last executing test programs: 3.828349048s ago: executing program 4 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0x94, 0x0, 0x1}) 3.586451219s ago: executing program 4 (id=33): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)="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", 0x204}], 0x1) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x76de, 0x0, 0x0, 0x0}], 0x1}) 1.324890441s ago: executing program 0 (id=59): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000200000003"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) 1.2203506s ago: executing program 4 (id=61): syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x80000002, 0x82002) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}]) 1.167331625s ago: executing program 0 (id=62): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x4004, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x100000000) 1.084684202s ago: executing program 1 (id=63): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000180)=""/156, 0x9c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40012282, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.074266844s ago: executing program 0 (id=64): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x20000080) 1.00671118s ago: executing program 3 (id=65): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}}, 0x0) 943.097565ms ago: executing program 0 (id=67): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 907.342768ms ago: executing program 1 (id=68): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x20, r2, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 855.988963ms ago: executing program 2 (id=69): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0), 0x4) 826.293605ms ago: executing program 3 (id=70): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$inet6(r1, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)="b91aba1afa37865dda23d7e61ce9b8e5f95cae1645bffb39", 0x18}, {&(0x7f0000000b00)="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", 0x129}, {&(0x7f0000000240)="ddbb", 0x2}], 0x3}}], 0x1, 0x0) 808.679647ms ago: executing program 1 (id=71): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000004000000000000000000010851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 740.039823ms ago: executing program 0 (id=72): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000006b010000feffffff00000000e6", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000) 735.693054ms ago: executing program 2 (id=73): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x400000f4, 0x0, 0x2b34988d}, {0x40000071, 0x0, 0x893}]}) 711.573996ms ago: executing program 3 (id=74): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000001380)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000380)={@hyper}) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000200)) 613.673544ms ago: executing program 0 (id=75): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x8000000004, 0x2) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x49476539603ad8e, &(0x7f0000000000)=ANY=[]) 606.801515ms ago: executing program 2 (id=76): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000340), 0x0}, 0x20) 586.201977ms ago: executing program 3 (id=77): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 567.793449ms ago: executing program 1 (id=78): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x5, 0xd65b, 0x1, 0x1850c00, 0x0, 0x0, 0x40, 0xa}}, 0x50) poll(&(0x7f0000000000)=[{r0, 0x148}], 0x1, 0x10001) 469.922247ms ago: executing program 2 (id=79): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="140000000000000001"], 0x18}, 0xc4) 452.111249ms ago: executing program 3 (id=80): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000004000000c001a80080005800400058061"], 0x2c}}, 0x0) 422.301762ms ago: executing program 1 (id=81): r0 = socket(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x5, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x38}, @dev}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000091c0)=[{{0x0, 0x0, 0x0}, 0x10}], 0x2f, 0x2, 0x0) 359.530737ms ago: executing program 3 (id=82): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0x181f, 0x401, 0xe2, 0x5, 0x2, 0x80000001, 0x1007, 0x800101, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000007, 0x1, 0x1, 0x6, 0x8, 0x40, 0x1, 0x9, 0x10c, 0x40004002, 0x2, 0x2000000a, 0x5, 0x1, 0xb0c0, 0xe, 0x400000ff, 0x400002, 0x4000004]}) ioctl$COMEDI_INSN(r0, 0x8020640c, &(0x7f0000000000)={0x8000000, 0x0, 0x0, 0x2, 0xb2}) 266.762485ms ago: executing program 2 (id=83): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000840)={[{@dots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@quiet}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@fat=@gid}, {@nodots}, {@dots}, {@fat=@check_strict}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/64, 0x40) getdents(r0, 0x0, 0xbb) 184.308593ms ago: executing program 1 (id=84): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f0000002d80), 0x5, 0x2000, 0x0) connect$packet(r0, &(0x7f0000001240)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @random="ab2c92dd91c6"}, 0x14) shutdown(r0, 0x1) 0s ago: executing program 2 (id=85): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0xfffd}, {0x4, 0x5, 0x1800}], 0x2, 0x0) semop(r0, &(0x7f0000000380)=[{0x0, 0xfffd}, {0x0, 0x6, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x3]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. syzkaller login: [ 65.075659][ T4171] cgroup: Unknown subsys name 'net' [ 65.219563][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.714375][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.163466][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.241590][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 68.291945][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 68.356345][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 68.381004][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 68.391765][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.399274][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.408753][ T4185] device bridge_slave_0 entered promiscuous mode [ 68.422846][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.430591][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.439004][ T4185] device bridge_slave_1 entered promiscuous mode [ 68.510145][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.529896][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.557411][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.564650][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.572506][ T4190] device bridge_slave_0 entered promiscuous mode [ 68.591714][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.598961][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.607483][ T4184] device bridge_slave_0 entered promiscuous mode [ 68.626826][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.634007][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.641935][ T4190] device bridge_slave_1 entered promiscuous mode [ 68.660428][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.667840][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.676598][ T4184] device bridge_slave_1 entered promiscuous mode [ 68.700441][ T4185] team0: Port device team_slave_0 added [ 68.711809][ T4185] team0: Port device team_slave_1 added [ 68.725558][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.733448][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.741761][ T4189] device bridge_slave_0 entered promiscuous mode [ 68.776212][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.783506][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.791692][ T4189] device bridge_slave_1 entered promiscuous mode [ 68.801441][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.827006][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.844585][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.854003][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.861117][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.869295][ T4186] device bridge_slave_0 entered promiscuous mode [ 68.878433][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.886047][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.912198][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.925619][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.932682][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.959142][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.972647][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.002397][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.010205][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.018679][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.039598][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.066367][ T4184] team0: Port device team_slave_0 added [ 69.074639][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.094109][ T4190] team0: Port device team_slave_0 added [ 69.114377][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.125206][ T4184] team0: Port device team_slave_1 added [ 69.132792][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.151556][ T4190] team0: Port device team_slave_1 added [ 69.179927][ T4185] device hsr_slave_0 entered promiscuous mode [ 69.186823][ T4185] device hsr_slave_1 entered promiscuous mode [ 69.203419][ T4189] team0: Port device team_slave_0 added [ 69.230622][ T4189] team0: Port device team_slave_1 added [ 69.246707][ T4186] team0: Port device team_slave_0 added [ 69.260142][ T4186] team0: Port device team_slave_1 added [ 69.274670][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.281660][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.308571][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.335281][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.342283][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.368634][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.381643][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.388898][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.415173][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.431447][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.438781][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.465023][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.487546][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.494738][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.521332][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.534433][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.541423][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.567648][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.590312][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.597450][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.624271][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.636935][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.644181][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.670639][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.749300][ T4186] device hsr_slave_0 entered promiscuous mode [ 69.756236][ T4186] device hsr_slave_1 entered promiscuous mode [ 69.763822][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.771689][ T4186] Cannot create hsr debugfs directory [ 69.799708][ T4190] device hsr_slave_0 entered promiscuous mode [ 69.806834][ T4190] device hsr_slave_1 entered promiscuous mode [ 69.814045][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.821785][ T4190] Cannot create hsr debugfs directory [ 69.842609][ T4184] device hsr_slave_0 entered promiscuous mode [ 69.849701][ T4184] device hsr_slave_1 entered promiscuous mode [ 69.857335][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.864980][ T4184] Cannot create hsr debugfs directory [ 69.873975][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 69.875082][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 69.881795][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 69.890351][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 69.898755][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 69.898935][ T4189] device hsr_slave_0 entered promiscuous mode [ 69.912051][ T4189] device hsr_slave_1 entered promiscuous mode [ 69.919091][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.926862][ T4189] Cannot create hsr debugfs directory [ 70.259731][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.271555][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.281247][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.291741][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.310856][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.326020][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.350058][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.360000][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.430438][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.450204][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.471506][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.482347][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.551826][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.562355][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.586342][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.610418][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.626075][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.668305][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.686909][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.704019][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.722376][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.734577][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.747980][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.756824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.768878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.785330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.794594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.805537][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.812884][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.827690][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.854573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.864539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.874462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.882460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.895024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.904167][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.911364][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.922311][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.931623][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.940512][ T1609] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.947652][ T1609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.958384][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.977657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.024869][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.035299][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.045347][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.054755][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.062046][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.071153][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.080861][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.091273][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.102307][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.111452][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.120905][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.129824][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.142453][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.155958][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.164830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.195743][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.207628][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.221254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.231102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.240242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.250605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.259742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.269148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.277973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.287303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.297908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.324978][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.341582][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.360684][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.384144][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.391171][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.408601][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.432799][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.443816][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.476684][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.484686][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.502884][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.512049][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.522584][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.529751][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.540492][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.552039][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.562032][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.569322][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.577548][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.586804][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.602363][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.638419][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.652349][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.662189][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.684564][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.704293][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.715893][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.725417][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.738834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.747576][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.756969][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.772355][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.803199][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.822363][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.833188][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.841824][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.851933][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.861728][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.872095][ T1609] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.879350][ T1609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.889055][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.898849][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.907899][ T1609] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.915084][ T1609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.923807][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.946604][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.960274][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.968467][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 71.975142][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 71.981917][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.989638][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 71.995882][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 72.002104][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 72.005225][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.017111][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.031718][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.041721][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.052792][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.068342][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.084854][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.106360][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.135381][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.144538][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.152251][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.161094][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.172748][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.181634][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.190540][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.214650][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.226756][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.235475][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.243215][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.267653][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.280317][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.297684][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.309150][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.319160][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.335220][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.342429][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.356014][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.365234][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.374514][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.383488][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.393943][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.414655][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.461326][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.469535][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.478364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.488372][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.498110][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.507984][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.524677][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.533588][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.541526][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.550249][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.566010][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.573694][ T4186] device veth0_vlan entered promiscuous mode [ 72.593434][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.602508][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.615961][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.625147][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.646127][ T4185] device veth0_vlan entered promiscuous mode [ 72.660434][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.671965][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.693665][ T4186] device veth1_vlan entered promiscuous mode [ 72.705230][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.719808][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.728342][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.744011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.752526][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.761938][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.771308][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.780601][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.799540][ T4185] device veth1_vlan entered promiscuous mode [ 72.809503][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.820146][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.828796][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.839371][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.878371][ T4184] device veth0_vlan entered promiscuous mode [ 72.894338][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.911416][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.935813][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.959745][ T4184] device veth1_vlan entered promiscuous mode [ 72.981762][ T4185] device veth0_macvtap entered promiscuous mode [ 73.008947][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.017559][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.026647][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.035276][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.046859][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.055795][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.065319][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.074163][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.089448][ T4185] device veth1_macvtap entered promiscuous mode [ 73.115983][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.131709][ T4186] device veth0_macvtap entered promiscuous mode [ 73.140979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.152751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.162235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.171458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.190333][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.219543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.231060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.247300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.274345][ T4186] device veth1_macvtap entered promiscuous mode [ 73.290576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.299378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.326121][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.337978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.347839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.356906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.366217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.384519][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.398038][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.411163][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.422258][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.432108][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.442382][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.451321][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.475602][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.485708][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.495155][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.508846][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.520949][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.534313][ T4184] device veth0_macvtap entered promiscuous mode [ 73.542108][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.561968][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.580707][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.607380][ T4184] device veth1_macvtap entered promiscuous mode [ 73.616279][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.631786][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.641599][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.651874][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.662420][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.675182][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.700359][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.709719][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.720255][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.730134][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.752856][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.761126][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.781973][ T4189] device veth0_vlan entered promiscuous mode [ 73.832759][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.859843][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.870777][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.882489][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.894807][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.903804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.913977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.938950][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.960228][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.976690][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.989547][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.001602][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.022497][ T4189] device veth1_vlan entered promiscuous mode [ 74.034030][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 74.044069][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 74.051275][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.069240][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 74.075919][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 74.077602][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.082362][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 74.100387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.132620][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.141935][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.152231][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.161095][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.213697][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.221918][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.233237][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.243705][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.270688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.281943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.291546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.310581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.320357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.355347][ T4189] device veth0_macvtap entered promiscuous mode [ 74.376222][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.385031][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.401794][ T4189] device veth1_macvtap entered promiscuous mode [ 74.416568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.426160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.434964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.445994][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.456301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.495634][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.510412][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.531893][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.549999][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.560200][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.578032][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.590019][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.621778][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.633812][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.636400][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.657165][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.671321][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.684906][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.695841][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.711936][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.719061][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.737027][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.750730][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.773358][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.785276][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.817147][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.829231][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.846635][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.858112][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.870418][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.902466][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.912866][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.928050][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.946134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.958362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.971755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.000976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.039758][ T4190] device veth0_vlan entered promiscuous mode [ 75.058360][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.076691][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.107676][ T4190] device veth1_vlan entered promiscuous mode [ 75.131226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.140188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.289975][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.316583][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.329951][ T4283] loop3: detected capacity change from 0 to 256 [ 75.353849][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.363959][ T4190] device veth0_macvtap entered promiscuous mode [ 75.373838][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.392509][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.432117][ T4190] device veth1_macvtap entered promiscuous mode [ 75.442282][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.462687][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.490253][ T4283] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d) [ 75.508411][ T1609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.521480][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.534248][ T1609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.546511][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.557561][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.595526][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.598972][ T4289] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.607749][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.638838][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.678870][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.730909][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.815057][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.858845][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.869400][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.902411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.945889][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.975907][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.989794][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.012232][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.028185][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.041470][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.052084][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.064543][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.080901][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.106345][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.124975][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 76.136861][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 76.146570][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.159956][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 76.168638][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 76.179007][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.208923][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 76.223799][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.282332][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.294248][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.485652][ T4320] loop3: detected capacity change from 0 to 512 [ 76.578898][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.597396][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.649869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.677593][ T26] audit: type=1326 audit(1771521727.096:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4329 comm="syz.0.25" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb093c92629 code=0x0 [ 76.702559][ T4320] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 76.731286][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.740214][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.748704][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.788654][ T4333] loop1: detected capacity change from 0 to 2048 [ 76.797022][ T4320] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.831825][ T4333] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.251912][ T4344] loop3: detected capacity change from 0 to 512 [ 77.328170][ T4344] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.359069][ T4345] loop2: detected capacity change from 0 to 4096 [ 77.383125][ T4344] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.425727][ T4344] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 77.447245][ T4344] EXT4-fs (loop3): 1 truncate cleaned up [ 77.455407][ T4344] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 77.466641][ T4350] program syz.1.34 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.544351][ T4344] EXT4-fs error (device loop3): swap_inode_boot_loader:128: inode #5: comm syz.3.30: iget: bad extra_isize 106 (inode size 256) [ 77.590904][ T4351] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.775241][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.784469][ T4345] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 77.901061][ T4345] Remounting filesystem read-only [ 78.033807][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 78.093147][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.153243][ T13] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 78.169368][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.230832][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.253234][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.343381][ T13] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 78.363054][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.381802][ T13] usb 5-1: Product: syz [ 78.386509][ T13] usb 5-1: Manufacturer: syz [ 78.391307][ T13] usb 5-1: SerialNumber: syz [ 78.419720][ T13] usb 5-1: config 0 descriptor?? [ 78.488776][ T13] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 78.508489][ T23] usb 4-1: config index 0 descriptor too short (expected 45, got 43) [ 78.528621][ T13] usb 5-1: setting power ON [ 78.539093][ T13] dvb-usb: bulk message failed: -22 (2/0) [ 78.547761][ T23] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 78.576775][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.596057][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.653466][ T13] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 78.667198][ T13] usb 5-1: media controller created [ 78.690491][ T4347] dvb-usb: bulk message failed: -22 (3/0) [ 78.716179][ T4387] capability: warning: `syz.0.51' uses deprecated v2 capabilities in a way that may be insecure [ 78.727630][ T4347] cxusb: i2c wr: len=516 is too big! [ 78.727630][ T4347] [ 78.742169][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.751841][ T4388] dvb-usb: bulk message failed: -22 (3/0) [ 78.793888][ T23] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 78.820292][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.841890][ T23] usb 4-1: Product: syz [ 78.853102][ T23] usb 4-1: Manufacturer: syz [ 78.856697][ T13] usb 5-1: selecting invalid altsetting 6 [ 78.857760][ T23] usb 4-1: SerialNumber: syz [ 78.897361][ T13] usb 5-1: digital interface selection failed (-22) [ 78.925270][ T13] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 78.979343][ T23] rtl8150 4-1:1.0: couldn't find required endpoints [ 78.994593][ T13] usb 5-1: setting power OFF [ 79.001332][ T13] dvb-usb: bulk message failed: -22 (2/0) [ 79.002776][ T23] rtl8150: probe of 4-1:1.0 failed with error -5 [ 79.018176][ T13] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 79.034553][ T13] (NULL device *): no alternate interface [ 79.080754][ T4396] loop2: detected capacity change from 0 to 4096 [ 79.140648][ T13] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 79.159687][ T13] usb 5-1: USB disconnect, device number 2 [ 79.208062][ T23] usb 4-1: USB disconnect, device number 2 [ 79.265407][ T4401] mkiss: ax0: crc mode is auto. [ 79.418150][ T4406] netlink: 32 bytes leftover after parsing attributes in process `syz.0.57'. [ 79.439803][ T4406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.57'. [ 79.703302][ T4417] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.963063][ T4231] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.209358][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 80.348565][ T4231] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 80.366252][ T4231] usb 5-1: config 179 has no interface number 0 [ 80.372605][ T4231] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 80.428745][ T4231] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 80.452725][ T4231] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.487920][ T4231] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 80.502863][ T4231] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 80.533257][ T4231] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 80.563104][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.604039][ T4412] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 80.640333][ T4462] loop2: detected capacity change from 0 to 256 [ 80.733076][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.961253][ T4173] usb 5-1: USB disconnect, device number 3 [ 80.966149][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 80.975900][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 80.984820][ C0] ================================================================== [ 80.992908][ C0] BUG: KASAN: use-after-free in register_lock_class+0x7f8/0x890 [ 81.000563][ C0] Read of size 1 at addr ffff88801f1c8091 by task syz.3.82/4459 [ 81.008214][ C0] [ 81.010551][ C0] CPU: 0 PID: 4459 Comm: syz.3.82 Not tainted syzkaller #0 [ 81.018091][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.028154][ C0] Call Trace: [ 81.031431][ C0] [ 81.034361][ C0] dump_stack_lvl+0x188/0x250 [ 81.039147][ C0] ? show_regs_print_info+0x20/0x20 [ 81.044372][ C0] ? load_image+0x400/0x400 [ 81.048986][ C0] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 81.054532][ C0] print_address_description+0x60/0x2d0 [ 81.060078][ C0] ? register_lock_class+0x7f8/0x890 [ 81.065641][ C0] kasan_report+0xdf/0x130 [ 81.070056][ C0] ? register_lock_class+0x7f8/0x890 [ 81.075341][ C0] register_lock_class+0x7f8/0x890 [ 81.080454][ C0] ? is_dynamic_key+0x1f0/0x1f0 [ 81.085308][ C0] ? __down_trylock_console_sem+0x19f/0x1f0 [ 81.091203][ C0] ? vprintk_emit+0xa7/0x150 [ 81.095805][ C0] __lock_acquire+0x16f/0x7d10 [ 81.100659][ C0] ? mark_lock+0x94/0x320 [ 81.104987][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 81.110015][ C0] ? mark_lock+0x94/0x320 [ 81.114340][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 81.119372][ C0] ? verify_lock_unused+0x140/0x140 [ 81.124590][ C0] lock_acquire+0x19e/0x400 [ 81.129092][ C0] ? __wake_up+0xf4/0x180 [ 81.133433][ C0] ? read_lock_is_recursive+0x10/0x10 [ 81.138827][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 81.144128][ C0] ? __wake_up+0xf4/0x180 [ 81.148458][ C0] ? _raw_spin_lock+0x40/0x40 [ 81.153224][ C0] __wake_up+0xf4/0x180 [ 81.157395][ C0] ? remove_wait_queue+0x120/0x120 [ 81.162508][ C0] ? _raw_spin_unlock+0x24/0x40 [ 81.167361][ C0] __usb_hcd_giveback_urb+0x396/0x520 [ 81.172735][ C0] dummy_timer+0x8a8/0x31e0 [ 81.177239][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 81.183127][ C0] ? _raw_spin_unlock+0x40/0x40 [ 81.187988][ C0] ? dummy_free_streams+0x530/0x530 [ 81.193186][ C0] ? dummy_free_streams+0x530/0x530 [ 81.198378][ C0] call_timer_fn+0x17b/0x540 [ 81.202967][ C0] ? dummy_free_streams+0x530/0x530 [ 81.208257][ C0] ? __run_timers+0x800/0x800 [ 81.212942][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 81.218147][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 81.223352][ C0] ? dummy_free_streams+0x530/0x530 [ 81.228636][ C0] __run_timers+0x53e/0x800 [ 81.233142][ C0] ? detach_timer+0x2b0/0x2b0 [ 81.237818][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 81.243799][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 81.248661][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 81.253946][ C0] run_timer_softirq+0x63/0xf0 [ 81.258706][ C0] handle_softirqs+0x339/0x830 [ 81.263468][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 81.268313][ C0] ? do_softirq+0x210/0x210 [ 81.272814][ C0] __irq_exit_rcu+0x13b/0x230 [ 81.277502][ C0] ? irq_exit_rcu+0x20/0x20 [ 81.282018][ C0] irq_exit_rcu+0x5/0x20 [ 81.286258][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 81.291890][ C0] [ 81.294815][ C0] [ 81.297741][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 81.303727][ C0] RIP: 0010:dt2814_ai_notbusy+0x3c/0xb0 [ 81.309274][ C0] Code: 00 fc ff df e8 c5 c8 f1 f9 49 81 c6 d0 01 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 88 d4 36 fa 41 8b 16 ec <0f> b6 e8 31 ff 48 89 de e8 77 cc f1 f9 48 85 db 74 19 e8 8d c8 f1 [ 81.329080][ C0] RSP: 0018:ffffc90002fef9d0 EFLAGS: 00000246 [ 81.335155][ C0] RAX: 1ffff110298fb9ff RBX: ffffc90002fefa80 RCX: 0000000000080000 [ 81.343127][ C0] RDX: 000000000000181f RSI: 000000000001173a RDI: 000000000001173b [ 81.351096][ C0] RBP: 00000000fffffff0 R08: ffffc90002fefa80 R09: 1ffffffff1b13b85 [ 81.359066][ C0] R10: dffffc0000000000 R11: fffffbfff1b13b86 R12: 0000000000000000 [ 81.367036][ C0] R13: ffff88814c7dc800 R14: ffff88814c7dc9d0 R15: dffffc0000000000 [ 81.375015][ C0] comedi_timeout+0x94/0x100 [ 81.379614][ C0] ? dt2814_ai_cancel+0xb0/0xb0 [ 81.384583][ C0] dt2814_attach+0x116/0x660 [ 81.389184][ C0] ? dt2811_ai_eoc+0x50/0x50 [ 81.393879][ C0] comedi_device_attach+0x514/0x700 [ 81.399077][ C0] comedi_unlocked_ioctl+0x67c/0x1210 [ 81.404451][ C0] ? kfree+0xef/0x2a0 [ 81.408436][ C0] ? comedi_poll+0x8d0/0x8d0 [ 81.413046][ C0] ? bpf_lsm_file_ioctl+0x5/0x10 [ 81.417986][ C0] ? security_file_ioctl+0x7c/0xa0 [ 81.423105][ C0] ? comedi_poll+0x8d0/0x8d0 [ 81.427703][ C0] __se_sys_ioctl+0xfa/0x170 [ 81.432291][ C0] do_syscall_64+0x4c/0xa0 [ 81.436706][ C0] ? clear_bhb_loop+0x30/0x80 [ 81.441466][ C0] ? clear_bhb_loop+0x30/0x80 [ 81.446146][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.452135][ C0] RIP: 0033:0x7f60097bb629 [ 81.456694][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.476398][ C0] RSP: 002b:00007f6007a15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.484906][ C0] RAX: ffffffffffffffda RBX: 00007f6009a34fa0 RCX: 00007f60097bb629 [ 81.492881][ C0] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 81.500855][ C0] RBP: 00007f6009851b39 R08: 0000000000000000 R09: 0000000000000000 [ 81.508840][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.516917][ C0] R13: 00007f6009a35038 R14: 00007f6009a34fa0 R15: 00007ffc866a2f78 [ 81.524909][ C0] [ 81.527949][ C0] [ 81.530272][ C0] Allocated by task 4231: [ 81.534612][ C0] __kasan_kmalloc+0xb5/0xf0 [ 81.539208][ C0] xpad_probe+0x3f6/0x1b20 [ 81.543627][ C0] usb_probe_interface+0x5c5/0xb20 [ 81.548741][ C0] really_probe+0x284/0xc80 [ 81.553248][ C0] __driver_probe_device+0x18c/0x330 [ 81.558813][ C0] driver_probe_device+0x4f/0x420 [ 81.563850][ C0] __device_attach_driver+0x2b0/0x500 [ 81.569326][ C0] bus_for_each_drv+0x184/0x210 [ 81.574288][ C0] __device_attach+0x2a8/0x480 [ 81.579062][ C0] bus_probe_device+0xbc/0x1e0 [ 81.584049][ C0] device_add+0xa00/0xfb0 [ 81.588479][ C0] usb_set_configuration+0x1991/0x1fd0 [ 81.593975][ C0] usb_generic_driver_probe+0x89/0x150 [ 81.599566][ C0] usb_probe_device+0x139/0x270 [ 81.604436][ C0] really_probe+0x284/0xc80 [ 81.608945][ C0] __driver_probe_device+0x18c/0x330 [ 81.614235][ C0] driver_probe_device+0x4f/0x420 [ 81.619261][ C0] __device_attach_driver+0x2b0/0x500 [ 81.624723][ C0] bus_for_each_drv+0x184/0x210 [ 81.629574][ C0] __device_attach+0x2a8/0x480 [ 81.634333][ C0] bus_probe_device+0xbc/0x1e0 [ 81.639108][ C0] device_add+0xa00/0xfb0 [ 81.643707][ C0] usb_new_device+0xd65/0x1660 [ 81.648818][ C0] hub_event+0x2e4a/0x55e0 [ 81.653337][ C0] process_one_work+0x85f/0x1010 [ 81.658306][ C0] worker_thread+0xaa6/0x1290 [ 81.662986][ C0] kthread+0x436/0x520 [ 81.667187][ C0] ret_from_fork+0x1f/0x30 [ 81.671622][ C0] [ 81.673966][ C0] Freed by task 4173: [ 81.678029][ C0] kasan_set_track+0x4b/0x70 [ 81.682639][ C0] kasan_set_free_info+0x1f/0x40 [ 81.687665][ C0] ____kasan_slab_free+0xd5/0x110 [ 81.692690][ C0] slab_free_freelist_hook+0xea/0x170 [ 81.698159][ C0] kfree+0xef/0x2a0 [ 81.701978][ C0] xpad_disconnect+0x34c/0x470 [ 81.706875][ C0] usb_unbind_interface+0x1ee/0x860 [ 81.712091][ C0] device_release_driver_internal+0x4b4/0x750 [ 81.718157][ C0] bus_remove_device+0x2e2/0x400 [ 81.723190][ C0] device_del+0x6af/0xaf0 [ 81.727524][ C0] usb_disable_device+0x3e2/0x890 [ 81.732856][ C0] usb_disconnect+0x348/0x8a0 [ 81.738181][ C0] hub_event+0x1ecb/0x55e0 [ 81.742595][ C0] process_one_work+0x85f/0x1010 [ 81.747708][ C0] worker_thread+0xaa6/0x1290 [ 81.752385][ C0] kthread+0x436/0x520 [ 81.756475][ C0] ret_from_fork+0x1f/0x30 [ 81.760895][ C0] [ 81.763228][ C0] The buggy address belongs to the object at ffff88801f1c8000 [ 81.763228][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 81.777360][ C0] The buggy address is located 145 bytes inside of [ 81.777360][ C0] 1024-byte region [ffff88801f1c8000, ffff88801f1c8400) [ 81.790865][ C0] The buggy address belongs to the page: [ 81.796497][ C0] page:ffffea00007c7200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f1c8 [ 81.806919][ C0] head:ffffea00007c7200 order:3 compound_mapcount:0 compound_pincount:0 [ 81.815343][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 81.823331][ C0] raw: 00fff00000010200 0000000000000000 0000000a00000001 ffff888016c41dc0 [ 81.832019][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 81.840796][ C0] page dumped because: kasan: bad access detected [ 81.847212][ C0] page_owner tracks the page as allocated [ 81.852924][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4190, ts 69583105659, free_ts 69428915566 [ 81.871495][ C0] get_page_from_freelist+0x1bbd/0x1ca0 [ 81.877160][ C0] __alloc_pages+0x1ee/0x480 [ 81.881873][ C0] new_slab+0xc0/0x4b0 [ 81.886147][ C0] ___slab_alloc+0x80a/0xdd0 [ 81.890912][ C0] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 81.896727][ C0] __alloc_skb+0x22c/0x750 [ 81.901148][ C0] inet6_rt_notify+0xdd/0x290 [ 81.905822][ C0] fib6_add+0x1d4d/0x3d40 [ 81.910161][ C0] ip6_route_add+0x86/0x130 [ 81.914846][ C0] addrconf_add_dev+0x295/0x3c0 [ 81.919713][ C0] addrconf_init_auto_addrs+0x6a0/0xb00 [ 81.925362][ C0] addrconf_notify+0xa6b/0xf00 [ 81.930130][ C0] raw_notifier_call_chain+0xcb/0x160 [ 81.935858][ C0] __dev_notify_flags+0x194/0x300 [ 81.940884][ C0] rtnl_configure_link+0x21f/0x320 [ 81.946090][ C0] rtnl_newlink+0x15be/0x1a50 [ 81.950765][ C0] page last free stack trace: [ 81.955425][ C0] free_unref_page_prepare+0x637/0x6c0 [ 81.961031][ C0] free_unref_page+0x8f/0x2a0 [ 81.965818][ C0] qlist_free_all+0x35/0x90 [ 81.970323][ C0] kasan_quarantine_reduce+0x150/0x160 [ 81.975870][ C0] __kasan_slab_alloc+0x2f/0xd0 [ 81.980787][ C0] slab_post_alloc_hook+0x4c/0x380 [ 81.986002][ C0] __kmalloc_track_caller+0x125/0x330 [ 81.991368][ C0] kvasprintf+0xe3/0x1a0 [ 81.995606][ C0] kobject_set_name_vargs+0x5d/0x110 [ 82.000898][ C0] kobject_init_and_add+0xeb/0x190 [ 82.006099][ C0] netdev_queue_update_kobjects+0x19c/0x3e0 [ 82.012083][ C0] netdev_register_kobject+0x273/0x320 [ 82.017642][ C0] register_netdevice+0x1042/0x1710 [ 82.022842][ C0] virt_wifi_newlink+0x3e9/0x820 [ 82.027821][ C0] rtnl_newlink+0x1359/0x1a50 [ 82.032494][ C0] rtnetlink_rcv_msg+0x844/0xf30 [ 82.037434][ C0] [ 82.039756][ C0] Memory state around the buggy address: [ 82.045381][ C0] ffff88801f1c7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.053439][ C0] ffff88801f1c8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.061597][ C0] >ffff88801f1c8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.069664][ C0] ^ [ 82.074244][ C0] ffff88801f1c8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.082299][ C0] ffff88801f1c8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.090355][ C0] ================================================================== [ 82.098405][ C0] Disabling lock debugging due to kernel taint [ 82.104560][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.112013][ C0] CPU: 0 PID: 4459 Comm: syz.3.82 Tainted: G B syzkaller #0 [ 82.120598][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.130651][ C0] Call Trace: [ 82.133933][ C0] [ 82.136775][ C0] dump_stack_lvl+0x188/0x250 [ 82.141455][ C0] ? show_regs_print_info+0x20/0x20 [ 82.146697][ C0] ? load_image+0x400/0x400 [ 82.151227][ C0] panic+0x2e5/0x810 [ 82.155136][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 82.159651][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 82.165660][ C0] ? _raw_spin_unlock+0x40/0x40 [ 82.170525][ C0] ? register_lock_class+0x7f8/0x890 [ 82.175930][ C0] check_panic_on_warn+0x80/0xa0 [ 82.180903][ C0] ? register_lock_class+0x7f8/0x890 [ 82.186187][ C0] end_report+0x6d/0xf0 [ 82.190342][ C0] kasan_report+0x102/0x130 [ 82.194844][ C0] ? register_lock_class+0x7f8/0x890 [ 82.200127][ C0] register_lock_class+0x7f8/0x890 [ 82.205240][ C0] ? is_dynamic_key+0x1f0/0x1f0 [ 82.210114][ C0] ? __down_trylock_console_sem+0x19f/0x1f0 [ 82.216009][ C0] ? vprintk_emit+0xa7/0x150 [ 82.220601][ C0] __lock_acquire+0x16f/0x7d10 [ 82.225368][ C0] ? mark_lock+0x94/0x320 [ 82.229699][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 82.234728][ C0] ? mark_lock+0x94/0x320 [ 82.239080][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 82.244133][ C0] ? verify_lock_unused+0x140/0x140 [ 82.249340][ C0] lock_acquire+0x19e/0x400 [ 82.254040][ C0] ? __wake_up+0xf4/0x180 [ 82.258378][ C0] ? read_lock_is_recursive+0x10/0x10 [ 82.263773][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 82.269061][ C0] ? __wake_up+0xf4/0x180 [ 82.273394][ C0] ? _raw_spin_lock+0x40/0x40 [ 82.278079][ C0] __wake_up+0xf4/0x180 [ 82.282253][ C0] ? remove_wait_queue+0x120/0x120 [ 82.287458][ C0] ? _raw_spin_unlock+0x24/0x40 [ 82.292311][ C0] __usb_hcd_giveback_urb+0x396/0x520 [ 82.297691][ C0] dummy_timer+0x8a8/0x31e0 [ 82.302326][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 82.308330][ C0] ? _raw_spin_unlock+0x40/0x40 [ 82.313198][ C0] ? dummy_free_streams+0x530/0x530 [ 82.318417][ C0] ? dummy_free_streams+0x530/0x530 [ 82.323616][ C0] call_timer_fn+0x17b/0x540 [ 82.328213][ C0] ? dummy_free_streams+0x530/0x530 [ 82.333494][ C0] ? __run_timers+0x800/0x800 [ 82.338264][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 82.343775][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 82.349006][ C0] ? dummy_free_streams+0x530/0x530 [ 82.354211][ C0] __run_timers+0x53e/0x800 [ 82.358747][ C0] ? detach_timer+0x2b0/0x2b0 [ 82.363431][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 82.369415][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 82.374529][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 82.379826][ C0] run_timer_softirq+0x63/0xf0 [ 82.384613][ C0] handle_softirqs+0x339/0x830 [ 82.389649][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 82.394501][ C0] ? do_softirq+0x210/0x210 [ 82.399003][ C0] __irq_exit_rcu+0x13b/0x230 [ 82.403680][ C0] ? irq_exit_rcu+0x20/0x20 [ 82.408194][ C0] irq_exit_rcu+0x5/0x20 [ 82.412566][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 82.418306][ C0] [ 82.421324][ C0] [ 82.424356][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 82.430454][ C0] RIP: 0010:dt2814_ai_notbusy+0x3c/0xb0 [ 82.436441][ C0] Code: 00 fc ff df e8 c5 c8 f1 f9 49 81 c6 d0 01 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 88 d4 36 fa 41 8b 16 ec <0f> b6 e8 31 ff 48 89 de e8 77 cc f1 f9 48 85 db 74 19 e8 8d c8 f1 [ 82.456143][ C0] RSP: 0018:ffffc90002fef9d0 EFLAGS: 00000246 [ 82.462214][ C0] RAX: 1ffff110298fb9ff RBX: ffffc90002fefa80 RCX: 0000000000080000 [ 82.470303][ C0] RDX: 000000000000181f RSI: 000000000001173a RDI: 000000000001173b [ 82.478278][ C0] RBP: 00000000fffffff0 R08: ffffc90002fefa80 R09: 1ffffffff1b13b85 [ 82.486433][ C0] R10: dffffc0000000000 R11: fffffbfff1b13b86 R12: 0000000000000000 [ 82.494637][ C0] R13: ffff88814c7dc800 R14: ffff88814c7dc9d0 R15: dffffc0000000000 [ 82.502841][ C0] comedi_timeout+0x94/0x100 [ 82.507536][ C0] ? dt2814_ai_cancel+0xb0/0xb0 [ 82.512390][ C0] dt2814_attach+0x116/0x660 [ 82.517127][ C0] ? dt2811_ai_eoc+0x50/0x50 [ 82.522061][ C0] comedi_device_attach+0x514/0x700 [ 82.527481][ C0] comedi_unlocked_ioctl+0x67c/0x1210 [ 82.533272][ C0] ? kfree+0xef/0x2a0 [ 82.537272][ C0] ? comedi_poll+0x8d0/0x8d0 [ 82.541883][ C0] ? bpf_lsm_file_ioctl+0x5/0x10 [ 82.546832][ C0] ? security_file_ioctl+0x7c/0xa0 [ 82.551965][ C0] ? comedi_poll+0x8d0/0x8d0 [ 82.556564][ C0] __se_sys_ioctl+0xfa/0x170 [ 82.561154][ C0] do_syscall_64+0x4c/0xa0 [ 82.565671][ C0] ? clear_bhb_loop+0x30/0x80 [ 82.570348][ C0] ? clear_bhb_loop+0x30/0x80 [ 82.575195][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.581085][ C0] RIP: 0033:0x7f60097bb629 [ 82.585675][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.605455][ C0] RSP: 002b:00007f6007a15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.613974][ C0] RAX: ffffffffffffffda RBX: 00007f6009a34fa0 RCX: 00007f60097bb629 [ 82.622031][ C0] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 82.629999][ C0] RBP: 00007f6009851b39 R08: 0000000000000000 R09: 0000000000000000 [ 82.638066][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.646225][ C0] R13: 00007f6009a35038 R14: 00007f6009a34fa0 R15: 00007ffc866a2f78 [ 82.654214][ C0] [ 83.816940][ C0] Shutting down cpus with NMI [ 83.822039][ C0] Kernel Offset: disabled [ 83.826394][ C0] Rebooting in 86400 seconds..