last executing test programs: 4.290785349s ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.134346107s ago: executing program 2 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000016500000000c0a010300000000000000000100000008000440000000000900010073797a30000000002800038024000080200001801a0001"], 0xd4}}, 0x0) 4.07614144s ago: executing program 1 (id=2): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) 3.944768426s ago: executing program 2 (id=8): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe}, 0x20}, 0x1, 0x2000000000000000}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='context']) 3.818337653s ago: executing program 2 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c001}, 0x400c088) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 3.723050977s ago: executing program 4 (id=5): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x80, &(0x7f0000000340)=ANY=[], 0x1, 0x374, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 3.612891623s ago: executing program 0 (id=10): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r0, 0x2000, 0x0) 3.401876613s ago: executing program 1 (id=11): syz_pidfd_open(0x0, 0x0) socket$key(0xf, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) unlink(0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) unshare(0x2c020400) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x801) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x48054) socket$l2tp6(0xa, 0x2, 0x73) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x4, &(0x7f00000be000/0x2000)=nil, 0x1) 3.314325307s ago: executing program 0 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x40}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8006000) 3.314165137s ago: executing program 4 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 3.0624788s ago: executing program 0 (id=14): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000780)={'vxcan1\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 3.06229932s ago: executing program 2 (id=15): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) 2.24174682s ago: executing program 4 (id=16): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) ioperm(0x8, 0x9, 0x5a) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed7, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) setfsuid(0x0) 2.054324889s ago: executing program 2 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020407d6b0000de00000014000200040000000000000000000000000040001400030076657468315f766c616e000000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) syz_clone3(&(0x7f00000003c0)={0x20000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x2e}, &(0x7f0000000240)=""/165, 0xa5, &(0x7f0000000300)=""/103, &(0x7f0000000380)=[0x0], 0x1}, 0x58) 1.562534243s ago: executing program 3 (id=19): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x1f2e, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.4278132s ago: executing program 4 (id=20): capset(&(0x7f0000000080)={0x20071026}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x4000000}, 0xc) 1.342306445s ago: executing program 3 (id=21): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x101, &(0x7f00000002c0)) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000000c0)) 1.285321967s ago: executing program 3 (id=22): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.197190121s ago: executing program 4 (id=23): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$eJzs3U1rXFUfAPD/nWT6/jxNoRQVkYALK7WTJvGlgou61mJB93VIbkPJpFMyk9LEgu3CrqW4EQviXly7LH4BF36GghaKlKALN5E7uTOdJDPJtJ0mU+f3g1vOuS8598y5/9NzcmYyAQyt8eyfQsTLEfF1EnE0IpL82GjkB8fXz1t9dGMm25JYW/v0z6RxXpZv/qzmdYfzzEsR8ctXEacKW8utLa/MlyuVdDHPT9QXrk7UlldOX14oz6Vz6ZWp6emz70xPvf/eu32r65sX/v72k3sjee7YnSTOxZE8116PZ3CzPTMe4/lrUoxzm06c7ENhgyTpuPenXb8PnsxIHufFyPqAozGSRz3w3/dlRKwBQyp54vj/rfh87gTYXc1xQHNu36d58Avj4YfrE6Ct9R9d/91IHGjMjQ6tJhtmRtl8d6wP5Wdl/PzH3TvZFv37PQTAjm7eiogzo6Nb+78k7/+e3pkeztlchv4Pds+9bPzzVqfxT6E1/okO45/DHWL3aewc/4UHfSimq2z890HH8W9r0WpsJM/9rzHmKyaXLlfSrG/7f0ScjOL+LL/des7Z1ftr3Y61j/+yLSu/ORbM7+PB6P6N18yW6+VnqXO7h7ciXuk4/k1a7Z90aP/s9bjQYxkn0ruvdTu2c/2fr7UfIt7o2P6PV7SS7dcnJxrPw0Tzqdjqr9snfu1W/l7XP2v/Q9vXfyxpX6+ttV890lMZ3x/4J43WevJGG+ofvT//+5LPGul9+b7r5Xp9cTJiX/Jxa3+huX/q8bXNfPP8rP4nX9++/+v0/B+MiM97qn3E7eM/vtrt2CC0/2zH9m/Nbje1/5Mn7n/0xXfdyu+t/3u7kTqZ7+ml/+v1Bp/ltQMAAAAAAIBBU4iII5EUSq10oVAqrb+/43gcKlSqtfqpS9WlK7PR+KzsWBQLzZXuo23vh5jMVwyb+alN+emIOBYR34wcbORLM9XK7F5XHgAAAAAAAAAAAAAAAAAAAAbE4S6f/8/8vvXPux/Y/TsEnitf+Q3Da8f478c3PQEDyf//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz7b1lYf3ZjJ8rPXlpfmq9dOz6a1+dLC0kxpprp4tTRXrc5V0tJMdWGnn1epVq9OTsXS9Yl6WqtP1JZXLi5Ul67UL15eKM+lF9PirtQKAAAAAAAAAAAAAAAAAAAAXiy15ZX5cqWSLkpIPFVidDBuQ6LPib3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsX8DAAD//welMww=") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000900)=ANY=[], 0x361, 0x1) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 1.171755192s ago: executing program 1 (id=24): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="a18b8c17", 0x4}], 0x1) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x1) 1.167471953s ago: executing program 3 (id=25): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x40}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8006000) 1.098168106s ago: executing program 3 (id=26): socket$vsock_stream(0x28, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) r4 = syz_io_uring_setup(0x126e, &(0x7f0000000480)={0x0, 0x72d9, 0x80, 0x0, 0x100000}, &(0x7f0000000500), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) sched_rr_get_interval(r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setxattr$incfs_size(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) 995.250121ms ago: executing program 2 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 832.563629ms ago: executing program 0 (id=28): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x480) socket$kcm(0x10, 0x2, 0x10) 694.065786ms ago: executing program 1 (id=29): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 494.781096ms ago: executing program 0 (id=30): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50) unshare(0x8040480) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000e8ff0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=31): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x4000043, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. [ 64.932703][ T4252] cgroup: Unknown subsys name 'net' [ 65.094615][ T4252] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.420809][ T4252] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.815280][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.825040][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.834992][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.845704][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.854366][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.863644][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.872415][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.880736][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.881439][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.891483][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.900853][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.906061][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.914261][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.929738][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.931530][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.937464][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.944806][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.953619][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.960010][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.967755][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.974289][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.988403][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.988403][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.988843][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.996389][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.004015][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.010882][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.018812][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.041245][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.048880][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.517594][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 68.544147][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 68.612418][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 68.655597][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 68.695723][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 68.774354][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.782682][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.791130][ T4267] device bridge_slave_0 entered promiscuous mode [ 68.803376][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.811756][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.822628][ T4276] device bridge_slave_0 entered promiscuous mode [ 68.851092][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.858448][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.867754][ T4267] device bridge_slave_1 entered promiscuous mode [ 68.875894][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.883496][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.891805][ T4276] device bridge_slave_1 entered promiscuous mode [ 68.965070][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.972471][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.980762][ T4265] device bridge_slave_0 entered promiscuous mode [ 68.996799][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.004189][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.015216][ T4265] device bridge_slave_1 entered promiscuous mode [ 69.024465][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.036725][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.046841][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.054759][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.062870][ T4277] device bridge_slave_0 entered promiscuous mode [ 69.078023][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.085279][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.096014][ T4277] device bridge_slave_1 entered promiscuous mode [ 69.110183][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.123300][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.132909][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.143175][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.151204][ T4266] device bridge_slave_0 entered promiscuous mode [ 69.165255][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.172781][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.181080][ T4266] device bridge_slave_1 entered promiscuous mode [ 69.223774][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.248607][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.267352][ T4267] team0: Port device team_slave_0 added [ 69.276665][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.289541][ T4276] team0: Port device team_slave_0 added [ 69.297883][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.309158][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.320449][ T4267] team0: Port device team_slave_1 added [ 69.327792][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.345298][ T4276] team0: Port device team_slave_1 added [ 69.406896][ T4277] team0: Port device team_slave_0 added [ 69.417033][ T4265] team0: Port device team_slave_0 added [ 69.424694][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.435164][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.461670][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.480845][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.487924][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.514075][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.527776][ T4266] team0: Port device team_slave_0 added [ 69.538423][ T4265] team0: Port device team_slave_1 added [ 69.556008][ T4277] team0: Port device team_slave_1 added [ 69.562774][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.570192][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.596673][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.615376][ T4266] team0: Port device team_slave_1 added [ 69.632429][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.639748][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.667153][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.712254][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.719417][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.746069][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.758145][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.765310][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.791331][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.805990][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.812984][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.839335][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.851052][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.858027][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.884688][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.907622][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.914942][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.941264][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.971389][ T4267] device hsr_slave_0 entered promiscuous mode [ 69.978570][ T4267] device hsr_slave_1 entered promiscuous mode [ 69.986645][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.993899][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.020428][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.060276][ T4276] device hsr_slave_0 entered promiscuous mode [ 70.066929][ T4276] device hsr_slave_1 entered promiscuous mode [ 70.073867][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.082479][ T4276] Cannot create hsr debugfs directory [ 70.135968][ T4277] device hsr_slave_0 entered promiscuous mode [ 70.139985][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 70.147049][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 70.148249][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 70.154324][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 70.167855][ T4277] device hsr_slave_1 entered promiscuous mode [ 70.174847][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.182554][ T4277] Cannot create hsr debugfs directory [ 70.218925][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 70.222298][ T4265] device hsr_slave_0 entered promiscuous mode [ 70.236351][ T4265] device hsr_slave_1 entered promiscuous mode [ 70.243978][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.252796][ T4265] Cannot create hsr debugfs directory [ 70.265814][ T4266] device hsr_slave_0 entered promiscuous mode [ 70.273363][ T4266] device hsr_slave_1 entered promiscuous mode [ 70.280253][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.288165][ T4266] Cannot create hsr debugfs directory [ 70.609434][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.620783][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.635862][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.645584][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.720610][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.734885][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.752628][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.775638][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.813420][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.839033][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.853263][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.874929][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.884873][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.895065][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.905033][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.926528][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.944697][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.954138][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.964826][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.972310][ T4291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.983618][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.004308][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.013511][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.022520][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.029813][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.043356][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.085219][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.098231][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.112527][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.121825][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.132448][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.141358][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.151228][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.160637][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.170030][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.184827][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.197803][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.208162][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.238271][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.256643][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.296365][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.308017][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.379932][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.392559][ T4265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.414797][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.425776][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.432556][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.447409][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.457181][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.474613][ T4265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.492264][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.518249][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.525824][ T4265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.537508][ T4265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.557068][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.579776][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.610258][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.630560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.641854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.653654][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.661080][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.694435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.703972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.713681][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.720895][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.729261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.737943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.754370][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.761647][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.770490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.814799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.824422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.833007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.843698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.851701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.860838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.871299][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.878793][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.886673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.897174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.907730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.917278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.926463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.935242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.944444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.953197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.961940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.972879][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.981516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.992091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.002493][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.011378][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.041525][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.052924][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.060968][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.072545][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.083927][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.095040][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.104043][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.111159][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.145867][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.154861][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.164468][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.173574][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.182415][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.191169][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.200062][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.208999][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.217695][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.226300][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 72.226441][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 72.232754][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 72.232784][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 72.233615][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.258390][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.275811][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.284693][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.298936][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 72.304826][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.319703][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.331832][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.363104][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.388427][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.412109][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.427706][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.450908][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.463382][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.486975][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.516251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.525671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.554639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.580257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.615591][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.636864][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.675003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.691238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.706626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.724747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.736816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.752812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.764807][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.772004][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.811014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.850318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.859686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.870185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.880067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.889783][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.897097][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.906089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.916668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.926220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.938474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.957861][ T4277] device veth0_vlan entered promiscuous mode [ 72.974797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.993100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.005473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.043131][ T4277] device veth1_vlan entered promiscuous mode [ 73.074432][ T4265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.091082][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.105986][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.120649][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.128206][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.142714][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.154204][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.166953][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.178555][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.192412][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.201715][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.215131][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.253455][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.270881][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.326532][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.355661][ T4277] device veth0_macvtap entered promiscuous mode [ 73.385563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.395854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.410310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.417852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.434163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.444944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.458499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.471548][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.501867][ T4277] device veth1_macvtap entered promiscuous mode [ 73.552868][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.567608][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.578087][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.593934][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.620417][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.666442][ T4276] device veth0_vlan entered promiscuous mode [ 73.690322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.704767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.714547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.728524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.742584][ T4266] device veth0_vlan entered promiscuous mode [ 73.769644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.782264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.791989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.800377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.818589][ T4266] device veth1_vlan entered promiscuous mode [ 73.839896][ T4276] device veth1_vlan entered promiscuous mode [ 73.857285][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.873715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.887861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.897140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.919313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.935729][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.947663][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.965024][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.975243][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.986324][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.995808][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.007837][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.017339][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.070915][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.080690][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.096144][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.109567][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.151805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.161627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.171587][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.180869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.207108][ T4276] device veth0_macvtap entered promiscuous mode [ 74.222869][ T4266] device veth0_macvtap entered promiscuous mode [ 74.241654][ T4265] device veth0_vlan entered promiscuous mode [ 74.248611][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.260251][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.268503][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.277858][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.294005][ T4267] device veth0_vlan entered promiscuous mode [ 74.299996][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 74.300038][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 74.300064][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 74.306871][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 74.335191][ T4276] device veth1_macvtap entered promiscuous mode [ 74.355969][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.364726][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.374870][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.383113][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 74.390523][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.399432][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.408059][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.416742][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.445376][ T4266] device veth1_macvtap entered promiscuous mode [ 74.456842][ T4265] device veth1_vlan entered promiscuous mode [ 74.479531][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.483849][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.487599][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.509344][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.523207][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.535546][ T4267] device veth1_vlan entered promiscuous mode [ 74.561673][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.570503][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.580127][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.588346][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.598107][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.606904][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.615629][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.625248][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.643094][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.657016][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.668567][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.687713][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.697921][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.707815][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.717140][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.729337][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.738267][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.747631][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.756859][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.781145][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.792094][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.803363][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.814500][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.826082][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.836836][ T4267] device veth0_macvtap entered promiscuous mode [ 74.849345][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.858073][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.875845][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.884743][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.894463][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.904338][ T4265] device veth0_macvtap entered promiscuous mode [ 74.909238][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.923501][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.935023][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.946060][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.958129][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.969976][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.989354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.997454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.009858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.018594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.032245][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.041670][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.050980][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.060292][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.078541][ T4265] device veth1_macvtap entered promiscuous mode [ 75.106169][ T4267] device veth1_macvtap entered promiscuous mode [ 75.204313][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.235329][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.247168][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.257926][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.269432][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.280418][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.291692][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.302415][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.315780][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.326392][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.338255][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.348561][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.359915][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.371389][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.392045][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.404289][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.414566][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.425742][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.436463][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.447319][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.457514][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.468239][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.480142][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.487602][ T4352] tipc: Enabling of bearer rejected, failed to enable media [ 75.525622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.534894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.546105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.555570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.580836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.603929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.617835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.630895][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.639930][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.648223][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.652477][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.665042][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.674559][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.687140][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.698904][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.710205][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.721736][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.734809][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.746516][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.756772][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.767715][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.779638][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.794409][ T4291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.794827][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.811735][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.821095][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.830504][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.839538][ T4291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.849672][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.857514][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.865956][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.875618][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.929354][ T4291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.937990][ T4291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.948478][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.040707][ T4291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.053377][ T4291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.130029][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.161480][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.171463][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.200238][ T4291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.223997][ T4291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.236129][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.245655][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.330990][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.340216][ T4359] device syzkaller0 entered promiscuous mode [ 76.348476][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.365006][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.379332][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 76.385598][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 76.392000][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 76.398107][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 76.418613][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.419757][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.452292][ T4364] tmpfs: Unknown parameter 'context' [ 76.452519][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.471918][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 76.595216][ T4367] device syzkaller0 entered promiscuous mode [ 76.633518][ T4368] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 76.741981][ T4371] loop4: detected capacity change from 0 to 128 [ 77.195240][ T4376] loop1: detected capacity change from 0 to 2048 [ 77.412309][ T4376] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.238539][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 78.278767][ T4384] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 78.337481][ T4376] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.11: bg 0: block 234: padding at end of block bitmap is not set [ 78.438536][ T4376] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 344 with error 117 [ 78.737917][ T4404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'. [ 78.769740][ T4376] EXT4-fs (loop1): This should not happen!! Data will be lost [ 78.769740][ T4376] [ 78.780512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 79.033348][ T4413] capability: warning: `syz.4.20' uses deprecated v2 capabilities in a way that may be insecure [ 79.202580][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 79.335506][ T4419] loop4: detected capacity change from 0 to 1024 [ 79.461102][ T4419] ======================================================= [ 79.461102][ T4419] WARNING: The mand mount option has been deprecated and [ 79.461102][ T4419] and is ignored by this kernel. Remove the mand [ 79.461102][ T4419] option from the mount to silence this warning. [ 79.461102][ T4419] ======================================================= [ 79.505356][ T4423] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 79.680186][ T4432] loop1: detected capacity change from 0 to 512 [ 79.717844][ T4432] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.767299][ T4419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 79.792039][ T4432] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.832319][ T4432] EXT4-fs (loop1): 1 orphan inode deleted [ 79.864177][ T4432] EXT4-fs (loop1): 1 truncate cleaned up [ 80.049519][ T4432] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.323637][ T4419] ================================================================== [ 80.331952][ T4419] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x965/0x1e90 [ 80.339736][ T4419] Read of size 18446744073709551588 at addr ffff88805767d840 by task syz.4.23/4419 [ 80.349133][ T4419] [ 80.351598][ T4419] CPU: 1 PID: 4419 Comm: syz.4.23 Not tainted syzkaller #0 [ 80.358920][ T4419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.369349][ T4419] Call Trace: [ 80.372663][ T4419] [ 80.375636][ T4419] dump_stack_lvl+0x188/0x24e [ 80.380538][ T4419] ? __lock_acquire+0x7d10/0x7d10 [ 80.385784][ T4419] ? show_regs_print_info+0x12/0x12 [ 80.391077][ T4419] ? load_image+0x400/0x400 [ 80.396185][ T4419] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 80.401694][ T4419] ? __virt_addr_valid+0x188/0x540 [ 80.406978][ T4419] ? __virt_addr_valid+0x465/0x540 [ 80.412231][ T4419] ? ext4_xattr_set_entry+0x965/0x1e90 [ 80.417902][ T4419] print_report+0xa8/0x210 [ 80.422629][ T4419] kasan_report+0x10b/0x140 [ 80.427836][ T4419] ? ext4_xattr_set_entry+0x965/0x1e90 [ 80.433529][ T4419] ? ext4_xattr_set_entry+0x965/0x1e90 [ 80.439746][ T4419] kasan_check_range+0x235/0x290 [ 80.444713][ T4419] ? ext4_xattr_set_entry+0x965/0x1e90 [ 80.450488][ T4419] memmove+0x25/0x60 [ 80.454683][ T4419] ext4_xattr_set_entry+0x965/0x1e90 [ 80.460456][ T4419] ext4_xattr_block_set+0xae4/0x32b0 [ 80.465762][ T4419] ? ext4_destroy_inode+0x200/0x200 [ 80.471053][ T4419] ? proc_nr_inodes+0x2f0/0x2f0 [ 80.475945][ T4419] ? _raw_spin_unlock+0x36/0x40 [ 80.480908][ T4419] ? iput+0x768/0x980 [ 80.485013][ T4419] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 80.490716][ T4419] ? ext4_xattr_ibody_set+0x509/0x690 [ 80.496199][ T4419] ext4_xattr_set_handle+0xe3b/0x1570 [ 80.501694][ T4419] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 80.507950][ T4419] ext4_xattr_set+0x242/0x320 [ 80.512720][ T4419] ? ext4_xattr_set_credits+0x290/0x290 [ 80.518451][ T4419] ? evm_protect_xattr+0x7e9/0x9d0 [ 80.523574][ T4419] ? lockdep_hardirqs_on+0x94/0x140 [ 80.529034][ T4419] ? ext4_xattr_security_get+0x40/0x40 [ 80.534614][ T4419] __vfs_setxattr+0x3e0/0x420 [ 80.539492][ T4419] __vfs_setxattr_noperm+0x129/0x5e0 [ 80.544957][ T4419] vfs_setxattr+0x167/0x2e0 [ 80.549463][ T4419] ? xattr_permission+0x500/0x500 [ 80.554491][ T4419] ? setxattr+0x2ff/0x360 [ 80.558888][ T4419] setxattr+0x346/0x360 [ 80.563056][ T4419] ? path_setxattr+0x290/0x290 [ 80.568018][ T4419] ? __mnt_want_write+0x21f/0x2a0 [ 80.573050][ T4419] path_setxattr+0x147/0x290 [ 80.577653][ T4419] ? simple_xattr_list_add+0xf0/0xf0 [ 80.583216][ T4419] ? lock_chain_count+0x20/0x20 [ 80.588187][ T4419] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 80.594484][ T4419] __x64_sys_setxattr+0xb7/0xd0 [ 80.599530][ T4419] do_syscall_64+0x4c/0xa0 [ 80.603966][ T4419] ? clear_bhb_loop+0x60/0xb0 [ 80.608642][ T4419] ? clear_bhb_loop+0x60/0xb0 [ 80.613407][ T4419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.619570][ T4419] RIP: 0033:0x7efe8159c799 [ 80.624006][ T4419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.643612][ T4419] RSP: 002b:00007efe824e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 80.652424][ T4419] RAX: ffffffffffffffda RBX: 00007efe81815fa0 RCX: 00007efe8159c799 [ 80.660599][ T4419] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 80.668825][ T4419] RBP: 00007efe81632c99 R08: 0000000000000000 R09: 0000000000000000 [ 80.677140][ T4419] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 80.685431][ T4419] R13: 00007efe81816038 R14: 00007efe81815fa0 R15: 00007ffebde18cb8 [ 80.693782][ T4419] [ 80.697705][ T4419] [ 80.700701][ T4419] Allocated by task 4419: [ 80.705662][ T4419] kasan_set_track+0x4b/0x70 [ 80.710269][ T4419] __kasan_kmalloc+0x8e/0xa0 [ 80.715035][ T4419] __kmalloc_node_track_caller+0xae/0x230 [ 80.720930][ T4419] kmemdup+0x27/0x60 [ 80.724822][ T4419] ext4_xattr_block_set+0x9e6/0x32b0 [ 80.730192][ T4419] ext4_xattr_set_handle+0xe3b/0x1570 [ 80.735588][ T4419] ext4_xattr_set+0x242/0x320 [ 80.740272][ T4419] __vfs_setxattr+0x3e0/0x420 [ 80.744944][ T4419] __vfs_setxattr_noperm+0x129/0x5e0 [ 80.750222][ T4419] vfs_setxattr+0x167/0x2e0 [ 80.754717][ T4419] setxattr+0x346/0x360 [ 80.758882][ T4419] path_setxattr+0x147/0x290 [ 80.763496][ T4419] __x64_sys_setxattr+0xb7/0xd0 [ 80.768469][ T4419] do_syscall_64+0x4c/0xa0 [ 80.773031][ T4419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.779046][ T4419] [ 80.781405][ T4419] The buggy address belongs to the object at ffff88805767d800 [ 80.781405][ T4419] which belongs to the cache kmalloc-1k of size 1024 [ 80.795996][ T4419] The buggy address is located 64 bytes inside of [ 80.795996][ T4419] 1024-byte region [ffff88805767d800, ffff88805767dc00) [ 80.809398][ T4419] [ 80.811731][ T4419] The buggy address belongs to the physical page: [ 80.818315][ T4419] page:ffffea00015d9e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57678 [ 80.828471][ T4419] head:ffffea00015d9e00 order:3 compound_mapcount:0 compound_pincount:0 [ 80.836813][ T4419] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 80.844892][ T4419] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017441dc0 [ 80.853499][ T4419] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 80.862184][ T4419] page dumped because: kasan: bad access detected [ 80.868778][ T4419] page_owner tracks the page as allocated [ 80.874502][ T4419] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4276, tgid 4276 (syz-executor), ts 68753683533, free_ts 17130962612 [ 80.893901][ T4419] post_alloc_hook+0x173/0x1a0 [ 80.898870][ T4419] get_page_from_freelist+0x1a1e/0x1ab0 [ 80.904446][ T4419] __alloc_pages+0x1ec/0x4f0 [ 80.909050][ T4419] alloc_slab_page+0x5d/0x160 [ 80.913733][ T4419] new_slab+0x87/0x2c0 [ 80.917895][ T4419] ___slab_alloc+0xbc6/0x1240 [ 80.922570][ T4419] __kmem_cache_alloc_node+0x1a0/0x260 [ 80.928132][ T4419] kmalloc_trace+0x26/0xe0 [ 80.932550][ T4419] batadv_hard_if_event+0xd8b/0x1550 [ 80.937827][ T4419] raw_notifier_call_chain+0xcb/0x160 [ 80.943299][ T4419] register_netdevice+0x163f/0x1b00 [ 80.948671][ T4419] veth_newlink+0x830/0xc80 [ 80.953250][ T4419] rtnl_newlink+0x1542/0x2080 [ 80.958025][ T4419] rtnetlink_rcv_msg+0x87c/0xfc0 [ 80.963138][ T4419] netlink_rcv_skb+0x1fb/0x450 [ 80.967900][ T4419] netlink_unicast+0x74d/0x8d0 [ 80.972743][ T4419] page last free stack trace: [ 80.977411][ T4419] free_unref_page_prepare+0x8b4/0x9a0 [ 80.983136][ T4419] free_unref_page+0x2e/0x3f0 [ 80.987897][ T4419] free_contig_range+0x9d/0x150 [ 80.992759][ T4419] destroy_args+0xf0/0xa0a [ 80.997178][ T4419] debug_vm_pgtable+0x33c/0x38e [ 81.002028][ T4419] do_one_initcall+0x26a/0x840 [ 81.006872][ T4419] do_initcall_level+0x137/0x1e4 [ 81.011895][ T4419] do_initcalls+0x4b/0x8a [ 81.016401][ T4419] kernel_init_freeable+0x415/0x5be [ 81.021586][ T4419] kernel_init+0x19/0x1b0 [ 81.026025][ T4419] ret_from_fork+0x1f/0x30 [ 81.030535][ T4419] [ 81.032861][ T4419] Memory state around the buggy address: [ 81.038712][ T4419] ffff88805767d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.047058][ T4419] ffff88805767d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.055310][ T4419] >ffff88805767d800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 81.063465][ T4419] ^ [ 81.069612][ T4419] ffff88805767d880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 81.077666][ T4419] ffff88805767d900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 81.085917][ T4419] ================================================================== [ 81.219031][ T4419] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 81.226473][ T4419] CPU: 0 PID: 4419 Comm: syz.4.23 Not tainted syzkaller #0 [ 81.233712][ T4419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.243801][ T4419] Call Trace: [ 81.247255][ T4419] [ 81.250518][ T4419] dump_stack_lvl+0x188/0x24e [ 81.255664][ T4419] ? memcpy+0x3c/0x60 [ 81.256031][ T4432] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1450: inode #12: block 7: comm syz.1.29: path /3/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 81.264591][ T4432] EXT4-fs (loop1): Remounting filesystem read-only [ 81.288497][ T4419] ? show_regs_print_info+0x12/0x12 [ 81.294002][ T4419] ? load_image+0x400/0x400 [ 81.298643][ T4419] panic+0x2e5/0x730 [ 81.302610][ T4419] ? asm_common_interrupt+0x22/0x40 [ 81.307834][ T4419] ? bpf_jit_dump+0xd0/0xd0 [ 81.312555][ T4419] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 81.318572][ T4419] ? _raw_spin_unlock+0x40/0x40 [ 81.323800][ T4419] check_panic_on_warn+0x80/0xa0 [ 81.328761][ T4419] ? ext4_xattr_set_entry+0x965/0x1e90 [ 81.334345][ T4419] end_report+0x66/0x110 [ 81.338627][ T4419] kasan_report+0x118/0x140 [ 81.343260][ T4419] ? ext4_xattr_set_entry+0x965/0x1e90 [ 81.348755][ T4419] ? ext4_xattr_set_entry+0x965/0x1e90 [ 81.354351][ T4419] kasan_check_range+0x235/0x290 [ 81.359341][ T4419] ? ext4_xattr_set_entry+0x965/0x1e90 [ 81.364915][ T4419] memmove+0x25/0x60 [ 81.368831][ T4419] ext4_xattr_set_entry+0x965/0x1e90 [ 81.374158][ T4419] ext4_xattr_block_set+0xae4/0x32b0 [ 81.379577][ T4419] ? ext4_destroy_inode+0x200/0x200 [ 81.384836][ T4419] ? proc_nr_inodes+0x2f0/0x2f0 [ 81.389902][ T4419] ? _raw_spin_unlock+0x36/0x40 [ 81.394784][ T4419] ? iput+0x768/0x980 [ 81.398806][ T4419] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 81.404469][ T4419] ? ext4_xattr_ibody_set+0x509/0x690 [ 81.410084][ T4419] ext4_xattr_set_handle+0xe3b/0x1570 [ 81.415510][ T4419] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 81.421816][ T4419] ext4_xattr_set+0x242/0x320 [ 81.426549][ T4419] ? ext4_xattr_set_credits+0x290/0x290 [ 81.432835][ T4419] ? evm_protect_xattr+0x7e9/0x9d0 [ 81.437975][ T4419] ? lockdep_hardirqs_on+0x94/0x140 [ 81.443214][ T4419] ? ext4_xattr_security_get+0x40/0x40 [ 81.448932][ T4419] __vfs_setxattr+0x3e0/0x420 [ 81.453670][ T4419] __vfs_setxattr_noperm+0x129/0x5e0 [ 81.459014][ T4419] vfs_setxattr+0x167/0x2e0 [ 81.463916][ T4419] ? xattr_permission+0x500/0x500 [ 81.469151][ T4419] ? setxattr+0x2ff/0x360 [ 81.473495][ T4419] setxattr+0x346/0x360 [ 81.477667][ T4419] ? path_setxattr+0x290/0x290 [ 81.482544][ T4419] ? __mnt_want_write+0x21f/0x2a0 [ 81.487778][ T4419] path_setxattr+0x147/0x290 [ 81.492703][ T4419] ? simple_xattr_list_add+0xf0/0xf0 [ 81.498358][ T4419] ? lock_chain_count+0x20/0x20 [ 81.503228][ T4419] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 81.509592][ T4419] __x64_sys_setxattr+0xb7/0xd0 [ 81.514451][ T4419] do_syscall_64+0x4c/0xa0 [ 81.518868][ T4419] ? clear_bhb_loop+0x60/0xb0 [ 81.523541][ T4419] ? clear_bhb_loop+0x60/0xb0 [ 81.528309][ T4419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.534211][ T4419] RIP: 0033:0x7efe8159c799 [ 81.538958][ T4419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.559634][ T4419] RSP: 002b:00007efe824e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 81.568457][ T4419] RAX: ffffffffffffffda RBX: 00007efe81815fa0 RCX: 00007efe8159c799 [ 81.576539][ T4419] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 81.584914][ T4419] RBP: 00007efe81632c99 R08: 0000000000000000 R09: 0000000000000000 [ 81.593080][ T4419] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 81.601075][ T4419] R13: 00007efe81816038 R14: 00007efe81815fa0 R15: 00007ffebde18cb8 [ 81.609145][ T4419] [ 81.612751][ T4419] Kernel Offset: disabled [ 81.617109][ T4419] Rebooting in 86400 seconds..