last executing test programs: 1.906039229s ago: executing program 2 (id=3): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fb, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd700000020007010080001c000180060001000200000008000300ac14141c0800060003ffff00"], 0x30}, 0x1, 0xff07}, 0x2000000) 1.63555368s ago: executing program 2 (id=6): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) chdir(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4008040) 1.027623593s ago: executing program 0 (id=1): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) 0s ago: executing program 0 (id=7): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'caif0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts. [ 73.749022][ T5820] cgroup: Unknown subsys name 'net' [ 73.922242][ T5820] cgroup: Unknown subsys name 'cpuset' [ 73.932117][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.400228][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.080217][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.111366][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.119885][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.128145][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.135692][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.144616][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.152094][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.152819][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.159900][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.168771][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.185001][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.187753][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.195789][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.210834][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.220166][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.227418][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.231750][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.236033][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.243118][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.252832][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.266561][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.269246][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.273975][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.283278][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.302905][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.935208][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 79.024200][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 79.100653][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 79.176321][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 79.279591][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.288283][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.296628][ T5830] bridge_slave_0: entered allmulticast mode [ 79.304675][ T5830] bridge_slave_0: entered promiscuous mode [ 79.324523][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.331782][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.339036][ T5830] bridge_slave_1: entered allmulticast mode [ 79.346842][ T5830] bridge_slave_1: entered promiscuous mode [ 79.418866][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.426357][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.434598][ T5840] bridge_slave_0: entered allmulticast mode [ 79.442499][ T5840] bridge_slave_0: entered promiscuous mode [ 79.450480][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.457862][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.465028][ T5840] bridge_slave_1: entered allmulticast mode [ 79.473795][ T5840] bridge_slave_1: entered promiscuous mode [ 79.495786][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 79.554817][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.562975][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.572443][ T5835] bridge_slave_0: entered allmulticast mode [ 79.582046][ T5835] bridge_slave_0: entered promiscuous mode [ 79.599089][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.612248][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.625825][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.644489][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.652471][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.660278][ T5835] bridge_slave_1: entered allmulticast mode [ 79.667625][ T5835] bridge_slave_1: entered promiscuous mode [ 79.684512][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.817504][ T5830] team0: Port device team_slave_0 added [ 79.826365][ T5830] team0: Port device team_slave_1 added [ 79.834583][ T5840] team0: Port device team_slave_0 added [ 79.848104][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.861062][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.870767][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.879969][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.887245][ T5845] bridge_slave_0: entered allmulticast mode [ 79.894427][ T5845] bridge_slave_0: entered promiscuous mode [ 79.914973][ T5840] team0: Port device team_slave_1 added [ 79.952598][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.960314][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.967737][ T5845] bridge_slave_1: entered allmulticast mode [ 79.975519][ T5845] bridge_slave_1: entered promiscuous mode [ 79.996632][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.004510][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.033879][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.121325][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.128737][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.156830][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.168630][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.175689][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.202944][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.217936][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.225003][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.252695][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.264487][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.267924][ T5838] Bluetooth: hci0: command tx timeout [ 80.271873][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.285126][ T5831] bridge_slave_0: entered allmulticast mode [ 80.293218][ T5831] bridge_slave_0: entered promiscuous mode [ 80.302887][ T5835] team0: Port device team_slave_0 added [ 80.337937][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.347347][ T5838] Bluetooth: hci1: command tx timeout [ 80.347682][ T5838] Bluetooth: hci4: command tx timeout [ 80.347810][ T5838] Bluetooth: hci3: command tx timeout [ 80.353352][ T5841] Bluetooth: hci2: command tx timeout [ 80.364770][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.382191][ T5831] bridge_slave_1: entered allmulticast mode [ 80.390151][ T5831] bridge_slave_1: entered promiscuous mode [ 80.412413][ T5835] team0: Port device team_slave_1 added [ 80.435709][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.449474][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.529614][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.542719][ T5845] team0: Port device team_slave_0 added [ 80.550138][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.559190][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.589374][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.632718][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.643727][ T5845] team0: Port device team_slave_1 added [ 80.663465][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.670718][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.697009][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.721375][ T5830] hsr_slave_0: entered promiscuous mode [ 80.728578][ T5830] hsr_slave_1: entered promiscuous mode [ 80.754374][ T5840] hsr_slave_0: entered promiscuous mode [ 80.761018][ T5840] hsr_slave_1: entered promiscuous mode [ 80.768212][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 80.774046][ T5840] Cannot create hsr debugfs directory [ 80.806166][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.813426][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.840765][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.904018][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.911269][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.939367][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.988044][ T5831] team0: Port device team_slave_0 added [ 81.042698][ T5831] team0: Port device team_slave_1 added [ 81.055483][ T5835] hsr_slave_0: entered promiscuous mode [ 81.063216][ T5835] hsr_slave_1: entered promiscuous mode [ 81.070254][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 81.076086][ T5835] Cannot create hsr debugfs directory [ 81.149579][ T5845] hsr_slave_0: entered promiscuous mode [ 81.156110][ T5845] hsr_slave_1: entered promiscuous mode [ 81.163469][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 81.169412][ T5845] Cannot create hsr debugfs directory [ 81.195601][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.203029][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.230612][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.243402][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.250511][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.278131][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.584677][ T5831] hsr_slave_0: entered promiscuous mode [ 81.592295][ T5831] hsr_slave_1: entered promiscuous mode [ 81.599001][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 81.604789][ T5831] Cannot create hsr debugfs directory [ 81.932245][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.978851][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.006151][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.034496][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.082489][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.124662][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.159493][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.176440][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.274625][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.326837][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.340214][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.349477][ T5841] Bluetooth: hci0: command tx timeout [ 82.360566][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.427866][ T5832] Bluetooth: hci4: command tx timeout [ 82.427881][ T5838] Bluetooth: hci2: command tx timeout [ 82.427914][ T5838] Bluetooth: hci1: command tx timeout [ 82.434178][ T5841] Bluetooth: hci3: command tx timeout [ 82.468059][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.514929][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.528116][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.539799][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.642440][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.653706][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.665749][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.685526][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.696410][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.708754][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.800631][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.812218][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.853283][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.860773][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.873577][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.880996][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.895570][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.903416][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.951128][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.958648][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.001195][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.094918][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.112277][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.146068][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.155223][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.171360][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.178830][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.250565][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.303839][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.312358][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.344425][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.392842][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.400063][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.522421][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.574060][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.581271][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.642851][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.650049][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.762704][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.865861][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.023857][ T5830] veth0_vlan: entered promiscuous mode [ 84.061784][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.094616][ T5830] veth1_vlan: entered promiscuous mode [ 84.223405][ T5830] veth0_macvtap: entered promiscuous mode [ 84.243818][ T5830] veth1_macvtap: entered promiscuous mode [ 84.334327][ T5835] veth0_vlan: entered promiscuous mode [ 84.381881][ T5835] veth1_vlan: entered promiscuous mode [ 84.395679][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.412485][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.427698][ T5841] Bluetooth: hci0: command tx timeout [ 84.450761][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.472775][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.507565][ T5841] Bluetooth: hci1: command tx timeout [ 84.517398][ T5841] Bluetooth: hci3: command tx timeout [ 84.517825][ T5838] Bluetooth: hci4: command tx timeout [ 84.522862][ T5844] Bluetooth: hci2: command tx timeout [ 84.539545][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.549310][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.561442][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.585233][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.640220][ T5831] veth0_vlan: entered promiscuous mode [ 84.672657][ T5835] veth0_macvtap: entered promiscuous mode [ 84.684434][ T5835] veth1_macvtap: entered promiscuous mode [ 84.704681][ T5831] veth1_vlan: entered promiscuous mode [ 84.764531][ T5845] veth0_vlan: entered promiscuous mode [ 84.779916][ T5840] veth0_vlan: entered promiscuous mode [ 84.829218][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.833959][ T5840] veth1_vlan: entered promiscuous mode [ 84.846384][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.856115][ T5845] veth1_vlan: entered promiscuous mode [ 84.874360][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.929860][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.941988][ T5831] veth0_macvtap: entered promiscuous mode [ 84.968045][ T5831] veth1_macvtap: entered promiscuous mode [ 84.984141][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.993768][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.996986][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.015552][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.041858][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.060498][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.082975][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.106376][ T5840] veth0_macvtap: entered promiscuous mode [ 85.109428][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.124925][ T5845] veth0_macvtap: entered promiscuous mode [ 85.148778][ T5845] veth1_macvtap: entered promiscuous mode [ 85.166553][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.194206][ T5840] veth1_macvtap: entered promiscuous mode [ 85.231355][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.256182][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.299700][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.310619][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.333540][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.363847][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.405790][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.455006][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.474721][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.497835][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.523855][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.537579][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.598890][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.609653][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.694110][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.722463][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.733733][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.744198][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.757439][ T1086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.773768][ T1086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.791003][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.930048][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.132021][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.155096][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.227033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 86.604091][ T5844] Bluetooth: hci0: command tx timeout [ 86.614805][ T5844] Bluetooth: hci4: command tx timeout [ 86.621040][ T5838] Bluetooth: hci3: command tx timeout [ 86.627753][ T5838] Bluetooth: hci2: command tx timeout [ 86.634297][ T5844] Bluetooth: hci1: command tx timeout [ 87.002535][ T926] cfg80211: failed to load regulatory.db [ 87.109039][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.137394][ T5835] [ 87.139762][ T5835] ============================================ [ 87.145977][ T5835] WARNING: possible recursive locking detected [ 87.152210][ T5835] 6.16.0-rc4-next-20250703-syzkaller #0 Not tainted [ 87.158790][ T5835] -------------------------------------------- [ 87.164952][ T5835] syz-executor/5835 is trying to acquire lock: [ 87.171101][ T5835] ffff8880578948c8 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: rpc_close_pipes+0x10a/0x730 [ 87.181406][ T5835] [ 87.181406][ T5835] but task is already holding lock: [ 87.188777][ T5835] ffff8880578911c8 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 87.199992][ T5835] [ 87.199992][ T5835] other info that might help us debug this: [ 87.209030][ T5835] Possible unsafe locking scenario: [ 87.209030][ T5835] [ 87.216571][ T5835] CPU0 [ 87.219984][ T5835] ---- [ 87.223287][ T5835] lock(&sb->s_type->i_mutex_key#20); [ 87.229270][ T5835] lock(&sb->s_type->i_mutex_key#20); [ 87.234752][ T5835] [ 87.234752][ T5835] *** DEADLOCK *** [ 87.234752][ T5835] [ 87.243298][ T5835] May be due to missing lock nesting notation [ 87.243298][ T5835] [ 87.252929][ T5835] 4 locks held by syz-executor/5835: [ 87.260479][ T5835] #0: ffff888070ba40e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 87.273539][ T5835] #1: ffff8880286298a0 (&sn->pipefs_sb_lock){+.+.}-{4:4}, at: rpc_kill_sb+0x77/0x190 [ 87.284588][ T5835] #2: ffffffff8f6d0e30 ((rpc_pipefs_notifier_list).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 87.296875][ T5835] #3: ffff8880578911c8 ( [ 87.296901][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.296908][ T5835] &sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 87.318412][ T5835] [ 87.318412][ T5835] stack backtrace: [ 87.324489][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 87.324505][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.324517][ T5835] Call Trace: [ 87.324525][ T5835] [ 87.324531][ T5835] dump_stack_lvl+0x189/0x250 [ 87.324551][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.324565][ T5835] ? __pfx__printk+0x10/0x10 [ 87.324576][ T5835] ? print_lock_name+0xde/0x100 [ 87.324586][ T5835] print_deadlock_bug+0x28b/0x2a0 [ 87.324600][ T5835] validate_chain+0x1a3f/0x2140 [ 87.324617][ T5835] __lock_acquire+0xab9/0xd20 [ 87.324630][ T5835] ? rpc_close_pipes+0x10a/0x730 [ 87.324642][ T5835] lock_acquire+0x120/0x360 [ 87.324675][ T5835] ? rpc_close_pipes+0x10a/0x730 [ 87.324689][ T5835] down_write+0x96/0x1f0 [ 87.324700][ T5835] ? rpc_close_pipes+0x10a/0x730 [ 87.324710][ T5835] ? __pfx_down_write+0x10/0x10 [ 87.324720][ T5835] ? __pfx_find_submount+0x10/0x10 [ 87.324730][ T5835] ? _raw_spin_unlock+0x28/0x50 [ 87.324742][ T5835] ? d_walk+0x6f4/0x780 [ 87.324752][ T5835] rpc_close_pipes+0x10a/0x730 [ 87.324764][ T5835] ? d_invalidate+0x204/0x260 [ 87.324774][ T5835] ? __pfx_rpc_close_pipes+0x10/0x10 [ 87.324785][ T5835] ? up_write+0x1c4/0x420 [ 87.324799][ T5835] ? __pfx_rpc_close_pipes+0x10/0x10 [ 87.324810][ T5835] __simple_recursive_removal+0x20b/0x510 [ 87.324823][ T5835] ? __pfx_rpc_close_pipes+0x10/0x10 [ 87.324835][ T5835] rpc_unlink+0x56/0x80 [ 87.324845][ T5835] rpc_pipefs_event+0xc0/0x170 [ 87.324856][ T5835] notifier_call_chain+0x1b3/0x3e0 [ 87.324871][ T5835] blocking_notifier_call_chain+0x6a/0x90 [ 87.324884][ T5835] rpc_kill_sb+0xd0/0x190 [ 87.324897][ T5835] deactivate_locked_super+0xb9/0x130 [ 87.324910][ T5835] cleanup_mnt+0x425/0x4c0 [ 87.324921][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.324936][ T5835] task_work_run+0x1d1/0x260 [ 87.324946][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 87.324955][ T5835] ? __x64_sys_umount+0x122/0x160 [ 87.324968][ T5835] ? exit_to_user_mode_loop+0x40/0x110 [ 87.324981][ T5835] exit_to_user_mode_loop+0xec/0x110 [ 87.324991][ T5835] do_syscall_64+0x2bd/0x3b0 [ 87.325000][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.325015][ T5835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.325029][ T5835] ? clear_bhb_loop+0x60/0xb0 [ 87.325043][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.325057][ T5835] RIP: 0033:0x7febb4d8fc57 [ 87.325077][ T5835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 87.325089][ T5835] RSP: 002b:00007ffc1160f6f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 87.325105][ T5835] RAX: 0000000000000000 RBX: 00007febb4e10925 RCX: 00007febb4d8fc57 [ 87.325114][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1160f7b0 [ 87.325124][ T5835] RBP: 00007ffc1160f7b0 R08: 0000000000000000 R09: 0000000000000000 [ 87.325133][ T5835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc11610840 [ 87.325143][ T5835] R13: 00007febb4e10925 R14: 00000000000153d8 R15: 00007ffc11610880 [ 87.325158][ T5835] [ 87.675201][ T5845] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 87.684093][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.813259][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.954393][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.970076][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.012019][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.013312][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50