last executing test programs: 359.142345ms ago: executing program 1 (id=2): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x0, r0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x4000200}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r6}) 256.726885ms ago: executing program 1 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@random={0xd4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f4}]]}, 0x4c}}, 0x0) 0s ago: executing program 1 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/49, 0x31) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. [ 64.806195][ T5597] cgroup: Unknown subsys name 'net' [ 64.924168][ T5597] cgroup: Unknown subsys name 'cpuset' [ 64.933529][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.244114][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.411546][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.412780][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.414376][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.417894][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.418660][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.420453][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.423485][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.423817][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.429397][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.436728][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.436928][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.444159][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.444234][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.444845][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.445741][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.445858][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.454930][ T4930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.461872][ T4930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.490921][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.497263][ T4930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.777497][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.778255][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.778396][ T5609] bridge_slave_0: entered allmulticast mode [ 69.780207][ T5609] bridge_slave_0: entered promiscuous mode [ 69.818277][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.818378][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.818454][ T5609] bridge_slave_1: entered allmulticast mode [ 69.819367][ T5609] bridge_slave_1: entered promiscuous mode [ 69.914455][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.943572][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.986595][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.986725][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.986938][ T5608] bridge_slave_0: entered allmulticast mode [ 69.987803][ T5608] bridge_slave_0: entered promiscuous mode [ 69.990378][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.990471][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.990580][ T5608] bridge_slave_1: entered allmulticast mode [ 69.992748][ T5608] bridge_slave_1: entered promiscuous mode [ 70.006993][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.007095][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.007444][ T5607] bridge_slave_0: entered allmulticast mode [ 70.008908][ T5607] bridge_slave_0: entered promiscuous mode [ 70.051335][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.051430][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.051535][ T5607] bridge_slave_1: entered allmulticast mode [ 70.054093][ T5607] bridge_slave_1: entered promiscuous mode [ 70.057943][ T5609] team0: Port device team_slave_0 added [ 70.058121][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.058211][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.059078][ T5610] bridge_slave_0: entered allmulticast mode [ 70.061514][ T5610] bridge_slave_0: entered promiscuous mode [ 70.068143][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.083522][ T5609] team0: Port device team_slave_1 added [ 70.083737][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.083840][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.084228][ T5610] bridge_slave_1: entered allmulticast mode [ 70.086244][ T5610] bridge_slave_1: entered promiscuous mode [ 70.103209][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.156376][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.172674][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.189337][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.190245][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.190258][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.190286][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.195712][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.198139][ T5608] team0: Port device team_slave_0 added [ 70.223248][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.223262][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.223283][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.250157][ T5608] team0: Port device team_slave_1 added [ 70.254644][ T5607] team0: Port device team_slave_0 added [ 70.323835][ T5607] team0: Port device team_slave_1 added [ 70.325672][ T5610] team0: Port device team_slave_0 added [ 70.326307][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.326319][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.326339][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.328405][ T5610] team0: Port device team_slave_1 added [ 70.393667][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.393683][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.393704][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.394955][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.394967][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.394986][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.400654][ T5609] hsr_slave_0: entered promiscuous mode [ 70.403263][ T5609] hsr_slave_1: entered promiscuous mode [ 70.405598][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.405611][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.405631][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.417987][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.418001][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.418023][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.422170][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.422182][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.422203][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.488308][ T4930] Bluetooth: hci1: command tx timeout [ 70.581546][ T5614] Bluetooth: hci2: command tx timeout [ 70.581660][ T5614] Bluetooth: hci0: command tx timeout [ 70.581825][ T4930] Bluetooth: hci3: command tx timeout [ 70.665441][ T5608] hsr_slave_0: entered promiscuous mode [ 70.666034][ T5608] hsr_slave_1: entered promiscuous mode [ 70.666424][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 70.666495][ T5608] Cannot create hsr debugfs directory [ 70.735029][ T5607] hsr_slave_0: entered promiscuous mode [ 70.735629][ T5607] hsr_slave_1: entered promiscuous mode [ 70.736009][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 70.736026][ T5607] Cannot create hsr debugfs directory [ 70.742051][ T5610] hsr_slave_0: entered promiscuous mode [ 70.742922][ T5610] hsr_slave_1: entered promiscuous mode [ 70.743538][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 70.743554][ T5610] Cannot create hsr debugfs directory [ 71.115157][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.127733][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.132397][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.139931][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.140818][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.146281][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.147751][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.156635][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.227582][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.237750][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.238595][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.249480][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.261810][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.265793][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.277569][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.282337][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.355591][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.370693][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.384278][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.388176][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.388811][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.393553][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.420399][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.430303][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.444287][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.444354][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.486429][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.515174][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.517553][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.518033][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.520479][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.529508][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.539720][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.552586][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.565004][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.586728][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.620101][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.620288][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.637553][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.637644][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.703502][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.779315][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.813210][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.813310][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.838501][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.838602][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.846489][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.908725][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.915813][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.926405][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.926506][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.954310][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.954420][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.000041][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.034538][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.034625][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.069343][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.069440][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.552159][ T4930] Bluetooth: hci1: command tx timeout [ 72.631927][ T54] Bluetooth: hci0: command tx timeout [ 72.631960][ T54] Bluetooth: hci2: command tx timeout [ 72.632096][ T4930] Bluetooth: hci3: command tx timeout [ 72.677175][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.782700][ T5609] veth0_vlan: entered promiscuous mode [ 72.813760][ T5609] veth1_vlan: entered promiscuous mode [ 72.896294][ T5609] veth0_macvtap: entered promiscuous mode [ 72.916269][ T5609] veth1_macvtap: entered promiscuous mode [ 72.959850][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.977621][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.000249][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.013489][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.091394][ T3392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.106825][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.132790][ T3392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.180099][ T5607] veth0_vlan: entered promiscuous mode [ 73.180702][ T5608] veth0_vlan: entered promiscuous mode [ 73.226670][ T5607] veth1_vlan: entered promiscuous mode [ 73.227656][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.227894][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.254455][ T5608] veth1_vlan: entered promiscuous mode [ 73.271514][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.290234][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.290253][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.346030][ T5610] veth0_vlan: entered promiscuous mode [ 73.362465][ T5609] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.391257][ T141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.404989][ T5610] veth1_vlan: entered promiscuous mode [ 73.415957][ T5608] veth0_macvtap: entered promiscuous mode [ 73.417870][ T5607] veth0_macvtap: entered promiscuous mode [ 73.435123][ T5607] veth1_macvtap: entered promiscuous mode [ 73.440568][ T5608] veth1_macvtap: entered promiscuous mode [ 73.493844][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.524472][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.528517][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.555642][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.556972][ T5610] veth0_macvtap: entered promiscuous mode [ 73.579498][ T5610] veth1_macvtap: entered promiscuous mode [ 73.661092][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.700639][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.742019][ T141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.742066][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.742078][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.839999][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.840017][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.856157][ T5763] ======================================================= [ 73.856157][ T5763] WARNING: The mand mount option has been d ** replaying previous printk message ** [ 73.856157][ T5763] ======================================================= [ 73.856157][ T5763] WARNING: The mand mount option has been deprecated and [ 73.856157][ T5763] and is ignored by this kernel. Remove the mand [ 73.856157][ T5763] option from the mount to silence this warning. [ 73.856157][ T5763] ======================================================= [ 73.869184][ T5763] [ 73.911067][ T5763] ====================================================== [ 73.918077][ T5763] WARNING: possible circular locking dependency detected [ 73.925110][ T5763] syzkaller #0 Not tainted [ 73.929522][ T5763] ------------------------------------------------------ [ 73.935096][ T5608] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 73.942200][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.942224][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.959191][ T5763] syz.1.6/5763 is trying to acquire lock: [ 73.964906][ T5763] ffff88802893a460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 73.973650][ T5763] [ 73.973650][ T5763] but task is already holding lock: [ 73.977396][ T5610] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 73.988712][ T5763] ffff888058e06100 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 73.998466][ T5763] [ 73.998466][ T5763] which lock already depends on the new lock. [ 73.998466][ T5763] [ 74.008857][ T5763] [ 74.008857][ T5763] the existing dependency chain (in reverse order) is: [ 74.017860][ T5763] [ 74.017860][ T5763] -> #2 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 74.025679][ T5763] __d_alloc_parallel+0xc32/0x1700 [ 74.031310][ T5763] __lookup_slow+0x82/0x2f0 [ 74.036322][ T5763] lookup_slow+0x59/0x80 [ 74.041070][ T5763] link_path_walk+0xd22/0x1910 [ 74.046346][ T5763] path_openat+0x1c4/0x1da0 [ 74.051364][ T5763] do_file_open+0x23e/0x4a0 [ 74.056372][ T5763] do_sys_openat2+0x115/0x200 [ 74.061556][ T5763] __x64_sys_openat+0x138/0x170 [ 74.066918][ T5763] do_syscall_64+0x166/0x520 [ 74.072022][ T5763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.078425][ T5763] [ 74.078425][ T5763] -> #1 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 74.086849][ T5763] down_write+0x91/0x200 [ 74.091604][ T5763] lookup_open+0x246/0x1970 [ 74.096617][ T5763] path_openat+0x673/0x1da0 [ 74.101636][ T5763] do_file_open+0x23e/0x4a0 [ 74.106643][ T5763] do_sys_openat2+0x115/0x200 [ 74.111831][ T5763] __x64_sys_openat+0x138/0x170 [ 74.117196][ T5763] do_syscall_64+0x166/0x520 [ 74.122299][ T5763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.128705][ T5763] [ 74.128705][ T5763] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 74.136083][ T5763] __lock_acquire+0x164c/0x2de0 [ 74.141442][ T5763] lock_acquire+0x115/0x350 [ 74.146449][ T5763] sb_start_write+0x48/0x1c0 [ 74.151545][ T5763] mnt_want_write+0x41/0x90 [ 74.156551][ T5763] ovl_lookup+0xb93/0x1c80 [ 74.161474][ T5763] lookup_open+0x94b/0x1970 [ 74.166495][ T5763] path_openat+0x673/0x1da0 [ 74.171509][ T5763] do_file_open+0x23e/0x4a0 [ 74.176521][ T5763] do_sys_openat2+0x115/0x200 [ 74.181705][ T5763] __x64_sys_openat+0x138/0x170 [ 74.187062][ T5763] do_syscall_64+0x166/0x520 [ 74.192164][ T5763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.198567][ T5763] [ 74.198567][ T5763] other info that might help us debug this: [ 74.198567][ T5763] [ 74.208779][ T5763] Chain exists of: [ 74.208779][ T5763] sb_writers#5 --> &type->i_mutex_dir_key#5 --> DCACHE_PAR_LOOKUP [ 74.208779][ T5763] [ 74.222511][ T5763] Possible unsafe locking scenario: [ 74.222511][ T5763] [ 74.229951][ T5763] CPU0 CPU1 [ 74.235307][ T5763] ---- ---- [ 74.240664][ T5763] lock(DCACHE_PAR_LOOKUP); [ 74.245251][ T5763] lock(&type->i_mutex_dir_key#5); [ 74.252961][ T5763] lock(DCACHE_PAR_LOOKUP); [ 74.260069][ T5763] rlock(sb_writers#5); [ 74.264312][ T5763] [ 74.264312][ T5763] *** DEADLOCK *** [ 74.264312][ T5763] [ 74.272445][ T5763] locks held by syz.1.6/5763: 2, last CPU#1: [ 74.278413][ T5763] #0: ffff888058e72230 (&ovl_i_mutex_dir_key[depth]){.+.+}-{4:4}, at: lookup_open+0x221/0x1970 [ 74.288842][ T5763] #1: ffff888058e06100 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 74.299014][ T5763] [ 74.299014][ T5763] stack backtrace: [ 74.304913][ T5763] CPU: 1 UID: 0 PID: 5763 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT(full) [ 74.312105][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.312122][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.328962][ T5763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.339016][ T5763] Call Trace: [ 74.342296][ T5763] [ 74.345223][ T5763] dump_stack_lvl+0xe8/0x150 [ 74.349804][ T5763] print_circular_bug+0x2e2/0x300 [ 74.354818][ T5763] check_noncircular+0x12f/0x150 [ 74.359750][ T5763] __lock_acquire+0x164c/0x2de0 [ 74.364603][ T5763] ? do_raw_spin_unlock+0xf5/0x200 [ 74.369720][ T5763] lock_acquire+0x115/0x350 [ 74.374223][ T5763] ? mnt_want_write+0x41/0x90 [ 74.378911][ T5763] sb_start_write+0x48/0x1c0 [ 74.383498][ T5763] ? mnt_want_write+0x41/0x90 [ 74.388163][ T5763] mnt_want_write+0x41/0x90 [ 74.392653][ T5763] ovl_lookup+0xb93/0x1c80 [ 74.397059][ T5763] ? lock_acquire+0x115/0x350 [ 74.401735][ T5763] ? __pfx_ovl_lookup+0x10/0x10 [ 74.406569][ T5763] ? __d_lookup+0x66/0x790 [ 74.410974][ T5763] ? __pfx___d_alloc_parallel+0x10/0x10 [ 74.416512][ T5763] ? __d_lookup+0x6f3/0x790 [ 74.421006][ T5763] ? d_lookup+0x1f/0xa0 [ 74.425175][ T5763] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 74.431321][ T5763] ? lockdep_hardirqs_on+0x7b/0x110 [ 74.436510][ T5763] lookup_open+0x94b/0x1970 [ 74.441009][ T5763] path_openat+0x673/0x1da0 [ 74.445506][ T5763] do_file_open+0x23e/0x4a0 [ 74.450003][ T5763] ? __pfx_do_file_open+0x10/0x10 [ 74.455022][ T5763] ? _raw_spin_unlock+0x28/0x50 [ 74.459865][ T5763] ? alloc_fd+0x6af/0x760 [ 74.464186][ T5763] do_sys_openat2+0x115/0x200 [ 74.468861][ T5763] ? __se_sys_futex+0x3a8/0x450 [ 74.473704][ T5763] ? __pfx_do_sys_openat2+0x10/0x10 [ 74.478893][ T5763] ? rcu_is_watching+0x16/0xb0 [ 74.483650][ T5763] __x64_sys_openat+0x138/0x170 [ 74.488492][ T5763] do_syscall_64+0x166/0x520 [ 74.493071][ T5763] ? trace_irq_disable+0x3b/0x140 [ 74.498082][ T5763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.504137][ T5763] ? clear_bhb_loop+0x70/0xc0 [ 74.508803][ T5763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.514688][ T5763] RIP: 0033:0x7f1b36f9e199 [ 74.519113][ T5763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.538713][ T5763] RSP: 002b:00007f1b37d89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 74.547120][ T5763] RAX: ffffffffffffffda RBX: 00007f1b37225fa0 RCX: 00007f1b36f9e199 [ 74.555084][ T5763] RDX: 0000000000000000 RSI: 0000200000004280 RDI: ffffffffffffff9c [ 74.563048][ T5763] RBP: 00007f1b370350b8 R08: 0000000000000000 R09: 0000000000000000 [ 74.571015][ T5763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.578981][ T5763] R13: 00007f1b37226038 R14: 00007f1b37225fa0 R15: 00007ffd60d06d98 [ 74.586956][ T5763] [ 74.621301][ T1099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.621454][ T1099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.633284][ T4930] Bluetooth: hci1: command tx timeout [ 74.676495][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.676515][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.700304][ T5610] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 74.712542][ T4930] Bluetooth: hci3: command tx timeout [ 74.712568][ T4930] Bluetooth: hci2: command tx timeout [ 74.712584][ T4930] Bluetooth: hci0: command tx timeout [ 74.734488][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.734506][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.763288][ T1172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.763328][ T1172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.763356][ T1172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.763384][ T1172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.763411][ T1172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.763437][ T1172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.763463][ T1172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.763490][ T1172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.763516][ T1172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.711390][ T5614] Bluetooth: hci1: command tx timeout [ 76.791062][ T4930] Bluetooth: hci2: command tx timeout [ 76.791088][ T4930] Bluetooth: hci3: command tx timeout [ 76.791117][ T5614] Bluetooth: hci0: command tx timeout [ 81.679092][ T9] cfg80211: failed to load regulatory.db