last executing test programs: 10.771801842s ago: executing program 2 (id=10): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x8000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 10.405235522s ago: executing program 2 (id=12): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x73, @empty, 0x1}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000540)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "2e46c1c5274bfad707406bd51cb60bf33c125f4cf999196aa6cefa7be0886490", "2bea6a9d710cbcec5e65a090c11d7317", {"0e8016d6bdca858c164744fb8b6005b5", "bc30e337b7acddad3b22de49438a1f39"}}}}}}}}, 0x0) 10.214118835s ago: executing program 2 (id=13): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000840)=0x1000000, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000880)=[{&(0x7f00000008c0)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) 9.085306479s ago: executing program 3 (id=14): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24000814) 8.488699435s ago: executing program 3 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='0fc5:1227:bqi', 0xd) 8.345403555s ago: executing program 3 (id=17): r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x24020400) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000940)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) pselect6(0x40, &(0x7f0000000dc0)={0xd, 0x80000001, 0x4, 0x20000000006, 0x12, 0x8, 0x80000000, 0x1000000000b}, 0x0, 0x0, 0x0, 0x0) 7.735730424s ago: executing program 1 (id=18): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r1 = syz_open_dev$vim2m(&(0x7f0000000780), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000007c0)={0xf0f020}) 7.44074871s ago: executing program 3 (id=19): r0 = syz_usb_connect(0x0, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc02010111240201010200000000000000000200100924030201010001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000000fc0)={0x40, 0x14, 0x2, "062e"}, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) 7.439394089s ago: executing program 1 (id=20): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x80, 0x7, "06729f44", "fb6cb76e"}}, 0x0}, 0x0) 6.242475242s ago: executing program 2 (id=23): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001000)={0x34, &(0x7f0000000e40)={0x40, 0x7, 0x28, "4d6f543dffa6808d6353b0d58736d4c46d6f1ebe836d5d69f5bb6871217ca2572351ea3970741447"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.53206063s ago: executing program 1 (id=26): r0 = syz_create_resource$futex(&(0x7f0000000240)=0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000600)) futex(r0, 0x5, 0x1, 0x0, r0, 0x5000000) 4.463579581s ago: executing program 3 (id=27): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) write$char_usb(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x94, 0x1a, 0x94, 0x10, 0x64b, 0x7825, 0x885f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x20, 0x80, 0x3, "", [{{0x9, 0x4, 0x84, 0x4, 0x0, 0x60, 0xf5, 0x36, 0x4}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 3.828032451s ago: executing program 1 (id=29): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x6) 3.093022245s ago: executing program 2 (id=32): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@private1, @mcast1, @private0, 0x1, 0x6, 0x0, 0x400, 0x4, 0x2080005, r1}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@mcast1, @dev={0xfe, 0x80, '\x00', 0x17}, @private1, 0x80000001, 0x6, 0x3, 0x100, 0x1200, 0x130102, r1}) 2.850183999s ago: executing program 2 (id=34): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000240)='\x00') pread64(r1, &(0x7f0000002540)=""/4112, 0x1010, 0xfffffff7) 2.411213614s ago: executing program 4 (id=35): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 2.256353175s ago: executing program 0 (id=36): r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001000)={{{@in=@loopback, @in=@rand_addr=0x64010101, 0x4e28, 0x0, 0x0, 0x0, 0xa, 0x20, 0x20}, {0x0, 0x8, 0x0, 0x0, 0xf94, 0x0, 0xa417}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x4002, 0x32}, 0xa, @in=@multicast2, 0xffffffff, 0x2, 0x0, 0xfb, 0x0, 0x0, 0x800}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001100)={{{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x0, 0x0, 0x4e21, 0xc0, 0x2, 0x0, 0x10}, {}, {0x0, 0xff}, 0x4}, {{@in6=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0x53, 0x40000}}, 0xe8) close(r0) 1.975507629s ago: executing program 3 (id=37): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0x51, 0x7, {0x7, 0x0, "81d65dce3c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000040)={0x20, 0x21, 0x2, {0x2, 0xd}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.855827615s ago: executing program 4 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="306663353a313232373ad36c66256fc507138eef06f195222da4748207f70207d97a5cbf22f78a60d131280755c559d41916ca57741064c323d961b86942a05ebe7dd593a84f2b54ede3eb7def3aad3bc89d0ec21fbf7947b0155f62288b011f7ca7ee6d7a9c", 0x66) 1.666892771s ago: executing program 4 (id=39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x4b564d06, 0x0, 0x2}]}) 1.652067393s ago: executing program 0 (id=40): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r0, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x20004056) 1.642372031s ago: executing program 1 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./tracing\x00', &(0x7f0000000680)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x5220, 0x0) 1.51997959s ago: executing program 1 (id=42): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4000) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, &(0x7f0000000900)={0x20, 0x8, 0x15, "4a3103a35c8c6eeb85a11d88c27a39d00e7fd89223"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000009c0)={0x20, 0x0, 0x2}, 0x0, 0x0}) 1.498867691s ago: executing program 0 (id=43): socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000001000014", @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x32, 0x0, 0x1, 0x3}, 0x28) 1.410233573s ago: executing program 0 (id=44): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0x67, &(0x7f0000000cc0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x31, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08a5"}]}}}}}}, 0x0) 1.23793226s ago: executing program 4 (id=45): setns(0xc9, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x4, 0x400}, {&(0x7f00000004c0)=""/4096, 0x1000}, &(0x7f0000001500)=[{&(0x7f0000000140)=""/30, 0x1e}], 0x1, 0x61, 0x5}}], 0x48}, 0x0) 976.036553ms ago: executing program 0 (id=46): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x8) 425.688882ms ago: executing program 4 (id=47): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x1, 0x1c, &(0x7f0000002600)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000002700)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002740)={r2, r0}, 0xc) 313.10587ms ago: executing program 4 (id=48): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) time(0x0) 0s ago: executing program 0 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='-2 -3 +4 +4< +4.2\n', 0x13) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. [ 92.031028][ T1004] cfg80211: failed to load regulatory.db [ 95.168251][ T5588] cgroup: Unknown subsys name 'net' [ 95.419575][ T5588] cgroup: Unknown subsys name 'cpuset' [ 95.494122][ T5588] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 97.476445][ T5588] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.290735][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.305430][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.322427][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.331191][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.340295][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.362252][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.363281][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.367809][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.386328][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.393821][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.396699][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.401023][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.411502][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.415310][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.423200][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.518598][ T4918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.588961][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.591070][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.610547][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.621492][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.622391][ T4918] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.623552][ T4918] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.624254][ T4918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.652298][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.655347][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.931074][ T5606] rdma_rxe: Failed to create IPv4 UDP tunnel [ 101.942915][ T5609] rdma_rxe: Failed to create IPv6 UDP tunnel [ 101.988857][ T5607] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.005026][ T5608] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 102.006165][ T5607] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.011758][ T5610] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 102.012380][ T5607] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.505131][ T5611] Bluetooth: hci2: command tx timeout [ 102.505297][ T5611] Bluetooth: hci0: command tx timeout [ 102.583511][ T61] Bluetooth: hci3: command tx timeout [ 102.741952][ T5607] infiniband rxe0: set active [ 102.742377][ T5607] infiniband rxe0: added rxe_eth0 [ 102.755319][ T61] Bluetooth: hci4: command tx timeout [ 102.823520][ T61] Bluetooth: hci1: command tx timeout [ 102.844087][ T36] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.867117][ T5607] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 102.867157][ T5607] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 102.867200][ T5607] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 102.980206][ T5607] RDS/IB: rxe0: added [ 102.980937][ T5607] smc: adding ib device rxe0 with port count 1 [ 102.981122][ T5607] smc: ib device rxe0 port 1 has no pnetid [ 103.056273][ T5625] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.128643][ T5607] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.197582][ T2188] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.565964][ T5607] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.180794][ T5607] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.543463][ T5607] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.572986][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.576132][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.576321][ T5609] bridge_slave_0: entered allmulticast mode [ 104.580750][ T5609] bridge_slave_0: entered promiscuous mode [ 104.583591][ T61] Bluetooth: hci0: command tx timeout [ 104.583623][ T61] Bluetooth: hci2: command tx timeout [ 104.655917][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.656062][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.656575][ T5606] bridge_slave_0: entered allmulticast mode [ 104.659369][ T5606] bridge_slave_0: entered promiscuous mode [ 104.665515][ T61] Bluetooth: hci3: command tx timeout [ 104.718582][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.718990][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.719154][ T5609] bridge_slave_1: entered allmulticast mode [ 104.721861][ T5609] bridge_slave_1: entered promiscuous mode [ 104.727100][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.727426][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.727758][ T5608] bridge_slave_0: entered allmulticast mode [ 104.737488][ T5608] bridge_slave_0: entered promiscuous mode [ 104.756507][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.756846][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.757183][ T5606] bridge_slave_1: entered allmulticast mode [ 104.782305][ T5606] bridge_slave_1: entered promiscuous mode [ 104.805133][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.805299][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.805458][ T5610] bridge_slave_0: entered allmulticast mode [ 104.808371][ T5610] bridge_slave_0: entered promiscuous mode [ 104.823767][ T61] Bluetooth: hci4: command tx timeout [ 104.868325][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.868462][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.868622][ T5608] bridge_slave_1: entered allmulticast mode [ 104.872362][ T5608] bridge_slave_1: entered promiscuous mode [ 104.904752][ T61] Bluetooth: hci1: command tx timeout [ 104.918171][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.918553][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.929148][ T5610] bridge_slave_1: entered allmulticast mode [ 104.936832][ T5610] bridge_slave_1: entered promiscuous mode [ 105.044714][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.081462][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.120717][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.141515][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.153089][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.166552][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.192783][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.223288][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.307120][ T5609] team0: Port device team_slave_0 added [ 105.329455][ T5606] team0: Port device team_slave_0 added [ 105.358599][ T5609] team0: Port device team_slave_1 added [ 105.361679][ T5608] team0: Port device team_slave_0 added [ 105.381615][ T5606] team0: Port device team_slave_1 added [ 105.394825][ T5610] team0: Port device team_slave_0 added [ 105.415149][ T5608] team0: Port device team_slave_1 added [ 105.433143][ T5607] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.441911][ T5610] team0: Port device team_slave_1 added [ 105.548398][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.548418][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.548446][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.609737][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.609756][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.609783][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.669626][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.669644][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.669673][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.671936][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.671952][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.671980][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.681858][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.681901][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.681990][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.706621][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.706638][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.706707][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.855760][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.855779][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.855809][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.890792][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.890843][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.890918][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.405233][ T5609] hsr_slave_0: entered promiscuous mode [ 106.406308][ T5609] hsr_slave_1: entered promiscuous mode [ 106.451999][ T5606] hsr_slave_0: entered promiscuous mode [ 106.452963][ T5606] hsr_slave_1: entered promiscuous mode [ 106.455805][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 106.455886][ T5606] Cannot create hsr debugfs directory [ 106.487639][ T5608] hsr_slave_0: entered promiscuous mode [ 106.489440][ T5608] hsr_slave_1: entered promiscuous mode [ 106.490107][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 106.490131][ T5608] Cannot create hsr debugfs directory [ 106.511559][ T5610] hsr_slave_0: entered promiscuous mode [ 106.515302][ T5610] hsr_slave_1: entered promiscuous mode [ 106.518811][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 106.518871][ T5610] Cannot create hsr debugfs directory [ 106.663661][ T61] Bluetooth: hci0: command tx timeout [ 106.664725][ T61] Bluetooth: hci2: command tx timeout [ 106.743564][ T5611] Bluetooth: hci3: command tx timeout [ 106.905651][ T61] Bluetooth: hci4: command tx timeout [ 106.984008][ T61] Bluetooth: hci1: command tx timeout [ 107.668953][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.705208][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.738020][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.758044][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.794244][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.830322][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.850453][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.850666][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.850820][ T5607] bridge_slave_0: entered allmulticast mode [ 107.852505][ T5607] bridge_slave_0: entered promiscuous mode [ 107.881716][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.918026][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.920694][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.920813][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.920959][ T5607] bridge_slave_1: entered allmulticast mode [ 107.935176][ T5607] bridge_slave_1: entered promiscuous mode [ 108.040997][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.050651][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.127506][ T5607] team0: Port device team_slave_0 added [ 108.162055][ T5607] team0: Port device team_slave_1 added [ 108.169135][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.187851][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.211703][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.247411][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.278217][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.308984][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.310216][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.310231][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.310257][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.381339][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.396914][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.398340][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.398355][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.398392][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.588824][ T5607] hsr_slave_0: entered promiscuous mode [ 108.589801][ T5607] hsr_slave_1: entered promiscuous mode [ 108.590664][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 108.590688][ T5607] Cannot create hsr debugfs directory [ 108.647931][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.678604][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.707934][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.738048][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.743869][ T5611] Bluetooth: hci0: command tx timeout [ 108.744003][ T61] Bluetooth: hci2: command tx timeout [ 108.779135][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.812185][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.823771][ T61] Bluetooth: hci3: command tx timeout [ 108.859305][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.887613][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.985705][ T61] Bluetooth: hci4: command tx timeout [ 109.063677][ T61] Bluetooth: hci1: command tx timeout [ 109.259059][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.288385][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.309367][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.337294][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.364242][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.398732][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.432453][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.471772][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.623191][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.749797][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.797248][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.811757][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.847148][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.870970][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.876460][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.906336][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.926970][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.956872][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.976052][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.008237][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.008400][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.069089][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.069215][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.152731][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.193010][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.217340][ T1195] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.217535][ T1195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.260454][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.260602][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.332745][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.403226][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.411846][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.441164][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.466799][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.466906][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.598543][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.687167][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.687642][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.745144][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.745251][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.848757][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.981366][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.041674][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.041851][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.106447][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.106645][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.690229][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.070498][ T5609] veth0_vlan: entered promiscuous mode [ 112.158701][ T5609] veth1_vlan: entered promiscuous mode [ 112.191597][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.463082][ T5609] veth0_macvtap: entered promiscuous mode [ 112.510595][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.537783][ T5609] veth1_macvtap: entered promiscuous mode [ 112.577978][ T5608] veth0_vlan: entered promiscuous mode [ 112.648225][ T5608] veth1_vlan: entered promiscuous mode [ 112.669385][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.729285][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.081548][ T5608] veth0_macvtap: entered promiscuous mode [ 113.089323][ T5606] veth0_vlan: entered promiscuous mode [ 113.187122][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.211356][ T5608] veth1_macvtap: entered promiscuous mode [ 113.265391][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.298540][ T5606] veth1_vlan: entered promiscuous mode [ 113.404100][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.445266][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.554619][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.554650][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.755229][ T5606] veth0_macvtap: entered promiscuous mode [ 113.755663][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.755682][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.862240][ T5610] veth0_vlan: entered promiscuous mode [ 113.890772][ T5748] rxe_eth0 speed is unknown, defaulting to 1000 [ 113.909982][ T5606] veth1_macvtap: entered promiscuous mode [ 114.079494][ T5610] veth1_vlan: entered promiscuous mode [ 114.415926][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.568012][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.568037][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.640107][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.779776][ T5609] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 114.922444][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.922467][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.059113][ T5610] veth0_macvtap: entered promiscuous mode [ 115.070145][ T5607] veth0_vlan: entered promiscuous mode [ 115.178038][ T5610] veth1_macvtap: entered promiscuous mode [ 115.440968][ T5607] veth1_vlan: entered promiscuous mode [ 115.582969][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.582994][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.601388][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.653897][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.732974][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.732997][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.925072][ T5607] veth0_macvtap: entered promiscuous mode [ 116.065110][ T5607] veth1_macvtap: entered promiscuous mode [ 116.136606][ T214] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.139808][ T1125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.226131][ T5843] Invalid ELF header magic: != ELF [ 116.321490][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.426096][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.644664][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.644688][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.874446][ T1133] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.232422][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.232448][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.929966][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.929992][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.271255][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.271281][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.403242][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.403787][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.404212][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.423773][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.474791][ T1187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.475194][ T1187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.476311][ T1187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.659357][ T1187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.659813][ T1187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.660029][ T1187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.660240][ T1187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.660449][ T1187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.660675][ T1187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.745785][ T992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.746744][ T992] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.873679][ T992] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.914077][ T992] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.984706][ T5748] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.003940][ T5625] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.196077][ T5625] usb 4-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 120.222236][ T5748] usb 2-1: Using ep0 maxpacket: 32 [ 120.223049][ T5748] usb 2-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 120.251040][ T5625] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.251069][ T5625] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.251135][ T5625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.298458][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.298496][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.298539][ T5748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.546336][ T5748] usb 2-1: config 0 descriptor?? [ 120.631725][ T5748] hub 2-1:0.0: USB hub found [ 120.646458][ T5749] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.881422][ T5625] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 120.924373][ T5749] usb 5-1: Using ep0 maxpacket: 16 [ 120.928717][ T5749] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 120.930929][ T5749] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 120.930962][ T5749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 121.057218][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.057248][ T5749] usb 5-1: Product: syz [ 121.057265][ T5749] usb 5-1: Manufacturer: syz [ 121.057345][ T5749] usb 5-1: SerialNumber: syz [ 121.088296][ T5748] hub 2-1:0.0: 1 port detected [ 121.117577][ T5625] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 121.134203][ T5749] usb 5-1: config 0 descriptor?? [ 121.244883][ T5749] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 121.244983][ T5749] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 121.313179][ T5748] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 121.343516][ T1004] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.427646][ T5748] usbhid 2-1:0.0: can't add hid device: -71 [ 121.427845][ T5748] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 121.645666][ T1004] usb 3-1: Using ep0 maxpacket: 32 [ 121.651594][ T1004] usb 3-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 121.667891][ T1004] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.667921][ T1004] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 121.667946][ T1004] usb 3-1: config 0 interface 0 has no altsetting 0 [ 121.736213][ T5748] usb 2-1: USB disconnect, device number 2 [ 121.744826][ T1004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.744908][ T1004] usb 3-1: Product: syz [ 121.744926][ T1004] usb 3-1: Manufacturer: syz [ 121.744940][ T1004] usb 3-1: SerialNumber: syz [ 121.833609][ T5749] em28xx 5-1:0.0: chip ID is em2874 [ 121.930533][ T1004] usb 3-1: config 0 descriptor?? [ 121.992924][ T5625] usb 4-1: USB disconnect, device number 2 [ 122.168059][ T5620] usb 5-1: USB disconnect, device number 2 [ 122.277573][ T5620] em28xx 5-1:0.0: Disconnecting em28xx [ 122.426651][ T1004] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 122.871720][ T1004] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 122.873073][ T1004] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 122.906819][ T1004] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 122.962695][ T5620] em28xx: Freeing device [ 122.990469][ T1004] usb 3-1: USB disconnect, device number 2 [ 123.221116][ T5625] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.397964][ T5625] usb 4-1: Using ep0 maxpacket: 16 [ 123.408543][ T5625] usb 4-1: unable to get BOS descriptor or descriptor too short [ 123.408703][ T5625] usb 4-1: New USB device found: idVendor=064b, idProduct=7825, bcdDevice=88.5f [ 123.430177][ T5625] usb 4-1: config 2 has an invalid interface number: 132 but max is 0 [ 123.430205][ T5625] usb 4-1: config 2 has no interface number 0 [ 123.430233][ T5625] usb 4-1: config 2 interface 132 has no altsetting 0 [ 123.616471][ T5625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.616501][ T5625] usb 4-1: Product: syz [ 123.616517][ T5625] usb 4-1: Manufacturer: syz [ 123.616532][ T5625] usb 4-1: SerialNumber: syz [ 123.932793][ T5900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.989702][ T5900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.120973][ T5625] upd78f0730 4-1:2.132: upd78f0730 converter detected [ 124.291450][ T5914] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 124.330604][ T5625] usb 4-1: upd78f0730 converter now attached to ttyUSB0 [ 124.384297][ T5625] usb 4-1: USB disconnect, device number 3 [ 124.543521][ T1004] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.699023][ T1004] usb 3-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 124.701553][ T1004] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.701766][ T1004] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.749601][ T1004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.749633][ T1004] usb 3-1: Product: syz [ 124.749649][ T1004] usb 3-1: Manufacturer: syz [ 124.749666][ T1004] usb 3-1: SerialNumber: syz [ 124.866355][ T5625] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 124.906352][ T5625] upd78f0730 4-1:2.132: device disconnected [ 125.259320][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.434584][ T5625] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.583502][ T5625] usb 4-1: Using ep0 maxpacket: 32 [ 125.586140][ T5625] usb 4-1: New USB device found: idVendor=28bd, idProduct=0094, bcdDevice=0.00 [ 125.594811][ T5625] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.594871][ T5625] usb 4-1: config 0 has no interface number 0 [ 125.594953][ T5625] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.594982][ T5625] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.595090][ T5625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.672542][ T5625] usb 4-1: config 0 descriptor?? [ 125.713613][ T1004] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.904564][ T1004] usb 2-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 125.908915][ T1004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.000166][ T1004] usb 2-1: config 0 descriptor?? [ 126.079765][ T1004] cp210x 2-1:0.0: cp210x converter detected [ 126.319870][ T5625] uclogic 0003:28BD:0094.0001: pen parameters not found [ 126.319905][ T5625] uclogic 0003:28BD:0094.0001: interface is invalid, ignoring [ 126.545962][ T5713] usb 3-1: USB disconnect, device number 3 [ 126.629008][ T5616] usb 4-1: USB disconnect, device number 4 [ 126.713600][ T1004] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 126.713631][ T1004] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 126.817380][ T1004] usb 2-1: cp210x converter now attached to ttyUSB0 [ 126.880345][ T1004] usb 2-1: USB disconnect, device number 3 [ 126.989854][ T1004] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 127.049040][ T1004] cp210x 2-1:0.0: device disconnected [ 127.164061][ T5713] [ 127.166458][ T5713] ====================================================== [ 127.167777][ C0] BUG: workqueue leaked atomic, lock or RCU: kworker/u8:1[14] [ 127.167777][ C0] preempt=0x00000000 lock=5->0 RCU=2->2 workfn=usb_giveback_urb_bh [ 127.167942][ C0] INFO: lockdep is turned off. [ 127.168004][ C0] CPU: 0 UID: 0 PID: 14 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.168102][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 127.168150][ C0] Workqueue: events_unbound macvlan_process_broadcast [ 127.168250][ C0] Call Trace: [ 127.168274][ C0] [ 127.168296][ C0] dump_stack_lvl+0xe8/0x150 [ 127.168404][ C0] process_scheduled_works+0x12c2/0x1630 [ 127.168533][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 127.168621][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 127.168706][ C0] ? assign_work+0x3cf/0x5d0 [ 127.168801][ C0] bh_worker+0x4b3/0xbb0 [ 127.168872][ C0] tasklet_action+0xc/0x70 [ 127.168957][ C0] handle_softirqs+0x1d4/0x6c0 [ 127.169069][ C0] __local_bh_enable_ip+0x16f/0x2b0 [ 127.169155][ C0] macvlan_process_broadcast+0x26e/0x6a0 [ 127.169219][ C0] ? macvlan_process_broadcast+0x123/0x6a0 [ 127.169301][ C0] ? __pfx_macvlan_process_broadcast+0x10/0x10 [ 127.169392][ C0] ? rcu_is_watching+0x16/0xb0 [ 127.169481][ C0] ? process_scheduled_works+0x97a/0x1630 [ 127.169548][ C0] process_scheduled_works+0xc3d/0x1630 [ 127.169664][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 127.169763][ C0] ? assign_work+0x3cf/0x5d0 [ 127.169856][ C0] worker_thread+0xa47/0xfb0 [ 127.169942][ C0] kthread+0x38b/0x470 [ 127.170014][ C0] ? __pfx_worker_thread+0x10/0x10 [ 127.170075][ C0] ? __pfx_kthread+0x10/0x10 [ 127.170140][ C0] ret_from_fork+0x514/0xb70 [ 127.170214][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 127.170278][ C0] ? __switch_to+0xc78/0x1410 [ 127.170333][ C0] ? __pfx_kthread+0x10/0x10 [ 127.170405][ C0] ret_from_fork_asm+0x1a/0x30 [ 127.170484][ C0] [ 127.361036][ T5713] WARNING: possible circular locking dependency detected [ 127.368080][ T5713] syzkaller #0 Not tainted [ 127.372517][ T5713] ------------------------------------------------------ [ 127.379557][ T5713] kworker/1:3/5713 is trying to acquire lock: [ 127.385639][ T5713] ffffffff90a51f00 (rds_trans_sem){++++}-{4:4}, at: rds_trans_get_preferred+0x133/0x3c0 [ 127.395449][ T5713] [ 127.395449][ T5713] but task is already holding lock: [ 127.402848][ T5713] ffff88802dd1f450 (&id_priv->handler_mutex/1){+.+.}-{4:4}, at: cma_ib_req_handler+0x2ddb/0x50d0 [ 127.413409][ T5713] [ 127.413409][ T5713] which lock already depends on the new lock. [ 127.413409][ T5713] [ 127.423832][ T5713] [ 127.423832][ T5713] the existing dependency chain (in reverse order) is: [ 127.432863][ T5713] [ 127.432863][ T5713] -> #2 (&id_priv->handler_mutex/1){+.+.}-{4:4}: [ 127.441403][ T5713] mutex_lock_nested+0x55/0x1d0 [ 127.446800][ T5713] cma_ib_req_handler+0x2ddb/0x50d0 [ 127.452540][ T5713] cm_process_work+0x51/0x420 [ 127.457759][ T5713] cm_work_handler+0x96b2/0xdfa0 [ 127.463240][ T5713] process_scheduled_works+0xc3d/0x1630 [ 127.469329][ T5713] worker_thread+0xa47/0xfb0 [ 127.474459][ T5713] kthread+0x38b/0x470 [ 127.479067][ T5713] ret_from_fork+0x514/0xb70 [ 127.484196][ T5713] ret_from_fork_asm+0x1a/0x30 [ 127.489500][ T5713] [ 127.489500][ T5713] -> #1 (&id_priv->handler_mutex){+.+.}-{4:4}: [ 127.497854][ T5713] mutex_lock_nested+0x55/0x1d0 [ 127.503244][ T5713] rdma_destroy_id+0x1b/0x30 [ 127.508377][ T5713] rds_ib_laddr_check+0x397/0x540 [ 127.513943][ T5713] rds_trans_get_preferred+0x179/0x3c0 [ 127.519951][ T5713] rds_bind+0x687/0x870 [ 127.524652][ T5713] __sys_bind+0x2e9/0x410 [ 127.529527][ T5713] __x64_sys_bind+0x7a/0x90 [ 127.534579][ T5713] do_syscall_64+0x16a/0x530 [ 127.539714][ T5713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.546145][ T5713] [ 127.546145][ T5713] -> #0 (rds_trans_sem){++++}-{4:4}: [ 127.553636][ T5713] __lock_acquire+0x164c/0x2de0 [ 127.559036][ T5713] lock_acquire+0x115/0x350 [ 127.564083][ T5713] down_read+0x92/0x200 [ 127.568786][ T5713] rds_trans_get_preferred+0x133/0x3c0 [ 127.574791][ T5713] __rds_conn_create+0xa29/0x2230 [ 127.580354][ T5713] rds_conn_create+0x43/0x60 [ 127.585496][ T5713] rds_ib_cm_handle_connect+0x446/0x1120 [ 127.591674][ T5713] rds_rdma_cm_event_handler_cmn+0x691/0xa30 [ 127.598191][ T5713] cma_cm_event_handler+0xac/0x2c0 [ 127.603839][ T5713] cma_ib_req_handler+0x3443/0x50d0 [ 127.609747][ T5713] cm_process_work+0x51/0x420 [ 127.614963][ T5713] cm_work_handler+0x96b2/0xdfa0 [ 127.620444][ T5713] process_scheduled_works+0xc3d/0x1630 [ 127.626537][ T5713] worker_thread+0xa47/0xfb0 [ 127.631689][ T5713] kthread+0x38b/0x470 [ 127.636298][ T5713] ret_from_fork+0x514/0xb70 [ 127.641451][ T5713] ret_from_fork_asm+0x1a/0x30 [ 127.646753][ T5713] [ 127.646753][ T5713] other info that might help us debug this: [ 127.646753][ T5713] [ 127.656988][ T5713] Chain exists of: [ 127.656988][ T5713] rds_trans_sem --> &id_priv->handler_mutex --> &id_priv->handler_mutex/1 [ 127.656988][ T5713] [ 127.671444][ T5713] Possible unsafe locking scenario: [ 127.671444][ T5713] [ 127.678913][ T5713] CPU0 CPU1 [ 127.684287][ T5713] ---- ---- [ 127.689664][ T5713] lock(&id_priv->handler_mutex/1); [ 127.694970][ T5713] lock(&id_priv->handler_mutex); [ 127.702614][ T5713] lock(&id_priv->handler_mutex/1); [ 127.710442][ T5713] rlock(rds_trans_sem); [ 127.714792][ T5713] [ 127.714792][ T5713] *** DEADLOCK *** [ 127.714792][ T5713] [ 127.722943][ T5713] locks held by kworker/1:3/5713: 4, on CPU#1: [ 127.729202][ T5713] #0: ffff8880333ba140 ((wq_completion)ib_cm){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 127.740132][ T5713] #1: ffffc900053d7c40 ((work_completion)(&(&work->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 127.752687][ T5713] #2: ffff88803869a450 (&id_priv->handler_mutex){+.+.}-{4:4}, at: cma_ib_req_handler+0x218b/0x50d0 [ 127.763494][ T5713] #3: ffff88802dd1f450 (&id_priv->handler_mutex/1){+.+.}-{4:4}, at: cma_ib_req_handler+0x2ddb/0x50d0 [ 127.774489][ T5713] [ 127.774489][ T5713] stack backtrace: [ 127.780403][ T5713] CPU: 1 UID: 0 PID: 5713 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.790320][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 127.800400][ T5713] Workqueue: ib_cm cm_work_handler [ 127.805536][ T5713] Call Trace: [ 127.808853][ T5713] [ 127.811803][ T5713] dump_stack_lvl+0xe8/0x150 [ 127.816422][ T5713] print_circular_bug+0x2e2/0x300 [ 127.821467][ T5713] check_noncircular+0x12f/0x150 [ 127.826426][ T5713] __lock_acquire+0x164c/0x2de0 [ 127.831319][ T5713] lock_acquire+0x115/0x350 [ 127.835852][ T5713] ? rds_trans_get_preferred+0x133/0x3c0 [ 127.841525][ T5713] down_read+0x92/0x200 [ 127.845704][ T5713] ? rds_trans_get_preferred+0x133/0x3c0 [ 127.851362][ T5713] ? __pfx_down_read+0x10/0x10 [ 127.856154][ T5713] ? rds_cong_from_addr+0x347/0x360 [ 127.861372][ T5713] rds_trans_get_preferred+0x133/0x3c0 [ 127.866867][ T5713] __rds_conn_create+0xa29/0x2230 [ 127.871918][ T5713] ? __rds_conn_create+0x2d7/0x2230 [ 127.877239][ T5713] ? __pfx___rds_conn_create+0x10/0x10 [ 127.882752][ T5713] ? lockdep_unlock+0x5c/0xd0 [ 127.887513][ T5713] ? __lock_acquire+0x1511/0x2de0 [ 127.892595][ T5713] rds_conn_create+0x43/0x60 [ 127.897230][ T5713] rds_ib_cm_handle_connect+0x446/0x1120 [ 127.902909][ T5713] ? __pfx_rds_ib_cm_handle_connect+0x10/0x10 [ 127.909030][ T5713] ? do_raw_spin_lock+0x12b/0x2f0 [ 127.914092][ T5713] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 127.920067][ T5713] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 127.925414][ T5713] ? reacquire_held_locks+0x117/0x1a0 [ 127.930843][ T5713] rds_rdma_cm_event_handler_cmn+0x691/0xa30 [ 127.936875][ T5713] ? __pfx_rds_rdma_cm_event_handler_cmn+0x10/0x10 [ 127.943409][ T5713] ? trace_cm_event_handler+0x81/0x1f0 [ 127.948897][ T5713] ? __pfx_rds_rdma_cm_event_handler+0x10/0x10 [ 127.955069][ T5713] ? cma_listen_handler+0x100/0x160 [ 127.960290][ T5713] cma_cm_event_handler+0xac/0x2c0 [ 127.965423][ T5713] cma_ib_req_handler+0x3443/0x50d0 [ 127.970646][ T5713] ? check_path+0x21/0x40 [ 127.974998][ T5713] ? __pfx_cma_ib_req_handler+0x10/0x10 [ 127.980575][ T5713] ? __lock_acquire+0x747/0x2de0 [ 127.985660][ T5713] ? do_raw_spin_lock+0x12b/0x2f0 [ 127.990752][ T5713] cm_process_work+0x51/0x420 [ 127.995477][ T5713] cm_work_handler+0x96b2/0xdfa0 [ 128.000484][ T5713] ? irqentry_exit+0x2a0/0x9b0 [ 128.005282][ T5713] ? __pfx_cm_work_handler+0x10/0x10 [ 128.010596][ T5713] ? irqentry_exit+0x2a0/0x9b0 [ 128.015392][ T5713] ? trace_irq_disable+0x3b/0x140 [ 128.020446][ T5713] ? rcu_is_watching+0x16/0xb0 [ 128.025235][ T5713] ? process_scheduled_works+0x97a/0x1630 [ 128.030986][ T5713] process_scheduled_works+0xc3d/0x1630 [ 128.036578][ T5713] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.042589][ T5713] ? assign_work+0x3cf/0x5d0 [ 128.047208][ T5713] worker_thread+0xa47/0xfb0 [ 128.051826][ T5713] kthread+0x38b/0x470 [ 128.055923][ T5713] ? __pfx_worker_thread+0x10/0x10 [ 128.061141][ T5713] ? __pfx_kthread+0x10/0x10 [ 128.065751][ T5713] ret_from_fork+0x514/0xb70 [ 128.070421][ T5713] ? __pfx_ret_from_fork+0x10/0x10 [ 128.076132][ T5713] ? __switch_to+0xc78/0x1410 [ 128.080849][ T5713] ? __pfx_kthread+0x10/0x10 [ 128.085475][ T5713] ret_from_fork_asm+0x1a/0x30 [ 128.090275][ T5713] [ 128.222156][ T10] RDS/IB: Active conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 128.269507][ T10] RDS/IB: Passive conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 128.383463][ T5616] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.553451][ T5616] usb 3-1: Using ep0 maxpacket: 16 [ 128.554551][ T5616] usb 3-1: New USB device found: idVendor=0c70, idProduct=f00d, bcdDevice=0.00 [ 128.555616][ T5616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 128.555659][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.557699][ T5616] usb 3-1: config 0 descriptor?? [ 128.559347][ T5955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.971741][ T5616] aquacomputer_d5next 0003:0C70:F00D.0002: unknown main item tag 0x2 [ 128.971791][ T5616] aquacomputer_d5next 0003:0C70:F00D.0002: unknown main item tag 0x0 [ 128.971820][ T5616] aquacomputer_d5next 0003:0C70:F00D.0002: unknown main item tag 0x0 [ 128.971849][ T5616] aquacomputer_d5next 0003:0C70:F00D.0002: unknown main item tag 0x0 [ 128.971876][ T5616] aquacomputer_d5next 0003:0C70:F00D.0002: unknown main item tag 0x0 [ 128.971901][ T5616] aquacomputer_d5next 0003:0C70:F00D.0002: unknown main item tag 0x0 [ 128.971927][ T5616] aquacomputer_d5next 0003:0C70:F00D.0002: unknown main item tag 0x0 [ 128.971952][ T5616] aquacomputer_d5next 0003:0C70:F00D.0002: unknown main item tag 0x0 [ 128.971978][ T5616] aquacomputer_d5next 0003:0C70:F00D.0002: unknown main item tag 0x0 [ 128.972005][ T5616] aquacomputer_d5next 0003:0C70:F00D.0002: unknown main item tag 0x0 [ 128.972516][ T5616] aquacomputer_d5next 0003:0C70:F00D.0002: unexpected long global item [ 128.973009][ T5616] aquacomputer_d5next 0003:0C70:F00D.0002: probe with driver aquacomputer_d5next failed with error -22 [ 129.173020][ T5713] usb 3-1: USB disconnect, device number 4 [ 132.987112][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.987154][ T1341] ieee802154 phy1 wpan1: encryption failed: -22