last executing test programs: 1.4466641s ago: executing program 3 (id=4): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 1.177253189s ago: executing program 2 (id=3): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0xdfff8880b860a000) 933.490251ms ago: executing program 2 (id=6): unshare(0x400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) 631.228391ms ago: executing program 3 (id=7): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000001c0)={0x28, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x8, 0x28fd6f}) 508.499726ms ago: executing program 3 (id=8): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@gettfilter={0x24}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050400aeff0f608e222b6933d100", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x63, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xbe}, [@NDA_LLADDR={0xa, 0x2, @random="63ccc7696324"}]}, 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d"], 0x28}}, 0x0) 201.226943ms ago: executing program 3 (id=9): syz_emit_vhci(0x0, 0x0) 78.067144ms ago: executing program 3 (id=10): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, 0x0, 0x0) 0s ago: executing program 2 (id=11): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000800)={'\x00', 0x11, 0x8, 0x9ff2, 0x2000000, 0x5}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.159' (ED25519) to the list of known hosts. [ 141.848479][ T5819] cgroup: Unknown subsys name 'net' [ 141.977770][ T5819] cgroup: Unknown subsys name 'cpuset' [ 141.986010][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 143.688627][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 148.251126][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.272878][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.275732][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.283071][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.287955][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.295649][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.302534][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.310007][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.316880][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.322674][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.337295][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.337330][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.345681][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.352865][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.359340][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.367233][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.373950][ T5859] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.380112][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.386743][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.394804][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.401217][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.407953][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.414769][ T5859] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 148.421832][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.428850][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.442024][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.442823][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.461821][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.482830][ T5859] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.492497][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.950630][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 149.023278][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 149.046448][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 149.088687][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 149.102357][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 149.228807][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.236839][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.244685][ T5853] bridge_slave_0: entered allmulticast mode [ 149.251482][ T5853] bridge_slave_0: entered promiscuous mode [ 149.260730][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.268028][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.275373][ T5842] bridge_slave_0: entered allmulticast mode [ 149.282043][ T5842] bridge_slave_0: entered promiscuous mode [ 149.313601][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.320873][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.328219][ T5853] bridge_slave_1: entered allmulticast mode [ 149.335128][ T5853] bridge_slave_1: entered promiscuous mode [ 149.342154][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.349442][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.356674][ T5842] bridge_slave_1: entered allmulticast mode [ 149.363323][ T5842] bridge_slave_1: entered promiscuous mode [ 149.425801][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.433941][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.441175][ T5841] bridge_slave_0: entered allmulticast mode [ 149.448343][ T5841] bridge_slave_0: entered promiscuous mode [ 149.459139][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.470826][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.518346][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.525761][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.532941][ T5841] bridge_slave_1: entered allmulticast mode [ 149.540080][ T5841] bridge_slave_1: entered promiscuous mode [ 149.571592][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.583329][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.602105][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.609406][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.616766][ T5855] bridge_slave_0: entered allmulticast mode [ 149.623439][ T5855] bridge_slave_0: entered promiscuous mode [ 149.643044][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.655659][ T5853] team0: Port device team_slave_0 added [ 149.677290][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.684747][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.691894][ T5855] bridge_slave_1: entered allmulticast mode [ 149.699426][ T5855] bridge_slave_1: entered promiscuous mode [ 149.708021][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.727715][ T5853] team0: Port device team_slave_1 added [ 149.745261][ T5842] team0: Port device team_slave_0 added [ 149.752213][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.760107][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.767715][ T5843] bridge_slave_0: entered allmulticast mode [ 149.774749][ T5843] bridge_slave_0: entered promiscuous mode [ 149.801663][ T5841] team0: Port device team_slave_0 added [ 149.818136][ T5842] team0: Port device team_slave_1 added [ 149.832041][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.839771][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.847640][ T5843] bridge_slave_1: entered allmulticast mode [ 149.855017][ T5843] bridge_slave_1: entered promiscuous mode [ 149.869770][ T5841] team0: Port device team_slave_1 added [ 149.900910][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.920688][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.927892][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.954069][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.983277][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.002082][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.009259][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.035645][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.053108][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.060373][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.086666][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.100200][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.107407][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.133864][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.148257][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.160799][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.178974][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.186342][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.212336][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.226167][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.233136][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.259370][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.344684][ T5855] team0: Port device team_slave_0 added [ 150.353376][ T5855] team0: Port device team_slave_1 added [ 150.362833][ T5853] hsr_slave_0: entered promiscuous mode [ 150.370221][ T5853] hsr_slave_1: entered promiscuous mode [ 150.380261][ T5842] hsr_slave_0: entered promiscuous mode [ 150.387677][ T5842] hsr_slave_1: entered promiscuous mode [ 150.394072][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.401881][ T5842] Cannot create hsr debugfs directory [ 150.420955][ T5843] team0: Port device team_slave_0 added [ 150.430055][ T5843] team0: Port device team_slave_1 added [ 150.521438][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.529329][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.545631][ T5846] Bluetooth: hci3: command tx timeout [ 150.555500][ T5854] Bluetooth: hci0: command tx timeout [ 150.560926][ T5851] Bluetooth: hci2: command tx timeout [ 150.567571][ T5854] Bluetooth: hci1: command tx timeout [ 150.572476][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.588426][ T54] Bluetooth: hci4: command tx timeout [ 150.598724][ T5841] hsr_slave_0: entered promiscuous mode [ 150.605347][ T5841] hsr_slave_1: entered promiscuous mode [ 150.611454][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.619207][ T5841] Cannot create hsr debugfs directory [ 150.625623][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.632566][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.658606][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.677562][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.684693][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.711360][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.733598][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.740612][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.766984][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.921307][ T5843] hsr_slave_0: entered promiscuous mode [ 150.928022][ T5843] hsr_slave_1: entered promiscuous mode [ 150.935246][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.942856][ T5843] Cannot create hsr debugfs directory [ 150.961984][ T5855] hsr_slave_0: entered promiscuous mode [ 150.968382][ T5855] hsr_slave_1: entered promiscuous mode [ 150.975016][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.982598][ T5855] Cannot create hsr debugfs directory [ 151.173705][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 151.185792][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 151.215957][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 151.229348][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 151.306659][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 151.317535][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 151.341972][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 151.367737][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 151.400879][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 151.412282][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 151.427405][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 151.450719][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 151.510424][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.520793][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.548649][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.558441][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.600879][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.639494][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.650450][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 151.668404][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 151.688171][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.698135][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.735768][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.743047][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.791626][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.798785][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.840698][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.866495][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.922389][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.983516][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.990669][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.017369][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.038288][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.045578][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.079305][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.086452][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.096572][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.103786][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.121197][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.155166][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.193384][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.222949][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.269246][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.280049][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.299156][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.306301][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.340810][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.352726][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.359900][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.372547][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.379819][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.462215][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.469420][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.596738][ T5842] veth0_vlan: entered promiscuous mode [ 152.624334][ T54] Bluetooth: hci4: command tx timeout [ 152.629816][ T54] Bluetooth: hci2: command tx timeout [ 152.634700][ T5859] Bluetooth: hci3: command tx timeout [ 152.636136][ T54] Bluetooth: hci0: command tx timeout [ 152.640655][ T5859] Bluetooth: hci1: command tx timeout [ 152.651118][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.681683][ T5842] veth1_vlan: entered promiscuous mode [ 152.818533][ T5853] veth0_vlan: entered promiscuous mode [ 152.831395][ T5842] veth0_macvtap: entered promiscuous mode [ 152.861272][ T5853] veth1_vlan: entered promiscuous mode [ 152.878048][ T5842] veth1_macvtap: entered promiscuous mode [ 152.897106][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.937670][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.957591][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.981641][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.996352][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.023549][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.036664][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.045788][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.096160][ T5853] veth0_macvtap: entered promiscuous mode [ 153.130099][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.155292][ T5853] veth1_macvtap: entered promiscuous mode [ 153.192900][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.207868][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.219859][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.250583][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.272922][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.285505][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.295867][ T5841] veth0_vlan: entered promiscuous mode [ 153.327632][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.337947][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.349947][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.359092][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.400939][ T5841] veth1_vlan: entered promiscuous mode [ 153.436488][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.450757][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.481865][ T5855] veth0_vlan: entered promiscuous mode [ 153.542283][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.542539][ T5841] veth0_macvtap: entered promiscuous mode [ 153.557796][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.572525][ T5855] veth1_vlan: entered promiscuous mode [ 153.599372][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.620490][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.630995][ T5841] veth1_macvtap: entered promiscuous mode [ 153.647423][ T5843] veth0_vlan: entered promiscuous mode [ 153.678220][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 153.692564][ T5843] veth1_vlan: entered promiscuous mode [ 153.724916][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.738667][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.775195][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.790731][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.802628][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.819462][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.832361][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.868129][ T5855] veth0_macvtap: entered promiscuous mode [ 153.893212][ T5843] veth0_macvtap: entered promiscuous mode [ 153.920134][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.931928][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.943165][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.960083][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.972337][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.997091][ T5843] veth1_macvtap: entered promiscuous mode [ 154.021032][ T5855] veth1_macvtap: entered promiscuous mode [ 154.036744][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.054069][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.088983][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.099051][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.169489][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.192306][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.214286][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.244610][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.273890][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.307449][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.320531][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.347659][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.360025][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.373878][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.393651][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.411550][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.422301][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.439299][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.466155][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.487522][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.507705][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.518363][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.528334][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.545308][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.561955][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.583827][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.596056][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.618385][ T5855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.628409][ T5855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.640577][ T5855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.649777][ T5855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.680899][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.704178][ T5859] Bluetooth: hci1: command tx timeout [ 154.710221][ T5854] Bluetooth: hci0: command tx timeout [ 154.710254][ T54] Bluetooth: hci4: command tx timeout [ 154.716095][ T5854] Bluetooth: hci3: command tx timeout [ 154.721103][ T54] Bluetooth: hci2: command tx timeout [ 154.736210][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.748587][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.759356][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.772827][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.791258][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.802764][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.814699][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.826506][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.844109][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 154.875799][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.885198][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.895045][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.904113][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.969042][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.978632][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.070578][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.097372][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.151252][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.183796][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.264314][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.280904][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.282970][ T5943] [ 155.290585][ T5943] ====================================================== [ 155.297626][ T5943] WARNING: possible circular locking dependency detected [ 155.304675][ T5943] 6.12.0-rc6-next-20241107-syzkaller #0 Not tainted [ 155.311264][ T5943] ------------------------------------------------------ [ 155.318279][ T5943] syz.2.11/5943 is trying to acquire lock: [ 155.324091][ T5943] ffff888032a6dbe0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaa/0x120 [ 155.333024][ T5943] [ 155.333024][ T5943] but task is already holding lock: [ 155.340388][ T5943] ffff888143bc4358 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xdd/0x9a0 [ 155.349716][ T5943] [ 155.349716][ T5943] which lock already depends on the new lock. [ 155.349716][ T5943] [ 155.360115][ T5943] [ 155.360115][ T5943] the existing dependency chain (in reverse order) is: [ 155.369123][ T5943] [ 155.369123][ T5943] -> #4 (&q->debugfs_mutex){+.+.}-{4:4}: [ 155.376970][ T5943] lock_acquire+0x1ed/0x550 [ 155.382017][ T5943] __mutex_lock+0x1ac/0xee0 [ 155.387067][ T5943] blk_mq_init_sched+0x3fa/0x830 [ 155.392538][ T5943] elevator_init_mq+0x1d8/0x2d0 [ 155.397920][ T5943] add_disk_fwnode+0x10d/0xf80 [ 155.403219][ T5943] sd_probe+0xba6/0x1100 [ 155.407991][ T5943] really_probe+0x2b8/0xad0 [ 155.413016][ T5943] __driver_probe_device+0x1a2/0x390 [ 155.418821][ T5943] driver_probe_device+0x50/0x430 [ 155.424378][ T5943] __device_attach_driver+0x2d6/0x530 [ 155.430277][ T5943] bus_for_each_drv+0x24e/0x2e0 [ 155.435661][ T5943] __device_attach_async_helper+0x22d/0x300 [ 155.442083][ T5943] async_run_entry_fn+0xa8/0x420 [ 155.447552][ T5943] process_scheduled_works+0xa63/0x1850 [ 155.453627][ T5943] worker_thread+0x870/0xd30 [ 155.458751][ T5943] kthread+0x2f0/0x390 [ 155.463343][ T5943] ret_from_fork+0x4b/0x80 [ 155.468277][ T5943] ret_from_fork_asm+0x1a/0x30 [ 155.473568][ T5943] [ 155.473568][ T5943] -> #3 (&q->q_usage_counter(io)#66){++++}-{0:0}: [ 155.482185][ T5943] lock_acquire+0x1ed/0x550 [ 155.487211][ T5943] blk_mq_submit_bio+0x1510/0x2490 [ 155.492846][ T5943] __submit_bio+0x2c2/0x560 [ 155.497872][ T5943] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 155.504030][ T5943] ext4_mpage_readpages+0x1cdc/0x1ea0 [ 155.509927][ T5943] read_pages+0x17e/0x840 [ 155.514794][ T5943] page_cache_ra_unbounded+0x797/0x8c0 [ 155.520777][ T5943] filemap_get_pages+0x621/0x2540 [ 155.526330][ T5943] filemap_read+0x46b/0xf50 [ 155.531357][ T5943] __kernel_read+0x513/0x9d0 [ 155.536479][ T5943] bprm_execve+0xa2b/0x1770 [ 155.541503][ T5943] kernel_execve+0x931/0xa50 [ 155.546611][ T5943] kernel_init+0xed/0x2b0 [ 155.551466][ T5943] ret_from_fork+0x4b/0x80 [ 155.556415][ T5943] ret_from_fork_asm+0x1a/0x30 [ 155.561715][ T5943] [ 155.561715][ T5943] -> #2 (mapping.invalidate_lock){++++}-{4:4}: [ 155.570068][ T5943] lock_acquire+0x1ed/0x550 [ 155.575095][ T5943] down_read+0xb1/0xa40 [ 155.579770][ T5943] filemap_fault+0x6e8/0x1950 [ 155.584976][ T5943] __do_fault+0x135/0x460 [ 155.589837][ T5943] handle_pte_fault+0x3c01/0x66b0 [ 155.595408][ T5943] handle_mm_fault+0x1106/0x1bb0 [ 155.600874][ T5943] exc_page_fault+0x459/0x8c0 [ 155.606077][ T5943] asm_exc_page_fault+0x26/0x30 [ 155.611456][ T5943] [ 155.611456][ T5943] -> #1 (&vma->vm_lock->lock){++++}-{4:4}: [ 155.619465][ T5943] lock_acquire+0x1ed/0x550 [ 155.624490][ T5943] down_write+0x99/0x220 [ 155.629255][ T5943] vma_link+0x28c/0x500 [ 155.633945][ T5943] insert_vm_struct+0x2f7/0x410 [ 155.639345][ T5943] alloc_bprm+0xa57/0xe70 [ 155.644202][ T5943] kernel_execve+0x99/0xa50 [ 155.649228][ T5943] kernel_init+0xed/0x2b0 [ 155.654084][ T5943] ret_from_fork+0x4b/0x80 [ 155.659023][ T5943] ret_from_fork_asm+0x1a/0x30 [ 155.664317][ T5943] [ 155.664317][ T5943] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 155.671880][ T5943] validate_chain+0x18ef/0x5920 [ 155.677255][ T5943] __lock_acquire+0x1397/0x2100 [ 155.682623][ T5943] lock_acquire+0x1ed/0x550 [ 155.687647][ T5943] __might_fault+0xc6/0x120 [ 155.692691][ T5943] _copy_from_user+0x2a/0xc0 [ 155.697805][ T5943] blk_trace_ioctl+0x1ad/0x9a0 [ 155.703181][ T5943] blkdev_ioctl+0x40c/0x6a0 [ 155.708209][ T5943] __se_sys_ioctl+0xf5/0x170 [ 155.713330][ T5943] do_syscall_64+0xf3/0x230 [ 155.718371][ T5943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.724794][ T5943] [ 155.724794][ T5943] other info that might help us debug this: [ 155.724794][ T5943] [ 155.735021][ T5943] Chain exists of: [ 155.735021][ T5943] &mm->mmap_lock --> &q->q_usage_counter(io)#66 --> &q->debugfs_mutex [ 155.735021][ T5943] [ 155.749213][ T5943] Possible unsafe locking scenario: [ 155.749213][ T5943] [ 155.756663][ T5943] CPU0 CPU1 [ 155.762029][ T5943] ---- ---- [ 155.767392][ T5943] lock(&q->debugfs_mutex); [ 155.771987][ T5943] lock(&q->q_usage_counter(io)#66); [ 155.779897][ T5943] lock(&q->debugfs_mutex); [ 155.787018][ T5943] rlock(&mm->mmap_lock); [ 155.791442][ T5943] [ 155.791442][ T5943] *** DEADLOCK *** [ 155.791442][ T5943] [ 155.799581][ T5943] 1 lock held by syz.2.11/5943: [ 155.804430][ T5943] #0: ffff888143bc4358 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xdd/0x9a0 [ 155.814195][ T5943] [ 155.814195][ T5943] stack backtrace: [ 155.820104][ T5943] CPU: 0 UID: 0 PID: 5943 Comm: syz.2.11 Not tainted 6.12.0-rc6-next-20241107-syzkaller #0 [ 155.830085][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.840157][ T5943] Call Trace: [ 155.843473][ T5943] [ 155.846405][ T5943] dump_stack_lvl+0x241/0x360 [ 155.851094][ T5943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.856298][ T5943] ? __pfx__printk+0x10/0x10 [ 155.860897][ T5943] print_circular_bug+0x13a/0x1b0 [ 155.865936][ T5943] check_noncircular+0x36a/0x4a0 [ 155.870879][ T5943] ? __pfx_check_noncircular+0x10/0x10 [ 155.876343][ T5943] ? lockdep_lock+0x123/0x2b0 [ 155.881034][ T5943] validate_chain+0x18ef/0x5920 [ 155.885904][ T5943] ? is_bpf_text_address+0x26/0x2a0 [ 155.891133][ T5943] ? __pfx_validate_chain+0x10/0x10 [ 155.896357][ T5943] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 155.902542][ T5943] ? kernel_text_address+0xa7/0xe0 [ 155.907683][ T5943] ? mark_lock+0x9a/0x360 [ 155.912022][ T5943] ? __lock_acquire+0x1397/0x2100 [ 155.917054][ T5943] ? string+0x26a/0x2b0 [ 155.921218][ T5943] ? widen_string+0x3a/0x310 [ 155.925820][ T5943] ? string+0x26a/0x2b0 [ 155.929983][ T5943] ? bdev_name+0x2b1/0x3c0 [ 155.934439][ T5943] ? mark_lock+0x9a/0x360 [ 155.938786][ T5943] __lock_acquire+0x1397/0x2100 [ 155.943651][ T5943] lock_acquire+0x1ed/0x550 [ 155.948174][ T5943] ? __might_fault+0xaa/0x120 [ 155.952865][ T5943] ? __pfx_lock_acquire+0x10/0x10 [ 155.957925][ T5943] ? __pfx___might_resched+0x10/0x10 [ 155.963236][ T5943] ? snprintf+0xda/0x120 [ 155.967489][ T5943] ? __pfx___mutex_lock+0x10/0x10 [ 155.972531][ T5943] ? blk_trace_ioctl+0xec/0x9a0 [ 155.977389][ T5943] ? __pfx_snprintf+0x10/0x10 [ 155.982082][ T5943] ? __might_fault+0xaa/0x120 [ 155.986775][ T5943] __might_fault+0xc6/0x120 [ 155.991294][ T5943] ? __might_fault+0xaa/0x120 [ 155.995983][ T5943] _copy_from_user+0x2a/0xc0 [ 156.000579][ T5943] blk_trace_ioctl+0x1ad/0x9a0 [ 156.005346][ T5943] ? tomoyo_path_number_perm+0x6f9/0x860 [ 156.010987][ T5943] ? tomoyo_path_number_perm+0x206/0x860 [ 156.016622][ T5943] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 156.021917][ T5943] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 156.027916][ T5943] ? file_to_blk_mode+0xcc/0x140 [ 156.032867][ T5943] blkdev_ioctl+0x40c/0x6a0 [ 156.037387][ T5943] ? __pfx_blkdev_ioctl+0x10/0x10 [ 156.042423][ T5943] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 156.048762][ T5943] ? __pfx_blkdev_ioctl+0x10/0x10 [ 156.053802][ T5943] __se_sys_ioctl+0xf5/0x170 [ 156.058415][ T5943] do_syscall_64+0xf3/0x230 [ 156.062920][ T5943] ? clear_bhb_loop+0x35/0x90 [ 156.067602][ T5943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.073508][ T5943] RIP: 0033:0x7fefcf57e719 [ 156.077944][ T5943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.097561][ T5943] RSP: 002b:00007fefd03bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.105995][ T5943] RAX: ffffffffffffffda RBX: 00007fefcf735f80 RCX: 00007fefcf57e719 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 156.113966][ T5943] RDX: 0000000020000800 RSI: 00000000c0481273 RDI: 0000000000000003 [ 156.121953][ T5943] RBP: 00007fefcf5f139e R08: 0000000000000000 R09: 0000000000000000 [ 156.129930][ T5943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.137910][ T5943] R13: 0000000000000000 R14: 00007fefcf735f80 R15: 00007ffc94c87ed8 [ 156.145900][ T5943] [ 157.050575][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.097638][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.170682][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.219894][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.309691][ T63] bridge_slave_1: left allmulticast mode [ 157.317444][ T63] bridge_slave_1: left promiscuous mode [ 157.323138][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.331889][ T63] bridge_slave_0: left allmulticast mode [ 157.337933][ T63] bridge_slave_0: left promiscuous mode [ 157.343591][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.451039][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.461501][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.473695][ T63] bond0 (unregistering): Released all slaves [ 157.687849][ T63] hsr_slave_0: left promiscuous mode [ 157.693720][ T63] hsr_slave_1: left promiscuous mode [ 157.707658][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.715819][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.723471][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.731250][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.740890][ T63] veth1_macvtap: left promiscuous mode [ 157.746929][ T63] veth0_macvtap: left promiscuous mode [ 157.752482][ T63] veth1_vlan: left promiscuous mode [ 157.758004][ T63] veth0_vlan: left promiscuous mode [ 157.877962][ T63] team0 (unregistering): Port device team_slave_1 removed [ 157.901508][ T63] team0 (unregistering): Port device team_slave_0 removed [ 158.295916][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.368795][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.419475][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.460706][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.548802][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.609822][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.689834][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.771217][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.869250][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.912465][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.958891][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.012700][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.108061][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.158432][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.209839][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.250615][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.341744][ T63] bridge_slave_1: left allmulticast mode [ 159.350750][ T63] bridge_slave_1: left promiscuous mode [ 159.358893][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.368107][ T63] bridge_slave_0: left allmulticast mode [ 159.374887][ T63] bridge_slave_0: left promiscuous mode [ 159.380583][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.389720][ T63] bridge_slave_1: left allmulticast mode [ 159.395885][ T63] bridge_slave_1: left promiscuous mode [ 159.401517][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.409902][ T63] bridge_slave_0: left allmulticast mode [ 159.415637][ T63] bridge_slave_0: left promiscuous mode [ 159.421575][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.431608][ T63] bridge_slave_1: left allmulticast mode [ 159.437518][ T63] bridge_slave_1: left promiscuous mode [ 159.443168][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.451823][ T63] bridge_slave_0: left allmulticast mode [ 159.457632][ T63] bridge_slave_0: left promiscuous mode [ 159.463314][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.472161][ T63] bridge_slave_1: left allmulticast mode [ 159.477936][ T63] bridge_slave_1: left promiscuous mode [ 159.483667][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.492020][ T63] bridge_slave_0: left allmulticast mode [ 159.497956][ T63] bridge_slave_0: left promiscuous mode [ 159.503613][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.888947][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.899631][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.909987][ T63] bond0 (unregistering): Released all slaves [ 159.922873][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.933362][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.946265][ T63] bond0 (unregistering): Released all slaves [ 159.958968][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.970329][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.980630][ T63] bond0 (unregistering): Released all slaves [ 159.992717][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.004507][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.014438][ T63] bond0 (unregistering): Released all slaves [ 160.526460][ T63] hsr_slave_0: left promiscuous mode [ 160.532232][ T63] hsr_slave_1: left promiscuous mode [ 160.538588][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.547248][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.555010][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.562418][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.573125][ T63] hsr_slave_0: left promiscuous mode [ 160.579802][ T63] hsr_slave_1: left promiscuous mode [ 160.585896][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.593290][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.601088][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.608574][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.618680][ T63] hsr_slave_0: left promiscuous mode [ 160.625073][ T63] hsr_slave_1: left promiscuous mode [ 160.630907][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.638378][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.646121][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.653523][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.663334][ T63] hsr_slave_0: left promiscuous mode [ 160.669534][ T63] hsr_slave_1: left promiscuous mode [ 160.675412][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.682791][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.690536][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.698144][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.711032][ T63] veth1_macvtap: left promiscuous mode [ 160.716586][ T63] veth0_macvtap: left promiscuous mode [ 160.722111][ T63] veth1_vlan: left promiscuous mode [ 160.727419][ T63] veth0_vlan: left promiscuous mode [ 160.733292][ T63] veth1_macvtap: left promiscuous mode [ 160.739535][ T63] veth0_macvtap: left promiscuous mode [ 160.745460][ T63] veth1_vlan: left promiscuous mode [ 160.750696][ T63] veth0_vlan: left promiscuous mode [ 160.756775][ T63] veth1_macvtap: left promiscuous mode [ 160.762271][ T63] veth0_macvtap: left promiscuous mode [ 160.767928][ T63] veth1_vlan: left promiscuous mode [ 160.773189][ T63] veth0_vlan: left promiscuous mode [ 160.779308][ T63] veth1_macvtap: left promiscuous mode [ 160.785157][ T63] veth0_macvtap: left promiscuous mode [ 160.790690][ T63] veth1_vlan: left promiscuous mode [ 160.796031][ T63] veth0_vlan: left promiscuous mode [ 161.045365][ T63] team0 (unregistering): Port device team_slave_1 removed [ 161.067550][ T63] team0 (unregistering): Port device team_slave_0 removed [ 161.222106][ T63] team0 (unregistering): Port device team_slave_1 removed [ 161.240048][ T63] team0 (unregistering): Port device team_slave_0 removed [ 161.395889][ T63] team0 (unregistering): Port device team_slave_1 removed [ 161.416433][ T63] team0 (unregistering): Port device team_slave_0 removed [ 161.563058][ T63] team0 (unregistering): Port device team_slave_1 removed [ 161.582490][ T63] team0 (unregistering): Port device team_slave_0 removed