last executing test programs: 0s ago: executing program 1 (id=2): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x0, 0x5f5e100}, 0x0) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a40)={0x0, 0x5f5e100}, 0x0) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x4002) pwrite64$ublk_bdev(r10, &(0x7f0000800000)='\x00'/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 86.118570][ T9] cfg80211: failed to load regulatory.db [ 87.872270][ T5603] cgroup: Unknown subsys name 'net' [ 87.968851][ T5603] cgroup: Unknown subsys name 'cpuset' [ 87.972983][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.601964][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.873279][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.874330][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.877583][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.878235][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.879765][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.881138][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.919917][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.924044][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.939237][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.939986][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.969775][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.974374][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.988491][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.998110][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.998507][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.999592][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.001134][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.001655][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.042650][ T5641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.044518][ T4931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.045575][ T4931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.046315][ T4931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.053034][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.091259][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.101207][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.121691][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.125235][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.125927][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.128740][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.131486][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.915353][ T5623] Bluetooth: hci1: command tx timeout [ 94.995966][ T5623] Bluetooth: hci0: command tx timeout [ 95.155836][ T5623] Bluetooth: hci3: command tx timeout [ 95.155971][ T5623] Bluetooth: hci5: command tx timeout [ 95.156078][ T5623] Bluetooth: hci2: command tx timeout [ 95.156170][ T5623] Bluetooth: hci4: command tx timeout [ 95.436026][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.436682][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.436844][ T5622] bridge_slave_0: entered allmulticast mode [ 95.439135][ T5622] bridge_slave_0: entered promiscuous mode [ 95.504572][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.504682][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.504821][ T5622] bridge_slave_1: entered allmulticast mode [ 95.507380][ T5622] bridge_slave_1: entered promiscuous mode [ 95.693917][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.767323][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.839952][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.840142][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.840295][ T5621] bridge_slave_0: entered allmulticast mode [ 95.842341][ T5621] bridge_slave_0: entered promiscuous mode [ 95.912342][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.912500][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.912654][ T5621] bridge_slave_1: entered allmulticast mode [ 95.915128][ T5621] bridge_slave_1: entered promiscuous mode [ 95.951290][ T5622] team0: Port device team_slave_0 added [ 95.973226][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.973339][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.973902][ T5630] bridge_slave_0: entered allmulticast mode [ 95.976801][ T5630] bridge_slave_0: entered promiscuous mode [ 96.005409][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.005572][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.005715][ T5627] bridge_slave_0: entered allmulticast mode [ 96.007682][ T5627] bridge_slave_0: entered promiscuous mode [ 96.034022][ T5622] team0: Port device team_slave_1 added [ 96.067436][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.067549][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.067922][ T5630] bridge_slave_1: entered allmulticast mode [ 96.069602][ T5630] bridge_slave_1: entered promiscuous mode [ 96.098532][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.098639][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.098776][ T5627] bridge_slave_1: entered allmulticast mode [ 96.100530][ T5627] bridge_slave_1: entered promiscuous mode [ 96.144791][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.144812][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.144852][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.190955][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.214933][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.216087][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.216108][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.216154][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.265188][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.307545][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.316643][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.317398][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.317624][ T5631] bridge_slave_0: entered allmulticast mode [ 96.320155][ T5631] bridge_slave_0: entered promiscuous mode [ 96.328878][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.376454][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.376630][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.376753][ T5631] bridge_slave_1: entered allmulticast mode [ 96.378414][ T5631] bridge_slave_1: entered promiscuous mode [ 96.383474][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.386353][ T5621] team0: Port device team_slave_0 added [ 96.386871][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.386986][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.387137][ T5628] bridge_slave_0: entered allmulticast mode [ 96.390795][ T5628] bridge_slave_0: entered promiscuous mode [ 96.431770][ T5627] team0: Port device team_slave_0 added [ 96.436256][ T5627] team0: Port device team_slave_1 added [ 96.482786][ T5621] team0: Port device team_slave_1 added [ 96.482997][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.483153][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.483276][ T5628] bridge_slave_1: entered allmulticast mode [ 96.486387][ T5628] bridge_slave_1: entered promiscuous mode [ 96.588871][ T5622] hsr_slave_0: entered promiscuous mode [ 96.589791][ T5622] hsr_slave_1: entered promiscuous mode [ 96.591533][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.591553][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.591594][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.599665][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.605779][ T5630] team0: Port device team_slave_0 added [ 96.625177][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.625198][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.625241][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.628002][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.628022][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.628066][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.703137][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.703159][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.703202][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.709450][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.712305][ T5630] team0: Port device team_slave_1 added [ 96.753157][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.806781][ T5621] hsr_slave_0: entered promiscuous mode [ 96.807988][ T5621] hsr_slave_1: entered promiscuous mode [ 96.808911][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 96.808986][ T5621] Cannot create hsr debugfs directory [ 96.855110][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.896980][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.897002][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.897042][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.957531][ T5631] team0: Port device team_slave_0 added [ 96.972691][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.972720][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.972760][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.006907][ T5638] Bluetooth: hci1: command tx timeout [ 97.007904][ T5628] team0: Port device team_slave_0 added [ 97.029992][ T5631] team0: Port device team_slave_1 added [ 97.050026][ T5628] team0: Port device team_slave_1 added [ 97.057921][ T5627] hsr_slave_0: entered promiscuous mode [ 97.059122][ T5627] hsr_slave_1: entered promiscuous mode [ 97.060418][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 97.060445][ T5627] Cannot create hsr debugfs directory [ 97.077921][ T5638] Bluetooth: hci0: command tx timeout [ 97.206226][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.206249][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.206289][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.216537][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.216558][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.216601][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.219925][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.219946][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.219990][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.249066][ T5638] Bluetooth: hci4: command tx timeout [ 97.249103][ T5638] Bluetooth: hci2: command tx timeout [ 97.249134][ T5638] Bluetooth: hci5: command tx timeout [ 97.249165][ T5638] Bluetooth: hci3: command tx timeout [ 97.260710][ T5630] hsr_slave_0: entered promiscuous mode [ 97.262783][ T5630] hsr_slave_1: entered promiscuous mode [ 97.264206][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 97.264234][ T5630] Cannot create hsr debugfs directory [ 97.291872][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.291895][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.291939][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.547466][ T5631] hsr_slave_0: entered promiscuous mode [ 97.548418][ T5631] hsr_slave_1: entered promiscuous mode [ 97.549036][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 97.549064][ T5631] Cannot create hsr debugfs directory [ 97.647915][ T5628] hsr_slave_0: entered promiscuous mode [ 97.648773][ T5628] hsr_slave_1: entered promiscuous mode [ 97.649425][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 97.649452][ T5628] Cannot create hsr debugfs directory [ 97.927320][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.936468][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.984623][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.989023][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.990172][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.997055][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.045574][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.049670][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.177567][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.188899][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.200434][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.206723][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.225461][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.228789][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.229806][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.234964][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.348360][ T5627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.351895][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.379678][ T5627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.385957][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.406112][ T5627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.410291][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.411648][ T5627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.416842][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.520147][ T5630] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.524999][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.525992][ T5630] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.538721][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.541425][ T5630] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.552753][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.566672][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.572652][ T5630] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.580181][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.701666][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.717976][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.752937][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.759555][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.780781][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.780888][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.791875][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.802475][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.836257][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.839668][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.842135][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.848272][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.869143][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.869263][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.904160][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.931207][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.931298][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.995475][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.995599][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.020358][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.031048][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.042620][ T5622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.060127][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.065518][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.070072][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.079274][ T5623] Bluetooth: hci1: command tx timeout [ 99.096124][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.099611][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.100378][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.103143][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.153809][ T5623] Bluetooth: hci0: command tx timeout [ 99.201384][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.221754][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.256519][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.256640][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.316452][ T5638] Bluetooth: hci5: command tx timeout [ 99.316494][ T52] Bluetooth: hci2: command tx timeout [ 99.316498][ T5638] Bluetooth: hci4: command tx timeout [ 99.316586][ T5623] Bluetooth: hci3: command tx timeout [ 99.321684][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.321804][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.386813][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.453297][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.453706][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.502402][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.502522][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.658656][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.776987][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.850856][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.858676][ T1484] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.858798][ T1484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.947857][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.947986][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.015111][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.066783][ T727] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.067130][ T727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.122934][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.123054][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.580636][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.861748][ T5622] veth0_vlan: entered promiscuous mode [ 100.909159][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.931154][ T5622] veth1_vlan: entered promiscuous mode [ 101.082957][ T5622] veth0_macvtap: entered promiscuous mode [ 101.108757][ T5622] veth1_macvtap: entered promiscuous mode [ 101.166337][ T5623] Bluetooth: hci1: command tx timeout [ 101.244092][ T5623] Bluetooth: hci0: command tx timeout [ 101.255680][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.310802][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.394046][ T5623] Bluetooth: hci3: command tx timeout [ 101.394087][ T5623] Bluetooth: hci2: command tx timeout [ 101.394961][ T5626] Bluetooth: hci4: command tx timeout [ 101.394998][ T5626] Bluetooth: hci5: command tx timeout [ 101.408588][ T1484] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.409809][ T1421] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.483807][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.483876][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.493437][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.516908][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.891983][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.892014][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.933418][ T5627] veth0_vlan: entered promiscuous mode [ 102.092085][ T5627] veth1_vlan: entered promiscuous mode [ 102.106689][ T1421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.106716][ T1421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.188517][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.252792][ T5621] veth0_vlan: entered promiscuous mode [ 102.312170][ T5621] veth1_vlan: entered promiscuous mode [ 102.357816][ T5622] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.358975][ T5627] veth0_macvtap: entered promiscuous mode [ 102.389726][ T5627] veth1_macvtap: entered promiscuous mode [ 102.486899][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.564799][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.564945][ T5630] veth0_vlan: entered promiscuous mode [ 102.575426][ T5621] veth0_macvtap: entered promiscuous mode [ 102.577361][ T5631] veth0_vlan: entered promiscuous mode [ 102.600707][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.638282][ T5621] veth1_macvtap: entered promiscuous mode [ 102.641113][ T5630] veth1_vla ** replaying previous printk message ** [ 102.641113][ T5630] veth1_vlan: entered promiscuous mode [ 102.652041][ T5852] [ 102.664446][ T5852] ============================= [ 102.669301][ T5852] WARNING: suspicious RCU usage [ 102.674247][ T5852] syzkaller #0 Not tainted [ 102.678668][ T5852] ----------------------------- [ 102.683870][ T5852] lib/maple_tree.c:720 suspicious rcu_dereference_check() usage! [ 102.691604][ T5852] [ 102.691604][ T5852] other info that might help us debug this: [ 102.691604][ T5852] [ 102.701876][ T5852] [ 102.701876][ T5852] rcu_scheduler_active = 2, debug_locks = 1 [ 102.710008][ T5852] locks held by syz.1.2/5852: 1, last CPU#0: [ 102.716163][ T5852] #0: ffff88807a0660a0 (&ctx->uring_lock){+.+.}-{4:4}, at: tctx_task_work_run+0x1cd/0xbf0 [ 102.726842][ T5852] [ 102.726842][ T5852] stack backtrace: [ 102.732768][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 102.741794][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 102.751846][ T5852] Call Trace: [ 102.755120][ T5852] [ 102.758042][ T5852] dump_stack_lvl+0x100/0x190 [ 102.762776][ T5852] lockdep_rcu_suspicious.cold+0x4f/0xb2 [ 102.768432][ T5852] mas_start+0x621/0x7c0 [ 102.772725][ T5852] mas_walk+0x82/0x310 [ 102.776835][ T5852] ublk_try_buf_match+0x469/0x7e0 [ 102.781878][ T5852] ? __pfx_ublk_try_buf_match+0x10/0x10 [ 102.787441][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.793087][ T5852] ? lock_acquire+0x1d1/0x380 [ 102.797792][ T5852] ublk_init_iod+0x4a4/0x5b0 [ 102.802392][ T5852] ? __pfx_ublk_init_iod+0x10/0x10 [ 102.807514][ T5852] ? trace_contention_end+0x126/0x160 [ 102.812913][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.818566][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.824228][ T5852] ublk_setup_iod+0x145/0x2f0 [ 102.828930][ T5852] ? __pfx___mutex_lock+0x10/0x10 [ 102.833973][ T5852] ublk_dispatch_req+0x4e/0xb00 [ 102.838860][ T5852] ublk_cmd_tw_cb+0xbe/0x110 [ 102.843477][ T5852] ? __pfx_ublk_cmd_tw_cb+0x10/0x10 [ 102.848708][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.854367][ T5852] ? __pfx_ublk_cmd_tw_cb+0x10/0x10 [ 102.859590][ T5852] tctx_task_work_run+0xabe/0xbf0 [ 102.864680][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.870351][ T5852] ? __pfx_tctx_task_work_run+0x10/0x10 [ 102.875933][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.881590][ T5852] ? lock_acquire+0x1d1/0x380 [ 102.886289][ T5852] tctx_task_work+0x7a/0xa0 [ 102.890824][ T5852] ? __pfx_tctx_task_work+0x10/0x10 [ 102.896050][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.901707][ T5852] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.906936][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.912591][ T5852] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.917827][ T5852] task_work_run+0x150/0x240 [ 102.922454][ T5852] ? __pfx_task_work_run+0x10/0x10 [ 102.927615][ T5852] get_signal+0x1bd/0x21e0 [ 102.932061][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.937716][ T5852] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.943631][ T5852] ? __pfx_get_signal+0x10/0x10 [ 102.948510][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.954166][ T5852] ? do_futex+0x190/0x440 [ 102.958551][ T5852] arch_do_signal_or_restart+0x91/0x7e0 [ 102.964133][ T5852] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 102.970339][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.975999][ T5852] exit_to_user_mode_loop+0x139/0x700 [ 102.981393][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 102.987054][ T5852] ? rcu_is_watching+0x13/0xc0 [ 102.991847][ T5852] do_syscall_64+0x661/0x790 [ 102.996489][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.002400][ T5852] RIP: 0033:0x7f812759e159 [ 103.006827][ T5852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.026445][ T5852] RSP: 002b:00007f81284cd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 103.034881][ T5852] RAX: fffffffffffffe00 RBX: 00007f8127825fa8 RCX: 00007f812759e159 [ 103.042867][ T5852] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8127825fa8 [ 103.050843][ T5852] RBP: 00007f8127825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 103.058821][ T5852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.066796][ T5852] R13: 00007f8127826038 R14: 00007ffea1919940 R15: 00007ffea1919a28 [ 103.074799][ T5852] [ 103.098722][ T5631] veth1_vlan: entered promiscuous mode [ 103.104534][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.104600][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.104661][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.104721][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.179834][ T5631] veth0_macvtap: entered promiscuous mode [ 103.235429][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.243336][ T5631] veth1_macvtap: entered promiscuous mode [ 103.301179][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.313779][ T5628] veth0_vlan: entered promiscuous mode [ 103.323122][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.323149][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.329860][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.331483][ T5630] veth0_macvtap: entered promiscuous mode [ 103.364352][ T1144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.380137][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.390841][ T5628] veth1_vlan: entered promiscuous mode [ 103.406321][ T5630] veth1_macvtap: entered promiscuous mode [ 103.464530][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.464598][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.464660][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.464730][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.482450][ T727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.482482][ T727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.536367][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.536436][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.536502][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.617884][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.659679][ T5628] veth0_macvtap: entered promiscuous mode [ 103.680346][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.699061][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.699088][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.729081][ T5628] veth1_macvtap: entered promiscuous mode [ 103.782677][ T1421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.782708][ T1421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.858697][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.865386][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.902665][ T727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.902694][ T727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.916355][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.923370][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.987272][ T1421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.987302][ T1421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.014666][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.014693][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.014932][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.016304][ T727] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.016559][ T727] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.021146][ T727] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.142974][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.143004][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.209003][ T1421] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.210199][ T1421] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.315246][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.315276][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.407476][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.407504][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50