last executing test programs: 1.901106472s ago: executing program 0 (id=1): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() writev(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0/file1/file0\x00', 0x1010000, &(0x7f0000000440)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80) sendfile(r4, r5, 0x0, 0xb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x25dfdbfe, {{@in6=@empty, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x5b, 0xb400, 0x2, 0xdde5, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x27, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x840}, 0x0) fstat(r2, &(0x7f0000000d40)) 798.597353ms ago: executing program 0 (id=6): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x3, 0x1, 0x9, 0x0, 0x3e, 0x4, 0x1a0, 0x40, 0xc6a, 0x1, 0x7, 0x38, 0x1, 0x9, 0x3, 0x8200}, [{0x1, 0x7d8, 0x5, 0x100, 0xb4b, 0x3, 0x6, 0x6}]}, 0x78) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000540)={0x0, 0x2, 0x20}, 0xc) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 725.151688ms ago: executing program 3 (id=4): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)=r4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x3, 0x1}, 0x50) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) 304.085449ms ago: executing program 1 (id=2): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000300)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 303.225042ms ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000014a90c200090588df46"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f0000000000)="e440e08b7199140753968fc2815a0369177c0caa3498e5d94457beeb4728371486732290a83712d61f2caee9cb6d293ef734cf493741", &(0x7f0000000400)=""/216, &(0x7f0000000500)="9d2e17c5fd72613b36fca0e7d8f9a040be1790c32dbaac78c5be6ccf00dd3e4fdbc0272a3fe13696330e430fd4", &(0x7f0000000580)="87d504cfcd0a29831895ac5f17d89c2bfea1e67de69318426c95524929dd0cd5dce2ac17c2c9b27fda5f7b50b14562a19473acb3967d37691bb8d63f17b8a9475bf740e00c3ce712f871de1c2ea67b7eeaa00994055c961f824a5b3a6ffe4fa113307c40a504bd37ffa28b97bf376bbdf9b59afc6f11ee646079022f8b9970f4d88d541cfbbe50f9", 0x7, r0, 0x4}, 0x38) 299.166315ms ago: executing program 4 (id=5): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000540)="a12805201a83745c98b3f122ade270301cbdc5ed8c2827c8fd6d3dfef02c6193f1cef6e2a7c9bf47c1eac346", 0x2c}], 0x1, 0x0, 0x0, 0x44010}], 0x1, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2], 0x6f4}}, 0x0) 213.037436ms ago: executing program 4 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @remote, 0xc}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r1, &(0x7f0000000140)=""/245, 0xf5, 0x4) 211.953264ms ago: executing program 4 (id=8): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@loopback={0x0, 0x3fc}, 0x0, r2}) 159.625099ms ago: executing program 4 (id=9): syz_emit_ethernet(0x86, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @loopback, {[@timestamp_addr={0x44, 0xc, 0x1, 0x1, 0x0, [{@remote, 0x4e210008}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@loopback}, {@dev}, {@private, 0x4}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) 129.961478ms ago: executing program 4 (id=10): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) statx(r1, 0x0, 0x4000, 0x2f6, &(0x7f0000001bc0)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 0s ago: executing program 1 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x7ff) syz_open_dev$char_usb(0xc, 0xb4, 0x1000) r5 = timerfd_create(0x9, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000380)={[{@uni_xlate}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@fat=@nfs_stale_rw}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@flush}, {@numtail}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) chdir(&(0x7f00000000c0)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 28.910947][ T4699] cgroup: Unknown subsys name 'net' [ 29.050721][ T4699] cgroup: Unknown subsys name 'cpuset' [ 29.052637][ T4699] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.232235][ T4699] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.590914][ T4713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.595815][ T4713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.599418][ T4713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.602114][ T4714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.613928][ T4721] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.634922][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.635704][ T4718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.635927][ T4718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.636768][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.637054][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.637207][ T4718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.637523][ T4718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.637724][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.646156][ T4727] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.647712][ T4729] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.649151][ T4729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.651070][ T4729] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.652660][ T4729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.654337][ T4729] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.656453][ T4727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.659484][ T4729] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.662232][ T4727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.664556][ T4727] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.668463][ T4727] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.670539][ T4727] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.954782][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.955610][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.955676][ T4716] bridge_slave_0: entered allmulticast mode [ 30.956159][ T4716] bridge_slave_0: entered promiscuous mode [ 30.972393][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.972532][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.972584][ T4716] bridge_slave_1: entered allmulticast mode [ 30.973005][ T4716] bridge_slave_1: entered promiscuous mode [ 30.998908][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.008343][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.045193][ T4716] team0: Port device team_slave_0 added [ 31.045992][ T4716] team0: Port device team_slave_1 added [ 31.070206][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.070228][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.070253][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.082708][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.084114][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.085545][ T4717] bridge_slave_0: entered allmulticast mode [ 31.087192][ T4717] bridge_slave_0: entered promiscuous mode [ 31.089758][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.091160][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.091240][ T4717] bridge_slave_1: entered allmulticast mode [ 31.091647][ T4717] bridge_slave_1: entered promiscuous mode [ 31.095223][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.095243][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.095270][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.122830][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.122882][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.122935][ T4712] bridge_slave_0: entered allmulticast mode [ 31.123350][ T4712] bridge_slave_0: entered promiscuous mode [ 31.137979][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.139453][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.140715][ T4712] bridge_slave_1: entered allmulticast mode [ 31.142221][ T4712] bridge_slave_1: entered promiscuous mode [ 31.145466][ T4716] hsr_slave_0: entered promiscuous mode [ 31.145810][ T4716] hsr_slave_1: entered promiscuous mode [ 31.150729][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.152250][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.153441][ T4711] bridge_slave_0: entered allmulticast mode [ 31.154991][ T4711] bridge_slave_0: entered promiscuous mode [ 31.157791][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.158727][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.169899][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.171229][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.172488][ T4711] bridge_slave_1: entered allmulticast mode [ 31.173915][ T4711] bridge_slave_1: entered promiscuous mode [ 31.181897][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.182544][ T4717] team0: Port device team_slave_0 added [ 31.183304][ T4717] team0: Port device team_slave_1 added [ 31.198362][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.198435][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.198521][ T4722] bridge_slave_0: entered allmulticast mode [ 31.198920][ T4722] bridge_slave_0: entered promiscuous mode [ 31.200450][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.209176][ T4712] team0: Port device team_slave_0 added [ 31.213506][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.215127][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.216419][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.217792][ T4722] bridge_slave_1: entered allmulticast mode [ 31.219443][ T4722] bridge_slave_1: entered promiscuous mode [ 31.229079][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.229105][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.229130][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.230366][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.230374][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.230389][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.231154][ T4712] team0: Port device team_slave_1 added [ 31.234766][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.241816][ T4711] team0: Port device team_slave_0 added [ 31.242563][ T4711] team0: Port device team_slave_1 added [ 31.257026][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.262248][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.262268][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.262282][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.266786][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.266795][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.266811][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.267831][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.267840][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.267850][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.268986][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.272667][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.272675][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.272689][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.296666][ T4717] hsr_slave_0: entered promiscuous mode [ 31.296970][ T4717] hsr_slave_1: entered promiscuous mode [ 31.297184][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 31.297220][ T4717] Cannot create hsr debugfs directory [ 31.297924][ T4722] team0: Port device team_slave_0 added [ 31.298735][ T4722] team0: Port device team_slave_1 added [ 31.317056][ T4711] hsr_slave_0: entered promiscuous mode [ 31.317382][ T4711] hsr_slave_1: entered promiscuous mode [ 31.317572][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 31.317580][ T4711] Cannot create hsr debugfs directory [ 31.334596][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.334620][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.334633][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.335257][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.335264][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.335276][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.365577][ T4712] hsr_slave_0: entered promiscuous mode [ 31.365882][ T4712] hsr_slave_1: entered promiscuous mode [ 31.366058][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 31.366068][ T4712] Cannot create hsr debugfs directory [ 31.376981][ T4722] hsr_slave_0: entered promiscuous mode [ 31.377286][ T4722] hsr_slave_1: entered promiscuous mode [ 31.377467][ T4722] debugfs: 'hsr0' already exists in 'hsr' [ 31.377476][ T4722] Cannot create hsr debugfs directory [ 31.448836][ T4716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.452397][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.460996][ T4716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.463307][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.466683][ T4716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.468850][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.479161][ T4716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.481368][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.498939][ T4717] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.501911][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.503534][ T4717] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.505753][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.508023][ T4717] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.510357][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.511994][ T4717] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.514234][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.516514][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.516572][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.516706][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.516735][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.535097][ T4722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.538226][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.540191][ T4722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.542212][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.543610][ T4722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.545663][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.552755][ T4722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.554965][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.566260][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.566303][ T4722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.566391][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.566427][ T4722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.577858][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.584602][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.586483][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.586525][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.586596][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.586625][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.593783][ T1394] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.595226][ T1394] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.598585][ T1394] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.600498][ T1394] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.604216][ T1394] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.605590][ T1394] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.620243][ T1394] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.620292][ T1394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.620646][ T1394] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.620671][ T1394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.627401][ T4716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.627423][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.631438][ T4712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.641226][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.648195][ T4712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.651563][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.659830][ T4712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.662074][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.663858][ T4712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.665809][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.668067][ T4711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.673774][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.679019][ T4711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.681774][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.682070][ T4711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.683965][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.685266][ T4711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.686679][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.696718][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.708921][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.732840][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.734668][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.742283][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.742319][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.742641][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.742662][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.742957][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.742975][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.743291][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.743315][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.777790][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.788179][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.798094][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.810490][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.814121][ T665] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.814163][ T665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.820972][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.821013][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.841519][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.856786][ T4716] veth0_vlan: entered promiscuous mode [ 31.861709][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.861752][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.864701][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.864743][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.868531][ T4716] veth1_vlan: entered promiscuous mode [ 31.909823][ T4716] veth0_macvtap: entered promiscuous mode [ 31.912223][ T4716] veth1_macvtap: entered promiscuous mode [ 31.917559][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.949544][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.954271][ T2781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.961326][ T2781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.964170][ T665] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.964694][ T1394] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.005551][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.005582][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.013185][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.013219][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.032519][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.056765][ T4716] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.102970][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.142535][ T4722] veth0_vlan: entered promiscuous mode [ 32.144613][ T4722] veth1_vlan: entered promiscuous mode [ 32.155957][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.173247][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.191980][ T4722] veth0_macvtap: entered promiscuous mode [ 32.195350][ T4722] veth1_macvtap: entered promiscuous mode [ 32.204873][ T4712] veth0_vlan: entered promiscuous mode [ 32.213972][ T4712] veth1_vlan: entered promiscuous mode [ 32.219048][ T4717] veth0_vlan: entered promiscuous mode [ 32.221693][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.669956][ T4714] Bluetooth: hci0: command tx timeout [ 32.679477][ T4714] Bluetooth: hci2: command tx timeout [ 32.749308][ T4714] Bluetooth: hci1: command tx timeout [ 32.750786][ T4726] Bluetooth: hci4: command tx timeout [ 32.752127][ T4726] Bluetooth: hci3: command tx timeout [ 33.076528][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.085751][ T4711] veth0_vlan: entered promiscuous mode [ 33.095659][ T4717] veth1_vlan: entered promiscuous mode [ 33.103417][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.103461][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.103493][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.103515][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.127630][ T4712] veth0_macvtap: entered promiscuous mode [ 33.145399][ T4711] veth1_vlan: entered promiscuous mode [ 33.152095][ T4712] veth1_macvtap: entered promiscuous mode [ 33.177422][ T4717] veth0_macvtap: entered promiscuous mode [ 33.188746][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.188768][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.194988][ T4717] veth1_macvtap: entered promiscuous mode [ 33.196336][ T665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.196363][ T665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.212315][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.215120][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.216212][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.217692][ T1394] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.217751][ T1394] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.217785][ T1394] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.217811][ T1394] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.234449][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.245911][ T665] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.245957][ T665] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.245976][ T665] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.245992][ T665] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.266595][ T4711] veth0_macvtap: entered promiscuous mode [ 33.276130][ T4711] veth1_macvtap: entered promiscuous mode [ 33.282570][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.283756][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.307231][ T1394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.307265][ T1394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.315649][ T1394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.315667][ T1394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.324583][ T1394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.324604][ T1394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.324804][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.324844][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.324868][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.324889][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.363366][ T665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.363391][ T665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.384041][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.386379][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.641532][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.641558][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.718192][ T4908] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.741359][ T4907] loop1: detected capacity change from 0 to 4096 [ 33.754715][ T4911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.761300][ T4911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.785534][ T4907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.894081][ T4919] loop3: detected capacity change from 0 to 7 [ 33.895911][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.895992][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 33.902667][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.902710][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 33.906181][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.906238][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 33.909865][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.909910][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 33.913758][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.913799][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 33.917440][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.917474][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 33.922435][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.922484][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 33.926700][ T4919] ldm_validate_partition_table(): Disk read failed. [ 33.928309][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.928354][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 33.932346][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.932383][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 33.935751][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.935794][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 33.940114][ T4919] Dev loop3: unable to read RDB block 0 [ 33.941630][ T4919] loop3: unable to read partition table [ 33.941714][ T4919] loop3: partition table beyond EOD, truncated [ 33.941740][ T4919] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 33.986420][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.999626][ T4919] [ 34.000085][ T4919] ====================================================== [ 34.001117][ T4919] WARNING: possible circular locking dependency detected [ 34.002188][ T4919] syzkaller #0 Not tainted [ 34.002858][ T4919] ------------------------------------------------------ [ 34.003926][ T4919] syz.4.10/4919 is trying to acquire lock: [ 34.004914][ T4919] ffff0000c1919210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x98/0xe0 [ 34.006729][ T4919] [ 34.006729][ T4919] but task is already holding lock: [ 34.008031][ T4919] ffff0000c7679c38 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 34.009837][ T4919] [ 34.009837][ T4919] which lock already depends on the new lock. [ 34.009837][ T4919] [ 34.011593][ T4919] [ 34.011593][ T4919] the existing dependency chain (in reverse order) is: [ 34.013046][ T4919] [ 34.013046][ T4919] -> #2 (&q->q_usage_counter(io)#20){++++}-{0:0}: [ 34.014504][ T4919] blk_alloc_queue+0x488/0x590 [ 34.015416][ T4919] blk_mq_alloc_queue+0x148/0x284 [ 34.016362][ T4919] __blk_mq_alloc_disk+0x38/0x10c [ 34.017293][ T4919] loop_add+0x358/0x8e4 [ 34.018088][ T4919] loop_init+0xe8/0x10c [ 34.018920][ T4919] do_one_initcall+0x274/0xc38 [ 34.019870][ T4919] do_initcall_level+0x12c/0x1c4 [ 34.020732][ T4919] do_initcalls+0x70/0xd0 [ 34.021477][ T4919] do_basic_setup+0x7c/0x90 [ 34.022320][ T4919] kernel_init_freeable+0x268/0x3a8 [ 34.023182][ T4919] kernel_init+0x24/0x1dc [ 34.023922][ T4919] ret_from_fork+0x10/0x20 [ 34.024726][ T4919] [ 34.024726][ T4919] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 34.025879][ T4919] fs_reclaim_acquire+0x90/0x110 [ 34.026741][ T4919] kmem_cache_alloc_noprof+0x60/0x5d8 [ 34.027706][ T4919] __kernfs_iattrs+0xd8/0x310 [ 34.028566][ T4919] __kernfs_setattr+0x48/0x2ac [ 34.029416][ T4919] kernfs_iop_setattr+0xc4/0x11c [ 34.030273][ T4919] notify_change+0x928/0xb7c [ 34.031087][ T4919] do_truncate+0x1a8/0x22c [ 34.031865][ T4919] path_openat+0x2368/0x2a60 [ 34.032755][ T4919] do_file_open+0x1c8/0x2e8 [ 34.033615][ T4919] do_sys_openat2+0x114/0x1e8 [ 34.034472][ T4919] do_sys_open+0xb0/0xe0 [ 34.035320][ T4919] __arm64_sys_openat+0xa0/0xbc [ 34.036194][ T4919] invoke_syscall+0x98/0x244 [ 34.037058][ T4919] el0_svc_common+0xec/0x23c [ 34.037954][ T4919] do_el0_svc+0x4c/0x5c [ 34.038750][ T4919] el0_svc+0x64/0x260 [ 34.039586][ T4919] el0t_64_sync_handler+0x48/0x148 [ 34.040532][ T4919] el0t_64_sync+0x198/0x19c [ 34.041345][ T4919] [ 34.041345][ T4919] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 34.042900][ T4919] __lock_acquire+0x17c0/0x2ebc [ 34.043784][ T4919] lock_acquire+0x140/0x364 [ 34.044572][ T4919] down_read+0x58/0x2bc [ 34.045312][ T4919] kernfs_iop_getattr+0x98/0xe0 [ 34.046138][ T4919] vfs_getattr_nosec+0x250/0x388 [ 34.046957][ T4919] vfs_getattr+0x60/0x88 [ 34.047646][ T4919] loop_assign_backing_file+0x200/0x3c0 [ 34.048627][ T4919] lo_ioctl+0x1160/0x167c [ 34.049420][ T4919] blkdev_ioctl+0x574/0x904 [ 34.050362][ T4919] __arm64_sys_ioctl+0x14c/0x1c4 [ 34.051302][ T4919] invoke_syscall+0x98/0x244 [ 34.052168][ T4919] el0_svc_common+0xec/0x23c [ 34.053059][ T4919] do_el0_svc+0x4c/0x5c [ 34.053887][ T4919] el0_svc+0x64/0x260 [ 34.054711][ T4919] el0t_64_sync_handler+0x48/0x148 [ 34.055715][ T4919] el0t_64_sync+0x198/0x19c [ 34.056526][ T4919] [ 34.056526][ T4919] other info that might help us debug this: [ 34.056526][ T4919] [ 34.058178][ T4919] Chain exists of: [ 34.058178][ T4919] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#20 [ 34.058178][ T4919] [ 34.060495][ T4919] Possible unsafe locking scenario: [ 34.060495][ T4919] [ 34.061326][ T4921] evm: overlay not supported [ 34.062492][ T4919] CPU0 CPU1 [ 34.063427][ T4919] ---- ---- [ 34.064325][ T4919] lock(&q->q_usage_counter(io)#20); [ 34.065145][ T4919] lock(fs_reclaim); [ 34.066292][ T4919] lock(&q->q_usage_counter(io)#20); [ 34.067793][ T4919] rlock(&root->kernfs_iattr_rwsem); [ 34.068743][ T4919] [ 34.068743][ T4919] *** DEADLOCK *** [ 34.068743][ T4919] [ 34.070155][ T4919] 3 locks held by syz.4.10/4919: [ 34.070954][ T4919] #0: ffff0000c6cf8430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x64/0xbc [ 34.072733][ T4919] #1: ffff0000c7679c38 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 34.074600][ T4919] #2: ffff0000c7679c70 (&q->q_usage_counter(queue)#4){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 34.076758][ T4919] [ 34.076758][ T4919] stack backtrace: [ 34.077822][ T4919] CPU: 1 UID: 0 PID: 4919 Comm: syz.4.10 Not tainted syzkaller #0 PREEMPT [ 34.079270][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 34.081005][ T4919] Call trace: [ 34.081576][ T4919] show_stack+0x2c/0x3c (C) [ 34.082417][ T4919] __dump_stack+0x30/0x40 [ 34.083207][ T4919] dump_stack_lvl+0xd8/0x12c [ 34.084038][ T4919] dump_stack+0x1c/0x28 [ 34.084740][ T4919] print_circular_bug+0x328/0x330 [ 34.085629][ T4919] check_noncircular+0x158/0x174 [ 34.086457][ T4919] __lock_acquire+0x17c0/0x2ebc [ 34.087232][ T4919] lock_acquire+0x140/0x364 [ 34.087921][ T4919] down_read+0x58/0x2bc [ 34.088669][ T4919] kernfs_iop_getattr+0x98/0xe0 [ 34.089538][ T4919] vfs_getattr_nosec+0x250/0x388 [ 34.090286][ T4919] vfs_getattr+0x60/0x88 [ 34.091241][ T4919] loop_assign_backing_file+0x200/0x3c0 [ 34.092163][ T4919] lo_ioctl+0x1160/0x167c [ 34.092846][ T4919] blkdev_ioctl+0x574/0x904 [ 34.093547][ T4919] __arm64_sys_ioctl+0x14c/0x1c4 [ 34.094382][ T4919] invoke_syscall+0x98/0x244 [ 34.095259][ T4919] el0_svc_common+0xec/0x23c [ 34.096086][ T4919] do_el0_svc+0x4c/0x5c [ 34.096795][ T4919] el0_svc+0x64/0x260 [ 34.097462][ T4919] el0t_64_sync_handler+0x48/0x148 [ 34.098341][ T4919] el0t_64_sync+0x198/0x19c [ 34.102563][ T4919] ldm_validate_partition_table(): Disk read failed. [ 34.102765][ T4919] Dev loop3: unable to read RDB block 0 [ 34.102940][ T4919] loop3: unable to read partition table [ 34.102995][ T4919] loop3: partition table beyond EOD, truncated [ 34.103003][ T4919] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 34.387372][ T4928] loop1: detected capacity change from 0 to 256 [ 34.749839][ T4714] Bluetooth: hci0: command tx timeout [ 34.751289][ T4727] Bluetooth: hci2: command tx timeout [ 34.829761][ T4726] Bluetooth: hci4: command tx timeout [ 34.831173][ T4714] Bluetooth: hci3: command tx timeout [ 34.832410][ T4727] Bluetooth: hci1: command tx timeout [ 34.999298][ T4821] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.151230][ T4821] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.154458][ T4821] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 35.154484][ T4821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.154493][ T4821] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 35.156801][ T4821] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 35.156813][ T4821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.156822][ T4821] usb 1-1: Product: syz [ 35.156829][ T4821] usb 1-1: Manufacturer: syz [ 35.156835][ T4821] usb 1-1: SerialNumber: syz [ 35.157807][ T4821] usb 1-1: config 0 descriptor?? [ 35.373517][ T4799] usb 1-1: USB disconnect, device number 2 [ 36.829246][ T4727] Bluetooth: hci2: command tx timeout [ 36.829326][ T4714] Bluetooth: hci0: command tx timeout [ 36.909388][ T4727] Bluetooth: hci1: command tx timeout [ 36.909493][ T4727] Bluetooth: hci3: command tx timeout [ 36.909514][ T4727] Bluetooth: hci4: command tx timeout [ 38.909617][ T4714] Bluetooth: hci2: command tx timeout [ 38.909640][ T4727] Bluetooth: hci0: command tx timeout [ 38.999444][ T4727] Bluetooth: hci4: command tx timeout [ 38.999461][ T4726] Bluetooth: hci1: command tx timeout [ 38.999490][ T4714] Bluetooth: hci3: command tx timeout