last executing test programs: 854.770437ms ago: executing program 0 (id=1): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x80, 0x80, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x3}, {0x0, 0xffff1000, 0xc, 0x2, 0x3, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x8080000, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x2, 0x400}, {}, 0xddf8ffdb, 0x0, 0x11111001, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 0s ago: executing program 0 (id=6): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. [ 83.341951][ T5819] cgroup: Unknown subsys name 'net' [ 83.489294][ T5819] cgroup: Unknown subsys name 'cpuset' [ 83.498503][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.188810][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.979886][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.995532][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.025540][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.035947][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.045768][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.096451][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.106359][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.125495][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.150815][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.159107][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.204471][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.215470][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.223472][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.232096][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.240224][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.289867][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.303628][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.311362][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.319535][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.327640][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.339121][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.355462][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.365968][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.374139][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.383166][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.842876][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 89.090539][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.200920][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 89.225675][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.245004][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.252521][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.261501][ T5830] bridge_slave_0: entered allmulticast mode [ 89.269371][ T5830] bridge_slave_0: entered promiscuous mode [ 89.319652][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.326937][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.334304][ T5830] bridge_slave_1: entered allmulticast mode [ 89.342213][ T5830] bridge_slave_1: entered promiscuous mode [ 89.378948][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.446308][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.459669][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.563530][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.570869][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.579201][ T5834] bridge_slave_0: entered allmulticast mode [ 89.587532][ T5834] bridge_slave_0: entered promiscuous mode [ 89.596898][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.604231][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.612089][ T5834] bridge_slave_1: entered allmulticast mode [ 89.620447][ T5834] bridge_slave_1: entered promiscuous mode [ 89.643116][ T5830] team0: Port device team_slave_0 added [ 89.712735][ T5830] team0: Port device team_slave_1 added [ 89.733308][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.740938][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.749081][ T5837] bridge_slave_0: entered allmulticast mode [ 89.756616][ T5837] bridge_slave_0: entered promiscuous mode [ 89.790908][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.800384][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.808432][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.816352][ T5844] bridge_slave_0: entered allmulticast mode [ 89.824527][ T5844] bridge_slave_0: entered promiscuous mode [ 89.850623][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.857952][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.865837][ T5837] bridge_slave_1: entered allmulticast mode [ 89.873132][ T5837] bridge_slave_1: entered promiscuous mode [ 89.899512][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.924001][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.931404][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.938805][ T5844] bridge_slave_1: entered allmulticast mode [ 89.946618][ T5844] bridge_slave_1: entered promiscuous mode [ 90.051321][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.058430][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.088984][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.104466][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.113941][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.121437][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.129014][ T5842] bridge_slave_0: entered allmulticast mode [ 90.136483][ T5842] bridge_slave_0: entered promiscuous mode [ 90.146055][ T5840] Bluetooth: hci0: command tx timeout [ 90.151752][ T5834] team0: Port device team_slave_0 added [ 90.160622][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.170720][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.177963][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.204043][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.217989][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.227277][ T5840] Bluetooth: hci1: command tx timeout [ 90.243441][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.250698][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.258003][ T5842] bridge_slave_1: entered allmulticast mode [ 90.265382][ T5842] bridge_slave_1: entered promiscuous mode [ 90.273960][ T5834] team0: Port device team_slave_1 added [ 90.297678][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.306431][ T5840] Bluetooth: hci2: command tx timeout [ 90.385857][ T5840] Bluetooth: hci3: command tx timeout [ 90.387237][ T5844] team0: Port device team_slave_0 added [ 90.399533][ T5837] team0: Port device team_slave_0 added [ 90.421338][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.428750][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.455709][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.466008][ T5840] Bluetooth: hci4: command tx timeout [ 90.469863][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.479058][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.505091][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.533865][ T5844] team0: Port device team_slave_1 added [ 90.541729][ T5837] team0: Port device team_slave_1 added [ 90.550421][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.564007][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.602417][ T5830] hsr_slave_0: entered promiscuous mode [ 90.609071][ T5830] hsr_slave_1: entered promiscuous mode [ 90.687553][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.694578][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.721277][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.747763][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.754842][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.781267][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.795349][ T5842] team0: Port device team_slave_0 added [ 90.815294][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.822284][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.848615][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.889335][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.896757][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.922797][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.936268][ T5842] team0: Port device team_slave_1 added [ 90.986253][ T5834] hsr_slave_0: entered promiscuous mode [ 90.992684][ T5834] hsr_slave_1: entered promiscuous mode [ 90.999408][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 91.005332][ T5834] Cannot create hsr debugfs directory [ 91.066634][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.073602][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.100124][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.173943][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.181380][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.208012][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.225822][ T5837] hsr_slave_0: entered promiscuous mode [ 91.232402][ T5837] hsr_slave_1: entered promiscuous mode [ 91.239115][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 91.246035][ T5837] Cannot create hsr debugfs directory [ 91.263128][ T5844] hsr_slave_0: entered promiscuous mode [ 91.269851][ T5844] hsr_slave_1: entered promiscuous mode [ 91.276463][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 91.282241][ T5844] Cannot create hsr debugfs directory [ 91.467118][ T5842] hsr_slave_0: entered promiscuous mode [ 91.473557][ T5842] hsr_slave_1: entered promiscuous mode [ 91.480039][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 91.486889][ T5842] Cannot create hsr debugfs directory [ 91.886609][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.915353][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.960748][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.999399][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.058886][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.086740][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.098840][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.120695][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.155140][ T1212] cfg80211: failed to load regulatory.db [ 92.225515][ T5840] Bluetooth: hci0: command tx timeout [ 92.234654][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.254013][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.265108][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.281129][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.306003][ T5840] Bluetooth: hci1: command tx timeout [ 92.385797][ T5840] Bluetooth: hci2: command tx timeout [ 92.407848][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.451674][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.464265][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.475828][ T5840] Bluetooth: hci3: command tx timeout [ 92.498551][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.545635][ T5840] Bluetooth: hci4: command tx timeout [ 92.597407][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.604406][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.618147][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.629804][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.641516][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.683590][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.738056][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.745419][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.772211][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.787086][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.794260][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.886319][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.941946][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.949167][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.980262][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.987494][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.010515][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.029036][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.121208][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.156025][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.199304][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.206568][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.239558][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.247345][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.269052][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.276265][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.299616][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.344770][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.352263][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.461017][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.503135][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.510379][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.564220][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.609485][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.616792][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.843159][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.092256][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.141827][ T5844] veth0_vlan: entered promiscuous mode [ 94.210363][ T5844] veth1_vlan: entered promiscuous mode [ 94.316252][ T5840] Bluetooth: hci0: command tx timeout [ 94.364520][ T5844] veth0_macvtap: entered promiscuous mode [ 94.386106][ T5840] Bluetooth: hci1: command tx timeout [ 94.393548][ T5834] veth0_vlan: entered promiscuous mode [ 94.432217][ T5844] veth1_macvtap: entered promiscuous mode [ 94.465783][ T5840] Bluetooth: hci2: command tx timeout [ 94.473484][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.495110][ T5834] veth1_vlan: entered promiscuous mode [ 94.515080][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.542364][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.555768][ T5840] Bluetooth: hci3: command tx timeout [ 94.583093][ T1104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.609127][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.619755][ T1104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.628925][ T5840] Bluetooth: hci4: command tx timeout [ 94.644011][ T5830] veth0_vlan: entered promiscuous mode [ 94.659672][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.669345][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.725014][ T5830] veth1_vlan: entered promiscuous mode [ 94.767985][ T5834] veth0_macvtap: entered promiscuous mode [ 94.806053][ T5834] veth1_macvtap: entered promiscuous mode [ 94.861298][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.880637][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.900699][ T5837] veth0_vlan: entered promiscuous mode [ 94.931243][ T5830] veth0_macvtap: entered promiscuous mode [ 94.941265][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.965922][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.972087][ T5842] veth0_vlan: entered promiscuous mode [ 94.973797][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.981814][ T5837] veth1_vlan: entered promiscuous mode [ 94.998719][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.010163][ T5830] veth1_macvtap: entered promiscuous mode [ 95.051672][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.077454][ T5842] veth1_vlan: entered promiscuous mode [ 95.091747][ T78] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.112927][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.140438][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.152186][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.162325][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.183105][ T5837] veth0_macvtap: entered promiscuous mode [ 95.196601][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.230183][ T5837] veth1_macvtap: entered promiscuous mode [ 95.295606][ T1162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.304740][ T1104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.328882][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.352912][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.388763][ T5842] veth0_macvtap: entered promiscuous mode [ 95.477320][ T1104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.490754][ T1104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.524329][ T5842] veth1_macvtap: entered promiscuous mode [ 95.578657][ T1104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.630497][ T1104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.697366][ T1104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.722524][ T1104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.738691][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.798464][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.826939][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.844917][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.870128][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.909511][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.938454][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.068870][ T5844] [ 96.071360][ T5844] ============================================ [ 96.077559][ T5844] WARNING: possible recursive locking detected [ 96.083719][ T5844] 6.16.0-rc4-next-20250703-syzkaller #0 Not tainted [ 96.090390][ T5844] -------------------------------------------- [ 96.096538][ T5844] syz-executor/5844 is trying to acquire lock: [ 96.102784][ T5844] ffff8880593648c8 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: rpc_close_pipes+0x10a/0x730 [ 96.113078][ T5844] [ 96.113078][ T5844] but task is already holding lock: [ 96.120437][ T5844] ffff8880593611c8 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 96.131670][ T5844] [ 96.131670][ T5844] other info that might help us debug this: [ 96.139750][ T5844] Possible unsafe locking scenario: [ 96.139750][ T5844] [ 96.147200][ T5844] CPU0 [ 96.150510][ T5844] ---- [ 96.153787][ T5844] lock(&sb->s_type->i_mutex_key#20); [ 96.159254][ T5844] lock(&sb->s_type->i_mutex_key#20); [ 96.164728][ T5844] [ 96.164728][ T5844] *** DEADLOCK *** [ 96.164728][ T5844] [ 96.172892][ T5844] May be due to missing lock nesting notation [ 96.172892][ T5844] [ 96.181225][ T5844] 4 locks held by syz-executor/5844: [ 96.186613][ T5844] #0: ffff88802795e0e0 (&type->s_umount_key#49){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 96.196927][ T5844] #1: ffff888026ea30a0 (&sn->pipefs_sb_lock){+.+.}-{4:4}, at: rpc_kill_sb+0x77/0x190 [ 96.206556][ T5844] #2: ffffffff8f6d0e30 ((rpc_pipefs_notifier_list).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 96.218778][ T5844] #3: ffff8880593611c8 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 96.230494][ T5844] [ 96.230494][ T5844] stack backtrace: [ 96.236451][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 96.236475][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.236491][ T5844] Call Trace: [ 96.236501][ T5844] [ 96.236510][ T5844] dump_stack_lvl+0x189/0x250 [ 96.236540][ T5844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.236565][ T5844] ? __pfx__printk+0x10/0x10 [ 96.236583][ T5844] ? print_lock_name+0xde/0x100 [ 96.236601][ T5844] print_deadlock_bug+0x28b/0x2a0 [ 96.236625][ T5844] validate_chain+0x1a3f/0x2140 [ 96.236657][ T5844] __lock_acquire+0xab9/0xd20 [ 96.236692][ T5844] ? rpc_close_pipes+0x10a/0x730 [ 96.236717][ T5844] lock_acquire+0x120/0x360 [ 96.236745][ T5844] ? rpc_close_pipes+0x10a/0x730 [ 96.236770][ T5844] down_write+0x96/0x1f0 [ 96.236788][ T5844] ? rpc_close_pipes+0x10a/0x730 [ 96.236810][ T5844] ? __pfx_down_write+0x10/0x10 [ 96.236830][ T5844] ? __pfx_find_submount+0x10/0x10 [ 96.236848][ T5844] ? _raw_spin_unlock+0x28/0x50 [ 96.236869][ T5844] ? d_walk+0x6f4/0x780 [ 96.236887][ T5844] rpc_close_pipes+0x10a/0x730 [ 96.236907][ T5844] ? d_invalidate+0x204/0x260 [ 96.236926][ T5844] ? __pfx_rpc_close_pipes+0x10/0x10 [ 96.236948][ T5844] ? up_write+0x1c4/0x420 [ 96.236972][ T5844] ? __pfx_rpc_close_pipes+0x10/0x10 [ 96.236992][ T5844] __simple_recursive_removal+0x20b/0x510 [ 96.237015][ T5844] ? __pfx_rpc_close_pipes+0x10/0x10 [ 96.237036][ T5844] rpc_unlink+0x56/0x80 [ 96.237055][ T5844] rpc_pipefs_event+0xc0/0x170 [ 96.237072][ T5844] notifier_call_chain+0x1b3/0x3e0 [ 96.237099][ T5844] blocking_notifier_call_chain+0x6a/0x90 [ 96.237123][ T5844] rpc_kill_sb+0xd0/0x190 [ 96.237146][ T5844] deactivate_locked_super+0xb9/0x130 [ 96.237167][ T5844] cleanup_mnt+0x425/0x4c0 [ 96.237185][ T5844] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.237210][ T5844] task_work_run+0x1d1/0x260 [ 96.237228][ T5844] ? __pfx_task_work_run+0x10/0x10 [ 96.237244][ T5844] ? __x64_sys_umount+0x122/0x160 [ 96.237268][ T5844] ? exit_to_user_mode_loop+0x40/0x110 [ 96.237289][ T5844] exit_to_user_mode_loop+0xec/0x110 [ 96.237308][ T5844] do_syscall_64+0x2bd/0x3b0 [ 96.237323][ T5844] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.237347][ T5844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.237363][ T5844] ? clear_bhb_loop+0x60/0xb0 [ 96.237381][ T5844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.237397][ T5844] RIP: 0033:0x7fcd2798fc57 [ 96.237418][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 96.237438][ T5844] RSP: 002b:00007ffd347e6088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 96.237462][ T5844] RAX: 0000000000000000 RBX: 00007fcd27a10925 RCX: 00007fcd2798fc57 [ 96.237478][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd347e6140 [ 96.237492][ T5844] RBP: 00007ffd347e6140 R08: 0000000000000000 R09: 0000000000000000 [ 96.237517][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd347e71d0 [ 96.237532][ T5844] R13: 00007fcd27a10925 R14: 0000000000017676 R15: 00007ffd347e7210 [ 96.237558][ T5844] [ 96.558379][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.561562][ T5840] Bluetooth: hci0: command tx timeout [ 96.572661][ T5840] Bluetooth: hci1: command tx timeout [ 96.574457][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.578176][ T5840] Bluetooth: hci2: command tx timeout [ 96.610494][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.618487][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.628974][ T5834] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 96.635763][ T51] Bluetooth: hci3: command tx timeout [ 96.658530][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.666932][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.686661][ T5837] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 96.713318][ T51] Bluetooth: hci4: command tx timeout [ 96.727272][ T5830] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 96.727354][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.750802][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.802669][ T5837] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 96.851886][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.852158][ T5842] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 96.867517][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.880860][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.898939][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.934433][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.941297][ T5842] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 96.958672][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.014102][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.024211][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50