last executing test programs: 6.475708593s ago: executing program 4 (id=39): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 6.414157726s ago: executing program 4 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="05005300000000000800050008"], 0x2c}}, 0x0) 6.310776893s ago: executing program 4 (id=43): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 6.282192725s ago: executing program 4 (id=44): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c6661756c745f747970653d30303030303030303030303030303033323736372c6261636b67726f756e645f67633d6f66662c6e6f666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c616c6c6f635f6d6f64653d64656661756c742c6e6f696e6c696e655f78617474722c6772706a71756f74613d2c636865636b706f696e743d64697361626c652c00b49405881d23d0c95ec7f5f668e6544238"], 0x4, 0x550c, &(0x7f00000089c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000809, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 5.91132063s ago: executing program 4 (id=51): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 4.060683472s ago: executing program 4 (id=75): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xa75, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x0, 0x10000c1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x0, 0xbf22, 0x312, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.021080144s ago: executing program 32 (id=75): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xa75, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x0, 0x10000c1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x0, 0xbf22, 0x312, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.197322955s ago: executing program 1 (id=132): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) close(r0) sendmsg$unix(r1, &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x89) 2.191965155s ago: executing program 1 (id=135): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611824000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.11344275s ago: executing program 1 (id=137): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:4\tr'], 0xa) 1.769961993s ago: executing program 1 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000002c0)=0x7) 1.409896176s ago: executing program 3 (id=158): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0x2a, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.289256175s ago: executing program 1 (id=162): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 1.289021035s ago: executing program 3 (id=164): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2000007, 0x12) 1.127075536s ago: executing program 1 (id=169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000200000000000006"], 0x30}}, 0x4090) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 1.077357209s ago: executing program 3 (id=171): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r1, &(0x7f0000006040)={0x2020}, 0x8f5) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @private, 0x0, 0x0, 'lblcr\x00'}, 0x2c) read(r1, &(0x7f0000001b00)=""/194, 0xc2) 1.075706369s ago: executing program 3 (id=173): syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB], 0xf) 1.043145471s ago: executing program 3 (id=175): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x41) 947.975967ms ago: executing program 3 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x301}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r0) 252.056253ms ago: executing program 2 (id=204): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000004c0)={0x2, &(0x7f0000000140)=[{0x20, 0x2, 0x0, 0xfffff00c}, {0x6}]}, 0x10) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="9a582215a09d", 0x589a}], 0x1) 207.750016ms ago: executing program 0 (id=205): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 207.502866ms ago: executing program 2 (id=206): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x41) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x275a, 0x0) 206.835666ms ago: executing program 0 (id=207): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x41) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 184.648088ms ago: executing program 2 (id=208): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 155.948839ms ago: executing program 2 (id=209): r0 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) readahead(r0, 0xffffffffffffed09, 0x431) 125.150331ms ago: executing program 2 (id=210): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2a00000001000000", 0x8}], 0x1}}], 0x2, 0x4000) 124.029411ms ago: executing program 0 (id=211): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x41) 67.141305ms ago: executing program 2 (id=212): bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="850d330d52889f222a07fa9af40000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7aa94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac46"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000240)={0x20, 0x15, 0x8f, "1ec2810c33cdf24a610ddf16cc959fa1d1bf8f9fb35f94652e3c0d5f3a7dfec3e19500ccb12fc018ed9f1f66ef32b54033fa6bf0ab89667f03b19d7b979643d01fb5969efdc68b56787de61037fd510fb7fd3bb361bb07228c88f1c0b0444e15eb29f409c33a28f6ebc3024be0b22ec6f4fb596fe97cc079b32854e557f971a4b17b777d76771ab09902b1b46450f2"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 66.089145ms ago: executing program 0 (id=213): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 24.437458ms ago: executing program 0 (id=214): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') r1 = socket(0xa, 0x1, 0x0) read$FUSE(r0, &(0x7f0000006040)={0x2020}, 0x8f5) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @private, 0x0, 0x0, 'lblcr\x00'}, 0x2c) read(r0, &(0x7f0000001b00)=""/194, 0xc2) 0s ago: executing program 0 (id=215): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000448, &(0x7f0000000080), 0x1, 0x53a, &(0x7f00000007c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000100)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@noblock_validity}]}, 0x1, 0x44a, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x0, 0x1ce) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x6, 0x4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) kernel console output (not intermixed with test programs): [ 9.122086][ T3991] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.149834][ T9] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.157093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. syzkaller login: [ 24.972775][ T4307] cgroup: Unknown subsys name 'net' [ 25.194131][ T4307] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 25.482080][ T4307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 26.204324][ T4325] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 26.207224][ T4327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 26.208573][ T4327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 26.210655][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 26.212546][ T4327] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 26.212573][ T4331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 26.213840][ T4327] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 26.215091][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 26.217362][ T4327] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 26.217605][ T4331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 26.218506][ T4327] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 26.221750][ T4332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 26.223073][ T4327] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 26.225120][ T4332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 26.225941][ T4331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 26.226332][ T4332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 26.227886][ T4334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 26.229293][ T4332] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 26.229544][ T4334] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 26.230646][ T4332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 26.232605][ T4334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 26.232810][ T4334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 26.235440][ T4332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 26.239901][ T4334] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 26.245372][ T4331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 26.248441][ T4334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 26.250993][ T4331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 26.265527][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 26.267073][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 26.272109][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 26.395867][ T4324] chnl_net:caif_netlink_parms(): no params data found [ 26.399692][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 26.408775][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 26.415945][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 26.454168][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 26.460849][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.462021][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.463606][ T4324] device bridge_slave_0 entered promiscuous mode [ 26.466607][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.467748][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.469210][ T4324] device bridge_slave_1 entered promiscuous mode [ 26.479963][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.481161][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.484456][ T4319] device bridge_slave_0 entered promiscuous mode [ 26.488163][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.489314][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.490682][ T4323] device bridge_slave_0 entered promiscuous mode [ 26.492527][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.493632][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.495042][ T4323] device bridge_slave_1 entered promiscuous mode [ 26.501145][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.503631][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.505127][ T4320] device bridge_slave_0 entered promiscuous mode [ 26.506940][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.508016][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.509355][ T4320] device bridge_slave_1 entered promiscuous mode [ 26.510717][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.512873][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.514353][ T4319] device bridge_slave_1 entered promiscuous mode [ 26.525278][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.528073][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.535016][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.545447][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.549866][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.558336][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.562704][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.563820][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.565327][ T4333] device bridge_slave_0 entered promiscuous mode [ 26.567529][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.568988][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.570124][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.572617][ T4333] device bridge_slave_1 entered promiscuous mode [ 26.575045][ T4324] team0: Port device team_slave_0 added [ 26.579358][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.588755][ T4324] team0: Port device team_slave_1 added [ 26.591067][ T4323] team0: Port device team_slave_0 added [ 26.597859][ T4319] team0: Port device team_slave_0 added [ 26.604900][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.607310][ T4323] team0: Port device team_slave_1 added [ 26.610954][ T4319] team0: Port device team_slave_1 added [ 26.616060][ T4320] team0: Port device team_slave_0 added [ 26.618236][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.622690][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.623783][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.627689][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.635614][ T4320] team0: Port device team_slave_1 added [ 26.641149][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.642719][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.646597][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.648639][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.649739][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.654914][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.657124][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.658218][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.662750][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.672630][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.673776][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.677821][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.680065][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.681226][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.685567][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.688504][ T4333] team0: Port device team_slave_0 added [ 26.690323][ T4333] team0: Port device team_slave_1 added [ 26.692493][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.693599][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.697762][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.700120][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.701212][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.706944][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.724200][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.725290][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.729408][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.738395][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.739571][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.744990][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.792772][ T4324] device hsr_slave_0 entered promiscuous mode [ 26.831813][ T4324] device hsr_slave_1 entered promiscuous mode [ 26.912730][ T4323] device hsr_slave_0 entered promiscuous mode [ 26.951724][ T4323] device hsr_slave_1 entered promiscuous mode [ 26.991587][ T4323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.992843][ T4323] Cannot create hsr debugfs directory [ 27.032636][ T4319] device hsr_slave_0 entered promiscuous mode [ 27.071733][ T4319] device hsr_slave_1 entered promiscuous mode [ 27.111586][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.112695][ T4319] Cannot create hsr debugfs directory [ 27.182525][ T4320] device hsr_slave_0 entered promiscuous mode [ 27.231787][ T4320] device hsr_slave_1 entered promiscuous mode [ 27.271653][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.272800][ T4320] Cannot create hsr debugfs directory [ 27.332648][ T4333] device hsr_slave_0 entered promiscuous mode [ 27.381774][ T4333] device hsr_slave_1 entered promiscuous mode [ 27.421588][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.422711][ T4333] Cannot create hsr debugfs directory [ 27.529312][ T4324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.565779][ T4324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.612574][ T4324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.656507][ T4324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.714232][ T4319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.762785][ T4319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.804911][ T4319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.844474][ T4319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.898124][ T4323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.932710][ T4323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.977012][ T4323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.039962][ T4323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.084283][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.086237][ T4320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.124665][ T4320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.173511][ T4320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.238839][ T4333] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.251719][ T4327] Bluetooth: hci0: command 0x0409 tx timeout [ 28.251754][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 28.252712][ T4327] Bluetooth: hci1: command 0x0409 tx timeout [ 28.274164][ T4320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.332025][ T4327] Bluetooth: hci4: command 0x0409 tx timeout [ 28.332039][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 28.339424][ T4333] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.382842][ T4333] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.424558][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.426430][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.429474][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.432961][ T4333] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.484283][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.485781][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.487226][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.488361][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.490590][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.508666][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.510275][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.513013][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.514186][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.519326][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.527439][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.532606][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.539466][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.541202][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.543572][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.548287][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.550583][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.552350][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.554052][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.555477][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.558720][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.564112][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.565726][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.567498][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.568562][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.570177][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.574535][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.576066][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.581094][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.582942][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.584387][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.585742][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.590075][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.591425][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.593488][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.594643][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.597774][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.603578][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.605265][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.606767][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.608179][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.609276][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.610610][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.613619][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.615064][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.616196][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.623589][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.625067][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.626730][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.640573][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.642336][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.643943][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.646088][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.647568][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.649201][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.652905][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.657756][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.667739][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.669251][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.670768][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.672606][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.674592][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.676140][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.677313][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.678821][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.680365][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.682702][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.683839][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.685400][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.687068][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.688841][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.690408][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.693386][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.694989][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.696514][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.698000][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.699487][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.700919][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.703796][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.706154][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.707602][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.711452][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.714753][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.720184][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.722296][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.723693][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.725650][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.729232][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.730523][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.735646][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.746570][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.748254][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.749722][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.751092][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.753760][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.757396][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.759775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.761421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.768925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.770460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.772347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.773978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.777172][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.778350][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.779997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.794227][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.795792][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.797256][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.798345][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.799721][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.801403][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.803292][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.813844][ T4320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.815975][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.823304][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.824972][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.826520][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.827893][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.829489][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.830990][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.836442][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.837972][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.842483][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.844459][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.852248][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.853845][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.857924][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.859103][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.865822][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.867736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.869348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.873843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.875358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.881091][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.884094][ T4324] device veth0_vlan entered promiscuous mode [ 28.887486][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.888791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.890107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.896701][ T4324] device veth1_vlan entered promiscuous mode [ 28.915275][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.916824][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.918322][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.919881][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.937044][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.938957][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.940536][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.943110][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.956674][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.957989][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.962664][ T4324] device veth0_macvtap entered promiscuous mode [ 28.966616][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.969798][ T4319] device veth0_vlan entered promiscuous mode [ 28.980388][ T4324] device veth1_macvtap entered promiscuous mode [ 28.988482][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.990835][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.994565][ T4323] device veth0_vlan entered promiscuous mode [ 28.996131][ T4324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.997487][ T4324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.998881][ T4324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.000172][ T4324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.005872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.007250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.008731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.010239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.012147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.013689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.015201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.016723][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.018361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.019813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.023228][ T4319] device veth1_vlan entered promiscuous mode [ 29.024496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.026079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.027522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.029403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.030774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.038580][ T4323] device veth1_vlan entered promiscuous mode [ 29.048259][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.051258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.052868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.054283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.055549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.070536][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.072611][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.074090][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.077081][ T4319] device veth0_macvtap entered promiscuous mode [ 29.086964][ T4319] device veth1_macvtap entered promiscuous mode [ 29.114607][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.116325][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.118369][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.119636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.121197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.124014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.125546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.126933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.128482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.138491][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.140101][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.144359][ T319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.148577][ T319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.152478][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.154163][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.156102][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.158857][ T4323] device veth0_macvtap entered promiscuous mode [ 29.160276][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.162224][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.163638][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.165246][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.169867][ T4323] device veth1_macvtap entered promiscuous mode [ 29.174795][ T4366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.176142][ T4366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.178019][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.179557][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.180911][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.182577][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.184024][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.185461][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.187010][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.188367][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.198776][ T4319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.200284][ T4319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.202706][ T4319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.204123][ T4319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.211379][ T4333] device veth0_vlan entered promiscuous mode [ 29.216674][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.218286][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.219919][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.221852][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.223965][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.225216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.226776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.233166][ T4333] device veth1_vlan entered promiscuous mode [ 29.237093][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.238751][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.240403][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.242640][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.244607][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.246102][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.247674][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.249158][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.250725][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.253559][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.255071][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.256512][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.262783][ T4320] device veth0_vlan entered promiscuous mode [ 29.265414][ T4323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.266754][ T4323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.268078][ T4323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.269379][ T4323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.300726][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.302407][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.303893][ T196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.309505][ T4320] device veth1_vlan entered promiscuous mode [ 29.316158][ T4333] device veth0_macvtap entered promiscuous mode [ 29.331110][ T4333] device veth1_macvtap entered promiscuous mode [ 29.337275][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.338488][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.345553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.347057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.348548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.350053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.351416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.366607][ T4434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.367961][ T4434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.369687][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.379850][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.381737][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.405905][ T4320] device veth0_macvtap entered promiscuous mode [ 29.410016][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.412581][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.416689][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.418301][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.419694][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.427770][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.429984][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.434177][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.435747][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.437315][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.439726][ T4320] device veth1_macvtap entered promiscuous mode [ 29.442622][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.443928][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.445700][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.460454][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.462769][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.464233][ T319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.465728][ T319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.466168][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.468398][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.478409][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.480031][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.485406][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.488796][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.490394][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.492774][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.515208][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.516791][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.518398][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.520086][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.524480][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.526034][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.527456][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.528959][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.544204][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.547442][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.549199][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.571961][ T4333] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.573385][ T4333] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.574824][ T4333] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.576224][ T4333] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.589426][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.591169][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.593988][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.595729][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.597279][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.598892][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.600377][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.615860][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.623144][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.625978][ T4447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 29.627319][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.629018][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.665191][ T4320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.666638][ T4320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.672021][ T4320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.673348][ T4320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.805456][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.806677][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.808355][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.828592][ T319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.829830][ T319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.859180][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.890424][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.891794][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.893569][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.906426][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.907731][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.909415][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.160376][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 30.176089][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.177339][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.203026][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 30.206152][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 30.209276][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 30.274210][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 30.277985][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 30.280067][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 30.324248][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 30.329475][ T4468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'. [ 30.331132][ T4469] netlink: 'syz.3.17': attribute type 5 has an invalid length. [ 30.332343][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 30.332606][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 30.333619][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 30.411639][ T4327] Bluetooth: hci3: command 0x041b tx timeout [ 30.424116][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 30.465486][ T4476] lo speed is unknown, defaulting to 1000 [ 30.467238][ T4476] lo speed is unknown, defaulting to 1000 [ 30.474250][ T4476] lo speed is unknown, defaulting to 1000 [ 30.515393][ T4467] lo speed is unknown, defaulting to 1000 [ 30.519484][ T4473] batman_adv: batadv0: Adding interface: dummy0 [ 30.520486][ T4473] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.532236][ T4476] infiniband sz1: set active [ 30.533007][ T4476] infiniband sz1: added lo [ 30.542060][ T4473] batman_adv: batadv0: Interface activated: dummy0 [ 30.545812][ T4476] RDS/IB: sz1: added [ 30.546614][ T4476] smc: adding ib device sz1 with port count 1 [ 30.547565][ T4476] smc: ib device sz1 port 1 has pnetid [ 30.548840][ T4467] lo speed is unknown, defaulting to 1000 [ 30.556092][ T4476] lo speed is unknown, defaulting to 1000 [ 30.568047][ T4473] batadv0: mtu less than device minimum [ 30.570685][ T4473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.573981][ T4473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.577008][ T4473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.580113][ T4473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.583077][ T4473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.586056][ T4473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.589055][ T4473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.592034][ T4473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.594963][ T4473] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 30.610978][ T4453] loop1: detected capacity change from 0 to 32768 [ 30.658893][ T4476] lo speed is unknown, defaulting to 1000 [ 30.677715][ T4453] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 30.690630][ T4453] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 30.744538][ T4476] lo speed is unknown, defaulting to 1000 [ 30.759445][ T4453] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 30.768199][ T4396] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 30.769446][ T4396] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 30.769771][ T4455] loop2: detected capacity change from 0 to 131072 [ 30.798747][ T4476] lo speed is unknown, defaulting to 1000 [ 30.800029][ T4396] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 30ms [ 30.804038][ T4396] gfs2: fsid=syz:syz.0: jid=0: Done [ 30.808422][ T4453] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 30.853677][ T4476] lo speed is unknown, defaulting to 1000 [ 30.897199][ T4478] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 30.903096][ T4478] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 30.908192][ T4455] F2FS-fs (loop2): Test dummy encryption mode enabled [ 30.918747][ T4455] F2FS-fs (loop2): invalid crc value [ 30.948364][ T4455] F2FS-fs (loop2): Found nat_bits in checkpoint [ 30.969536][ T4455] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 31.012793][ T4455] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 31.043411][ T4327] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 31.048858][ T4493] netlink: 'syz.3.21': attribute type 4 has an invalid length. [ 31.067142][ T4493] infiniband sz1: set down [ 31.070273][ T112] lo speed is unknown, defaulting to 1000 [ 31.071364][ T112] lo speed is unknown, defaulting to 1000 [ 31.080715][ T4493] rdma_rxe: rxe_register_device failed with error -23 [ 31.082345][ T4493] rdma_rxe: failed to add syz_tun [ 31.192063][ T4495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22'. [ 31.339490][ T4497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.354317][ T4505] loop0: detected capacity change from 0 to 64 [ 31.394779][ T4497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.397295][ T4497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.399772][ T4497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.513160][ T4511] loop2: detected capacity change from 0 to 128 [ 31.535633][ T4510] sp0: Synchronizing with TNC [ 31.537556][ T4511] ======================================================= [ 31.537556][ T4511] WARNING: The mand mount option has been deprecated and [ 31.537556][ T4511] and is ignored by this kernel. Remove the mand [ 31.537556][ T4511] option from the mount to silence this warning. [ 31.537556][ T4511] ======================================================= [ 31.548766][ T4507] loop3: detected capacity change from 0 to 32768 [ 31.566715][ T4507] (syz.3.27,4507,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 31.570690][ T4507] (syz.3.27,4507,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 31.603442][ T4507] JBD2: Ignoring recovery information on journal [ 31.635701][ T4517] netlink: 244 bytes leftover after parsing attributes in process `syz.1.32'. [ 31.645429][ T4507] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 31.808227][ T4524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.861189][ T4528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.864504][ T4511] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 31.865074][ T4524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.866276][ T4511] FAT-fs (loop2): Filesystem has been set read-only [ 31.928615][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 31.937216][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 31.952912][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 31.968882][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 31.979738][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 31.988802][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 31.994959][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 32.123887][ T4467] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.311074][ T4333] ocfs2: Unmounting device (7,3) on (node local) [ 32.321685][ T4467] usb 1-1: Using ep0 maxpacket: 8 [ 32.324360][ T4547] loop4: detected capacity change from 0 to 40427 [ 32.325660][ T4467] usb 1-1: config 0 interface 0 has no altsetting 0 [ 32.326766][ T4467] usb 1-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 32.328629][ T4467] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.332286][ T4467] usb 1-1: config 0 descriptor?? [ 32.340768][ T4547] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 32.347104][ T4547] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 32.353825][ T4547] F2FS-fs (loop4): invalid crc value [ 32.358579][ T4547] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.373168][ T4547] F2FS-fs (loop4): Start checkpoint disabled! [ 32.379081][ T4547] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 32.405688][ T4547] F2FS-fs (loop4) : inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0xe0/0xcec [ 32.407442][ T4547] overlayfs: upper fs does not support tmpfile. [ 32.411946][ T4327] Bluetooth: hci0: command 0x040f tx timeout [ 32.417771][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 32.419224][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 32.420459][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 32.422348][ T4336] Bluetooth: hci2: command 0x040f tx timeout [ 32.423378][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 32.424970][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 32.426156][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 32.427433][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 32.456090][ T4556] loop3: detected capacity change from 0 to 1024 [ 32.457874][ T4556] hfsplus: unable to parse mount options [ 32.478436][ T4320] F2FS-fs (loop4): access invalid blkaddr:4043309056 [ 32.479616][ T4320] CPU: 1 PID: 4320 Comm: syz-executor Not tainted syzkaller #0 [ 32.480797][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 32.482526][ T4320] Call trace: [ 32.483055][ T4320] dump_backtrace+0x1c8/0x1f4 [ 32.483854][ T4320] show_stack+0x2c/0x3c [ 32.484574][ T4320] __dump_stack+0x30/0x40 [ 32.485272][ T4320] dump_stack_lvl+0xf8/0x160 [ 32.486022][ T4320] dump_stack+0x1c/0x5c [ 32.486692][ T4320] f2fs_is_valid_blkaddr+0x9fc/0xf5c [ 32.487614][ T4320] f2fs_map_blocks+0x984/0x2b24 [ 32.488441][ T4320] f2fs_mpage_readpages+0x8d4/0x1a08 [ 32.489286][ T4320] f2fs_readahead+0x190/0x3f8 [ 32.490045][ T4320] read_pages+0x158/0x680 [ 32.490701][ T4320] page_cache_ra_unbounded+0x498/0x57c [ 32.491481][ T4320] page_cache_ra_order+0x850/0xa1c [ 32.491695][ T4327] Bluetooth: hci4: command 0x040f tx timeout [ 32.492181][ T4320] ondemand_readahead+0x600/0xb0c [ 32.493181][ T4327] Bluetooth: hci3: command 0x040f tx timeout [ 32.493849][ T4320] page_cache_sync_ra+0x350/0x3d0 [ 32.495387][ T4320] f2fs_readdir+0x378/0xbdc [ 32.496132][ T4320] iterate_dir+0x1f0/0x4cc [ 32.496883][ T4320] __arm64_sys_getdents64+0x11c/0x318 [ 32.497770][ T4320] invoke_syscall+0x98/0x2bc [ 32.498530][ T4320] el0_svc_common+0x138/0x258 [ 32.499336][ T4320] do_el0_svc+0x58/0x13c [ 32.500087][ T4320] el0_svc+0x58/0x138 [ 32.500740][ T4320] el0t_64_sync_handler+0x84/0xf0 [ 32.501565][ T4320] el0t_64_sync+0x18c/0x190 [ 32.559483][ T4320] syz-executor: attempt to access beyond end of device [ 32.559483][ T4320] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 32.565040][ T4320] syz-executor: attempt to access beyond end of device [ 32.565040][ T4320] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 32.605799][ T4366] kworker/u4:5: attempt to access beyond end of device [ 32.605799][ T4366] loop4: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 32.645453][ T4561] loop1: detected capacity change from 0 to 32768 [ 32.661967][ T4561] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.52 (4561) [ 32.679295][ T4561] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 32.681058][ T4561] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 32.682599][ T4561] BTRFS info (device loop1): using free space tree [ 32.742558][ T4467] hid-generic 0003:05AC:0323.0001: hidraw0: USB HID vff.ff Device [HID 05ac:0323] on usb-dummy_hcd.0-1/input0 [ 32.763812][ T4561] BTRFS info (device loop1): enabling ssd optimizations [ 32.871300][ T4319] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 32.896030][ T4594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 32.909060][ T4594] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.910587][ T4594] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.912103][ T4594] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.913445][ T4594] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.942442][ T4594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 32.943947][ T4594] Zero length message leads to an empty skb [ 32.952481][ T4512] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop1 scanned by udevd (4512) [ 32.980768][ T112] usb 1-1: USB disconnect, device number 2 [ 33.255827][ T4605] loop1: detected capacity change from 0 to 32768 [ 33.268883][ T4605] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.58 (4605) [ 33.281614][ T4605] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 33.283376][ T4605] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 33.284720][ T4605] BTRFS info (device loop1): using free space tree [ 33.310024][ T4608] loop3: detected capacity change from 0 to 32768 [ 33.317279][ T4608] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 33.318507][ T4608] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 33.335166][ T4608] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 33.337739][ T112] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 33.338742][ T112] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 33.361176][ T112] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 22ms [ 33.368260][ T112] gfs2: fsid=syz:syz.0: jid=0: Done [ 33.369156][ T4608] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 33.445402][ T4605] BTRFS info (device loop1): enabling ssd optimizations [ 33.626344][ T4336] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 33.808292][ T4644] loop0: detected capacity change from 0 to 4096 [ 33.813957][ T4605] BTRFS info (device loop1): balance: start -d -m [ 33.824763][ T4605] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 33.841555][ T4643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 33.881289][ T4605] BTRFS info (device loop1): found 4 extents, stage: move data extents [ 33.902949][ T4605] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 33.936159][ T4605] BTRFS info (device loop1): found 11 extents, stage: move data extents [ 33.950183][ T4605] BTRFS info (device loop1): found 1 extents, stage: update data pointers [ 33.959887][ T4605] BTRFS info (device loop1): balance: ended with status: 0 [ 34.067730][ T4319] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 34.215345][ T4651] loop1: detected capacity change from 0 to 64 [ 34.444524][ T4327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 34.446604][ T4327] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 34.448119][ T4327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 34.450173][ T4327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 34.451905][ T4327] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 34.453838][ T4327] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 34.553188][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 34.554238][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 34.568823][ T4366] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.573745][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 34.582516][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 34.601397][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 34.603936][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 34.609000][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 34.615282][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 34.622550][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 34.639895][ T4327] Bluetooth: hci3: command 0x0419 tx timeout [ 34.640892][ T4327] Bluetooth: hci4: command 0x0419 tx timeout [ 34.716680][ T4366] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.722281][ T4658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73'. [ 34.804283][ T4366] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.807224][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 34.808480][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 34.809841][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 34.811204][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 34.812436][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 34.822407][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 34.833330][ T4664] lo speed is unknown, defaulting to 1000 [ 34.901444][ T4366] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.005421][ T4664] chnl_net:caif_netlink_parms(): no params data found [ 35.101724][ T4664] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.110643][ T4664] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.135408][ T4664] device bridge_slave_0 entered promiscuous mode [ 35.146254][ T4664] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.154502][ T4664] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.165078][ T4664] device bridge_slave_1 entered promiscuous mode [ 35.201293][ T4677] loop0: detected capacity change from 0 to 131072 [ 35.208809][ T4677] F2FS-fs (loop0): Test dummy encryption mode enabled [ 35.210923][ T4677] F2FS-fs (loop0): invalid crc value [ 35.213151][ T4677] F2FS-fs (loop0): Found nat_bits in checkpoint [ 35.221016][ T4677] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 35.309143][ T4664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.328169][ T4664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.377775][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 35.379055][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 35.380330][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 35.381578][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 35.383149][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 35.385810][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 35.394271][ T4664] team0: Port device team_slave_0 added [ 35.399286][ T4664] team0: Port device team_slave_1 added [ 35.454828][ T4664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.456025][ T4664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.460177][ T4664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.484997][ T4664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.492067][ T4664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.508376][ T4664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.509451][ T4738] loop0: detected capacity change from 0 to 64 [ 35.608587][ T4664] device hsr_slave_0 entered promiscuous mode [ 35.636607][ T4664] device hsr_slave_1 entered promiscuous mode [ 35.679758][ T4664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.681063][ T4664] Cannot create hsr debugfs directory [ 35.773184][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 35.774653][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 35.776251][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 35.783200][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 35.784539][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 35.785851][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 35.906790][ T4779] loop3: detected capacity change from 0 to 64 [ 36.070496][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 36.071819][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 36.073097][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 36.074358][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 36.075555][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 36.076796][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 36.191489][ T4664] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.214923][ T4817] loop3: detected capacity change from 0 to 64 [ 36.234150][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 36.238126][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 36.239423][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 36.240590][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 36.241864][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 36.252748][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 36.259083][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 36.300037][ T4664] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.331129][ T4664] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.356721][ T4816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.134'. [ 36.627927][ T4664] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.644928][ T4336] Bluetooth: hci1: command 0x0409 tx timeout [ 36.681976][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 36.683362][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 36.684489][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 36.685666][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 36.686774][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 36.692911][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 36.907161][ T4878] loop0: detected capacity change from 0 to 64 [ 36.992799][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 36.994995][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 36.996227][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 36.997378][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 36.998613][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 36.999827][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 37.001036][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 37.012787][ T4879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.152'. [ 37.060555][ T4664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.064184][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.065688][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.079932][ T4664] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.101071][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.102693][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.104144][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.105302][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.106719][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.113259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.115129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.116554][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.117643][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.123812][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.125573][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.133169][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.135140][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.138036][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.140481][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.142017][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.153857][ T4896] loop1: detected capacity change from 0 to 64 [ 37.174584][ T4664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.190031][ T4664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.219651][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.221279][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.222808][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.224238][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.279651][ T4366] device hsr_slave_0 left promiscuous mode [ 37.345225][ T4366] device hsr_slave_1 left promiscuous mode [ 37.362593][ T4923] loop0: detected capacity change from 0 to 64 [ 37.389763][ T4928] loop3: detected capacity change from 0 to 64 [ 37.395881][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.397209][ T4366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.403217][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.404459][ T4366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.405959][ T4366] device bridge_slave_1 left promiscuous mode [ 37.407666][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.471189][ T4366] device bridge_slave_0 left promiscuous mode [ 37.472291][ T4366] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.534077][ T4943] loop0: detected capacity change from 0 to 64 [ 37.593395][ T4366] device veth1_macvtap left promiscuous mode [ 37.594544][ T4366] device veth0_macvtap left promiscuous mode [ 37.595477][ T4366] device veth1_vlan left promiscuous mode [ 37.596438][ T4366] device veth0_vlan left promiscuous mode [ 37.700224][ T4961] loop0: detected capacity change from 0 to 64 [ 37.857336][ T4973] loop0: detected capacity change from 0 to 64 [ 37.981773][ T4981] loop0: detected capacity change from 0 to 64 [ 38.093751][ T4990] capability: warning: `syz.0.200' uses deprecated v2 capabilities in a way that may be insecure [ 38.226405][ T5005] loop0: detected capacity change from 0 to 64 [ 38.318513][ T5013] loop0: detected capacity change from 0 to 64 [ 38.364028][ T5017] loop0: detected capacity change from 0 to 64 [ 38.434029][ T5021] loop0: detected capacity change from 0 to 512 [ 38.439070][ T5021] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.462144][ T5021] [ 38.462558][ T5021] ====================================================== [ 38.463724][ T5021] WARNING: possible circular locking dependency detected [ 38.464787][ T5021] syzkaller #0 Not tainted [ 38.465522][ T5021] ------------------------------------------------------ [ 38.466696][ T5021] syz.0.215/5021 is trying to acquire lock: [ 38.467691][ T5021] ffff0000f6ed40a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x50/0x1c4 [ 38.469140][ T5021] [ 38.469140][ T5021] but task is already holding lock: [ 38.470378][ T5021] ffff00010332a0a0 (&ei->i_data_sem){++++}-{3:3}, at: ext4_truncate+0x7bc/0x1078 [ 38.471879][ T5021] [ 38.471879][ T5021] which lock already depends on the new lock. [ 38.471879][ T5021] [ 38.473482][ T5021] [ 38.473482][ T5021] the existing dependency chain (in reverse order) is: [ 38.475022][ T5021] [ 38.475022][ T5021] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 38.476340][ T5021] down_write+0x5c/0x88 [ 38.477077][ T5021] ext4_map_blocks+0x7c4/0x1770 [ 38.477941][ T5021] ext4_writepages+0xd8c/0x284c [ 38.478798][ T5021] do_writepages+0x2c0/0x4fc [ 38.479662][ T5021] __writeback_single_inode+0x164/0x157c [ 38.480683][ T5021] writeback_sb_inodes+0x824/0x1404 [ 38.481623][ T5021] __writeback_inodes_wb+0x110/0x394 [ 38.482562][ T5021] wb_writeback+0x414/0xfb0 [ 38.483399][ T5021] wb_workfn+0xac0/0xd98 [ 38.484114][ T5021] process_one_work+0x7f4/0x13a8 [ 38.484937][ T5021] worker_thread+0x8c8/0xfbc [ 38.485737][ T5021] kthread+0x250/0x2d8 [ 38.486508][ T5021] ret_from_fork+0x10/0x20 [ 38.487357][ T5021] [ 38.487357][ T5021] -> #4 (jbd2_handle){++++}-{0:0}: [ 38.488637][ T5021] start_this_handle+0xfe0/0x122c [ 38.489595][ T5021] jbd2__journal_start+0x288/0x51c [ 38.490526][ T5021] jbd2_journal_start+0x3c/0x4c [ 38.491452][ T5021] ocfs2_start_trans+0x380/0x6c4 [ 38.492395][ T5021] ocfs2_modify_bh+0xe4/0x43c [ 38.493154][ T5021] ocfs2_local_read_info+0x102c/0x131c [ 38.494072][ T5021] dquot_load_quota_sb+0x6c4/0xa24 [ 38.494893][ T5021] dquot_load_quota_inode+0x274/0x4e4 [ 38.495906][ T5021] ocfs2_enable_quotas+0x17c/0x3b4 [ 38.496835][ T5021] ocfs2_fill_super+0x3060/0x3e98 [ 38.497699][ T5021] mount_bdev+0x264/0x358 [ 38.498446][ T5021] ocfs2_mount+0x44/0x58 [ 38.499166][ T5021] legacy_get_tree+0xd4/0x16c [ 38.499952][ T5021] vfs_get_tree+0x90/0x274 [ 38.500787][ T5021] do_new_mount+0x228/0x810 [ 38.501610][ T5021] path_mount+0x5b4/0xe78 [ 38.502380][ T5021] __arm64_sys_mount+0x49c/0x584 [ 38.503268][ T5021] invoke_syscall+0x98/0x2bc [ 38.504055][ T5021] el0_svc_common+0x138/0x258 [ 38.504883][ T5021] do_el0_svc+0x58/0x13c [ 38.505653][ T5021] el0_svc+0x58/0x138 [ 38.506403][ T5021] el0t_64_sync_handler+0x84/0xf0 [ 38.507335][ T5021] el0t_64_sync+0x18c/0x190 [ 38.508145][ T5021] [ 38.508145][ T5021] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 38.509471][ T5021] down_read+0x64/0x304 [ 38.510191][ T5021] ocfs2_start_trans+0x374/0x6c4 [ 38.511025][ T5021] ocfs2_modify_bh+0xe4/0x43c [ 38.511855][ T5021] ocfs2_local_read_info+0x102c/0x131c [ 38.512822][ T5021] dquot_load_quota_sb+0x6c4/0xa24 [ 38.513716][ T5021] dquot_load_quota_inode+0x274/0x4e4 [ 38.514607][ T5021] ocfs2_enable_quotas+0x17c/0x3b4 [ 38.515455][ T5021] ocfs2_fill_super+0x3060/0x3e98 [ 38.516293][ T5021] mount_bdev+0x264/0x358 [ 38.517142][ T5021] ocfs2_mount+0x44/0x58 [ 38.517977][ T5021] legacy_get_tree+0xd4/0x16c [ 38.518808][ T5021] vfs_get_tree+0x90/0x274 [ 38.519574][ T5021] do_new_mount+0x228/0x810 [ 38.520361][ T5021] path_mount+0x5b4/0xe78 [ 38.521123][ T5021] __arm64_sys_mount+0x49c/0x584 [ 38.522008][ T5021] invoke_syscall+0x98/0x2bc [ 38.522854][ T5021] el0_svc_common+0x138/0x258 [ 38.523732][ T5021] do_el0_svc+0x58/0x13c [ 38.524493][ T5021] el0_svc+0x58/0x138 [ 38.525188][ T5021] el0t_64_sync_handler+0x84/0xf0 [ 38.526098][ T5021] el0t_64_sync+0x18c/0x190 [ 38.526895][ T5021] [ 38.526895][ T5021] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 38.528137][ T5021] ocfs2_start_trans+0x20c/0x6c4 [ 38.529074][ T5021] ocfs2_acquire_dquot+0x5bc/0xac4 [ 38.530062][ T5021] dqget+0x654/0xccc [ 38.530792][ T5021] __dquot_initialize+0x2d4/0xa80 [ 38.531683][ T5021] dquot_initialize+0x24/0x34 [ 38.532525][ T5021] ocfs2_get_init_inode+0x134/0x1a8 [ 38.533396][ T5021] ocfs2_mknod+0x774/0x1f18 [ 38.534196][ T5021] ocfs2_create+0x19c/0x4f0 [ 38.535007][ T5021] path_openat+0x112c/0x2680 [ 38.535848][ T5021] do_filp_open+0x174/0x344 [ 38.536666][ T5021] do_sys_openat2+0x128/0x3d8 [ 38.537471][ T5021] __arm64_sys_openat+0x120/0x154 [ 38.538306][ T5021] invoke_syscall+0x98/0x2bc [ 38.539127][ T5021] el0_svc_common+0x138/0x258 [ 38.539884][ T5021] do_el0_svc+0x58/0x13c [ 38.540665][ T5021] el0_svc+0x58/0x138 [ 38.541366][ T5021] el0t_64_sync_handler+0x84/0xf0 [ 38.542196][ T5021] el0t_64_sync+0x18c/0x190 [ 38.542904][ T5021] [ 38.542904][ T5021] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 38.544375][ T5021] down_write+0x5c/0x88 [ 38.545122][ T5021] ocfs2_create_local_dquot+0x15c/0x1330 [ 38.546042][ T5021] ocfs2_acquire_dquot+0x6e8/0xac4 [ 38.546994][ T5021] dqget+0x654/0xccc [ 38.547728][ T5021] __dquot_initialize+0x2d4/0xa80 [ 38.548711][ T5021] dquot_initialize+0x24/0x34 [ 38.549562][ T5021] ocfs2_get_init_inode+0x134/0x1a8 [ 38.550464][ T5021] ocfs2_mknod+0x774/0x1f18 [ 38.551247][ T5021] ocfs2_create+0x19c/0x4f0 [ 38.552045][ T5021] path_openat+0x112c/0x2680 [ 38.552824][ T5021] do_filp_open+0x174/0x344 [ 38.553670][ T5021] do_sys_openat2+0x128/0x3d8 [ 38.554545][ T5021] __arm64_sys_openat+0x120/0x154 [ 38.555455][ T5021] invoke_syscall+0x98/0x2bc [ 38.556335][ T5021] el0_svc_common+0x138/0x258 [ 38.557187][ T5021] do_el0_svc+0x58/0x13c [ 38.557936][ T5021] el0_svc+0x58/0x138 [ 38.558700][ T5021] el0t_64_sync_handler+0x84/0xf0 [ 38.559619][ T5021] el0t_64_sync+0x18c/0x190 [ 38.560431][ T5021] [ 38.560431][ T5021] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 38.561700][ T5021] __lock_acquire+0x293c/0x6544 [ 38.562621][ T5021] lock_acquire+0x20c/0x644 [ 38.563501][ T5021] __mutex_lock_common+0x190/0x1f38 [ 38.564448][ T5021] mutex_lock_nested+0x38/0x44 [ 38.565327][ T5021] dquot_commit+0x50/0x1c4 [ 38.566135][ T5021] ext4_write_dquot+0x1b4/0x31c [ 38.567006][ T5021] ext4_mark_dquot_dirty+0xe8/0x140 [ 38.567926][ T5021] mark_all_dquot_dirty+0x1f8/0x424 [ 38.568879][ T5021] __dquot_free_space+0x744/0xa80 [ 38.569796][ T5021] ext4_free_blocks+0x18c8/0x23cc [ 38.570701][ T5021] ext4_ext_remove_space+0x1698/0x39c4 [ 38.571676][ T5021] ext4_ext_truncate+0x164/0x20c [ 38.572559][ T5021] ext4_truncate+0x9dc/0x1078 [ 38.573431][ T5021] ext4_evict_inode+0xc04/0x1270 [ 38.574341][ T5021] evict+0x3c8/0x810 [ 38.575053][ T5021] iput+0x764/0x7f4 [ 38.575759][ T5021] ext4_process_orphan+0x240/0x2b4 [ 38.576681][ T5021] ext4_orphan_cleanup+0x908/0x104c [ 38.577653][ T5021] ext4_fill_super+0x6920/0x6e34 [ 38.578575][ T5021] get_tree_bdev+0x358/0x544 [ 38.579437][ T5021] ext4_get_tree+0x28/0x38 [ 38.580285][ T5021] vfs_get_tree+0x90/0x274 [ 38.581049][ T5021] do_new_mount+0x228/0x810 [ 38.581886][ T5021] path_mount+0x5b4/0xe78 [ 38.582719][ T5021] __arm64_sys_mount+0x49c/0x584 [ 38.583618][ T5021] invoke_syscall+0x98/0x2bc [ 38.584409][ T5021] el0_svc_common+0x138/0x258 [ 38.585249][ T5021] do_el0_svc+0x58/0x13c [ 38.585983][ T5021] el0_svc+0x58/0x138 [ 38.586682][ T5021] el0t_64_sync_handler+0x84/0xf0 [ 38.587494][ T5021] el0t_64_sync+0x18c/0x190 [ 38.588267][ T5021] [ 38.588267][ T5021] other info that might help us debug this: [ 38.588267][ T5021] [ 38.589786][ T5021] Chain exists of: [ 38.589786][ T5021] &dquot->dq_lock --> jbd2_handle --> &ei->i_data_sem [ 38.589786][ T5021] [ 38.591686][ T5021] Possible unsafe locking scenario: [ 38.591686][ T5021] [ 38.592788][ T5021] CPU0 CPU1 [ 38.593628][ T5021] ---- ---- [ 38.594378][ T5021] lock(&ei->i_data_sem); [ 38.595061][ T5021] lock(jbd2_handle); [ 38.596103][ T5021] lock(&ei->i_data_sem); [ 38.597198][ T5021] lock(&dquot->dq_lock); [ 38.597918][ T5021] [ 38.597918][ T5021] *** DEADLOCK *** [ 38.597918][ T5021] [ 38.599274][ T5021] 4 locks held by syz.0.215/5021: [ 38.600064][ T5021] #0: ffff0000f87ca0e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 38.601646][ T5021] #1: ffff0000f87ca650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 38.603021][ T5021] #2: ffff00010332a0a0 (&ei->i_data_sem){++++}-{3:3}, at: ext4_truncate+0x7bc/0x1078 [ 38.604414][ T5021] #3: ffff8000153cc128 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x10/0x4c [ 38.605799][ T5021] [ 38.605799][ T5021] stack backtrace: [ 38.606683][ T5021] CPU: 1 PID: 5021 Comm: syz.0.215 Not tainted syzkaller #0 [ 38.607775][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 38.609218][ T5021] Call trace: [ 38.609673][ T5021] dump_backtrace+0x1c8/0x1f4 [ 38.610370][ T5021] show_stack+0x2c/0x3c [ 38.610986][ T5021] __dump_stack+0x30/0x40 [ 38.611706][ T5021] dump_stack_lvl+0xf8/0x160 [ 38.612442][ T5021] dump_stack+0x1c/0x5c [ 38.613118][ T5021] print_circular_bug+0x148/0x1b0 [ 38.613938][ T5021] check_noncircular+0x240/0x2d4 [ 38.614684][ T5021] __lock_acquire+0x293c/0x6544 [ 38.615453][ T5021] lock_acquire+0x20c/0x644 [ 38.616164][ T5021] __mutex_lock_common+0x190/0x1f38 [ 38.617029][ T5021] mutex_lock_nested+0x38/0x44 [ 38.617804][ T5021] dquot_commit+0x50/0x1c4 [ 38.618499][ T5021] ext4_write_dquot+0x1b4/0x31c [ 38.619317][ T5021] ext4_mark_dquot_dirty+0xe8/0x140 [ 38.620153][ T5021] mark_all_dquot_dirty+0x1f8/0x424 [ 38.620972][ T5021] __dquot_free_space+0x744/0xa80 [ 38.621773][ T5021] ext4_free_blocks+0x18c8/0x23cc [ 38.622562][ T5021] ext4_ext_remove_space+0x1698/0x39c4 [ 38.623451][ T5021] ext4_ext_truncate+0x164/0x20c [ 38.624225][ T5021] ext4_truncate+0x9dc/0x1078 [ 38.625023][ T5021] ext4_evict_inode+0xc04/0x1270 [ 38.625830][ T5021] evict+0x3c8/0x810 [ 38.626474][ T5021] iput+0x764/0x7f4 [ 38.627073][ T5021] ext4_process_orphan+0x240/0x2b4 [ 38.627884][ T5021] ext4_orphan_cleanup+0x908/0x104c [ 38.628611][ T5021] ext4_fill_super+0x6920/0x6e34 [ 38.629370][ T5021] get_tree_bdev+0x358/0x544 [ 38.630101][ T5021] ext4_get_tree+0x28/0x38 [ 38.630844][ T5021] vfs_get_tree+0x90/0x274 [ 38.631575][ T5021] do_new_mount+0x228/0x810 [ 38.632291][ T5021] path_mount+0x5b4/0xe78 [ 38.632919][ T5021] __arm64_sys_mount+0x49c/0x584 [ 38.633690][ T5021] invoke_syscall+0x98/0x2bc [ 38.634413][ T5021] el0_svc_common+0x138/0x258 [ 38.635189][ T5021] do_el0_svc+0x58/0x13c [ 38.635914][ T5021] el0_svc+0x58/0x138 [ 38.636579][ T5021] el0t_64_sync_handler+0x84/0xf0 [ 38.637415][ T5021] el0t_64_sync+0x18c/0x190 [ 38.639031][ T5021] EXT4-fs (loop0): 1 orphan inode deleted [ 38.639900][ T5021] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 38.662381][ T11] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 38.663951][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6852: comm kworker/u4:1: Failed to release dquot type 1 [ 38.684513][ T5021] EXT4-fs (loop0): unmounting filesystem. [ 38.887708][ T4327] Bluetooth: hci1: command 0x041b tx timeout [ 39.603502][ T4366] team0 (unregistering): Port device team_slave_1 removed [ 39.798798][ T4366] team0 (unregistering): Port device team_slave_0 removed [ 39.993745][ T4366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.231834][ T4366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.152655][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 42.824616][ T4366] bond0 (unregistering): Released all slaves [ 43.061928][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.065841][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 43.067871][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 43.070726][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 43.072138][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 43.073306][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 43.074434][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 43.075561][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 43.076939][ T4929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.169'. [ 43.394947][ T7] infiniband syz1: ib_query_port failed (-19) [ 45.456737][ T4366] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.458446][ T4366] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.542944][ T4366] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.544673][ T4366] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.629508][ T4366] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.631066][ T4366] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.727532][ T4366] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.729139][ T4366] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.303599][ T4366] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.411318][ T4366] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.508305][ T4366] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.605765][ T4366] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.756813][ T4366] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.832798][ T4366] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.908831][ T4366] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.984906][ T4366] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.136058][ T4366] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.212542][ T4366] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.276750][ T4366] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.365314][ T4366] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0