xb30 [ 115.055051][ T5973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.055081][ T5973] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.055101][ T5973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.055128][ T5973] __sock_sendmsg+0x219/0x270 [ 115.055151][ T5973] ____sys_sendmsg+0x508/0x820 [ 115.055185][ T5973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.055219][ T5973] ? import_iovec+0x74/0xa0 [ 115.055242][ T5973] ___sys_sendmsg+0x21f/0x2a0 [ 115.055273][ T5973] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.055321][ T5973] ? __fget_files+0x2a/0x420 [ 115.055351][ T5973] ? __fget_files+0x3a6/0x420 [ 115.055384][ T5973] __x64_sys_sendmsg+0x1a1/0x260 [ 115.055416][ T5973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.055452][ T5973] ? rcu_is_watching+0x15/0xb0 [ 115.055485][ T5973] ? do_syscall_64+0xbe/0x3b0 [ 115.055515][ T5973] do_syscall_64+0xfa/0x3b0 [ 115.055544][ T5973] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.055570][ T5973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.055591][ T5973] ? clear_bhb_loop+0x60/0xb0 [ 115.055616][ T5973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.055637][ T5973] RIP: 0033:0x7fbf241bebe9 [ 115.055666][ T5973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.055683][ T5973] RSP: 002b:00007fbf22405038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.055713][ T5973] RAX: ffffffffffffffda RBX: 00007fbf243e6090 RCX: 00007fbf241bebe9 [ 115.055726][ T5973] RDX: 0000000000008004 RSI: 0000200000000040 RDI: 0000000000000006 [ 115.055738][ T5973] RBP: 00007fbf24241e19 R08: 0000000000000000 R09: 0000000000000000 [ 115.055751][ T5973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.055762][ T5973] R13: 00007fbf243e6128 R14: 00007fbf243e6090 R15: 00007ffe8ff4a498 [ 115.055784][ T5973] [ 115.370856][ T764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.370877][ T764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.416831][ T5840] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 115.696396][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.696420][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.760168][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.905350][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 115.913024][ T31] usb 1-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 8 [ 115.913061][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 115.917684][ T31] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 115.917717][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.917744][ T31] usb 1-1: Product: syz [ 115.917761][ T31] usb 1-1: Manufacturer: syz [ 115.917778][ T31] usb 1-1: SerialNumber: syz [ 115.942838][ T5982] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.161175][ T31] usb 1-1: USB disconnect, device number 2