last executing test programs: 543.000616ms ago: executing program 0 (id=1): mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f00000002c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 363.572314ms ago: executing program 0 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e66f24950fced321f19473e252d8f008a9bb9431f2af60c08fbb0900"/40], 0x1, 0x1a8, &(0x7f0000000280)="$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") ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'vxcan0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x0, 0x5, r3}]}, {0x4}, {0xffffffffffffffae}, {0xc}}}]}]}, 0x64}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 0s ago: executing program 0 (id=6): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000c80)={[{@nls={'nls', 0x3d, 'cp866'}}, {@nobarrier}]}, 0x1, 0x5f4, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8241, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. [ 58.345393][ T5772] cgroup: Unknown subsys name 'net' [ 58.511089][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.868216][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.398761][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.405737][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.407632][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.414055][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.422117][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.436156][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.444224][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.445285][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.451714][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.468109][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.475724][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.480856][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.483384][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.490306][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.498827][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.506474][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.519768][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.527539][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.538176][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.545321][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.552970][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.565653][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.573642][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.582491][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.971130][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 61.991949][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 62.090865][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 62.152655][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 62.210096][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.218088][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.225611][ T5783] bridge_slave_0: entered allmulticast mode [ 62.232383][ T5783] bridge_slave_0: entered promiscuous mode [ 62.246934][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.254064][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.261275][ T5783] bridge_slave_1: entered allmulticast mode [ 62.268296][ T5783] bridge_slave_1: entered promiscuous mode [ 62.284281][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.291508][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.298930][ T5782] bridge_slave_0: entered allmulticast mode [ 62.305607][ T5782] bridge_slave_0: entered promiscuous mode [ 62.348935][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.356412][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.363572][ T5782] bridge_slave_1: entered allmulticast mode [ 62.370919][ T5782] bridge_slave_1: entered promiscuous mode [ 62.390306][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.397488][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.405117][ T5784] bridge_slave_0: entered allmulticast mode [ 62.411815][ T5784] bridge_slave_0: entered promiscuous mode [ 62.436328][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.445660][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.452765][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.460940][ T5784] bridge_slave_1: entered allmulticast mode [ 62.467755][ T5784] bridge_slave_1: entered promiscuous mode [ 62.498942][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.521032][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.533142][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.580786][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.587983][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.595656][ T5781] bridge_slave_0: entered allmulticast mode [ 62.602328][ T5781] bridge_slave_0: entered promiscuous mode [ 62.622304][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.642824][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.650549][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.658780][ T5781] bridge_slave_1: entered allmulticast mode [ 62.666577][ T5781] bridge_slave_1: entered promiscuous mode [ 62.676691][ T5783] team0: Port device team_slave_0 added [ 62.684415][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.705373][ T5782] team0: Port device team_slave_0 added [ 62.722600][ T5783] team0: Port device team_slave_1 added [ 62.739372][ T5782] team0: Port device team_slave_1 added [ 62.788927][ T5784] team0: Port device team_slave_0 added [ 62.797141][ T5784] team0: Port device team_slave_1 added [ 62.815061][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.825503][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.832457][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.858400][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.881050][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.888168][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.914508][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.928048][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.949039][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.956057][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.982004][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.010824][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.018000][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.045186][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.087727][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.095138][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.121790][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.135516][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.142491][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.169266][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.199857][ T5781] team0: Port device team_slave_0 added [ 63.208660][ T5781] team0: Port device team_slave_1 added [ 63.228888][ T5783] hsr_slave_0: entered promiscuous mode [ 63.236383][ T5783] hsr_slave_1: entered promiscuous mode [ 63.278707][ T5784] hsr_slave_0: entered promiscuous mode [ 63.285639][ T5784] hsr_slave_1: entered promiscuous mode [ 63.291688][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.300627][ T5784] Cannot create hsr debugfs directory [ 63.317260][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.324224][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.350244][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.386720][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.393684][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.420141][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.434318][ T5782] hsr_slave_0: entered promiscuous mode [ 63.440765][ T5782] hsr_slave_1: entered promiscuous mode [ 63.446948][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.454496][ T5782] Cannot create hsr debugfs directory [ 63.535363][ T5786] Bluetooth: hci0: command tx timeout [ 63.609225][ T5781] hsr_slave_0: entered promiscuous mode [ 63.615059][ T5786] Bluetooth: hci1: command tx timeout [ 63.615088][ T5791] Bluetooth: hci3: command tx timeout [ 63.615468][ T51] Bluetooth: hci2: command tx timeout [ 63.632453][ T5781] hsr_slave_1: entered promiscuous mode [ 63.638539][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.646321][ T5781] Cannot create hsr debugfs directory [ 63.882065][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.900495][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.910193][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.920922][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.989217][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.007201][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.019337][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.040618][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.102380][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.118944][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.131195][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.140515][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.222501][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.269916][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.282847][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.293729][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.303723][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.333151][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.362315][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.369594][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.401206][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.408366][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.438067][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.473134][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.507810][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.514980][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.547865][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.554996][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.582183][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.634154][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.680993][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.688213][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.725627][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.742682][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.749892][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.840659][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.887730][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.894940][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.924024][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.931217][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.011022][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.143659][ T5784] veth0_vlan: entered promiscuous mode [ 65.159134][ T5784] veth1_vlan: entered promiscuous mode [ 65.219950][ T5784] veth0_macvtap: entered promiscuous mode [ 65.242887][ T5784] veth1_macvtap: entered promiscuous mode [ 65.273587][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.288889][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.311699][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.327557][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.343254][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.357325][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.369523][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.379311][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.473193][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.516660][ T5782] veth0_vlan: entered promiscuous mode [ 65.562642][ T5782] veth1_vlan: entered promiscuous mode [ 65.587721][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.606033][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.616686][ T5786] Bluetooth: hci0: command tx timeout [ 65.661544][ T5781] veth0_vlan: entered promiscuous mode [ 65.670638][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.678559][ T5781] veth1_vlan: entered promiscuous mode [ 65.688523][ T5783] veth0_vlan: entered promiscuous mode [ 65.696188][ T5786] Bluetooth: hci2: command tx timeout [ 65.696397][ T51] Bluetooth: hci1: command tx timeout [ 65.701591][ T5786] Bluetooth: hci3: command tx timeout [ 65.710926][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.747462][ T5782] veth0_macvtap: entered promiscuous mode [ 65.758776][ T5782] veth1_macvtap: entered promiscuous mode [ 65.771928][ T5783] veth1_vlan: entered promiscuous mode [ 65.838517][ T5781] veth0_macvtap: entered promiscuous mode [ 65.861370][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.877416][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.891584][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.918285][ T5783] veth0_macvtap: entered promiscuous mode [ 65.938906][ T5783] veth1_macvtap: entered promiscuous mode [ 65.952142][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.965142][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.977284][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.991299][ T5781] veth1_macvtap: entered promiscuous mode [ 66.020662][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.030815][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.063580][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.072723][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.094973][ T5869] syz.0.5[5869]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 66.112495][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.117991][ T5869] loop0: detected capacity change from 0 to 8 [ 66.124020][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.146098][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.156726][ T5869] squashfs image failed sanity check [ 66.164051][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.179759][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.216375][ T5869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5'. [ 66.229781][ T5869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5'. [ 66.264151][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.280096][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.291478][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.302034][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.314055][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.336759][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.346253][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.357061][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.378047][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.390242][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.410203][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.426428][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.432368][ T5873] loop0: detected capacity change from 0 to 1024 [ 66.441514][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.455467][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.470515][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.483381][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.516906][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.527862][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.536422][ T5873] [ 66.540004][ T5873] ============================================ [ 66.546153][ T5873] WARNING: possible recursive locking detected [ 66.552295][ T5873] syzkaller #0 Not tainted [ 66.556694][ T5873] -------------------------------------------- [ 66.562823][ T5873] syz.0.6/5873 is trying to acquire lock: [ 66.568521][ T5873] ffff8880210f9548 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x39f/0x1530 [ 66.579402][ T5873] [ 66.579402][ T5873] but task is already holding lock: [ 66.586756][ T5873] ffff8880210fa988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x293/0xb40 [ 66.597880][ T5873] [ 66.597880][ T5873] other info that might help us debug this: [ 66.605924][ T5873] Possible unsafe locking scenario: [ 66.605924][ T5873] [ 66.613354][ T5873] CPU0 [ 66.616616][ T5873] ---- [ 66.619879][ T5873] lock(&HFSPLUS_I(inode)->extents_lock); [ 66.625669][ T5873] lock(&HFSPLUS_I(inode)->extents_lock); [ 66.631458][ T5873] [ 66.631458][ T5873] *** DEADLOCK *** [ 66.631458][ T5873] [ 66.639582][ T5873] May be due to missing lock nesting notation [ 66.639582][ T5873] [ 66.647880][ T5873] 4 locks held by syz.0.6/5873: [ 66.652710][ T5873] #0: ffff8880214ce418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 66.661933][ T5873] #1: ffff8880210fab90 (&sb->s_type->i_mutex_key#20){+.+.}-{3:3}, at: do_truncate+0x187/0x220 [ 66.672275][ T5873] #2: ffff8880210fa988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x293/0xb40 [ 66.683828][ T5873] #3: ffff88801b2740f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_free+0xc3/0x4b0 [ 66.693823][ T5873] [ 66.693823][ T5873] stack backtrace: [ 66.699709][ T5873] CPU: 0 PID: 5873 Comm: syz.0.6 Not tainted syzkaller #0 [ 66.706803][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.716844][ T5873] Call Trace: [ 66.720112][ T5873] [ 66.723037][ T5873] dump_stack_lvl+0x16c/0x230 [ 66.727709][ T5873] ? show_regs_print_info+0x20/0x20 [ 66.732901][ T5873] ? print_deadlock_bug+0x435/0x5d0 [ 66.738093][ T5873] __lock_acquire+0x5d40/0x7c80 [ 66.742934][ T5873] ? __kernel_text_address+0xd/0x30 [ 66.748129][ T5873] ? check_noncircular+0x175/0x3c0 [ 66.753231][ T5873] ? verify_lock_unused+0x140/0x140 [ 66.758413][ T5873] ? print_deadlock_bug+0x5d0/0x5d0 [ 66.763598][ T5873] ? lockdep_unlock+0x137/0x2d0 [ 66.768437][ T5873] ? lockdep_lock+0x220/0x220 [ 66.773099][ T5873] ? add_lock_to_list+0x191/0x280 [ 66.778111][ T5873] lock_acquire+0x197/0x410 [ 66.782598][ T5873] ? hfsplus_get_block+0x39f/0x1530 [ 66.787790][ T5873] ? __might_sleep+0xe0/0xe0 [ 66.792368][ T5873] ? read_lock_is_recursive+0x20/0x20 [ 66.797726][ T5873] ? mod_objcg_state+0x50b/0x890 [ 66.802653][ T5873] ? verify_lock_unused+0x140/0x140 [ 66.807837][ T5873] __mutex_lock+0x129/0xcc0 [ 66.812333][ T5873] ? hfsplus_get_block+0x39f/0x1530 [ 66.817519][ T5873] ? __asan_memset+0x22/0x40 [ 66.822096][ T5873] ? hfsplus_get_block+0x39f/0x1530 [ 66.827280][ T5873] ? mutex_lock_nested+0x20/0x20 [ 66.832212][ T5873] hfsplus_get_block+0x39f/0x1530 [ 66.837231][ T5873] ? hfsplus_ext_write_extent+0x200/0x200 [ 66.842935][ T5873] ? do_raw_spin_unlock+0x121/0x230 [ 66.848140][ T5873] ? _raw_spin_unlock+0x28/0x40 [ 66.852994][ T5873] ? folio_create_empty_buffers+0x540/0x730 [ 66.858895][ T5873] block_read_full_folio+0x42e/0xf40 [ 66.864181][ T5873] ? hfsplus_ext_write_extent+0x200/0x200 [ 66.869891][ T5873] ? block_is_partially_uptodate+0x5d0/0x5d0 [ 66.875882][ T5873] ? folio_add_lru+0x320/0xd50 [ 66.880651][ T5873] ? __lock_acquire+0x7c80/0x7c80 [ 66.885678][ T5873] filemap_read_folio+0x167/0x760 [ 66.890692][ T5873] ? folio_batch_add_and_move+0x168/0x2b0 [ 66.896397][ T5873] ? hfsplus_writepage+0x30/0x30 [ 66.901321][ T5873] ? maybe_unlock_mmap_for_io+0xf0/0xf0 [ 66.906850][ T5873] ? folio_add_lru+0x54f/0xd50 [ 66.911617][ T5873] ? filemap_add_folio+0x192/0x3c0 [ 66.916721][ T5873] do_read_cache_folio+0x470/0x7e0 [ 66.921818][ T5873] ? hfsplus_writepage+0x30/0x30 [ 66.926743][ T5873] do_read_cache_page+0x32/0x250 [ 66.931667][ T5873] hfsplus_block_free+0x12c/0x4b0 [ 66.936684][ T5873] ? hfsplus_find_init+0x89/0x1d0 [ 66.941697][ T5873] hfsplus_free_extents+0x10d/0xa50 [ 66.946886][ T5873] hfsplus_file_truncate+0x735/0xb40 [ 66.952162][ T5873] ? hfsplus_add_extent+0x890/0x890 [ 66.957346][ T5873] ? unmap_mapping_range+0xdf/0x170 [ 66.962532][ T5873] ? unmap_mapping_pages+0x150/0x150 [ 66.967809][ T5873] hfsplus_setattr+0x1c3/0x280 [ 66.972559][ T5873] ? hfsplus_fileattr_set+0x2f0/0x2f0 [ 66.977920][ T5873] notify_change+0xb0d/0xe10 [ 66.982498][ T5873] do_truncate+0x19b/0x220 [ 66.986902][ T5873] ? put_page_bootmem+0x2c0/0x2c0 [ 66.991911][ T5873] ? apparmor_file_truncate+0x23f/0x2d0 [ 66.997446][ T5873] ? ima_bprm_check+0x1f0/0x1f0 [ 67.002285][ T5873] path_openat+0x298c/0x3190 [ 67.006880][ T5873] ? do_filp_open+0x3d0/0x3d0 [ 67.011552][ T5873] do_filp_open+0x1c5/0x3d0 [ 67.016060][ T5873] ? vfs_tmpfile+0x490/0x490 [ 67.020646][ T5873] ? _raw_spin_unlock+0x28/0x40 [ 67.025480][ T5873] ? alloc_fd+0x58f/0x630 [ 67.029801][ T5873] do_sys_openat2+0x12c/0x1c0 [ 67.034468][ T5873] ? do_sys_open+0xe0/0xe0 [ 67.038880][ T5873] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 67.044850][ T5873] ? lock_chain_count+0x20/0x20 [ 67.049693][ T5873] __x64_sys_openat+0x139/0x160 [ 67.054533][ T5873] do_syscall_64+0x55/0xb0 [ 67.058943][ T5873] ? clear_bhb_loop+0x40/0x90 [ 67.063606][ T5873] ? clear_bhb_loop+0x40/0x90 [ 67.068269][ T5873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.074157][ T5873] RIP: 0033:0x7fad80d8f749 [ 67.078569][ T5873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.098166][ T5873] RSP: 002b:00007fad81c48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 67.106567][ T5873] RAX: ffffffffffffffda RBX: 00007fad80fe5fa0 RCX: 00007fad80d8f749 [ 67.114525][ T5873] RDX: 0000000000008241 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 67.122493][ T5873] RBP: 00007fad80e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 67.130450][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.138407][ T5873] R13: 00007fad80fe6038 R14: 00007fad80fe5fa0 R15: 00007ffe9607b1f8 [ 67.146370][ T5873] [ 67.151382][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.164631][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.166863][ T5873] hfsplus: unable to mark blocks free: error -5 [ 67.174435][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.174450][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.182222][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.210762][ T5873] hfsplus: can't free extent [ 67.218392][ T5782] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' [ 67.233488][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.244311][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.253096][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.261868][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.299419][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.301575][ T5782] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht' [ 67.320485][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.358223][ T5783] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 67.369242][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.383152][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.387611][ T5781] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 67.400693][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.409925][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.433700][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.433725][ T5783] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 67.442064][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.480498][ T5781] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 67.480511][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.480524][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.531503][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.555398][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.695259][ T5786] Bluetooth: hci0: command tx timeout [ 67.774736][ T5786] Bluetooth: hci3: command tx timeout [ 67.775131][ T5791] Bluetooth: hci1: command tx timeout [ 67.780163][ T51] Bluetooth: hci2: command tx timeout [ 69.775342][ T51] Bluetooth: hci0: command tx timeout [ 69.855956][ T51] Bluetooth: hci2: command tx timeout [ 69.856074][ T5786] Bluetooth: hci3: command tx timeout [ 69.861373][ T5791] Bluetooth: hci1: command tx timeout [ 71.537978][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.544504][ T1279] ieee802154 phy1 wpan1: encryption failed: -22