last executing test programs: 6.790772603s ago: executing program 1 (id=6): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000100)=@rose) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x83f, &(0x7f0000000180)={0x0, 0xadfa, 0x100, 0x3, 0x8002ab}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r6, 0x3516, 0x0, 0x2, 0x0, 0x0) 5.479918381s ago: executing program 1 (id=7): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 5.355646563s ago: executing program 0 (id=1): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2749b71bd7663be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98dcb6f2abd71e7b9f470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c1f870adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee9889751cd7c86c3c9b8ff31043965b56bea2dbee528678eb47efb7a3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff3698422f88ffed63c6dd64330f4c38ba86a3b50da03f4b1e4808aa5c9e9546d7190747c6abc5bc89da8bad11ca7f91c6ab28cec4ff7faa3fab49cdb3d64cfd5d698416752a16f32a54ccef577832e4cf684fce2cb0bab7f6a5821b26483322263b2e6f4c9b81e7eddb26d7b5b003e874acdcc771516133b866a3303c9dc210ea014785547e0ba97dfb45b5775cc2c5e880d7da37de8afb5fda8f1d455e8f1455fb76d5bab21aea9d24f64a95b9ba6dde17af422930c8d8788f6a5b8ebb5f249bafbad1"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) 5.253001765s ago: executing program 3 (id=4): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x7, 0xfffffffffffffffc}]}, &(0x7f0000000700)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) 5.183753126s ago: executing program 0 (id=8): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x3, 0x0, &(0x7f0000001080)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0x0, 0xffffffffffffffff, 0xee01) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='syscall\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 5.183068616s ago: executing program 3 (id=9): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)={[{}]}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 4.409499736s ago: executing program 1 (id=10): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x80000000000}, 0xfd4d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='veno\x00', 0x5) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r4) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000000e00), 0x0, 0x2000c051) recvmmsg(r5, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0) 4.290908148s ago: executing program 2 (id=3): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@struct={0x3, 0x0, 0x0, 0x4, 0x1, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x1}]}]}, {0x0, [0x2e, 0x2e, 0x5f]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) 3.609606638s ago: executing program 4 (id=5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "2dc3fa5474cf6690", "50822f05ed000000000000edc5151b4a", "b2356f41", "06b950e7846e2394"}, 0x28) 3.531870449s ago: executing program 2 (id=11): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4008044) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000ac0)={0x2, 'bond_slave_1\x00', 0x1}, 0x18) 3.47536251s ago: executing program 1 (id=12): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) 2.06027966s ago: executing program 2 (id=13): r0 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}}, 0x0, 0x0, 0x0) 2.05953374s ago: executing program 0 (id=14): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x40a4, &(0x7f0000000180)=ANY=[@ANYBLOB="626172726965722c6372843ecbdda9f132dd908b4c422c6561746f723d30c6da432c64", @ANYRESHEX=0x0, @ANYBLOB=',nls=cp869,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00cda88eeb646000000000000000801658ce0f9934b742a306036dc0b12a28db4c7ec38aff23528c0cd914221851f22c6d7152cd"], 0x0, 0x5c8, &(0x7f0000005440)="$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") close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x4000804) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x1a, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x20000000) setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB="06"], 0x2, 0x1) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, 0x0, 0x0, 0x4000004, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000480)={0x408, 0x3, 0x0, 0xfffc, 0x1a, "4415264a100046001113fb235902af2556c6b6"}) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r7, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 2.0592371s ago: executing program 4 (id=15): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000300000000000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x40a4, &(0x7f0000000180)=ANY=[@ANYBLOB="626172726965722c6372843ecbdda9f132dd908b4c422c6561746f723d30c6da432c64", @ANYRESHEX=0x0, @ANYBLOB=',nls=cp869,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00cda88eeb646000000000000000801658ce0f9934b742a306036dc0b12a28db4c7ec38aff23528c0cd914221851f22c6d7152cd"], 0x0, 0x5c8, &(0x7f0000005440)="$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") close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x4000804) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x1a, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}}, 0x20000000) setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[@ANYBLOB="06"], 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000480)={0x408, 0x3, 0x0, 0xfffc, 0x1a, "4415264a100046001113fb235902af2556c6b6"}) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xd0, 0x3ed, 0x8, 0x70bd2d, 0x25dfdbfb, "330efcb7b242bc09f9e9af56b80d1dc6eacc7492b0b34dacd925574272217c5ce2972e5c9e5fa8b18ea662cb1811780be108dc57920e9896f89459cf04fa86ee6c4d321e8ab875574435969dd9a02b72fbc8746c1e30bc6c44cbd32310b71023e956cd3e2e2af212a838e50c01acaabf3bc07b18829623daeeb598f41b26e4413f1a4e93f048bba75300c79b9cf4d02a9954369cb273edd6a9238bd76cb7770757e51cb56468138fcb054283ad9161c7c762e7e856f7af4bf772ffeb782ba9", ["", "", ""]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) 2.030918961s ago: executing program 3 (id=16): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000100)=@rose) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x83f, &(0x7f0000000180)={0x0, 0xadfa, 0x100, 0x3, 0x8002ab}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r6, 0x3516, 0x0, 0x2, 0x0, 0x0) 1.967541022s ago: executing program 1 (id=17): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e28, @rand_addr=0x64010100}, {0x2, 0x4e21, @rand_addr=0x64010102}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, 0x802}) 1.695667176s ago: executing program 1 (id=18): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 167.653917ms ago: executing program 2 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount$tmpfs(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x100000, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000080)=0xc, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000c80)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8900f9", 0x1c, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x9, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x5, 0x76a, 0x4, "b0"}]}}}}}}}}, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x2000040, &(0x7f00000000c0)={[{@codepage={'codepage', 0x3d, 'cp949'}}, {@uid}, {@gid={'gid', 0x3d, 0xee01}}]}, 0x1, 0x302, &(0x7f00000008c0)="$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") 0s ago: executing program 3 (id=20): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = dup(r0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. [ 34.571958][ T4296] cgroup: Unknown subsys name 'net' [ 34.802156][ T4296] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.116442][ T4296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 36.273809][ T4311] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.282381][ T4315] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.285164][ T4315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.288099][ T4315] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.293032][ T4315] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.295502][ T4315] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.298999][ T4315] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.299178][ T4321] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.303338][ T4315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.303613][ T4321] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.305441][ T4315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.308050][ T4322] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.312289][ T4315] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.312601][ T4323] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.314680][ T4315] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.320252][ T4315] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.322430][ T4315] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.322503][ T4321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.324723][ T4315] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.327595][ T4321] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.329225][ T4315] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.331101][ T4321] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 36.332856][ T4315] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.334684][ T4321] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.339720][ T4322] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.349528][ T4315] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.350690][ T4323] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.354424][ T4323] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.356792][ T4323] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.361492][ T4323] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.529347][ T4306] chnl_net:caif_netlink_parms(): no params data found [ 36.624293][ T4313] chnl_net:caif_netlink_parms(): no params data found [ 36.644620][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.646679][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.650604][ T4306] device bridge_slave_0 entered promiscuous mode [ 36.679219][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.681218][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.683785][ T4306] device bridge_slave_1 entered promiscuous mode [ 36.693706][ T4314] chnl_net:caif_netlink_parms(): no params data found [ 36.711821][ T4306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.718825][ T4306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.752692][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.754905][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.757957][ T4313] device bridge_slave_0 entered promiscuous mode [ 36.769076][ T4306] team0: Port device team_slave_0 added [ 36.777061][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.779583][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.782226][ T4313] device bridge_slave_1 entered promiscuous mode [ 36.785573][ T4306] team0: Port device team_slave_1 added [ 36.790576][ T4307] chnl_net:caif_netlink_parms(): no params data found [ 36.841797][ T4313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.846558][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.848924][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.856166][ T4306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.865895][ T4313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.876655][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.879041][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.886108][ T4306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.889824][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.891824][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.894368][ T4314] device bridge_slave_0 entered promiscuous mode [ 36.898110][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.900043][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.902711][ T4314] device bridge_slave_1 entered promiscuous mode [ 36.945155][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.947339][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.950014][ T4307] device bridge_slave_0 entered promiscuous mode [ 36.958519][ T4313] team0: Port device team_slave_0 added [ 36.960401][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 36.971779][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.973778][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.976297][ T4307] device bridge_slave_1 entered promiscuous mode [ 36.981035][ T4314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.990397][ T4313] team0: Port device team_slave_1 added [ 37.079088][ T4306] device hsr_slave_0 entered promiscuous mode [ 37.137509][ T4306] device hsr_slave_1 entered promiscuous mode [ 37.179167][ T4314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.213453][ T4307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.221113][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.223058][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.230537][ T4313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.238287][ T4314] team0: Port device team_slave_0 added [ 37.241032][ T4307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.244635][ T4314] team0: Port device team_slave_1 added [ 37.253838][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.255765][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.267233][ T4313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.309674][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.311600][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.318860][ T4314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.322535][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.324752][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.327968][ T4319] device bridge_slave_0 entered promiscuous mode [ 37.332709][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.334646][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.337590][ T4319] device bridge_slave_1 entered promiscuous mode [ 37.343471][ T4307] team0: Port device team_slave_0 added [ 37.345740][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.348323][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.355139][ T4314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.370116][ T4307] team0: Port device team_slave_1 added [ 37.402182][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.404184][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.411795][ T4307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.469529][ T4313] device hsr_slave_0 entered promiscuous mode [ 37.497449][ T4313] device hsr_slave_1 entered promiscuous mode [ 37.537264][ T4313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.539608][ T4313] Cannot create hsr debugfs directory [ 37.543133][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.557896][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.559794][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.566978][ T4307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.585397][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.633469][ T4319] team0: Port device team_slave_0 added [ 37.636386][ T4319] team0: Port device team_slave_1 added [ 37.699015][ T4314] device hsr_slave_0 entered promiscuous mode [ 37.737608][ T4314] device hsr_slave_1 entered promiscuous mode [ 37.777218][ T4314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.779411][ T4314] Cannot create hsr debugfs directory [ 37.839257][ T4307] device hsr_slave_0 entered promiscuous mode [ 37.877759][ T4307] device hsr_slave_1 entered promiscuous mode [ 37.917193][ T4307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.919265][ T4307] Cannot create hsr debugfs directory [ 37.932775][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.934638][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.941951][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.968749][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.970747][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.978388][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.048329][ T4306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.132603][ T4306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.179200][ T4306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.223663][ T4306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.318981][ T4319] device hsr_slave_0 entered promiscuous mode [ 38.348224][ T4323] Bluetooth: hci4: command 0x0409 tx timeout [ 38.348233][ T4322] Bluetooth: hci0: command 0x0409 tx timeout [ 38.348376][ T4322] Bluetooth: hci1: command 0x0409 tx timeout [ 38.357438][ T4319] device hsr_slave_1 entered promiscuous mode [ 38.407225][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.409358][ T4319] Cannot create hsr debugfs directory [ 38.427211][ T4322] Bluetooth: hci2: command 0x0409 tx timeout [ 38.427293][ T4312] Bluetooth: hci3: command 0x0409 tx timeout [ 38.469701][ T4313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.556193][ T4313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.612910][ T4313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.661092][ T4313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.763516][ T4307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.796656][ T4307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.840636][ T4307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.882174][ T4307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.978507][ T4314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.013685][ T4314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.062973][ T4306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.065116][ T4314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.099074][ T4314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.151424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.155321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.169052][ T4319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.209494][ T4319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.268931][ T4319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.310125][ T4306] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.319113][ T4319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.377006][ T4313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.379367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.383085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.386342][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.388450][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.391898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.394511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.397132][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.399190][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.412338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.429994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.433169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.435686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.441448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.452747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.456021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.459813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.473547][ T4313] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.483284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.486185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.489326][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.491281][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.494162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.497056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.500081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.506507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.511098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.533613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.536501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.540140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.542820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.545389][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.547491][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.554980][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.562211][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.570279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.581646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.596189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.599818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.602328][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.605668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.609047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.615265][ T4307] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.630513][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.633853][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.636759][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.645014][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.665587][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.668988][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.671750][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.673688][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.675985][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.685103][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.688969][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.690901][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.694497][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.702605][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.705471][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.716285][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.719670][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.722471][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.726087][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.729819][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.742427][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.744564][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.752794][ T4314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.765363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.768778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.786293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.790387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.793072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.796161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.802888][ T4314] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.807047][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.812845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.815452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.820289][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.832858][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.835021][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.838099][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.840632][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.842587][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.852359][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.855419][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.859533][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.862160][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.864054][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.882154][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.885093][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.893516][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.903030][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.906087][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.912474][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.924943][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.938363][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.941067][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.944664][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.948971][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.951403][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.962990][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.966243][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.980504][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.983286][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.986516][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.990466][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.002423][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.005182][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.009589][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.011576][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.014075][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.016858][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.020459][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.022539][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.024958][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.029842][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.032461][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.035963][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.041339][ T4306] device veth0_vlan entered promiscuous mode [ 40.053287][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.055843][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.060906][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.063744][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.066446][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.073441][ T4306] device veth1_vlan entered promiscuous mode [ 40.082402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.084951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.088303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.096934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.100354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.102504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.106576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.112124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.131138][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.142056][ T4313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.162509][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.165235][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.177540][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.180312][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.198165][ T4306] device veth0_macvtap entered promiscuous mode [ 40.200698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.203276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.206054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.210599][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.220798][ T4306] device veth1_macvtap entered promiscuous mode [ 40.236443][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.239567][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.241821][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.243899][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.246693][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.272737][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.281539][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.284299][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.288637][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.291358][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.294416][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.296909][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.305435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.309920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.326156][ T4314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.336560][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.343216][ T4306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.345762][ T4306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.349490][ T4306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.351851][ T4306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.356232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.359686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.362355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.365140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.370286][ T4307] device veth0_vlan entered promiscuous mode [ 40.378478][ T4313] device veth0_vlan entered promiscuous mode [ 40.385002][ T4313] device veth1_vlan entered promiscuous mode [ 40.393825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.396525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.400281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.404389][ T4307] device veth1_vlan entered promiscuous mode [ 40.415398][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.420888][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.423753][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.427505][ T4323] Bluetooth: hci1: command 0x041b tx timeout [ 40.429177][ T4323] Bluetooth: hci4: command 0x041b tx timeout [ 40.430817][ T4323] Bluetooth: hci0: command 0x041b tx timeout [ 40.444605][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.448298][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.452230][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.454882][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.472494][ T4314] device veth0_vlan entered promiscuous mode [ 40.483111][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.492435][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.495130][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.505096][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.507611][ T4312] Bluetooth: hci2: command 0x041b tx timeout [ 40.508930][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.517997][ T4323] Bluetooth: hci3: command 0x041b tx timeout [ 40.531479][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.534310][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.549579][ T4313] device veth0_macvtap entered promiscuous mode [ 40.552138][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.558559][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.561324][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.586271][ T4307] device veth0_macvtap entered promiscuous mode [ 40.592874][ T4314] device veth1_vlan entered promiscuous mode [ 40.603694][ T4313] device veth1_macvtap entered promiscuous mode [ 40.631090][ T4307] device veth1_macvtap entered promiscuous mode [ 40.656140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.660582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.663096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.666260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.674563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.679258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.682236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.686451][ T4314] device veth0_macvtap entered promiscuous mode [ 40.695663][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.699046][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.700926][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.703337][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.704103][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.709519][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.712372][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.715163][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.723276][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.732901][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.737940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.740517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.743069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.745816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.749557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.752340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.761316][ T4314] device veth1_macvtap entered promiscuous mode [ 40.770317][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.773285][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.778144][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.786264][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.789571][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.792670][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.795779][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.798825][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.801510][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.805307][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.810273][ T4313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.812536][ T4313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.814761][ T4313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.818381][ T4313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.835402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.839853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.850113][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.853152][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.855974][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.859750][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.862400][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.865363][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.870716][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.874402][ T4307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.876788][ T4307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.880767][ T4307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.883214][ T4307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.894680][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.897689][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.901704][ T288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.903956][ T288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.913515][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.916488][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.924907][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.928384][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.931077][ T4314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.933901][ T4314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.937730][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.941390][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.943995][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.946656][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.950039][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.953120][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.029450][ T4314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.031889][ T4314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.034350][ T4314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.036699][ T4314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.044272][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.047037][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.050048][ T1667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.052277][ T1667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.064061][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.066669][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.070419][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.075059][ T4319] device veth0_vlan entered promiscuous mode [ 41.096228][ T4319] device veth1_vlan entered promiscuous mode [ 41.118997][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.121262][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.124454][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.133510][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.167461][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.169875][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.173353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.176106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.203639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.206454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.214123][ T4319] device veth0_macvtap entered promiscuous mode [ 41.220634][ T4419] loop1: detected capacity change from 0 to 1024 [ 41.263796][ T4319] device veth1_macvtap entered promiscuous mode [ 41.296508][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.308355][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.311059][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.314647][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.333540][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.336445][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.339473][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.342487][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.347916][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.351573][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.354435][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.357588][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.360517][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.363263][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.366272][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.376168][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.380850][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.384935][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.401111][ T4319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.403793][ T4319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.406364][ T4319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.412730][ T4319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.501341][ T1667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.503637][ T1667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.509575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.512258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.514831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.520504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.523312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.526055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.530031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.222509][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.240785][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.515392][ T4312] Bluetooth: hci0: command 0x040f tx timeout [ 42.517326][ T4312] Bluetooth: hci4: command 0x040f tx timeout [ 42.518992][ T4312] Bluetooth: hci1: command 0x040f tx timeout [ 42.597314][ T4323] Bluetooth: hci3: command 0x040f tx timeout [ 42.599168][ T4323] Bluetooth: hci2: command 0x040f tx timeout [ 42.633327][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.709849][ T4432] binder: 4431:4432 ioctl c0306201 0 returned -14 [ 42.711850][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.714097][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.714642][ T4423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.717376][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.718885][ T4423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.723159][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.789559][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 42.794079][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.796200][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.800870][ T4434] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 42.974692][ T4441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.981366][ T4441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.004697][ T4442] binder: 4431:4442 ioctl c0306201 0 returned -14 [ 43.693202][ T288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.695510][ T288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.733525][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.929044][ T4446] Cannot find add_set index 0 as target [ 44.632239][ T4312] Bluetooth: hci1: command 0x0419 tx timeout [ 44.635091][ T4323] Bluetooth: hci4: command 0x0419 tx timeout [ 44.637553][ T4322] Bluetooth: hci0: command 0x0419 tx timeout [ 44.727045][ T4311] Bluetooth: hci2: command 0x0419 tx timeout [ 44.729165][ T4311] Bluetooth: hci3: command 0x0419 tx timeout [ 46.074595][ T4467] loop2: detected capacity change from 0 to 1024 [ 46.163797][ T4469] loop0: detected capacity change from 0 to 1024 [ 46.215731][ T4472] loop4: detected capacity change from 0 to 1024 [ 46.373437][ T4469] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 47.978216][ T55] hfsplus: b-tree write err: -5, ino 4 [ 48.014226][ T4491] binder: 4488:4491 ioctl c0306201 0 returned -14 [ 48.017441][ T4298] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.200727][ T4469] ================================================================== [ 48.202985][ T4469] BUG: KASAN: use-after-free in rose_transmit_link+0x4f8/0x66c [ 48.204971][ T4469] Read of size 1 at addr ffff0000d087a432 by task syz.0.14/4469 [ 48.206991][ T4469] [ 48.207644][ T4469] CPU: 0 PID: 4469 Comm: syz.0.14 Not tainted 6.1.145-syzkaller #0 [ 48.209849][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.212584][ T4469] Call trace: [ 48.213548][ T4469] dump_backtrace+0x1c8/0x1f4 [ 48.214861][ T4469] show_stack+0x2c/0x3c [ 48.216062][ T4469] __dump_stack+0x30/0x40 [ 48.217261][ T4469] dump_stack_lvl+0xf8/0x160 [ 48.218655][ T4469] print_address_description+0x88/0x220 [ 48.220197][ T4469] print_report+0x50/0x68 [ 48.221340][ T4469] kasan_report+0xa8/0x100 [ 48.222598][ T4469] __asan_report_load1_noabort+0x2c/0x38 [ 48.224207][ T4469] rose_transmit_link+0x4f8/0x66c [ 48.225634][ T4469] rose_write_internal+0xeec/0x17c0 [ 48.227128][ T4469] rose_release+0x224/0x518 [ 48.228400][ T4469] sock_close+0xb4/0x1f8 [ 48.229626][ T4469] __fput+0x1bc/0x7c0 [ 48.230684][ T4469] ____fput+0x20/0x30 [ 48.231820][ T4469] task_work_run+0x1ec/0x270 [ 48.233163][ T4469] get_signal+0x1120/0x1310 [ 48.234378][ T4469] do_notify_resume+0x340/0x2b0c [ 48.235740][ T4469] el0_svc+0x98/0x138 [ 48.236883][ T4469] el0t_64_sync_handler+0x84/0xf0 [ 48.238284][ T4469] el0t_64_sync+0x18c/0x190 [ 48.239533][ T4469] [ 48.240165][ T4469] Allocated by task 4469: [ 48.241405][ T4469] kasan_set_track+0x4c/0x80 [ 48.242769][ T4469] kasan_save_alloc_info+0x28/0x34 [ 48.244225][ T4469] __kasan_kmalloc+0xa0/0xb8 [ 48.245481][ T4469] kmalloc_trace+0x7c/0x94 [ 48.246712][ T4469] rose_add_node+0x1f4/0xba4 [ 48.248058][ T4469] rose_rt_ioctl+0xa04/0xde4 [ 48.249321][ T4469] rose_ioctl+0x378/0xb80 [ 48.250499][ T4469] sock_do_ioctl+0xf8/0x240 [ 48.251778][ T4469] sock_ioctl+0x5c4/0x840 [ 48.252985][ T4469] __arm64_sys_ioctl+0x14c/0x1c8 [ 48.254414][ T4469] invoke_syscall+0x98/0x2bc [ 48.255736][ T4469] el0_svc_common+0x138/0x258 [ 48.257055][ T4469] do_el0_svc+0x58/0x13c [ 48.258223][ T4469] el0_svc+0x58/0x138 [ 48.259365][ T4469] el0t_64_sync_handler+0x84/0xf0 [ 48.260743][ T4469] el0t_64_sync+0x18c/0x190 [ 48.261995][ T4469] [ 48.262633][ T4469] Freed by task 4472: [ 48.263700][ T4469] kasan_set_track+0x4c/0x80 [ 48.264974][ T4469] kasan_save_free_info+0x3c/0x60 [ 48.266417][ T4469] ____kasan_slab_free+0x148/0x1b0 [ 48.267877][ T4469] __kasan_slab_free+0x18/0x28 [ 48.269240][ T4469] slab_free_freelist_hook+0x16c/0x1ec [ 48.270758][ T4469] __kmem_cache_free+0xc0/0x224 [ 48.272150][ T4469] kfree+0xd0/0x1ac [ 48.273253][ T4469] rose_remove_neigh+0x23c/0x2b8 [ 48.274662][ T4469] rose_rt_device_down+0x2d4/0x330 [ 48.276093][ T4469] rose_device_event+0x5d8/0x68c [ 48.277492][ T4469] raw_notifier_call_chain+0xd4/0x164 [ 48.279007][ T4469] __dev_notify_flags+0x250/0x46c [ 48.280403][ T4469] dev_change_flags+0xc8/0x154 [ 48.281780][ T4469] dev_ifsioc+0x524/0xed0 [ 48.283044][ T4469] dev_ioctl+0x4c8/0xc8c [ 48.284262][ T4469] sock_do_ioctl+0x18c/0x240 [ 48.285540][ T4469] sock_ioctl+0x5c4/0x840 [ 48.286808][ T4469] __arm64_sys_ioctl+0x14c/0x1c8 [ 48.288236][ T4469] invoke_syscall+0x98/0x2bc [ 48.289554][ T4469] el0_svc_common+0x138/0x258 [ 48.290869][ T4469] do_el0_svc+0x58/0x13c [ 48.292109][ T4469] el0_svc+0x58/0x138 [ 48.293304][ T4469] el0t_64_sync_handler+0x84/0xf0 [ 48.294784][ T4469] el0t_64_sync+0x18c/0x190 [ 48.296159][ T4469] [ 48.296783][ T4469] The buggy address belongs to the object at ffff0000d087a400 [ 48.296783][ T4469] which belongs to the cache kmalloc-512 of size 512 [ 48.300765][ T4469] The buggy address is located 50 bytes inside of [ 48.300765][ T4469] 512-byte region [ffff0000d087a400, ffff0000d087a600) [ 48.304645][ T4469] [ 48.305249][ T4469] The buggy address belongs to the physical page: [ 48.307065][ T4469] page:00000000fc59283f refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110878 [ 48.310007][ T4469] head:00000000fc59283f order:2 compound_mapcount:0 compound_pincount:0 [ 48.312415][ T4469] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 48.314616][ T4469] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002600 [ 48.317020][ T4469] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 48.319453][ T4469] page dumped because: kasan: bad access detected [ 48.321231][ T4469] [ 48.321909][ T4469] Memory state around the buggy address: [ 48.323467][ T4469] ffff0000d087a300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.325820][ T4469] ffff0000d087a380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.328069][ T4469] >ffff0000d087a400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.330348][ T4469] ^ [ 48.331975][ T4469] ffff0000d087a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.334302][ T4469] ffff0000d087a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.336520][ T4469] ================================================================== [ 48.405426][ T4497] binder: 4488:4497 ioctl c0306201 0 returned -14 [ 49.171175][ T4469] Disabling lock debugging due to kernel taint [ 49.176473][ T4469] ------------[ cut here ]------------ [ 49.178193][ T4469] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x344 [ 49.184653][ T4469] WARNING: CPU: 1 PID: 4469 at lib/debugobjects.c:518 debug_print_object+0x148/0x1d4 [ 49.187213][ T4469] Modules linked in: [ 49.188285][ T4469] CPU: 1 PID: 4469 Comm: syz.0.14 Tainted: G B 6.1.145-syzkaller #0 [ 49.190895][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.193590][ T4469] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 49.195709][ T4469] pc : debug_print_object+0x148/0x1d4 [ 49.197255][ T4469] lr : debug_print_object+0x148/0x1d4 [ 49.198709][ T4469] sp : ffff8000213b7620 [ 49.199906][ T4469] x29: ffff8000213b7620 x28: dfff800000000000 x27: 0000000000000000 [ 49.202041][ T4469] x26: ffff8000150b0000 x25: ffff8000083ae084 x24: dfff800000000000 [ 49.204313][ T4469] x23: 0000000000000000 x22: ffff800010ac79bc x21: ffff800011f9a480 [ 49.206571][ T4469] x20: ffff800011acad00 x19: ffff800011f99fc0 x18: ffff800011aabce0 [ 49.208887][ T4469] x17: 1fffe00033eddf7e x16: ffff800008042c60 x15: 0000000040000000 [ 49.211134][ T4469] x14: 0000000000000002 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 49.213436][ T4469] x11: ff00800008047eec x10: 0000000040000002 x9 : 6310c98ff2c00700 [ 49.215686][ T4469] x8 : 6310c98ff2c00700 x7 : 0000000000000004 x6 : ffff800008251edc [ 49.217839][ T4469] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 49.220093][ T4469] x2 : ffff8000213b71c0 x1 : 0000000000000000 x0 : ffff800008251f70 [ 49.222276][ T4469] Call trace: [ 49.223234][ T4469] debug_print_object+0x148/0x1d4 [ 49.224629][ T4469] debug_object_assert_init+0x250/0x2c8 [ 49.226209][ T4469] timer_delete+0x48/0x1e8 [ 49.227486][ T4469] rose_transmit_link+0x43c/0x66c [ 49.228831][ T4469] rose_write_internal+0xeec/0x17c0 [ 49.230323][ T4469] rose_release+0x224/0x518 [ 49.231623][ T4469] sock_close+0xb4/0x1f8 [ 49.232845][ T4469] __fput+0x1bc/0x7c0 [ 49.233966][ T4469] ____fput+0x20/0x30 [ 49.235094][ T4469] task_work_run+0x1ec/0x270 [ 49.236408][ T4469] get_signal+0x1120/0x1310 [ 49.237682][ T4469] do_notify_resume+0x340/0x2b0c [ 49.239159][ T4469] el0_svc+0x98/0x138 [ 49.240278][ T4469] el0t_64_sync_handler+0x84/0xf0 [ 49.241693][ T4469] el0t_64_sync+0x18c/0x190 [ 49.242987][ T4469] irq event stamp: 5829 [ 49.244133][ T4469] hardirqs last enabled at (5829): [] finish_lock_switch+0xb0/0x1c4 [ 49.246953][ T4469] hardirqs last disabled at (5828): [] __schedule+0x298/0x1b2c [ 49.249794][ T4469] softirqs last enabled at (5808): [] lock_sock_nested+0xe0/0x130 [ 49.252445][ T4469] softirqs last disabled at (5806): [] lock_sock_nested+0x88/0x130 [ 49.255045][ T4469] ---[ end trace 0000000000000000 ]--- [ 49.807022][ T4507] loop2: detected capacity change from 0 to 64 [ 49.809221][ T4507] ======================================================= [ 49.809221][ T4507] WARNING: The mand mount option has been deprecated and [ 49.809221][ T4507] and is ignored by this kernel. Remove the mand [ 49.809221][ T4507] option from the mount to silence this warning. [ 49.809221][ T4507] =======================================================