last executing test programs: 1m37.171830078s ago: executing program 0 (id=175): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0xa0040) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7e2) 1m37.0239508s ago: executing program 0 (id=178): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)='c', 0x1}], 0x1}}], 0x1, 0x20000001) recvfrom$inet(r0, &(0x7f0000000800)=""/233, 0xd, 0x40000001, 0x0, 0x0) 1m36.859698834s ago: executing program 0 (id=181): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$pptp(r0, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1m36.660674641s ago: executing program 0 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='\f\x00\x00'], 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) fsetxattr$security_ima(r2, &(0x7f0000000000), 0x0, 0x0, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0500000003000000080000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) uname(0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x802, &(0x7f0000000300)={[{@noblock_validity}, {@dioread_nolock}, {@nobh}, {@minixdf}, {@nobh}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) lseek(r6, 0x400, 0x1) getdents(r6, &(0x7f0000000900)=""/4096, 0x1000) 1m36.587543877s ago: executing program 3 (id=186): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xc) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create(0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000001a00"/28], 0x48) open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x8000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 6.388699758s ago: executing program 1 (id=138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 5.993735112s ago: executing program 1 (id=192): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000a00028006000200a07797"], 0x3c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.718939985s ago: executing program 1 (id=193): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300"], 0xa8}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f00000003c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 5.718720495s ago: executing program 3 (id=190): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 4.899575985s ago: executing program 4 (id=197): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x1, 0x0, 0x1001f0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)}, {&(0x7f0000000600)="2fd7d2a63b0eac80eec1ec947417e00e0ddf50e9675b062d4834690c02f492e906ae0dd4396d972cfcc399f3bcfc74ce01cf45e8c6687acf0f6cc323b762b73ce293652997e2654833964a16c03a0b4ca0c329db1a2d6a05d2984d88cb2de44ee30ed0f79c091fe65f61ffac49c9b4237fdf0a47aaaef9a9a302593784acea90cca7d00996f449b635a3f5e0c05f80d6707f55ed4065d054c66edc052c23e161af0a88cba3e76624bb6c35241fe90cec05ca25efd8dbf49de4397758677cd115f520a2d751f064eade8b207b90a88f2a2b0686403feaf7ce76fd07eff37ee1b67836dbf66fe2358a", 0xe8}], 0x2, 0x33000, 0x7ffffffb, 0x3) 4.848237389s ago: executing program 3 (id=198): socket$inet6(0xa, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_create(0x9, 0x800) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) 4.661766185s ago: executing program 1 (id=199): syz_read_part_table(0x60d, &(0x7f0000002240)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 4.452883802s ago: executing program 4 (id=200): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 4.422344475s ago: executing program 2 (id=189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8200, &(0x7f0000000080)={[{@max_dir_size_kb}, {@stripe}, {@grpid}, {@errors_remount}, {@noblock_validity}, {@block_validity}, {@minixdf}, {@noauto_da_alloc}]}, 0x83, 0x5fe, &(0x7f0000001040)="$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") 4.24699166s ago: executing program 1 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000001081e040031004000000001090224000140000000090400000203000000092105000905810300000000000000000000ad8b92adad372737298cf6e3ddda0e29480b4531fc551117e3ff1dcd8b5567462aaca85ea2287461d06e12f49cb27c7f1771e505b9ee9e638dfbdeec24c76100000000000000a7c2df699422f12679bd463c3fb7f1a772ef57ad086401380a7313a32d880c2911230e7bf45f7cae6391539c44e23e2d18cef5429977cb9fdfa1e1f4ea8c901c092d06ba9b0ca8c00e766a72bf496463da152858882f52f3377cc6ff8a4c1c901f783f7c206b28de89a53a5d85c4ef3b6b2d8b359cd3a6e1bf38084a566b56a5c32da0e0441ab0200537e8c64fb9655195b065e634d4d02d80c8efc24e210aee38cc7af470720321962c49a2b2cf008afc38deb01b6361b3ee657e092a6abea2c19e583fe40970038722a4f2e5b776ede9c92cd27b22ff1eb5ec6a87fc27fa3ccaa98fe23679d385b46fe761416c1164cd32524048ae70b1265be4aa4f"], 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) syz_usb_control_io$hid(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fstat(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000016110640000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.095956533s ago: executing program 4 (id=202): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 3.431720199s ago: executing program 0 (id=188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 3.42287187s ago: executing program 3 (id=203): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x121301) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x82) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x15) r3 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 3.296501961s ago: executing program 4 (id=204): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r1, 0x60, 0x15ea, 0x4) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000040)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1802000000000000000800030000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYRES64=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 3.109627076s ago: executing program 4 (id=205): socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x114) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000200000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xc0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000001800)={@local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 2.698234021s ago: executing program 2 (id=206): sendmsg(0xffffffffffffffff, 0x0, 0x4004000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) flock(r0, 0x5) 2.541036464s ago: executing program 3 (id=207): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_OKEY={0x8, 0x5, 0x9}]}}}]}, 0x44}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 2.447526662s ago: executing program 2 (id=208): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3261], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xff07, 0x0, 0x0, 0x1ff, 0x0, "5f330000a90100f9"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0xa) 2.136580719s ago: executing program 2 (id=209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x41) open$dir(&(0x7f0000000100)='./file2\x00', 0x2, 0x8) 1.133821224s ago: executing program 2 (id=210): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x44) 1.085681288s ago: executing program 1 (id=211): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000005eb4c687189172c700433b1b96aef99ca856b0a7eeed83adf4556a23045ab5454925723bc914d553d7cf3737563bd69d05191810205d8bb3c0c6a2efe5da"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40082) r2 = socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) syz_clone(0x62008000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000012003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f9001cffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) 1.79415ms ago: executing program 2 (id=212): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7ffb, 0x9, 0x1, 0x9, 0x36}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.241439ms ago: executing program 3 (id=213): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b7040000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 545.17µs ago: executing program 0 (id=214): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000280), &(0x7f0000000080)='%-5lx \x00'}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfffffe3e) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) 0s ago: executing program 4 (id=215): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x35e}) kernel console output (not intermixed with test programs): sport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.493704][ T3569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.505101][ T3571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.512606][ T3571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.538783][ T3571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.552707][ T3583] device hsr_slave_0 entered promiscuous mode [ 52.559788][ T3583] device hsr_slave_1 entered promiscuous mode [ 52.566249][ T3583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.573914][ T3583] Cannot create hsr debugfs directory [ 52.584830][ T3569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.591858][ T3569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.617836][ T3569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.682048][ T3569] device hsr_slave_0 entered promiscuous mode [ 52.693536][ T3569] device hsr_slave_1 entered promiscuous mode [ 52.700512][ T3569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.708134][ T3569] Cannot create hsr debugfs directory [ 52.758395][ T3571] device hsr_slave_0 entered promiscuous mode [ 52.765020][ T3571] device hsr_slave_1 entered promiscuous mode [ 52.771739][ T3571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.779411][ T3571] Cannot create hsr debugfs directory [ 52.807926][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 52.808032][ T1075] Bluetooth: hci4: command 0x0409 tx timeout [ 52.817317][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 52.826647][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 52.832988][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 53.009928][ T3576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.024544][ T3576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.034494][ T3576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.055970][ T3576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.091640][ T3571] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.110457][ T3571] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.124575][ T3571] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.159113][ T3571] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.201357][ T3569] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.215326][ T3569] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.225062][ T3569] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.253404][ T3569] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.276886][ T3576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.314885][ T3576] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.342754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.352525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.363437][ T3570] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.373089][ T3570] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.383853][ T3570] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.404149][ T3570] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.421601][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.431420][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.440980][ T2678] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.448210][ T2678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.458175][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.467767][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.476130][ T2678] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.483390][ T2678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.492351][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.513070][ T3571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.520717][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.562607][ T3571] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.570603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.581817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.590270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.604345][ T3583] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.615395][ T3583] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.644029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.652973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.662401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.671248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.680691][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.687788][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.695468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.704514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.713075][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.720141][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.728386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.737561][ T3583] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.746439][ T3583] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.776260][ T3569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.785025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.794198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.802611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.811937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.821086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.830410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.839544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.848497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.857100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.865432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.874248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.882887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.895843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.906196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.921455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.930310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.954625][ T3576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.968650][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.979011][ T3569] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.994764][ T3571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.005990][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.020845][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.031238][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.043362][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.054596][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.070413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.081112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.090362][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.097466][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.140991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.158663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.179966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.189207][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.196382][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.232895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.242444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.253006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.269768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.278844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.288910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.301577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.309963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.318577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.329645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.338458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.362314][ T3569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.374096][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.388371][ T3571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.395642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.405063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.421497][ T3570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.436520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.444529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.460539][ T3576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.473433][ T3583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.505628][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.516807][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.527153][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.535027][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.556496][ T3570] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.582570][ T3583] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.601785][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.611958][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.623804][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.635661][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.645510][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.652725][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.662011][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.676896][ T3571] device veth0_vlan entered promiscuous mode [ 54.690649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.701401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.715143][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.722286][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.732750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.741828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.750172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.758960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.767560][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.774599][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.782516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.791762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.800637][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.807734][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.822381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.830586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.839365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.852718][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.862122][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.874631][ T3571] device veth1_vlan entered promiscuous mode [ 54.887940][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 54.887955][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 54.905267][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 54.911978][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 54.912641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.918763][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 54.933814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.947634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.956133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.965246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.974296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.983135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.992158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.000371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.008340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.022874][ T3569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.058922][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.067985][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.076560][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.085444][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.094642][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.103618][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.112381][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.120875][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.129486][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.138182][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.155136][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.163955][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.178488][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.195725][ T3576] device veth0_vlan entered promiscuous mode [ 55.209087][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.219856][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.229454][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.238889][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.247536][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.255850][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.264521][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.274396][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.286667][ T3583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.305271][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.314699][ T3571] device veth0_macvtap entered promiscuous mode [ 55.325256][ T3576] device veth1_vlan entered promiscuous mode [ 55.343758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.353152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.362316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.372278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.381686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.398442][ T3571] device veth1_macvtap entered promiscuous mode [ 55.433554][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.453640][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.463948][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.481071][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.498597][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.512851][ T3576] device veth0_macvtap entered promiscuous mode [ 55.522737][ T3576] device veth1_macvtap entered promiscuous mode [ 55.531737][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.540842][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.550201][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.564695][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.573556][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.581846][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.592838][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.618862][ T3569] device veth0_vlan entered promiscuous mode [ 55.626068][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.635489][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.646385][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.654238][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.667400][ T3571] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.676282][ T3571] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.686246][ T3571] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.696120][ T3571] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.712127][ T3569] device veth1_vlan entered promiscuous mode [ 55.728332][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.739597][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.752194][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.770077][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.778998][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.787271][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.795806][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.806349][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.815986][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.831078][ T3570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.846355][ T3576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.859346][ T3576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.870949][ T3576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.912475][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.922571][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.932828][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.942683][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.955129][ T3583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.965875][ T3569] device veth0_macvtap entered promiscuous mode [ 55.975588][ T3576] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.984562][ T3576] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.994271][ T3576] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.003279][ T3576] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.040277][ T3569] device veth1_macvtap entered promiscuous mode [ 56.101586][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.111147][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.119480][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.130125][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.139002][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.148554][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.168663][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.182536][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.193496][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.204666][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.215868][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.245897][ T3583] device veth0_vlan entered promiscuous mode [ 56.248157][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.266417][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.275316][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.282914][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.283540][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.302622][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.311279][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.320766][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.329210][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.339870][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.350807][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.361034][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.372698][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.383559][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.396408][ T3569] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.405405][ T3569] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.416858][ T3569] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.425730][ T3569] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.438182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.446428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.455442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.464569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.473401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.482515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.493338][ T3570] device veth0_vlan entered promiscuous mode [ 56.511383][ T3583] device veth1_vlan entered promiscuous mode [ 56.521938][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.530368][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.555059][ T354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.566448][ T354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.572914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.582720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.605872][ T3570] device veth1_vlan entered promiscuous mode [ 56.640079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.666494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.675015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.683697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.706680][ T3570] device veth0_macvtap entered promiscuous mode [ 56.724310][ T3583] device veth0_macvtap entered promiscuous mode [ 56.736196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.747530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.756031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.766884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.788218][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.799815][ T3583] device veth1_macvtap entered promiscuous mode [ 56.814370][ T3570] device veth1_macvtap entered promiscuous mode [ 56.857574][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.859376][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.865533][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.895897][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.911769][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.923486][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.934083][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.944681][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.955318][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.967722][ T1078] Bluetooth: hci2: command 0x040f tx timeout [ 56.975867][ T1078] Bluetooth: hci3: command 0x040f tx timeout [ 56.983596][ T3583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.991097][ T1078] Bluetooth: hci1: command 0x040f tx timeout [ 57.008137][ T1078] Bluetooth: hci0: command 0x040f tx timeout [ 57.014316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.022795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.022991][ T1078] Bluetooth: hci4: command 0x040f tx timeout [ 57.031172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.044806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.053685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.062920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.078446][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.089140][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.100249][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.110859][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.121175][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.132378][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.142293][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.152940][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.164385][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.172482][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.183628][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.193815][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.204959][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.215263][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.226102][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.242384][ T3583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.257781][ T3583] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.266527][ T3583] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.275736][ T3583] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.284787][ T3583] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.296317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.306661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.315643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.324342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.335106][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.346661][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.359122][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.376131][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.390989][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.401779][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.414388][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.425242][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.436826][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.446856][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.473719][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.484294][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.495003][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.504274][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.515926][ T3570] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.525086][ T3570] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.535399][ T3570] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.545689][ T3570] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.654706][ T26] audit: type=1326 audit(1729216147.494:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3655 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e1025ff9 code=0x7ffc0000 [ 57.695367][ T26] audit: type=1326 audit(1729216147.524:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3655 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52e1025ff9 code=0x7ffc0000 [ 57.738526][ T26] audit: type=1326 audit(1729216147.524:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3655 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e1025ff9 code=0x7ffc0000 [ 57.778066][ T3660] loop1: detected capacity change from 0 to 128 [ 57.784821][ T26] audit: type=1326 audit(1729216147.524:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3655 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52e1025ff9 code=0x7ffc0000 [ 57.795820][ T3660] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.809324][ T26] audit: type=1326 audit(1729216147.524:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3655 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e1025ff9 code=0x7ffc0000 [ 57.843215][ T26] audit: type=1326 audit(1729216147.524:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3655 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52e1025ff9 code=0x7ffc0000 [ 57.876256][ T3660] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.879791][ T26] audit: type=1326 audit(1729216147.524:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3655 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e1025ff9 code=0x7ffc0000 [ 57.926423][ T26] audit: type=1326 audit(1729216147.524:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3655 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f52e1025ff9 code=0x7ffc0000 [ 57.951435][ T26] audit: type=1326 audit(1729216147.524:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3655 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e1025ff9 code=0x7ffc0000 [ 57.974492][ T26] audit: type=1326 audit(1729216147.534:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3657 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f52e10580e5 code=0x7ffc0000 [ 58.000467][ T3623] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.008859][ T3662] loop2: detected capacity change from 0 to 128 [ 58.999874][ T3661] attempt to access beyond end of device [ 58.999874][ T3661] loop2: rw=2049, want=1041, limit=128 [ 59.047920][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 59.058050][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 59.065661][ T3662] attempt to access beyond end of device [ 59.065661][ T3662] loop2: rw=34817, want=129, limit=128 [ 59.095475][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 59.112292][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 59.130920][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 59.180955][ T3673] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 59.245306][ T3672] loop4: detected capacity change from 0 to 2048 [ 59.351470][ T3672] ======================================================= [ 59.351470][ T3672] WARNING: The mand mount option has been deprecated and [ 59.351470][ T3672] and is ignored by this kernel. Remove the mand [ 59.351470][ T3672] option from the mount to silence this warning. [ 59.351470][ T3672] ======================================================= [ 59.408126][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.436342][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.504248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.504293][ T3672] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.563522][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.579135][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.596278][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.613831][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.614783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.632884][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.649310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.676083][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.713002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.747519][ T3672] loop_set_status: loop4 () has still dirty pages (nrpages=2) [ 59.778962][ T3672] EXT4-fs (loop4): Unrecognized mount option " Z* m.Dc8'@C9G9?9S{1Jլ5 æԌ" or missing value [ 59.999139][ T3697] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 60.069538][ T3696] syz.2.14[3696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.069645][ T3696] syz.2.14[3696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.239671][ T3704] ALSA: seq fatal error: cannot create timer (-22) [ 61.039256][ T3719] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 61.123429][ T3722] loop3: detected capacity change from 0 to 1024 [ 61.237300][ T3722] EXT4-fs (loop3): Ignoring removed orlov option [ 61.244608][ T3722] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 61.292749][ T3722] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 61.503314][ T3722] process 'syz.3.20' launched './file0/file0' with NULL argv: empty string added [ 61.520875][ T3674] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 61.550083][ T3674] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 61.574634][ T3674] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 61.592239][ T3674] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 61.610588][ T3674] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 61.634655][ T3674] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 61.661283][ T3674] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 61.677017][ T3674] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 61.684705][ T3674] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 61.703044][ T3674] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 61.713384][ T3674] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 61.721983][ T3674] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 61.731414][ T3674] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 61.741001][ T3674] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 61.749892][ T3674] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 61.763933][ T3674] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 61.784863][ T3674] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 62.022962][ T3746] loop3: detected capacity change from 0 to 512 [ 62.111086][ T3752] syz.2.32[3752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.111186][ T3752] syz.2.32[3752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.142318][ T3746] EXT4-fs (loop3): Ignoring removed nobh option [ 62.217150][ T3746] EXT4-fs (loop3): Ignoring removed nobh option [ 62.265032][ T3746] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.341172][ T3759] loop1: detected capacity change from 0 to 512 [ 62.362131][ T3746] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 62.420704][ T3746] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.27: invalid indirect mapped block 2683928664 (level 1) [ 62.498158][ T3759] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.35: inode #1: comm syz.1.35: iget: illegal inode # [ 62.513945][ T3746] EXT4-fs (loop3): 1 truncate cleaned up [ 62.542235][ T3746] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,nobh,minixdf,nobh,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback. [ 62.572817][ T3759] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.35: error while reading EA inode 1 err=-117 [ 62.630038][ T3759] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 62.706466][ T3759] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.35: inode #1: comm syz.1.35: iget: illegal inode # [ 62.753692][ T3759] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.35: error while reading EA inode 1 err=-117 [ 62.809475][ T3759] EXT4-fs (loop1): 1 orphan inode deleted [ 62.815278][ T3759] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 62.948079][ T3768] loop4: detected capacity change from 0 to 2048 [ 62.963572][ T3772] loop3: detected capacity change from 0 to 512 [ 63.006713][ T3768] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.064508][ T3780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.43'. [ 63.080170][ T3780] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 63.175180][ T3772] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 63.197325][ T3772] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.274650][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 63.274664][ T26] audit: type=1326 audit(1729216153.114:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3788 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec4feeff9 code=0x7ffc0000 [ 63.338180][ T26] audit: type=1326 audit(1729216153.114:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3788 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7feec4feeff9 code=0x7ffc0000 [ 63.361613][ T26] audit: type=1326 audit(1729216153.114:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3788 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec4feeff9 code=0x7ffc0000 [ 63.492878][ T3797] loop4: detected capacity change from 0 to 1024 [ 63.519752][ T3795] netlink: 'syz.0.49': attribute type 4 has an invalid length. [ 63.551379][ T3795] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.49'. [ 63.561701][ T3797] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 63.633333][ T3803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 63.687613][ T3797] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noquota,barrier=0x0000000000000000,jqfmt=vfsv1,block_validity,mblk_io_submit,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 63.824198][ T3813] mmap: syz.3.56 (3813) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 63.887140][ T3797] loop_set_status: loop4 () has still dirty pages (nrpages=2) [ 63.933031][ T3821] syz.1.58[3821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.933121][ T3821] syz.1.58[3821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.015619][ T3825] Zero length message leads to an empty skb [ 64.046844][ T3827] loop0: detected capacity change from 0 to 512 [ 64.095424][ T3830] netlink: 272 bytes leftover after parsing attributes in process `syz.3.64'. [ 64.171091][ T3827] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.224443][ T3827] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.304255][ T3839] loop2: detected capacity change from 0 to 512 [ 64.343448][ T3839] EXT4-fs (loop2): Ignoring removed oldalloc option [ 64.352320][ T3827] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #2: comm syz.0.62: corrupted inode contents [ 64.386161][ T3827] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #2: comm syz.0.62: mark_inode_dirty error [ 64.432361][ T3827] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #2: comm syz.0.62: corrupted inode contents [ 64.446828][ T3839] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.458599][ T3848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 64.471590][ T3827] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.62: mark_inode_dirty error [ 64.537051][ T3839] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.554342][ T3839] EXT4-fs (loop2): 1 truncate cleaned up [ 64.557986][ T3852] loop4: detected capacity change from 0 to 128 [ 64.571726][ T3839] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 64.914769][ T3857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 64.928428][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 64.991892][ T3856] MPTCP: addr_signal error, rm_addr=1 [ 65.112291][ T3857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 65.264158][ T26] audit: type=1326 audit(1729216155.104:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3866 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e1025ff9 code=0x7ffc0000 [ 65.352575][ T26] audit: type=1326 audit(1729216155.134:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3866 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e1025ff9 code=0x7ffc0000 [ 65.424101][ T26] audit: type=1326 audit(1729216155.134:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3866 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52e1025ff9 code=0x7ffc0000 [ 65.535019][ T26] audit: type=1326 audit(1729216155.134:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3866 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e1025ff9 code=0x7ffc0000 [ 65.599392][ T3880] loop1: detected capacity change from 0 to 256 [ 65.661150][ T26] audit: type=1326 audit(1729216155.134:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3866 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e1025ff9 code=0x7ffc0000 [ 65.756466][ T26] audit: type=1326 audit(1729216155.154:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3866 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52e1025ff9 code=0x7ffc0000 [ 65.895941][ T26] audit: type=1326 audit(1729216155.194:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3866 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52e1025ff9 code=0x7ffc0000 [ 66.243336][ T3899] loop2: detected capacity change from 0 to 8192 [ 66.268768][ T3905] IPVS: Error joining to the multicast group [ 66.293884][ T3906] loop1: detected capacity change from 0 to 512 [ 66.364014][ T3908] loop0: detected capacity change from 0 to 2048 [ 66.393906][ T3906] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,nodiscard,,errors=continue. Quota mode: writeback. [ 66.421562][ T3906] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.438065][ T3899] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 66.446823][ T3899] FAT-fs (loop2): Filesystem has been set read-only [ 66.487364][ T3908] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.781279][ T7] cfg80211: failed to load regulatory.db [ 67.049375][ T3931] loop4: detected capacity change from 0 to 512 [ 67.180171][ T3931] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 67.208097][ T3931] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.100: inode #1: comm syz.4.100: iget: illegal inode # [ 67.252284][ T3945] loop1: detected capacity change from 0 to 256 [ 67.355524][ T3959] loop3: detected capacity change from 0 to 512 [ 67.363721][ T3931] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.100: error while reading EA inode 1 err=-117 [ 67.385286][ T3957] loop0: detected capacity change from 0 to 2048 [ 67.440701][ T3931] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.100: inode #1: comm syz.4.100: iget: illegal inode # [ 67.485564][ T3931] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.100: error while reading EA inode 1 err=-117 [ 67.508986][ T3931] EXT4-fs (loop4): 1 orphan inode deleted [ 67.514879][ T3931] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,max_batch_time=0x0000000000000002,auto_da_alloc=0x0000000000000009,mblk_io_submit,,errors=continue. Quota mode: none. [ 67.753756][ T3967] loop3: detected capacity change from 0 to 512 [ 67.804723][ T3973] loop0: detected capacity change from 0 to 256 [ 67.817324][ T3967] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.942963][ T3967] EXT4-fs (loop3): 1 truncate cleaned up [ 68.009838][ T3983] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.062478][ T3967] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,minixdf,noblock_validity,,errors=continue. Quota mode: none. [ 68.568793][ T4000] dccp_close: ABORT with 32 bytes unread [ 68.620548][ T26] kauditd_printk_skb: 109 callbacks suppressed [ 68.620561][ T26] audit: type=1326 audit(1729216158.464:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4007 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec4feeff9 code=0x7ffc0000 [ 68.787092][ T26] audit: type=1326 audit(1729216158.524:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4007 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feec4feeff9 code=0x7ffc0000 [ 68.917363][ T26] audit: type=1326 audit(1729216158.524:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4007 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec4feeff9 code=0x7ffc0000 [ 68.954724][ T4012] syz.3.135[4012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.954844][ T4012] syz.3.135[4012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.002700][ T26] audit: type=1326 audit(1729216158.524:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4007 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec4feeff9 code=0x7ffc0000 [ 69.044633][ T26] audit: type=1326 audit(1729216158.524:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4007 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feec4feeff9 code=0x7ffc0000 [ 69.176315][ T4024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.143'. [ 69.193462][ T26] audit: type=1326 audit(1729216158.524:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4007 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec4feeff9 code=0x7ffc0000 [ 69.241368][ T26] audit: type=1326 audit(1729216158.524:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4007 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec4feeff9 code=0x7ffc0000 [ 69.268379][ T4023] loop4: detected capacity change from 0 to 1024 [ 69.323396][ T4023] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 69.370531][ T26] audit: type=1326 audit(1729216158.524:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4007 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7feec4feeff9 code=0x7ffc0000 [ 69.411029][ T26] audit: type=1326 audit(1729216158.544:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4007 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec4feeff9 code=0x7ffc0000 [ 69.427728][ T4023] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: comm syz.4.144: inode #4294967295: comm syz.4.144: iget: illegal inode # [ 69.557080][ T4023] EXT4-fs (loop4): no journal found [ 69.562316][ T4023] EXT4-fs (loop4): can't get journal size [ 69.728506][ T4023] EXT4-fs (loop4): failed to initialize system zone (-22) [ 69.735733][ T4023] EXT4-fs (loop4): mount failed [ 69.749866][ T26] audit: type=1326 audit(1729216159.594:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4046 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec4feeff9 code=0x7ffc0000 [ 69.768082][ T4032] chnl_net:caif_netlink_parms(): no params data found [ 70.164139][ T4057] loop4: detected capacity change from 0 to 1024 [ 70.189615][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.196686][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.241755][ T4057] EXT4-fs (loop4): Ignoring removed oldalloc option [ 70.261770][ T4032] device bridge_slave_0 entered promiscuous mode [ 70.284228][ T4059] syz.0.152[4059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.284333][ T4059] syz.0.152[4059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.299816][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.346569][ T4057] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 70.387310][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.455803][ T4032] device bridge_slave_1 entered promiscuous mode [ 70.643967][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.689830][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.736687][ T4075] loop2: detected capacity change from 0 to 512 [ 70.813465][ T4032] team0: Port device team_slave_0 added [ 70.853202][ T4075] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.874920][ T4032] team0: Port device team_slave_1 added [ 70.892426][ T4079] netlink: 256 bytes leftover after parsing attributes in process `syz.0.160'. [ 70.938986][ T4075] EXT4-fs (loop2): 1 truncate cleaned up [ 70.944687][ T4075] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,dioread_lock,noauto_da_alloc,lazytime,nombcache,max_batch_time=0x000000000000000a,,errors=continue. Quota mode: none. [ 70.954820][ T4082] loop4: detected capacity change from 0 to 2048 [ 70.970592][ T4079] nbd: must specify a device to reconfigure [ 71.034173][ T4075] 9pnet: Could not find request transport: f [ 71.088157][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.103102][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.132486][ T4082] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.237055][ T4032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.293194][ T4088] loop2: detected capacity change from 0 to 512 [ 71.299420][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.317652][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.324141][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.324307][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.351853][ T4090] loop4: detected capacity change from 0 to 128 [ 71.368881][ T3666] Bluetooth: hci1: command 0x0409 tx timeout [ 71.409939][ T4088] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.456686][ T4088] EXT4-fs (loop2): 1 truncate cleaned up [ 71.476722][ T4088] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,dioread_lock,noauto_da_alloc,lazytime,nombcache,max_batch_time=0x000000000000000a,,errors=continue. Quota mode: none. [ 71.500511][ T4090] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.557233][ T4090] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.602881][ T4032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.915211][ T4032] device hsr_slave_0 entered promiscuous mode [ 71.937456][ T4032] device hsr_slave_1 entered promiscuous mode [ 71.986470][ T4032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.008586][ T4032] Cannot create hsr debugfs directory [ 72.499396][ T4032] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.756573][ T4123] loop2: detected capacity change from 0 to 512 [ 72.772121][ T4032] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.851605][ T4130] 9pnet: p9_errstr2errno: server reported unknown error [ 72.882858][ T4123] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.174: Failed to acquire dquot type 1 [ 72.884060][ T4032] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.948457][ T4123] EXT4-fs (loop2): 1 truncate cleaned up [ 72.954232][ T4123] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,delalloc,nodioread_nolock,init_itable,,errors=continue. Quota mode: writeback. [ 72.971257][ T4123] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.090600][ T4032] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.447099][ T3666] Bluetooth: hci1: command 0x041b tx timeout [ 74.795205][ T3710] device hsr_slave_0 left promiscuous mode [ 74.839976][ T3710] device hsr_slave_1 left promiscuous mode [ 74.898895][ T3710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.906382][ T3710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.008636][ T3710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.016069][ T3710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.117703][ T3710] device bridge_slave_1 left promiscuous mode [ 75.126031][ T3710] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.243356][ T3710] device bridge_slave_0 left promiscuous mode [ 75.314684][ T3710] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.458087][ T3710] device veth1_macvtap left promiscuous mode [ 75.464713][ T3710] device veth0_macvtap left promiscuous mode [ 75.527686][ T3668] Bluetooth: hci1: command 0x040f tx timeout [ 75.568443][ T3710] device veth1_vlan left promiscuous mode [ 75.574468][ T3710] device veth0_vlan left promiscuous mode [ 77.249930][ T3710] team0 (unregistering): Port device team_slave_1 removed [ 77.357764][ T3710] team0 (unregistering): Port device team_slave_0 removed [ 77.505674][ T3710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.607980][ T3615] Bluetooth: hci1: command 0x0419 tx timeout [ 77.658103][ T3710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.256875][ T3710] bond0 (unregistering): Released all slaves [ 132.747365][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.753690][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.849479][ T4141] loop0: detected capacity change from 0 to 512 [ 140.197064][ T4141] EXT4-fs (loop0): Ignoring removed nobh option [ 140.203345][ T4141] EXT4-fs (loop0): Ignoring removed nobh option [ 140.669146][ T4141] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 142.017062][ T4141] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 142.410360][ T4141] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.185: invalid indirect mapped block 2683928664 (level 1) [ 143.168366][ T4141] EXT4-fs (loop0): 1 truncate cleaned up [ 143.174059][ T4141] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,nobh,minixdf,nobh,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback. [ 148.407516][ T4155] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 153.221815][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.385574][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.510220][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.532842][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 153.546089][ T4165] chnl_net:caif_netlink_parms(): no params data found [ 153.610004][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.634514][ T4163] chnl_net:caif_netlink_parms(): no params data found [ 153.689546][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 153.734041][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 153.763834][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.771235][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.779771][ T4165] device bridge_slave_0 entered promiscuous mode [ 153.831785][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.839123][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.846837][ T4165] device bridge_slave_1 entered promiscuous mode [ 153.937670][ T4165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.953898][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.961296][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.970595][ T4166] device bridge_slave_0 entered promiscuous mode [ 153.979469][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.986521][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.994479][ T4166] device bridge_slave_1 entered promiscuous mode [ 154.022373][ T4163] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.029767][ T4163] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.039282][ T4163] device bridge_slave_0 entered promiscuous mode [ 154.054811][ T4165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.068353][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.076121][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.084929][ T4168] device bridge_slave_0 entered promiscuous mode [ 154.102622][ T4163] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.109921][ T4163] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.118867][ T4163] device bridge_slave_1 entered promiscuous mode [ 154.146269][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.153936][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.162183][ T4168] device bridge_slave_1 entered promiscuous mode [ 154.203526][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.278437][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.289714][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.302826][ T4165] team0: Port device team_slave_0 added [ 154.313142][ T4163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.332014][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.382589][ T4165] team0: Port device team_slave_1 added [ 154.390078][ T4163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.408035][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.415110][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.424730][ T4171] device bridge_slave_0 entered promiscuous mode [ 154.444431][ T4168] team0: Port device team_slave_0 added [ 154.490319][ T4163] team0: Port device team_slave_0 added [ 154.496559][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.505706][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.513617][ T4171] device bridge_slave_1 entered promiscuous mode [ 154.522622][ T4168] team0: Port device team_slave_1 added [ 154.533368][ T4166] team0: Port device team_slave_0 added [ 154.545591][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.552925][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.579711][ T4165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.593198][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.600614][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.627019][ T4165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.639946][ T4163] team0: Port device team_slave_1 added [ 154.664939][ T4166] team0: Port device team_slave_1 added [ 154.734093][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.751792][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.787169][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.818123][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.829025][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.836143][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.862279][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.887398][ T3608] Bluetooth: hci1: command 0x0409 tx timeout [ 154.893919][ T3614] Bluetooth: hci4: command 0x0409 tx timeout [ 154.904664][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.914851][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.942629][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.954720][ T4163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.962140][ T4163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.988406][ T3614] Bluetooth: hci2: command 0x0409 tx timeout [ 154.995754][ T4163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.997704][ T3608] Bluetooth: hci5: command 0x0409 tx timeout [ 155.020677][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.038274][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.045243][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.071743][ T3608] Bluetooth: hci3: command 0x0409 tx timeout [ 155.073696][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.107542][ T4163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.115630][ T4163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.145119][ T4163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.201819][ T4165] device hsr_slave_0 entered promiscuous mode [ 155.209471][ T4165] device hsr_slave_1 entered promiscuous mode [ 155.216105][ T4165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.223776][ T4165] Cannot create hsr debugfs directory [ 155.303061][ T4163] device hsr_slave_0 entered promiscuous mode [ 155.310420][ T4163] device hsr_slave_1 entered promiscuous mode [ 155.317231][ T4163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.324800][ T4163] Cannot create hsr debugfs directory [ 155.338984][ T4171] team0: Port device team_slave_0 added [ 155.348303][ T4168] device hsr_slave_0 entered promiscuous mode [ 155.355428][ T4168] device hsr_slave_1 entered promiscuous mode [ 155.362281][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.370432][ T4168] Cannot create hsr debugfs directory [ 155.379212][ T4166] device hsr_slave_0 entered promiscuous mode [ 155.386750][ T4166] device hsr_slave_1 entered promiscuous mode [ 155.393586][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.402276][ T4166] Cannot create hsr debugfs directory [ 155.436652][ T4171] team0: Port device team_slave_1 added [ 155.555611][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.570897][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.607481][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.645825][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.654196][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.681361][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.983751][ T4171] device hsr_slave_0 entered promiscuous mode [ 155.991003][ T4171] device hsr_slave_1 entered promiscuous mode [ 155.998037][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.005854][ T4171] Cannot create hsr debugfs directory [ 156.066847][ T144] device hsr_slave_0 left promiscuous mode [ 156.073572][ T144] device hsr_slave_1 left promiscuous mode [ 156.080324][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.088001][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.095621][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.103152][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.110830][ T144] device bridge_slave_1 left promiscuous mode [ 156.117641][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.126316][ T144] device bridge_slave_0 left promiscuous mode [ 156.132956][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.148500][ T144] device veth1_macvtap left promiscuous mode [ 156.154529][ T144] device veth0_macvtap left promiscuous mode [ 156.160781][ T144] device veth1_vlan left promiscuous mode [ 156.166583][ T144] device veth0_vlan left promiscuous mode [ 156.337023][ T144] team0 (unregistering): Port device team_slave_1 removed [ 156.350925][ T144] team0 (unregistering): Port device team_slave_0 removed [ 156.364786][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.385251][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.458850][ T144] bond0 (unregistering): Released all slaves [ 156.782165][ T4168] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.848091][ T4168] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.904251][ T4168] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.972395][ T4168] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.977189][ T3613] Bluetooth: hci4: command 0x041b tx timeout [ 156.997089][ T3613] Bluetooth: hci1: command 0x041b tx timeout [ 157.057938][ T3608] Bluetooth: hci5: command 0x041b tx timeout [ 157.064460][ T3608] Bluetooth: hci2: command 0x041b tx timeout [ 157.127231][ T3608] Bluetooth: hci3: command 0x041b tx timeout [ 157.495241][ T4163] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.574088][ T4163] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.650796][ T4163] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.750027][ T4163] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.861071][ T4171] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.943435][ T4171] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.036602][ T4171] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.115835][ T4171] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.262690][ T4171] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.289395][ T4171] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.337869][ T4171] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.361161][ T4165] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.379773][ T4171] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.390842][ T4165] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.401860][ T4165] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.419576][ T4165] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.529563][ T4168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 158.562006][ T4168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 158.613668][ T4168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 158.639002][ T4168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 158.663475][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.681528][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.708274][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.725391][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.750328][ T4166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 158.774666][ T4165] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.789421][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.818033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.834242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.846933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.866665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.881632][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.888759][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.905620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.918112][ T4166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.928999][ T4166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.939479][ T4166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.973227][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.984991][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.993922][ T3708] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.001037][ T3708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.022578][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.035896][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.050108][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.057226][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.073230][ T3613] Bluetooth: hci1: command 0x040f tx timeout [ 159.080013][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.088588][ T3613] Bluetooth: hci4: command 0x040f tx timeout [ 159.105977][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.115936][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.123062][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.137651][ T3613] Bluetooth: hci2: command 0x040f tx timeout [ 159.147384][ T3613] Bluetooth: hci5: command 0x040f tx timeout [ 159.164002][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.173325][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.185422][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.195624][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.205952][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.215601][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.223139][ T3613] Bluetooth: hci3: command 0x040f tx timeout [ 159.237817][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.284620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.298627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.328521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.373605][ T4165] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.386214][ T4165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.413301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.422838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.440093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.449433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.458272][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.476456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.486347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.506712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.525638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.536021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.571911][ T4163] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.602221][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.621371][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.637477][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.646031][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.680951][ T4163] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.700031][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.723257][ T4163] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.732656][ T4163] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.893188][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.907696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.915163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.992146][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.018093][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.026279][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.035601][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.059531][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.083328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.096060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.104936][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.112022][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.122388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.135354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.143918][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.150980][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.160222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.169245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.185897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.194046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.210780][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.224800][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.235153][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.290279][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.343234][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.352005][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.362101][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.370775][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.383155][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.392705][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.401611][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.411137][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.420040][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.428888][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.437411][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.445698][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.459720][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.485449][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.496253][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.505821][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.518468][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.528540][ T3708] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.535619][ T3708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.546931][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.555640][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.564501][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.571588][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.580051][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.588042][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.595711][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.641508][ T4163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.667504][ T4165] device veth0_vlan entered promiscuous mode [ 160.679018][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.696471][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.709149][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.718225][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.740763][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.752743][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.762399][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.778742][ T4163] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.790731][ T4165] device veth1_vlan entered promiscuous mode [ 160.809626][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.819342][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.829696][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.838858][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.847571][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.855740][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.863445][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.871038][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.879539][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.931085][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.942924][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.951645][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.961957][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.970871][ T3708] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.977972][ T3708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.988102][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.996663][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.005142][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.012234][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.020167][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.030108][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.039478][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.097747][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.106647][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.137275][ T3560] Bluetooth: hci4: command 0x0419 tx timeout [ 161.152026][ T4171] device veth0_vlan entered promiscuous mode [ 161.159047][ T3560] Bluetooth: hci1: command 0x0419 tx timeout [ 161.196742][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.206761][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.215634][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 161.222055][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 161.228824][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.249750][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.259093][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.268414][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.276787][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.285699][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.294416][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 161.299558][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.310170][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.318564][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.334301][ T4166] device veth0_vlan entered promiscuous mode [ 161.343645][ T4165] device veth0_macvtap entered promiscuous mode [ 161.358926][ T4165] device veth1_macvtap entered promiscuous mode [ 161.366823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.376045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.384653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.395348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.404120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.412569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.422359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.431275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.439998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.449047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.476047][ T4166] device veth1_vlan entered promiscuous mode [ 161.487828][ T4171] device veth1_vlan entered promiscuous mode [ 161.508443][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.516666][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.526258][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.536382][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.544070][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.552527][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.561494][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.598099][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.610768][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.621006][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.631769][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.641717][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.652951][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.664495][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.675306][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.686771][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.701811][ T4166] device veth0_macvtap entered promiscuous mode [ 161.710847][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.719544][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.729664][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.738840][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.749678][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.758154][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.766581][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.775807][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.786424][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.797343][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.807476][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.817977][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.828361][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.838950][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.850180][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.868555][ T4165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.877926][ T4165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.886619][ T4165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.897186][ T4165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.908038][ T4171] device veth0_macvtap entered promiscuous mode [ 161.919567][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.928782][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.937986][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.967710][ T4166] device veth1_macvtap entered promiscuous mode [ 161.976234][ T4171] device veth1_macvtap entered promiscuous mode [ 161.997765][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.006536][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.036098][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.049126][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.060476][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.071412][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.082286][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.093242][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.103408][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.115089][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.126638][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.145404][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.156504][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.170140][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.180934][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.191070][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.201574][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.211516][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.222286][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.232428][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.243198][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.255378][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.288888][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.298575][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.308456][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.318530][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.341183][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.352501][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.362777][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.374171][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.384383][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.395145][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.405307][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.416528][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.428416][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.438618][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.449755][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.459784][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.471422][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.481605][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.492635][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.503978][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.514737][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.524878][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.535408][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.546319][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.553946][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.562338][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.572294][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.581186][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.605174][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.614331][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.624046][ T4168] device veth0_vlan entered promiscuous mode [ 162.639010][ T4166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.650542][ T4166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.660489][ T4166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.669318][ T4166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.689357][ T4171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.698614][ T4171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.707794][ T4171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.716567][ T4171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.727844][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.735714][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.744287][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.752281][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.772885][ T4163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.789714][ T4168] device veth1_vlan entered promiscuous mode [ 162.916212][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.930949][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.970472][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 162.982970][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 162.992850][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 163.001759][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.011445][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.023308][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.032717][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.063473][ T4168] device veth0_macvtap entered promiscuous mode [ 163.091755][ T3708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.101952][ T3708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.124522][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.132931][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.141847][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.150977][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 163.160597][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.169203][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.192520][ T4168] device veth1_macvtap entered promiscuous mode [ 163.206323][ T4163] device veth0_vlan entered promiscuous mode [ 163.243522][ T4163] device veth1_vlan entered promiscuous mode [ 163.274000][ T3708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.309072][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.313425][ T3708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.332957][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.398928][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.407619][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.415862][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.424294][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 163.432707][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 163.441150][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.451853][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.466134][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.476727][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.486744][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.498809][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.509163][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.520480][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.530617][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.542078][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.551950][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.563033][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.573077][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.583557][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.595870][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.606574][ T4163] device veth0_macvtap entered promiscuous mode [ 163.618858][ T2678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.641036][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.642865][ T2678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.659934][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.687901][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.697543][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 163.706842][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.718524][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.728849][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.739664][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.749899][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.760504][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.771221][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.781990][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.791873][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.803002][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.813026][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.823500][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.834538][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.857877][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.868988][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.927212][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.938571][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.951828][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 163.972305][ T4362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.190'. [ 164.010045][ T4168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.027063][ T4168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.035816][ T4168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.044606][ T4168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.056722][ T4163] device veth1_macvtap entered promiscuous mode [ 164.065625][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.204123][ T4163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.226531][ T4163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.245539][ T4163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.267150][ T4163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.285046][ T4163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.296016][ T4163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.314514][ T4163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.325364][ T4163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.336568][ T4163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.347546][ T4163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.357648][ T4163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.368520][ T4163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.379225][ T4163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.390143][ T4163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.404494][ T4163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.447784][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.471668][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.499054][ T4163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.523209][ T4163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.534033][ T4163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.545736][ T4163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.555743][ T4163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.566321][ T4163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.576642][ T4163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.587384][ T4163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.597398][ T4163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.607953][ T4163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.622735][ T4163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.633453][ T4163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.644010][ T4163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.655550][ T4163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.666927][ T4163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.694602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.703940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.732142][ T4163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.767004][ T4163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.775723][ T4163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.807832][ T4163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.856281][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.881453][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.906344][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.912774][ T4374] loop4: detected capacity change from 0 to 2048 [ 165.035650][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.049609][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.065322][ T4374] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.098994][ T3708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.100990][ T4383] loop1: detected capacity change from 0 to 2048 [ 165.125870][ T3708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.139489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.154691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.165745][ T4383] loop1: p1 < > p4 [ 165.177221][ T4383] loop1: p4 size 8388608 extends beyond EOD, truncated [ 165.272458][ T4386] loop2: detected capacity change from 0 to 1024 [ 165.276416][ T3708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.292370][ T3028] loop1: p1 < > p4 [ 165.325827][ T3028] loop1: p4 size 8388608 extends beyond EOD, truncated [ 165.331156][ T3708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.368286][ T4386] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 165.404720][ T4386] EXT4-fs (loop2): orphan cleanup on readonly fs [ 165.415326][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.459452][ T4386] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.189: Invalid inode table block 0 in block_group 0 [ 165.492106][ T4380] udevd[4380]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 165.512985][ T4386] EXT4-fs (loop2): Remounting filesystem read-only [ 165.514604][ T4352] udevd[4352]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 165.520466][ T4386] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 165.549121][ T4386] EXT4-fs (loop2): Remounting filesystem read-only [ 165.558223][ T4386] EXT4-fs error (device loop2): ext4_quota_write:6592: inode #3: comm syz.2.189: mark_inode_dirty error [ 165.570669][ T4386] EXT4-fs (loop2): Remounting filesystem read-only [ 165.579276][ T144] device hsr_slave_0 left promiscuous mode [ 165.580446][ T4386] __quota_error: 38 callbacks suppressed [ 165.580459][ T4386] Quota error (device loop2): write_blk: dquota write failed [ 165.599173][ T4386] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 165.611530][ T144] device hsr_slave_1 left promiscuous mode [ 165.838897][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.911726][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.019326][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.077467][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 166.093104][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.206390][ T144] device bridge_slave_1 left promiscuous mode [ 166.236435][ T4386] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.189: Failed to acquire dquot type 0 [ 166.262752][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.262811][ T4352] udevd[4352]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 166.281197][ T4396] udevd[4396]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 166.305665][ T4386] EXT4-fs (loop2): Remounting filesystem read-only [ 166.324662][ T144] device bridge_slave_0 left promiscuous mode [ 166.332578][ T4386] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.189: Invalid inode table block 0 in block_group 0 [ 166.357848][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.378523][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 166.386256][ T4386] EXT4-fs (loop2): Remounting filesystem read-only [ 166.427978][ T144] device hsr_slave_0 left promiscuous mode [ 166.439320][ T26] audit: type=1326 audit(1729216256.284:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae2296ff9 code=0x7ffc0000 [ 166.443241][ T4386] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 166.473023][ T144] device hsr_slave_1 left promiscuous mode [ 166.492435][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.507482][ T21] usb 2-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 166.520455][ T26] audit: type=1326 audit(1729216256.304:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae2296ff9 code=0x7ffc0000 [ 166.524855][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.554471][ T21] usb 2-1: config 64 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 166.579100][ T4386] EXT4-fs (loop2): Remounting filesystem read-only [ 166.585746][ T21] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice=40.00 [ 166.589291][ T4386] EXT4-fs error (device loop2): ext4_ext_truncate:4454: inode #15: comm syz.2.189: mark_inode_dirty error [ 166.605794][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.607841][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.622322][ T4386] EXT4-fs (loop2): Remounting filesystem read-only [ 166.627158][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.629376][ T4386] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.189: Invalid inode table block 0 in block_group 0 [ 166.651311][ T144] device bridge_slave_1 left promiscuous mode [ 166.654417][ T4386] EXT4-fs (loop2): Remounting filesystem read-only [ 166.666420][ T4386] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 166.673505][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.677484][ T4386] EXT4-fs (loop2): Remounting filesystem read-only [ 166.689481][ T21] usbhid 2-1:64.0: couldn't find an input interrupt endpoint [ 166.699068][ T4386] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 166.708638][ T4386] EXT4-fs (loop2): Remounting filesystem read-only [ 166.715445][ T4386] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.189: Invalid inode table block 0 in block_group 0 [ 166.715827][ T144] device bridge_slave_0 left promiscuous mode [ 166.731757][ T4386] EXT4-fs (loop2): Remounting filesystem read-only [ 166.741958][ T4386] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 166.743775][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.752450][ T4386] EXT4-fs (loop2): Remounting filesystem read-only [ 166.765554][ T4386] EXT4-fs error (device loop2): ext4_truncate:4272: inode #15: comm syz.2.189: mark_inode_dirty error [ 166.780562][ T4386] EXT4-fs (loop2): Remounting filesystem read-only [ 166.790400][ T144] device hsr_slave_0 left promiscuous mode [ 166.794065][ T4386] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 166.805429][ T144] device hsr_slave_1 left promiscuous mode [ 166.808827][ T4386] EXT4-fs (loop2): Remounting filesystem read-only [ 166.822278][ T4386] EXT4-fs (loop2): 1 truncate cleaned up [ 166.828096][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.828939][ T4386] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 166.843524][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.867982][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.888012][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.897928][ T144] device bridge_slave_1 left promiscuous mode [ 166.904160][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.944117][ T144] device bridge_slave_0 left promiscuous mode [ 166.955457][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.985130][ T144] device hsr_slave_0 left promiscuous mode [ 166.992092][ T144] device hsr_slave_1 left promiscuous mode [ 167.001166][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.011959][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.058386][ T144] device bridge_slave_1 left promiscuous mode [ 167.064570][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.097768][ T144] device bridge_slave_0 left promiscuous mode [ 167.103994][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.128746][ T26] audit: type=1326 audit(1729216256.974:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0422f95ff9 code=0x7ffc0000 [ 167.165678][ T26] audit: type=1326 audit(1729216257.004:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0422f95ff9 code=0x7ffc0000 [ 167.206644][ T26] audit: type=1326 audit(1729216257.004:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f0422f95ff9 code=0x7ffc0000 [ 167.243717][ T144] device veth1_macvtap left promiscuous mode [ 167.243800][ T144] device veth0_macvtap left promiscuous mode [ 167.243897][ T144] device veth1_vlan left promiscuous mode [ 167.243981][ T144] device veth0_vlan left promiscuous mode [ 167.249041][ T144] device veth1_macvtap left promiscuous mode [ 167.249093][ T144] device veth0_macvtap left promiscuous mode [ 167.249184][ T144] device veth1_vlan left promiscuous mode [ 167.249268][ T144] device veth0_vlan left promiscuous mode [ 167.251885][ T144] device veth1_macvtap left promiscuous mode [ 167.251935][ T144] device veth0_macvtap left promiscuous mode [ 167.252026][ T144] device veth1_vlan left promiscuous mode [ 167.252092][ T144] device veth0_vlan left promiscuous mode [ 167.252373][ T26] audit: type=1326 audit(1729216257.004:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0422f95ff9 code=0x7ffc0000 [ 167.252406][ T26] audit: type=1326 audit(1729216257.004:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0422f95ff9 code=0x7ffc0000 [ 168.568185][ T4331] usb 2-1: USB disconnect, device number 2 [ 168.591543][ T26] audit: type=1326 audit(1729216258.434:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae55441ff9 code=0x7ffc0000 [ 168.656174][ T144] team0 (unregistering): Port device team_slave_1 removed [ 168.675177][ T144] team0 (unregistering): Port device team_slave_0 removed [ 168.692765][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.709807][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.784677][ T144] bond0 (unregistering): Released all slaves [ 168.913182][ T144] team0 (unregistering): Port device team_slave_1 removed [ 168.926731][ T144] team0 (unregistering): Port device team_slave_0 removed [ 168.944756][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.963777][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.039925][ T144] bond0 (unregistering): Released all slaves [ 169.153381][ T144] team0 (unregistering): Port device team_slave_1 removed [ 169.171648][ T144] team0 (unregistering): Port device team_slave_0 removed [ 169.185865][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.203174][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.275395][ T144] bond0 (unregistering): Released all slaves [ 169.400429][ T144] team0 (unregistering): Port device team_slave_1 removed [ 169.415201][ T144] team0 (unregistering): Port device team_slave_0 removed [ 169.431472][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.446655][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.512067][ T144] bond0 (unregistering): Released all slaves [ 169.757137][ C1] ------------[ cut here ]------------ [ 169.763024][ C1] WARNING: CPU: 1 PID: 4437 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 169.772387][ C1] Modules linked in: [ 169.776294][ C1] CPU: 1 PID: 4437 Comm: syz.3.213 Not tainted 5.15.168-syzkaller #0 [ 169.784403][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 169.794559][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 169.800772][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 fb c7 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e4 c7 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 169.820438][ C1] RSP: 0018:ffffc90000dd09a8 EFLAGS: 00010246 [ 169.826528][ C1] RAX: ffffffff81aaab4c RBX: 0000000000000000 RCX: ffff888028659dc0 [ 169.834559][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.842587][ C1] RBP: dffffc0000000000 R08: ffffffff81aaaa5d R09: fffffbfff20ec621 [ 169.850636][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 169.858678][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90000dd0a08 [ 169.866662][ C1] FS: 00007fdcc43dd6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 169.875643][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.882286][ C1] CR2: 00000000000000dc CR3: 000000002312a000 CR4: 00000000003506e0 [ 169.890308][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 169.898333][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 169.906324][ C1] Call Trace: [ 169.909646][ C1] [ 169.912497][ C1] ? __warn+0x15b/0x300 [ 169.916667][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 169.922272][ C1] ? report_bug+0x1b7/0x2e0 [ 169.926793][ C1] ? handle_bug+0x3d/0x70 [ 169.931162][ C1] ? exc_invalid_op+0x16/0x40 [ 169.935854][ C1] ? asm_exc_invalid_op+0x16/0x20 [ 169.940945][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 169.946431][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 169.952038][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 169.957636][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 169.963204][ C1] bpf_probe_read_user+0x26/0x70 [ 169.968217][ C1] bpf_prog_7e47b8e39696360c+0x32/0x644 [ 169.973794][ C1] bpf_trace_run3+0x1d1/0x380 [ 169.978532][ C1] ? bpf_trace_run2+0x340/0x340 [ 169.983433][ C1] ? dst_destroy+0x28e/0x380 [ 169.988088][ C1] ? kasan_quarantine_put+0xd4/0x220 [ 169.993388][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 169.998648][ C1] ? dst_destroy+0x28e/0x380 [ 170.003292][ C1] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 170.008983][ C1] ? dst_destroy+0x28e/0x380 [ 170.013592][ C1] kmem_cache_free+0x1ce/0x1f0 [ 170.018414][ C1] dst_destroy+0x28e/0x380 [ 170.022846][ C1] ? dst_release+0xe0/0xe0 [ 170.027313][ C1] rcu_core+0xa15/0x1650 [ 170.031577][ C1] ? local_bh_disable+0x20/0x20 [ 170.036432][ C1] ? memset+0x1f/0x40 [ 170.040466][ C1] ? __run_timers+0x814/0x890 [ 170.045173][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 170.051219][ C1] ? detach_timer+0x2f0/0x2f0 [ 170.055926][ C1] handle_softirqs+0x3a7/0x930 [ 170.060744][ C1] ? __irq_exit_rcu+0x157/0x240 [ 170.065617][ C1] ? do_softirq+0x240/0x240 [ 170.070195][ C1] ? hrtimer_interrupt+0x76b/0x980 [ 170.075332][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 170.080611][ C1] __irq_exit_rcu+0x157/0x240 [ 170.085301][ C1] ? irq_exit_rcu+0x20/0x20 [ 170.089971][ C1] irq_exit_rcu+0x5/0x20 [ 170.094353][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 170.100079][ C1] [ 170.103017][ C1] [ 170.105958][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 170.112112][ C1] RIP: 0010:mutex_spin_on_owner+0x19d/0x370 [ 170.118057][ C1] Code: 00 0f 85 94 01 00 00 4d 89 f4 4c 8b 74 24 10 4c 89 fd 48 8b 44 24 48 42 0f b6 04 38 84 c0 0f 85 38 01 00 00 48 8b 04 24 8b 18 <48> 8b 44 24 40 80 3c 28 00 74 0c 48 c7 c7 10 29 79 8c e8 3c 52 68 [ 170.137737][ C1] RSP: 0018:ffffc90003067af8 EFLAGS: 00000246 [ 170.143822][ C1] RAX: ffff88802831bbc8 RBX: 0000000000000000 RCX: ffffffff8161ea64 [ 170.151888][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888028659dc0 [ 170.159921][ C1] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed10050cb3b9 [ 170.167979][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802831bb80 [ 170.175964][ C1] R13: ffffffff8da321b0 R14: 0000000000000010 R15: dffffc0000000000 [ 170.184031][ C1] ? mutex_spin_on_owner+0x154/0x370 [ 170.189390][ C1] ? mutex_spin_on_owner+0x154/0x370 [ 170.194707][ C1] mutex_optimistic_spin+0x38/0x300 [ 170.199978][ C1] __mutex_lock_common+0xed4/0x25a0 [ 170.205200][ C1] ? __tun_chr_ioctl+0x460/0x2270 [ 170.210312][ C1] ? mutex_lock_io_nested+0x60/0x60 [ 170.215531][ C1] ? __might_fault+0xb4/0x110 [ 170.221515][ C1] mutex_lock_nested+0x17/0x20 [ 170.226298][ C1] __tun_chr_ioctl+0x460/0x2270 [ 170.231267][ C1] ? tun_flow_create+0x310/0x310 [ 170.236223][ C1] ? bpf_lsm_file_ioctl+0x5/0x10 [ 170.241202][ C1] ? security_file_ioctl+0x7d/0xa0 [ 170.246329][ C1] ? tun_chr_poll+0x620/0x620 [ 170.251080][ C1] __se_sys_ioctl+0xf1/0x160 [ 170.255689][ C1] do_syscall_64+0x3b/0xb0 [ 170.260161][ C1] ? clear_bhb_loop+0x15/0x70 [ 170.264848][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.270770][ C1] RIP: 0033:0x7fdcc5f64ff9 [ 170.275189][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.294842][ C1] RSP: 002b:00007fdcc43dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.303322][ C1] RAX: ffffffffffffffda RBX: 00007fdcc611cf80 RCX: 00007fdcc5f64ff9 [ 170.311342][ C1] RDX: 0000000020000140 RSI: 00000000400454ca RDI: 0000000000000006 [ 170.319361][ C1] RBP: 00007fdcc5fd7296 R08: 0000000000000000 R09: 0000000000000000 [ 170.327509][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.335501][ C1] R13: 0000000000000000 R14: 00007fdcc611cf80 R15: 00007ffebb7a64d8 [ 170.343556][ C1] [ 170.346598][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 170.353858][ C1] CPU: 1 PID: 4437 Comm: syz.3.213 Not tainted 5.15.168-syzkaller #0 [ 170.361901][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 170.371933][ C1] Call Trace: [ 170.375191][ C1] [ 170.378013][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 170.382671][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 170.388276][ C1] ? panic+0x860/0x860 [ 170.392340][ C1] ? copy_from_user_nofault+0x110/0x1c0 [ 170.397867][ C1] ? copy_from_user_nofault+0x110/0x1c0 [ 170.403421][ C1] panic+0x318/0x860 [ 170.407314][ C1] ? __warn+0x16a/0x300 [ 170.411450][ C1] ? fb_is_primary_device+0xd0/0xd0 [ 170.416636][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 170.422154][ C1] __warn+0x2b2/0x300 [ 170.426150][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 170.431675][ C1] report_bug+0x1b7/0x2e0 [ 170.435987][ C1] handle_bug+0x3d/0x70 [ 170.440121][ C1] exc_invalid_op+0x16/0x40 [ 170.444602][ C1] asm_exc_invalid_op+0x16/0x20 [ 170.449437][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 170.455599][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 fb c7 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e4 c7 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 170.475202][ C1] RSP: 0018:ffffc90000dd09a8 EFLAGS: 00010246 [ 170.481250][ C1] RAX: ffffffff81aaab4c RBX: 0000000000000000 RCX: ffff888028659dc0 [ 170.489197][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.497148][ C1] RBP: dffffc0000000000 R08: ffffffff81aaaa5d R09: fffffbfff20ec621 [ 170.505118][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 170.513091][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90000dd0a08 [ 170.521047][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 170.526484][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 170.532008][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 170.537533][ C1] bpf_probe_read_user+0x26/0x70 [ 170.542465][ C1] bpf_prog_7e47b8e39696360c+0x32/0x644 [ 170.548377][ C1] bpf_trace_run3+0x1d1/0x380 [ 170.553057][ C1] ? bpf_trace_run2+0x340/0x340 [ 170.557909][ C1] ? dst_destroy+0x28e/0x380 [ 170.562539][ C1] ? kasan_quarantine_put+0xd4/0x220 [ 170.567807][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 170.572991][ C1] ? dst_destroy+0x28e/0x380 [ 170.577583][ C1] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 170.583196][ C1] ? dst_destroy+0x28e/0x380 [ 170.587772][ C1] kmem_cache_free+0x1ce/0x1f0 [ 170.592517][ C1] dst_destroy+0x28e/0x380 [ 170.596919][ C1] ? dst_release+0xe0/0xe0 [ 170.601318][ C1] rcu_core+0xa15/0x1650 [ 170.605575][ C1] ? local_bh_disable+0x20/0x20 [ 170.610423][ C1] ? memset+0x1f/0x40 [ 170.614401][ C1] ? __run_timers+0x814/0x890 [ 170.619080][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 170.625036][ C1] ? detach_timer+0x2f0/0x2f0 [ 170.629712][ C1] handle_softirqs+0x3a7/0x930 [ 170.634474][ C1] ? __irq_exit_rcu+0x157/0x240 [ 170.639306][ C1] ? do_softirq+0x240/0x240 [ 170.643782][ C1] ? hrtimer_interrupt+0x76b/0x980 [ 170.649236][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 170.654442][ C1] __irq_exit_rcu+0x157/0x240 [ 170.659117][ C1] ? irq_exit_rcu+0x20/0x20 [ 170.663631][ C1] irq_exit_rcu+0x5/0x20 [ 170.667864][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 170.673497][ C1] [ 170.676426][ C1] [ 170.679348][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 170.685311][ C1] RIP: 0010:mutex_spin_on_owner+0x19d/0x370 [ 170.691205][ C1] Code: 00 0f 85 94 01 00 00 4d 89 f4 4c 8b 74 24 10 4c 89 fd 48 8b 44 24 48 42 0f b6 04 38 84 c0 0f 85 38 01 00 00 48 8b 04 24 8b 18 <48> 8b 44 24 40 80 3c 28 00 74 0c 48 c7 c7 10 29 79 8c e8 3c 52 68 [ 170.710822][ C1] RSP: 0018:ffffc90003067af8 EFLAGS: 00000246 [ 170.716876][ C1] RAX: ffff88802831bbc8 RBX: 0000000000000000 RCX: ffffffff8161ea64 [ 170.724826][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888028659dc0 [ 170.732797][ C1] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed10050cb3b9 [ 170.740744][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802831bb80 [ 170.748697][ C1] R13: ffffffff8da321b0 R14: 0000000000000010 R15: dffffc0000000000 [ 170.756672][ C1] ? mutex_spin_on_owner+0x154/0x370 [ 170.761950][ C1] ? mutex_spin_on_owner+0x154/0x370 [ 170.767238][ C1] mutex_optimistic_spin+0x38/0x300 [ 170.772504][ C1] __mutex_lock_common+0xed4/0x25a0 [ 170.777686][ C1] ? __tun_chr_ioctl+0x460/0x2270 [ 170.782686][ C1] ? mutex_lock_io_nested+0x60/0x60 [ 170.787866][ C1] ? __might_fault+0xb4/0x110 [ 170.792532][ C1] mutex_lock_nested+0x17/0x20 [ 170.797275][ C1] __tun_chr_ioctl+0x460/0x2270 [ 170.802144][ C1] ? tun_flow_create+0x310/0x310 [ 170.807080][ C1] ? bpf_lsm_file_ioctl+0x5/0x10 [ 170.811996][ C1] ? security_file_ioctl+0x7d/0xa0 [ 170.817084][ C1] ? tun_chr_poll+0x620/0x620 [ 170.821740][ C1] __se_sys_ioctl+0xf1/0x160 [ 170.826313][ C1] do_syscall_64+0x3b/0xb0 [ 170.830709][ C1] ? clear_bhb_loop+0x15/0x70 [ 170.835359][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.841339][ C1] RIP: 0033:0x7fdcc5f64ff9 [ 170.845732][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.865340][ C1] RSP: 002b:00007fdcc43dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.873755][ C1] RAX: ffffffffffffffda RBX: 00007fdcc611cf80 RCX: 00007fdcc5f64ff9 [ 170.881704][ C1] RDX: 0000000020000140 RSI: 00000000400454ca RDI: 0000000000000006 [ 170.889651][ C1] RBP: 00007fdcc5fd7296 R08: 0000000000000000 R09: 0000000000000000 [ 170.897601][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.905571][ C1] R13: 0000000000000000 R14: 00007fdcc611cf80 R15: 00007ffebb7a64d8 [ 170.913547][ C1] [ 170.916663][ C1] Kernel Offset: disabled [ 170.921131][ C1] Rebooting in 86400 seconds..