last executing test programs: 584.936884ms ago: executing program 0 (id=1): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 367.227222ms ago: executing program 0 (id=6): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r0, 0x4, r0}, 0x6) 207.77223ms ago: executing program 1 (id=2): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x4e21, 0x4b, 0x2}, {0x0, 0x0, 0x4, 0x34a, 0x0, 0x0, 0x9c0, 0x6}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4040) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x158) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 139.197483ms ago: executing program 0 (id=7): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/177, 0xb1}, {&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000001140)=""/4058, 0xfda}, {&(0x7f0000002940)=""/4093, 0xffd}, {&(0x7f0000000800)=""/185, 0xb9}, {&(0x7f0000000940)=""/199, 0xc7}], 0x6}, 0x10100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80045b10, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 85.574914][ T5821] cgroup: Unknown subsys name 'net' [ 85.692543][ T5821] cgroup: Unknown subsys name 'cpuset' [ 85.701520][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.606282][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.948750][ T1208] cfg80211: failed to load regulatory.db [ 92.572063][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.591419][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.599992][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.600434][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.608531][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.615546][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.623041][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.629354][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.636184][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.643341][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.657438][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.659392][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.665512][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.677289][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.679728][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.687139][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.693628][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.702874][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.707391][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.727125][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.738528][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.753643][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.761832][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.762413][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.777929][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.425384][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 93.536422][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 93.601332][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 93.669606][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 93.873416][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.880857][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.888403][ T5842] bridge_slave_0: entered allmulticast mode [ 93.895791][ T5842] bridge_slave_0: entered promiscuous mode [ 93.916185][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.923616][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.931087][ T5838] bridge_slave_0: entered allmulticast mode [ 93.939798][ T5838] bridge_slave_0: entered promiscuous mode [ 93.947139][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 93.959398][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.966909][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.974136][ T5842] bridge_slave_1: entered allmulticast mode [ 93.981825][ T5842] bridge_slave_1: entered promiscuous mode [ 94.008160][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.015324][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.023236][ T5838] bridge_slave_1: entered allmulticast mode [ 94.030592][ T5838] bridge_slave_1: entered promiscuous mode [ 94.162300][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.169677][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.177001][ T5833] bridge_slave_0: entered allmulticast mode [ 94.184566][ T5833] bridge_slave_0: entered promiscuous mode [ 94.195043][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.208930][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.225906][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.235400][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.243436][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.250909][ T5832] bridge_slave_0: entered allmulticast mode [ 94.259327][ T5832] bridge_slave_0: entered promiscuous mode [ 94.267957][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.275110][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.282506][ T5833] bridge_slave_1: entered allmulticast mode [ 94.289990][ T5833] bridge_slave_1: entered promiscuous mode [ 94.333499][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.359488][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.367096][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.374288][ T5832] bridge_slave_1: entered allmulticast mode [ 94.382857][ T5832] bridge_slave_1: entered promiscuous mode [ 94.469411][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.481619][ T5838] team0: Port device team_slave_0 added [ 94.506003][ T5842] team0: Port device team_slave_0 added [ 94.515650][ T5842] team0: Port device team_slave_1 added [ 94.524446][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.536305][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.548514][ T5838] team0: Port device team_slave_1 added [ 94.597884][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.650092][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.657423][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.664634][ T5845] bridge_slave_0: entered allmulticast mode [ 94.673311][ T5845] bridge_slave_0: entered promiscuous mode [ 94.712628][ T5832] team0: Port device team_slave_0 added [ 94.735572][ T5833] team0: Port device team_slave_0 added [ 94.742253][ T5840] Bluetooth: hci2: command tx timeout [ 94.747138][ T51] Bluetooth: hci0: command tx timeout [ 94.752653][ T5833] team0: Port device team_slave_1 added [ 94.760132][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.774491][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.783256][ T5845] bridge_slave_1: entered allmulticast mode [ 94.798953][ T5845] bridge_slave_1: entered promiscuous mode [ 94.806263][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.813651][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.840357][ T51] Bluetooth: hci1: command tx timeout [ 94.840517][ T51] Bluetooth: hci3: command tx timeout [ 94.846073][ T5840] Bluetooth: hci4: command tx timeout [ 94.856840][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.872635][ T5832] team0: Port device team_slave_1 added [ 94.879990][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.887562][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.913723][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.951691][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.958901][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.985436][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.033363][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.040515][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.067130][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.109745][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.120512][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.127632][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.155588][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.169848][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.176906][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.203188][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.222687][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.229762][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.255969][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.269139][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.276142][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.302212][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.334121][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.398983][ T5842] hsr_slave_0: entered promiscuous mode [ 95.405551][ T5842] hsr_slave_1: entered promiscuous mode [ 95.479868][ T5845] team0: Port device team_slave_0 added [ 95.506151][ T5838] hsr_slave_0: entered promiscuous mode [ 95.512949][ T5838] hsr_slave_1: entered promiscuous mode [ 95.519780][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.527888][ T5838] Cannot create hsr debugfs directory [ 95.576373][ T5845] team0: Port device team_slave_1 added [ 95.617352][ T5832] hsr_slave_0: entered promiscuous mode [ 95.623986][ T5832] hsr_slave_1: entered promiscuous mode [ 95.630399][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.638089][ T5832] Cannot create hsr debugfs directory [ 95.659511][ T5833] hsr_slave_0: entered promiscuous mode [ 95.666080][ T5833] hsr_slave_1: entered promiscuous mode [ 95.672886][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.680807][ T5833] Cannot create hsr debugfs directory [ 95.707057][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.714052][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.740035][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.795798][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.803263][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.829469][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.106777][ T5845] hsr_slave_0: entered promiscuous mode [ 96.113189][ T5845] hsr_slave_1: entered promiscuous mode [ 96.120304][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.128525][ T5845] Cannot create hsr debugfs directory [ 96.413376][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.457686][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.486020][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.498880][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.575979][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.608685][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.626028][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.638457][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.712661][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.732825][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.773785][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.785779][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.819999][ T5840] Bluetooth: hci2: command tx timeout [ 96.827132][ T5840] Bluetooth: hci0: command tx timeout [ 96.891830][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.899190][ T5840] Bluetooth: hci4: command tx timeout [ 96.899237][ T5840] Bluetooth: hci1: command tx timeout [ 96.899272][ T5840] Bluetooth: hci3: command tx timeout [ 96.937241][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.973909][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.003422][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.062983][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.086263][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.105651][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.118320][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.131883][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.212685][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.228992][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.236245][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.259341][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.284939][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.292111][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.339645][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.385268][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.408223][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.434124][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.441339][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.470630][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.477870][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.499461][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.524325][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.531594][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.542113][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.549369][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.589022][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.659893][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.667111][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.706058][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.713278][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.816191][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.913338][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.981732][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.989451][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.034483][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.041743][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.082014][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.367573][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.430570][ T5838] veth0_vlan: entered promiscuous mode [ 98.483190][ T5838] veth1_vlan: entered promiscuous mode [ 98.585110][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.609615][ T5842] veth0_vlan: entered promiscuous mode [ 98.684791][ T5842] veth1_vlan: entered promiscuous mode [ 98.705784][ T5838] veth0_macvtap: entered promiscuous mode [ 98.750655][ T5832] veth0_vlan: entered promiscuous mode [ 98.761167][ T5838] veth1_macvtap: entered promiscuous mode [ 98.789746][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.812238][ T5832] veth1_vlan: entered promiscuous mode [ 98.855986][ T5842] veth0_macvtap: entered promiscuous mode [ 98.872564][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.884452][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.900660][ T51] Bluetooth: hci0: command tx timeout [ 98.900671][ T5840] Bluetooth: hci2: command tx timeout [ 98.933352][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.943412][ T5842] veth1_macvtap: entered promiscuous mode [ 98.972469][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.982399][ T5840] Bluetooth: hci3: command tx timeout [ 98.982421][ T51] Bluetooth: hci1: command tx timeout [ 98.988032][ T5835] Bluetooth: hci4: command tx timeout [ 98.988204][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.988300][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.988332][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.016900][ T5832] veth0_macvtap: entered promiscuous mode [ 99.092820][ T5832] veth1_macvtap: entered promiscuous mode [ 99.134264][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.164725][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.215072][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.229094][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.239000][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.248081][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.315775][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.330254][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.362665][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.372701][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.382218][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.391521][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.411650][ T5845] veth0_vlan: entered promiscuous mode [ 99.445063][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.464806][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.494505][ T5845] veth1_vlan: entered promiscuous mode [ 99.571145][ T5833] veth0_vlan: entered promiscuous mode [ 99.600372][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.614342][ T5833] veth1_vlan: entered promiscuous mode [ 99.620446][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.632019][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.640578][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.684274][ T5845] veth0_macvtap: entered promiscuous mode [ 99.738254][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.781986][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.787231][ T5845] veth1_macvtap: entered promiscuous mode [ 99.800518][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.872832][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.886547][ T5833] veth0_macvtap: entered promiscuous mode [ 99.896118][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.959090][ T5833] veth1_macvtap: entered promiscuous mode [ 99.989898][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.067493][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.085355][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.094315][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.095354][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.111734][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.125802][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.129832][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.156464][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.238573][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.302186][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.336540][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.346787][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.348901][ T5958] Zero length message leads to an empty skb [ 100.355521][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.375291][ T5956] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 100.433212][ T5956] team0: Port device netdevsim0 added [ 100.505308][ T49] [ 100.507716][ T49] ====================================================== [ 100.514749][ T49] WARNING: possible circular locking dependency detected [ 100.521793][ T49] 6.16.0-syzkaller #0 Not tainted [ 100.526829][ T49] ------------------------------------------------------ [ 100.533858][ T49] kworker/u8:3/49 is trying to acquire lock: [ 100.539852][ T49] ffff8880595e8e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_device_event+0x544/0xa20 [ 100.549828][ T49] [ 100.549828][ T49] but task is already holding lock: [ 100.557210][ T49] ffff888058264d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x4a0/0x7e0 [ 100.567887][ T49] [ 100.567887][ T49] which lock already depends on the new lock. [ 100.567887][ T49] [ 100.578309][ T49] [ 100.578309][ T49] the existing dependency chain (in reverse order) is: [ 100.587337][ T49] [ 100.587337][ T49] -> #1 (&dev_instance_lock_key#20){+.+.}-{4:4}: [ 100.595879][ T49] lock_acquire+0x120/0x360 [ 100.600920][ T49] __mutex_lock+0x182/0xe80 [ 100.605958][ T49] dev_set_mtu+0x10e/0x260 [ 100.610917][ T49] team_add_slave+0x8b8/0x2840 [ 100.616226][ T49] do_set_master+0x530/0x6d0 [ 100.621372][ T49] do_setlink+0xcf0/0x41c0 [ 100.626333][ T49] rtnl_newlink+0x160b/0x1c70 [ 100.631552][ T49] rtnetlink_rcv_msg+0x7cc/0xb70 [ 100.637036][ T49] netlink_rcv_skb+0x205/0x470 [ 100.642342][ T49] netlink_unicast+0x75c/0x8e0 [ 100.647646][ T49] netlink_sendmsg+0x805/0xb30 [ 100.652947][ T49] __sock_sendmsg+0x21c/0x270 [ 100.658164][ T49] ____sys_sendmsg+0x505/0x830 [ 100.663467][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 100.668681][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 100.674155][ T49] do_syscall_64+0xfa/0x3b0 [ 100.679193][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.685736][ T49] [ 100.685736][ T49] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 100.693935][ T49] validate_chain+0xb9b/0x2140 [ 100.699255][ T49] __lock_acquire+0xab9/0xd20 [ 100.704470][ T49] lock_acquire+0x120/0x360 [ 100.709507][ T49] __mutex_lock+0x182/0xe80 [ 100.714542][ T49] team_device_event+0x544/0xa20 [ 100.720009][ T49] notifier_call_chain+0x1b3/0x3e0 [ 100.725654][ T49] netif_state_change+0x284/0x3a0 [ 100.731217][ T49] linkwatch_do_dev+0x117/0x170 [ 100.736597][ T49] __linkwatch_run_queue+0x56d/0x7e0 [ 100.742416][ T49] linkwatch_event+0x4c/0x60 [ 100.747542][ T49] process_scheduled_works+0xade/0x17b0 [ 100.753621][ T49] worker_thread+0x8a0/0xda0 [ 100.758746][ T49] kthread+0x70e/0x8a0 [ 100.763355][ T49] ret_from_fork+0x3fc/0x770 [ 100.768477][ T49] ret_from_fork_asm+0x1a/0x30 [ 100.773776][ T49] [ 100.773776][ T49] other info that might help us debug this: [ 100.773776][ T49] [ 100.784011][ T49] Possible unsafe locking scenario: [ 100.784011][ T49] [ 100.791469][ T49] CPU0 CPU1 [ 100.796840][ T49] ---- ---- [ 100.802215][ T49] lock(&dev_instance_lock_key#20); [ 100.807527][ T49] lock(team->team_lock_key#2); [ 100.815030][ T49] lock(&dev_instance_lock_key#20); [ 100.822865][ T49] lock(team->team_lock_key#2); [ 100.827831][ T49] [ 100.827831][ T49] *** DEADLOCK *** [ 100.827831][ T49] [ 100.835987][ T49] 4 locks held by kworker/u8:3/49: [ 100.841120][ T49] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 100.852813][ T49] #1: ffffc90000b97bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 100.863807][ T49] #2: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 100.872829][ T49] #3: ffff888058264d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x4a0/0x7e0 [ 100.883925][ T49] [ 100.883925][ T49] stack backtrace: [ 100.889854][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 100.889876][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.889888][ T49] Workqueue: events_unbound linkwatch_event [ 100.889917][ T49] Call Trace: [ 100.889930][ T49] [ 100.889938][ T49] dump_stack_lvl+0x189/0x250 [ 100.889961][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.889979][ T49] ? __pfx__printk+0x10/0x10 [ 100.890007][ T49] ? print_lock_name+0xde/0x100 [ 100.890028][ T49] print_circular_bug+0x2ee/0x310 [ 100.890051][ T49] check_noncircular+0x134/0x160 [ 100.890073][ T49] validate_chain+0xb9b/0x2140 [ 100.890101][ T49] __lock_acquire+0xab9/0xd20 [ 100.890119][ T49] ? team_device_event+0x544/0xa20 [ 100.890134][ T49] lock_acquire+0x120/0x360 [ 100.890148][ T49] ? team_device_event+0x544/0xa20 [ 100.890165][ T49] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 100.890195][ T49] __mutex_lock+0x182/0xe80 [ 100.890213][ T49] ? team_device_event+0x544/0xa20 [ 100.890231][ T49] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 100.890255][ T49] ? team_device_event+0x544/0xa20 [ 100.890271][ T49] ? __pfx___mutex_lock+0x10/0x10 [ 100.890292][ T49] ? fib_sync_down_dev+0x66/0x7b0 [ 100.890319][ T49] team_device_event+0x544/0xa20 [ 100.890336][ T49] notifier_call_chain+0x1b3/0x3e0 [ 100.890358][ T49] netif_state_change+0x284/0x3a0 [ 100.890380][ T49] ? __pfx_netif_state_change+0x10/0x10 [ 100.890400][ T49] ? dev_deactivate+0x129/0x1b0 [ 100.890423][ T49] ? nsim_get_iflink+0x20/0x280 [ 100.890448][ T49] ? rfc2863_policy+0x1c6/0x3e0 [ 100.890464][ T49] linkwatch_do_dev+0x117/0x170 [ 100.890480][ T49] __linkwatch_run_queue+0x56d/0x7e0 [ 100.890498][ T49] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 100.890515][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.890529][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 100.890546][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 100.890564][ T49] linkwatch_event+0x4c/0x60 [ 100.890579][ T49] process_scheduled_works+0xade/0x17b0 [ 100.890607][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.890631][ T49] worker_thread+0x8a0/0xda0 [ 100.890658][ T49] kthread+0x70e/0x8a0 [ 100.890680][ T49] ? __pfx_worker_thread+0x10/0x10 [ 100.890698][ T49] ? __pfx_kthread+0x10/0x10 [ 100.890719][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.890734][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.890750][ T49] ? __pfx_kthread+0x10/0x10 [ 100.890771][ T49] ret_from_fork+0x3fc/0x770 [ 100.890788][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 100.890805][ T49] ? __switch_to_asm+0x39/0x70 [ 100.890825][ T49] ? __switch_to_asm+0x33/0x70 [ 100.890844][ T49] ? __pfx_kthread+0x10/0x10 [ 100.890865][ T49] ret_from_fork_asm+0x1a/0x30 [ 100.890892][ T49] [ 101.036634][ T51] Bluetooth: hci0: command tx timeout [ 101.064878][ T5840] Bluetooth: hci2: command tx timeout [ 101.066778][ T51] Bluetooth: hci3: command tx timeout [ 101.070525][ T5840] Bluetooth: hci4: command tx timeout [ 101.076307][ T51] Bluetooth: hci1: command tx timeout [ 101.205468][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.214524][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.229071][ T5833] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 101.254529][ T5845] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 101.268460][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.282110][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.285164][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.295829][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.308547][ T5833] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 101.359435][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.369581][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50