last executing test programs: 909.91451ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x47}) 822.913903ms ago: executing program 0: syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810746, &(0x7f0000000000), 0x1, 0x47f, &(0x7f00000001c0)="$eJzs3c2LHEUfAOBf9+zm682biRq/YqKrUVxEd7ObqDkIoih4UBD0EI/rZg0xEyPJHkwIuorEowS8i0fBv8CTJ1FPghcPepdA0CAkiuBI93TvzszOzGaT2cxm53mgM13dtV1VU1U9NVXTJIChNZb9k0Rsj4hfIqLaCLZGGGu8XL18bvavy+dmk6jXX/s9yeNduXxutoxa/t3/isB4GpF+nEQsLE/39Jmzx2dqtblTRXhy/sS7k6fPnH3i2ImZo3NH596ZPnTo4IGpp5+afrJvZb2y+/2Te+596Y0Lr8wevvDm919l+b1rb3GuqRz1zf1Jbyx71/6o59rPPdKfJNaNf+tL5UxGBp0brlUlIrLqGs37fzUqsVR51Xjxo4FmDlhT2T27x8fdQh3YwJIYdA6AwSg/6LPvv+V2k4Ye68Kl5xpfgLJyXy22cjyUFq+ja5j+WEQcXvj782yL9nmIer2+dQ3TBgCG0zfZ+Ofx5eO/fG2kKV5SrA3tjIjbIuL2iLgjInZFxJ1F3Lsj4p5Vpj/WFl4+/kwvXmfRrkk2/numWNvKt9Ey/XL0FzsrRej/eflHk7eO1eb2R8SOiBiP0c1ZeKrTxctLvPDTp93Sbx7/ZVuWh3IsWFzk4kjbBN2RmfmZfg1KL30YsXukqfyL73+yuBJQruvtXt2ld5Q7xx77ck+3SCuXv4c+rDPVv4h4tFH/C9FS/i2LcZLe65OTW6I2t3+ybBXL/fDj+Ve7pX9D5e+DrP63RUv9t8Wo/pk0r9eeXn0a53/9pOt3ypGV239Eh/a/KXk9X7PeVBx7b2Z+/tRUxKbk5Tzccnx66W/LcBk/K//4vk7tP83vcVHU/30RkTXivRFxf0Q8UNTdgxHxUETs61H+755/+O1u59ZD/R+Jzv2/sLO1/le/Uzn+7ded0v652nhd+f53MN8bL47k978VdM9O2a+vtzUDAADArSeNiO2RpBOL+2k6MdH4Df+u2JbWTj67GHd7Y/4zLWe6qk3zoVNJ+SP/Rni6mCsuzx8o5o0/q2zNwxOzJ2tHBlZqIIpndTr1/8xvlUHnDlhznteC4dXe/9MB5QO4+Xz+w/DS/2F46f8wvDr1/w/awtYCYGPK+39yrRGBjUS3huGl/8Pw0v9hKN3Ic/3XuVPOJHaNM9Lj6f1bdifWRzaynUr04zqRrpPi1Gr/1FuObNmI7Wfp/8toTNT1jDzSh949sFsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAX/0XAAD//8cS53I=") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000380)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) 768.118641ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) syz_emit_ethernet(0x8c, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb0004dc01"], 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff000085410500", @ANYBLOB='$'], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/4080, 0xff0}}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) 528.060429ms ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 518.68975ms ago: executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth1_to_bridge\x00', &(0x7f0000000440)=@ethtool_gstrings={0x1b, 0x4}}) 469.055688ms ago: executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)="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", 0x600, 0xc000001, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000014c0)={0x1f, 0x0, @none}, &(0x7f0000001500)=0xe, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001600)={'veth0_to_team\x00', {0x2, 0x4e22, @private=0xa010100}}) sendmsg$key(r0, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f00000015c0)={0x40000002}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000100), 0x14) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f00000000c0), 0x4) 391.12007ms ago: executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18}, 0x18}}, 0x0) 388.51085ms ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x30, r2, 0x135, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "7ecbad144922f925"}}]}, 0x30}}, 0x0) 349.845576ms ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) memfd_create(&(0x7f00000003c0)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\x950\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x01\x00\x00\x00\xa3\xb9\xff\xff\xebw\xdeM\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x00\x00v\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\x00\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\x18\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x9d\x8e\x0f\x14Uc\x15n\xd5!}\x00+\xa5\xdcxUY3\x9b\xe7\xa1\x95\xc8\xf4G\xc3G\xf0\xed+\xa4\xec~7\xf3\"\x9c\x9e\xfaN\xc5\x8cM\xa7D\xb5\xe5\xfb\xda\xbc\x8a\xdc\x8adI\r\fO\xa7-\x98\xa3FM\xc2', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005e40)=[{{&(0x7f0000002200)=@caif=@util, 0x80, &(0x7f00000035c0)=[{&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000002340)=""/175, 0xaf}, {0x0}, {0x0}, {&(0x7f00000024c0)=""/248, 0xf8}, {0x0}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000100)) 297.270814ms ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1506000000000000004c0100000024000180060005004e22000008000300ffffffff0600"], 0x38}}, 0x0) 288.122166ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xc8}, &(0x7f0000000040)=0x8) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r0) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000013c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001140)={0x234, r3, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfe, 0x2d}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x40}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x88, 0xac, "09bb8fc793a1bcf04cf5815c1996af077601ebc89d3801f0a55c77b1e0b48469d597cc7d85631fc30756940190fb30fb4c9b993fdced1c3b6bdf47b2e309473bab5c8fe474ac8ff6c24fb649115c63821faf63ff71f9630f8752b9230d44541782070297c168f6ccced81fd6fb218f264de0009829f301881fd554978e2f1f659b2a9843"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xc2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3ff}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa1, 0xac, "6e36f45053e9757b38fcc351a438eccdae64419b484e146c1dcdfdc26c29f1d1dcae5448d61b182142cdd4128be78bd69856494d94b946e21e3641c23fa10f63fe6cda8a80263bf689635813bc1d48942a6a3ee4b2726d0a93a89eff331e7e5a8bdd13f6914ffa1681334e418d6ec6a0bba85f22773c208240d6330d2741a71474ae3c22441b043cb727e2a0dd84309e2196bfe4ccc63863585f5b005f"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xbd, 0xbe, "ecce5f0ca0d21b3b17c77555980ce81bfcbd4584251b5e3e7b6d9ffcf68bc9d02643df1410326e4731e83d071533d82e85c112d075307e7d523c41e669fcaa6837d99703f68e9899683d209016284dc06d30d54e9857799b79cc4df769056c73b19f914c4e6a55ee09ca5d847c4427ad1f4abf52234c0d9a89b2e7e0418edb751c8bcc20164d1b1f48e0ddf8f7f4bb902bf57cbeced3e4fcee921e4fc5b7eacaec9ba1a924f09dac517b7e79b302015df8b4936ec03ce2717d"}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000880}, 0x40810) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xa, 0x80, 0x80}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000440)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x20000000}]}, &(0x7f0000000280)='GPL\x00', 0x7, 0x20, &(0x7f0000000180)=""/32}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x64, r8, 0x1, 0x0, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xfffffffc}}, {0x8, 0xb, 0x80000}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x64}}, 0x800) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000001080)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x118, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4040810}, 0x40801) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r9}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100), 0xfecc) 273.818548ms ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000040)={0x54, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x54}}, 0x0) 260.08641ms ago: executing program 1: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x8}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="03", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 165.666895ms ago: executing program 0: syz_mount_image$erofs(&(0x7f0000000080), &(0x7f00000000c0)='./file2\x00', 0x4, &(0x7f0000000200)=ANY=[], 0x1, 0x21f, &(0x7f0000000d80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 159.158556ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x0, 0x0) 79.582158ms ago: executing program 3: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000800)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c6e6f646f74732c646d61736b3d30303030303030303030303030303030303037373737372c646f74732c6e6f646f74732c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030302c6e6f646f74732c646f74732c6e6f646f74732c616c6c6f775f7574696d653d3030303030303030303030303030000000003030cfa65c433030312c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c747a3d5554432c6e6f646f74732c6e66732c646f74732c6e6f646f74732c636865636b3d7374726963742c00"], 0xfd, 0x1bf, &(0x7f0000000640)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80205b, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 45.674983ms ago: executing program 4: ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5", 0x543}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 19.854597ms ago: executing program 1: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)="d1f7626d600d", 0x6) unshare(0x24020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) accept(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x5, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000300)={0x1100, 0x0, 0x2, 0x10000}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000140), 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000140), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x83f}}, 0x10, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYRES8], 0xe4}, 0x1, 0x0, 0x0, 0x8000001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x0, 0x4, 0x0, 0x0, r1}, 0x48) 0s ago: executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. 1970/01/01 00:00:43 fuzzer started 1970/01/01 00:00:43 dialing manager at 10.128.0.163:30020 syzkaller login: [ 43.907610][ T3973] cgroup: Unknown subsys name 'net' [ 43.975107][ T3978] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 44.200715][ T3973] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:00:44 starting 5 executor processes [ 45.329547][ T3993] chnl_net:caif_netlink_parms(): no params data found [ 45.435567][ T3993] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.437458][ T3993] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.440233][ T3993] device bridge_slave_0 entered promiscuous mode [ 45.459851][ T3993] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.461791][ T3993] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.465979][ T3993] device bridge_slave_1 entered promiscuous mode [ 45.496424][ T3993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.502006][ T3993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.523439][ T3998] chnl_net:caif_netlink_parms(): no params data found [ 45.563597][ T3993] team0: Port device team_slave_0 added [ 45.568789][ T3993] team0: Port device team_slave_1 added [ 45.574787][ T3999] chnl_net:caif_netlink_parms(): no params data found [ 45.602731][ T3990] chnl_net:caif_netlink_parms(): no params data found [ 45.643482][ T3993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.645660][ T3993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.652570][ T3993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.659042][ T4004] chnl_net:caif_netlink_parms(): no params data found [ 45.663208][ T3993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.665825][ T3993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.672772][ T3993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.712652][ T3998] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.716003][ T3998] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.718667][ T3998] device bridge_slave_0 entered promiscuous mode [ 45.738420][ T3999] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.740359][ T3999] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.743154][ T3999] device bridge_slave_0 entered promiscuous mode [ 45.750417][ T3998] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.752286][ T3998] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.754966][ T3998] device bridge_slave_1 entered promiscuous mode [ 45.765368][ T3999] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.767320][ T3999] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.770137][ T3999] device bridge_slave_1 entered promiscuous mode [ 45.807349][ T3999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.838524][ T3999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.845978][ T3998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.896565][ T3993] device hsr_slave_0 entered promiscuous mode [ 45.934681][ T3993] device hsr_slave_1 entered promiscuous mode [ 45.992428][ T3990] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.994506][ T3990] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.997085][ T3990] device bridge_slave_0 entered promiscuous mode [ 46.012865][ T3998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.015650][ T4004] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.017574][ T4004] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.020247][ T4004] device bridge_slave_0 entered promiscuous mode [ 46.024899][ T4004] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.026923][ T4004] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.029618][ T4004] device bridge_slave_1 entered promiscuous mode [ 46.036721][ T3990] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.038608][ T3990] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.041279][ T3990] device bridge_slave_1 entered promiscuous mode [ 46.051637][ T3999] team0: Port device team_slave_0 added [ 46.078447][ T3999] team0: Port device team_slave_1 added [ 46.100467][ T4004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.112649][ T3990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.123176][ T3998] team0: Port device team_slave_0 added [ 46.126860][ T4004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.129587][ T3999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.131512][ T3999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.139944][ T3999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.147009][ T3990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.162549][ T3998] team0: Port device team_slave_1 added [ 46.177841][ T3999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.179655][ T3999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.187248][ T3999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.203009][ T3990] team0: Port device team_slave_0 added [ 46.215292][ T4004] team0: Port device team_slave_0 added [ 46.220165][ T4004] team0: Port device team_slave_1 added [ 46.236086][ T3990] team0: Port device team_slave_1 added [ 46.262418][ T3998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.264428][ T3998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.271466][ T3998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.346179][ T3999] device hsr_slave_0 entered promiscuous mode [ 46.384572][ T3999] device hsr_slave_1 entered promiscuous mode [ 46.444323][ T3999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.446567][ T3999] Cannot create hsr debugfs directory [ 46.448536][ T4004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.450450][ T4004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.457714][ T4004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.461466][ T3998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.463327][ T3998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.471370][ T3998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.475406][ T3990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.477248][ T3990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.484026][ T3990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.502759][ T4004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.504885][ T4004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.511773][ T4004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.516065][ T3990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.517928][ T3990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.525165][ T3990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.636267][ T3990] device hsr_slave_0 entered promiscuous mode [ 46.695049][ T3990] device hsr_slave_1 entered promiscuous mode [ 46.734436][ T3990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.736533][ T3990] Cannot create hsr debugfs directory [ 46.816143][ T4004] device hsr_slave_0 entered promiscuous mode [ 46.854714][ T4004] device hsr_slave_1 entered promiscuous mode [ 46.894405][ T4004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.896484][ T4004] Cannot create hsr debugfs directory [ 46.936154][ T3998] device hsr_slave_0 entered promiscuous mode [ 46.974543][ T3998] device hsr_slave_1 entered promiscuous mode [ 47.014284][ T3998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.016274][ T3998] Cannot create hsr debugfs directory [ 47.146104][ T3993] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.175196][ T25] Bluetooth: hci2: command 0x0409 tx timeout [ 47.175284][ T4002] Bluetooth: hci1: command 0x0409 tx timeout [ 47.178665][ T4002] Bluetooth: hci0: command 0x0409 tx timeout [ 47.198306][ T3993] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.248888][ T3993] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.264331][ T1711] Bluetooth: hci4: command 0x0409 tx timeout [ 47.266088][ T1711] Bluetooth: hci3: command 0x0409 tx timeout [ 47.309041][ T3993] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.446976][ T3990] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.486263][ T3990] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.543126][ T3990] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.604372][ T3990] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.673745][ T3999] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.729123][ T3999] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.768489][ T3999] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.806905][ T3999] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.929732][ T3998] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.976988][ T3998] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.038578][ T3998] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.090723][ T4004] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.145103][ T3998] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.189063][ T3993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.194497][ T4004] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.246186][ T4004] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.286565][ T4004] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.329079][ T3993] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.333767][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.338954][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.387298][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.390223][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.393135][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.395179][ T4035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.399139][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.403702][ T3990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.425472][ T3999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.430604][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.433440][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.437151][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.439037][ T4039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.452659][ T3990] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.472151][ T3999] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.475384][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.478242][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.482460][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.485717][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.488146][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.491260][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.496597][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.499483][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.501960][ T4040] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.503785][ T4040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.506710][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.509284][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.511775][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.513819][ T4040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.516589][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.519108][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.522284][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.525146][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.564247][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.567055][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.569789][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.572866][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.584794][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.587539][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.589986][ T1711] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.591853][ T1711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.596181][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.599555][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.602202][ T1711] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.604048][ T1711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.618129][ T3993] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.621000][ T3993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.642044][ T3998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.646952][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.649427][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.652412][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.656694][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.659497][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.662188][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.666213][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.668725][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.671772][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.681577][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.684858][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.703125][ T3998] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.716234][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.718778][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.721275][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.723830][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.730081][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.732550][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.736237][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.738813][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.741197][ T1711] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.743101][ T1711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.746381][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.749127][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.751507][ T1711] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.753477][ T1711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.756438][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.759146][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.761741][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.789436][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.792097][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.802354][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.805717][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.809671][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.812248][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.822204][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.825241][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.829145][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.832695][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.856939][ T3999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.860433][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.872027][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.875445][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.878111][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.881100][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.883689][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.888466][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.891107][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.893708][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.896644][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.899173][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.901652][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.918791][ T4004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.931524][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.937126][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.939237][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.952755][ T3993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.969839][ T4004] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.973524][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.976832][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.996300][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.999118][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.001609][ T4040] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.003447][ T4040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.024940][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.027670][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.030309][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.032164][ T4040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.042197][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.089888][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.092698][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.096733][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.100500][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.103189][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.106493][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.109115][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.111789][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.121932][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.124891][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.127902][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.143741][ T3990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.150565][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.152773][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.155594][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.158502][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.167627][ T3993] device veth0_vlan entered promiscuous mode [ 49.174032][ T3993] device veth1_vlan entered promiscuous mode [ 49.179782][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.203190][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.207350][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.210454][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.223432][ T3998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.240535][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.243213][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.246253][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.248680][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.250773][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.252813][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.260199][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.277847][ T3993] device veth0_macvtap entered promiscuous mode [ 49.277931][ T4034] Bluetooth: hci0: command 0x041b tx timeout [ 49.283498][ T3999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.286492][ T4034] Bluetooth: hci1: command 0x041b tx timeout [ 49.295646][ T4034] Bluetooth: hci2: command 0x041b tx timeout [ 49.297613][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.300396][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.316997][ T3993] device veth1_macvtap entered promiscuous mode [ 49.320388][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.323043][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.326487][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.329704][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.365108][ T4034] Bluetooth: hci3: command 0x041b tx timeout [ 49.366833][ T4034] Bluetooth: hci4: command 0x041b tx timeout [ 49.393979][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.397882][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.400487][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.403044][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.407234][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.409771][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.414682][ T3999] device veth0_vlan entered promiscuous mode [ 49.416954][ T3998] device veth0_vlan entered promiscuous mode [ 49.423476][ T3999] device veth1_vlan entered promiscuous mode [ 49.443196][ T3993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.458948][ T3993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.461647][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.472065][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.475249][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.477729][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.480220][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.482780][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.486599][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.488708][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.491425][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.494415][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.497120][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.500363][ T3998] device veth1_vlan entered promiscuous mode [ 49.507091][ T4004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.531850][ T3993] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.535300][ T3993] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.537534][ T3993] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.539868][ T3993] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.550756][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.553340][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.557950][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.560596][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.563274][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.573356][ T3990] device veth0_vlan entered promiscuous mode [ 49.592825][ T3990] device veth1_vlan entered promiscuous mode [ 49.602257][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.605049][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.607685][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.610282][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.612875][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.618165][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.620643][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.629882][ T3998] device veth0_macvtap entered promiscuous mode [ 49.636608][ T3998] device veth1_macvtap entered promiscuous mode [ 49.649865][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.652570][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.659619][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.662353][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.671319][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.673845][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.678823][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.692434][ T3990] device veth0_macvtap entered promiscuous mode [ 49.710178][ T3990] device veth1_macvtap entered promiscuous mode [ 49.730592][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.733364][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.736521][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.740675][ T3998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.743550][ T3998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.752033][ T3998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.768955][ T3999] device veth0_macvtap entered promiscuous mode [ 49.771608][ T3990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.779378][ T3990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.781986][ T3990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.785035][ T3990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.788729][ T3990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.790782][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.793415][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.796994][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.799783][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.802576][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.807004][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.811725][ T3998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.815074][ T3998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.818962][ T3998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.832844][ T3990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.835830][ T3990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.838399][ T3990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.841177][ T3990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.844969][ T3990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.847947][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.850682][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.853376][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.856953][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.868438][ T3999] device veth1_macvtap entered promiscuous mode [ 49.880972][ T4004] device veth0_vlan entered promiscuous mode [ 49.894511][ T3990] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.896785][ T3990] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.899096][ T3990] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.901400][ T3990] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.912267][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.916535][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.919044][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.922485][ T3998] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.926359][ T3998] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.928645][ T3998] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.930860][ T3998] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.942392][ T3999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.948047][ T3999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.950713][ T3999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.953373][ T3999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.956586][ T3999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.959367][ T3999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.963377][ T3999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.967672][ T4004] device veth1_vlan entered promiscuous mode [ 49.970958][ T3999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.973758][ T3999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.978506][ T3999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.981252][ T3999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.983698][ T3999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.987220][ T3999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.990966][ T3999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.997574][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.001309][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.003783][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.004342][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.012230][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.015054][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.017756][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.020417][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.023006][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.025997][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.046424][ T3999] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.048887][ T3999] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.051248][ T3999] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.053601][ T3999] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.140027][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.142709][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.147432][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.151259][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.153479][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.156359][ T4004] device veth0_macvtap entered promiscuous mode [ 50.181272][ T4004] device veth1_macvtap entered promiscuous mode [ 50.183820][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.186402][ T454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.188349][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.189160][ T454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.191675][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.222652][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.226422][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.231276][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.233866][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.249178][ T4004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.251960][ T4004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.261073][ T4004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.263943][ T4004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.267548][ T4004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.270298][ T4004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.272954][ T4004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.277155][ T4004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.281376][ T4004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.306096][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.308933][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.325816][ T4004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.328635][ T4004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.331219][ T4004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.352032][ T4004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.354787][ T4004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.357579][ T4004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.360089][ T4004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.362840][ T4004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.367812][ T4004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.395978][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.398928][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.411228][ T4004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.413621][ T4004] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.428335][ T4004] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.430726][ T4004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.440418][ T4071] loop0: detected capacity change from 0 to 512 [ 50.485625][ T4071] ======================================================= [ 50.485625][ T4071] WARNING: The mand mount option has been deprecated and [ 50.485625][ T4071] and is ignored by this kernel. Remove the mand [ 50.485625][ T4071] option from the mount to silence this warning. [ 50.485625][ T4071] ======================================================= [ 50.515419][ T454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.517592][ T454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.520538][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.535138][ T4071] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 50.567365][ T454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.571765][ T454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.587311][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.612352][ T4080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.638857][ T4080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.668035][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.686428][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.688696][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.692390][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.709294][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.725197][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.773605][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.819195][ T4082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.821366][ T4082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.824883][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.993563][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 51.131444][ T4113] loop0: detected capacity change from 0 to 16 [ 51.169101][ T4113] erofs: (device loop0): mounted with root inode @ nid 36. [ 51.213664][ T4113] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 51.216738][ T4119] loop3: detected capacity change from 0 to 256 [ 51.250846][ T4122] ================================================================== [ 51.253013][ T4122] BUG: KASAN: slab-out-of-bounds in cfg80211_wext_freq+0x170/0x1ac [ 51.255177][ T4122] Read of size 2 at addr ffff0000e8c50d40 by task syz-executor.4/4122 [ 51.257388][ T4122] [ 51.258002][ T4122] CPU: 1 PID: 4122 Comm: syz-executor.4 Not tainted 5.15.161-syzkaller #0 [ 51.260272][ T4122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 51.263043][ T4122] Call trace: [ 51.263946][ T4122] dump_backtrace+0x0/0x530 [ 51.265230][ T4122] show_stack+0x2c/0x3c [ 51.266412][ T4122] dump_stack_lvl+0x108/0x170 [ 51.267805][ T4122] print_address_description+0x7c/0x3f0 [ 51.269274][ T4122] kasan_report+0x174/0x1e4 [ 51.270499][ T4122] __asan_report_load2_noabort+0x44/0x50 [ 51.272074][ T4122] cfg80211_wext_freq+0x170/0x1ac 1970/01/01 00:00:51 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 51.273409][ T4122] cfg80211_wext_siwscan+0x45c/0xe0c [ 51.274965][ T4122] ioctl_standard_iw_point+0x82c/0xe24 [ 51.276477][ T4122] ioctl_standard_call+0xcc/0x264 [ 51.277784][ T4122] wext_ioctl_dispatch+0x16c/0x3ec [ 51.279157][ T4122] wext_handle_ioctl+0x224/0x448 [ 51.280444][ T4122] sock_ioctl+0x140/0x8ac [ 51.281568][ T4122] __arm64_sys_ioctl+0x14c/0x1c8 [ 51.282940][ T4122] invoke_syscall+0x98/0x2b8 [ 51.284290][ T4122] el0_svc_common+0x138/0x258 [ 51.285509][ T4122] do_el0_svc+0x58/0x14c [ 51.286631][ T4122] el0_svc+0x7c/0x1f0 [ 51.287692][ T4122] el0t_64_sync_handler+0x84/0xe4 [ 51.289090][ T4122] el0t_64_sync+0x1a0/0x1a4 [ 51.290327][ T4122] [ 51.290961][ T4122] Allocated by task 4122: [ 51.292102][ T4122] ____kasan_kmalloc+0xbc/0xfc [ 51.293373][ T4122] __kasan_kmalloc+0x10/0x1c [ 51.294591][ T4122] __kmalloc+0x29c/0x4c8 [ 51.295715][ T4122] ioctl_standard_iw_point+0x3b8/0xe24 [ 51.297281][ T4122] ioctl_standard_call+0xcc/0x264 [ 51.298620][ T4122] wext_ioctl_dispatch+0x16c/0x3ec [ 51.299989][ T4122] wext_handle_ioctl+0x224/0x448 [ 51.301334][ T4122] sock_ioctl+0x140/0x8ac [ 51.302522][ T4122] __arm64_sys_ioctl+0x14c/0x1c8 [ 51.303924][ T4122] invoke_syscall+0x98/0x2b8 [ 51.305148][ T4122] el0_svc_common+0x138/0x258 [ 51.306438][ T4122] do_el0_svc+0x58/0x14c [ 51.307593][ T4122] el0_svc+0x7c/0x1f0 [ 51.308706][ T4122] el0t_64_sync_handler+0x84/0xe4 [ 51.310095][ T4122] el0t_64_sync+0x1a0/0x1a4 [ 51.311339][ T4122] [ 51.311950][ T4122] The buggy address belongs to the object at ffff0000e8c50c00 [ 51.311950][ T4122] which belongs to the cache kmalloc-512 of size 512 [ 51.315800][ T4122] The buggy address is located 320 bytes inside of [ 51.315800][ T4122] 512-byte region [ffff0000e8c50c00, ffff0000e8c50e00) [ 51.319436][ T4122] The buggy address belongs to the page: [ 51.320912][ T4122] page:00000000688ae602 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128c50 [ 51.323725][ T4122] head:00000000688ae602 order:2 compound_mapcount:0 compound_pincount:0 [ 51.326019][ T4122] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 51.328247][ T4122] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002600 [ 51.330719][ T4122] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 51.333056][ T4122] page dumped because: kasan: bad access detected [ 51.334793][ T4122] [ 51.335396][ T4122] Memory state around the buggy address: [ 51.336935][ T4122] ffff0000e8c50c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.339304][ T4122] ffff0000e8c50c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.341486][ T4122] >ffff0000e8c50d00: 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc fc [ 51.343688][ T4122] ^ [ 51.345431][ T4122] ffff0000e8c50d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.347637][ T4122] ffff0000e8c50e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.349799][ T4122] ================================================================== [ 51.352006][ T4122] Disabling lock debugging due to kernel taint [ 51.361240][ T1711] Bluetooth: hci2: command 0x040f tx timeout [ 51.363798][ T1711] Bluetooth: hci1: command 0x040f tx timeout [ 51.370537][ T1711] Bluetooth: hci0: command 0x040f tx timeout [ 51.380692][ T4122] ================================================================================ [ 51.383186][ T4122] UBSAN: array-index-out-of-bounds in net/wireless/scan.c:2829:8 [ 51.394222][ T4122] index 33 is out of range for type 'struct iw_freq[32]' [ 51.396178][ T4122] CPU: 1 PID: 4122 Comm: syz-executor.4 Tainted: G B 5.15.161-syzkaller #0 [ 51.398758][ T4122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 51.401463][ T4122] Call trace: [ 51.402297][ T4122] dump_backtrace+0x0/0x530 [ 51.403474][ T4122] show_stack+0x2c/0x3c [ 51.404554][ T4122] dump_stack_lvl+0x108/0x170 [ 51.405897][ T4122] dump_stack+0x1c/0x58 [ 51.407050][ T4122] __ubsan_handle_out_of_bounds+0x108/0x15c [ 51.408581][ T4122] cfg80211_wext_siwscan+0x4cc/0xe0c [ 51.410042][ T4122] ioctl_standard_iw_point+0x82c/0xe24 [ 51.411493][ T4122] ioctl_standard_call+0xcc/0x264 [ 51.412830][ T4122] wext_ioctl_dispatch+0x16c/0x3ec [ 51.414275][ T4122] wext_handle_ioctl+0x224/0x448 [ 51.415577][ T4122] sock_ioctl+0x140/0x8ac [ 51.416758][ T4122] __arm64_sys_ioctl+0x14c/0x1c8 [ 51.418122][ T4122] invoke_syscall+0x98/0x2b8 [ 51.419376][ T4122] el0_svc_common+0x138/0x258 [ 51.420691][ T4122] do_el0_svc+0x58/0x14c [ 51.421783][ T4122] el0_svc+0x7c/0x1f0 [ 51.422862][ T4122] el0t_64_sync_handler+0x84/0xe4 [ 51.424182][ T4122] el0t_64_sync+0x1a0/0x1a4 [ 51.425935][ T4124] Bluetooth: hci4: command 0x040f tx timeout [ 51.427757][ T4124] Bluetooth: hci3: command 0x040f tx timeout [ 51.439629][ T4122] ================================================================================