last executing test programs: 1.653247079s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) 1.548966081s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000b00), 0xfc, 0x556, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000001080)="f7", 0x1}], 0x1, 0x7fff, 0xfffffffe, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 1.217950709s ago: executing program 1 (id=6): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000000101010100000000000000000200000006001240000400002c0001800c0002800500"], 0x54}, 0x1, 0x0, 0x0, 0x20000844}, 0x2e2f76ab035b98ee) 837.082903ms ago: executing program 3 (id=7): r0 = socket(0x10, 0x80002, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x2c4d, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000340)={0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3, @ANYBLOB="1900000000b291dc000000"], 0x20}}, 0x0) 642.811975ms ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80801, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 567.708184ms ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}}, 0x0) 559.646325ms ago: executing program 4 (id=5): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') 351.130249ms ago: executing program 1 (id=8): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="ff0300", 0x3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) 251.842231ms ago: executing program 0 (id=9): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 190.564478ms ago: executing program 3 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) 147.895603ms ago: executing program 1 (id=11): r0 = syz_io_uring_setup(0x16d2, &(0x7f00000000c0)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x9, 0x0, @fd, 0x0, 0x0, 0x0, {0x241c}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 145.921093ms ago: executing program 2 (id=12): getpid() gettid() write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x0) 45.936884ms ago: executing program 2 (id=13): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 0s ago: executing program 0 (id=14): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 66.240769][ T4236] cgroup: Unknown subsys name 'net' [ 66.376659][ T4236] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.814954][ T4236] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.150510][ T4255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.159708][ T4262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.171733][ T4258] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.172109][ T4263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.179527][ T4258] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.187661][ T4263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.194054][ T4258] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.202413][ T4263] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.207889][ T4258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.215224][ T4263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.223280][ T4258] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.228862][ T4263] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.235196][ T4258] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.242656][ T4263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.249720][ T4258] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.256976][ T4263] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.264361][ T4258] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.278335][ T4258] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.278354][ T4263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.286216][ T4258] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.293233][ T4263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.300773][ T4258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.306785][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.313533][ T4258] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.320825][ T4263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.327973][ T4258] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.342433][ T4258] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.374164][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.383241][ T4254] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.408885][ T4264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.844519][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 69.883317][ T4248] chnl_net:caif_netlink_parms(): no params data found [ 69.971496][ T4247] chnl_net:caif_netlink_parms(): no params data found [ 70.006001][ T4259] chnl_net:caif_netlink_parms(): no params data found [ 70.027897][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 70.075176][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.083582][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.092411][ T4256] device bridge_slave_0 entered promiscuous mode [ 70.105553][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.112878][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.121379][ T4256] device bridge_slave_1 entered promiscuous mode [ 70.193558][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.200815][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.208636][ T4248] device bridge_slave_0 entered promiscuous mode [ 70.235107][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.245765][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.253066][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.261796][ T4248] device bridge_slave_1 entered promiscuous mode [ 70.285722][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.321522][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.328627][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.337220][ T4247] device bridge_slave_0 entered promiscuous mode [ 70.378819][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.386835][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.395485][ T4247] device bridge_slave_1 entered promiscuous mode [ 70.414174][ T4256] team0: Port device team_slave_0 added [ 70.422956][ T4248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.432244][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.439344][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.447855][ T4259] device bridge_slave_0 entered promiscuous mode [ 70.456463][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.463826][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.472119][ T4251] device bridge_slave_0 entered promiscuous mode [ 70.489351][ T4256] team0: Port device team_slave_1 added [ 70.496837][ T4248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.506330][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.513610][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.522141][ T4259] device bridge_slave_1 entered promiscuous mode [ 70.536695][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.543888][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.552242][ T4251] device bridge_slave_1 entered promiscuous mode [ 70.599232][ T4247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.626228][ T4259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.646617][ T4247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.656788][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.663870][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.690010][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.705857][ T4248] team0: Port device team_slave_0 added [ 70.713800][ T4259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.724938][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.757219][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.764449][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.790558][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.803059][ T4248] team0: Port device team_slave_1 added [ 70.823353][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.842274][ T4247] team0: Port device team_slave_0 added [ 70.850760][ T4259] team0: Port device team_slave_0 added [ 70.883882][ T4247] team0: Port device team_slave_1 added [ 70.900077][ T4259] team0: Port device team_slave_1 added [ 70.915915][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.923051][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.949941][ T4248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.972201][ T4251] team0: Port device team_slave_0 added [ 70.993722][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.001009][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.027847][ T4248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.049148][ T4251] team0: Port device team_slave_1 added [ 71.056351][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.063602][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.089968][ T4259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.113327][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.120603][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.146689][ T4247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.166836][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.174208][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.200546][ T4259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.216631][ T4256] device hsr_slave_0 entered promiscuous mode [ 71.223711][ T4256] device hsr_slave_1 entered promiscuous mode [ 71.234322][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.241368][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.269912][ T4247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.270550][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.290476][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.322479][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.329466][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.356467][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.369517][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.376726][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.402997][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.414473][ T4258] Bluetooth: hci0: command tx timeout [ 71.420825][ T4264] Bluetooth: hci4: command tx timeout [ 71.421017][ T4258] Bluetooth: hci3: command tx timeout [ 71.442608][ T4248] device hsr_slave_0 entered promiscuous mode [ 71.449361][ T4248] device hsr_slave_1 entered promiscuous mode [ 71.456474][ T4248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.464454][ T4248] Cannot create hsr debugfs directory [ 71.490519][ T4258] Bluetooth: hci1: command tx timeout [ 71.490539][ T4249] Bluetooth: hci2: command tx timeout [ 71.536321][ T4247] device hsr_slave_0 entered promiscuous mode [ 71.543920][ T4247] device hsr_slave_1 entered promiscuous mode [ 71.550959][ T4247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.558546][ T4247] Cannot create hsr debugfs directory [ 71.585241][ T4259] device hsr_slave_0 entered promiscuous mode [ 71.592760][ T4259] device hsr_slave_1 entered promiscuous mode [ 71.599420][ T4259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.607113][ T4259] Cannot create hsr debugfs directory [ 71.700689][ T4251] device hsr_slave_0 entered promiscuous mode [ 71.707746][ T4251] device hsr_slave_1 entered promiscuous mode [ 71.714511][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.722516][ T4251] Cannot create hsr debugfs directory [ 71.996044][ T4256] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.008157][ T4256] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.018563][ T4256] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.030301][ T4256] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.095572][ T4248] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.107957][ T4248] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.133609][ T4248] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.148707][ T4248] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.182323][ T4247] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.192671][ T4247] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.202175][ T4247] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.221292][ T4247] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.346538][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.355748][ T4251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.382823][ T4248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.393122][ T4251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.403260][ T4251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.418511][ T4251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.442126][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.464334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.474794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.506624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.515638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.524705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.535778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.545669][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.553022][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.562437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.575051][ T4247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.593972][ T4248] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.606650][ T4259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.619875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.631560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.643906][ T4247] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.653775][ T4259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.665068][ T4259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.674241][ T4259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.684583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.694397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.703558][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.710709][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.718595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.727484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.736532][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.743685][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.754057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.793001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.802570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.813951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.822720][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.829800][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.837712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.846822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.855504][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.862629][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.871122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.879963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.896778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.922381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.932097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.942126][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.949231][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.957274][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.967648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.976861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.987247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.996643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.017290][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.028538][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.037813][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.053005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.062196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.071536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.086812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.118555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.127574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.136619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.146208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.155011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.164451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.177899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.186952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.217687][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.227402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.236539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.247343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.256262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.293215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.302916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.313205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.322385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.338231][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.360048][ T4247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.377739][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.390675][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.398713][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.407947][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.426364][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.466891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.487057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.494517][ T4258] Bluetooth: hci4: command tx timeout [ 73.494569][ T4258] Bluetooth: hci0: command tx timeout [ 73.501083][ T4258] Bluetooth: hci3: command tx timeout [ 73.519687][ T4259] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.530887][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.563972][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.571400][ T4258] Bluetooth: hci2: command tx timeout [ 73.576915][ T4258] Bluetooth: hci1: command tx timeout [ 73.589883][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.638410][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.658137][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.667799][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.675012][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.691937][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.706942][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.716827][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.724055][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.739098][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.748285][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.759100][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.790473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.800109][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.835965][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.846849][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.860068][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.870070][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.883473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.896878][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.908339][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.915505][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.924787][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.934098][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.946411][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.953581][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.961639][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.971466][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.979705][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.993227][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.002342][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.015431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.034563][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.059523][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.069984][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.084316][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.093897][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.102847][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.111624][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.138650][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.165328][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.175023][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.187144][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.197197][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.208613][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.224132][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.234285][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.249756][ T4247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.270300][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.278773][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.294745][ T4248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.306163][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.381171][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.392995][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.436703][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.458533][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.526724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.556794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.585042][ T4248] device veth0_vlan entered promiscuous mode [ 74.609994][ T4256] device veth0_vlan entered promiscuous mode [ 74.630602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.641383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.660645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.682155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.692908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.701570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.718381][ T4248] device veth1_vlan entered promiscuous mode [ 74.744950][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.754172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.764151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.773710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.781862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.795837][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.803769][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.823314][ T4256] device veth1_vlan entered promiscuous mode [ 74.855645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.864583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.874767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.887871][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.902261][ T4248] device veth0_macvtap entered promiscuous mode [ 74.919818][ T4248] device veth1_macvtap entered promiscuous mode [ 74.943214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.954076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.963872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.973717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.982839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.992194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.001641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.027503][ T4256] device veth0_macvtap entered promiscuous mode [ 75.050764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.059377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.084539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.095148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.105126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.116168][ T4256] device veth1_macvtap entered promiscuous mode [ 75.129535][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.137959][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.149298][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.186337][ T4247] device veth0_vlan entered promiscuous mode [ 75.194618][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.202937][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.212089][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.220878][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.229393][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.239865][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.248482][ T4259] device veth0_vlan entered promiscuous mode [ 75.267983][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.278185][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.289961][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.304477][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.313758][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.322579][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.331828][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.340715][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.349452][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.358231][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.367284][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.375339][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.387650][ T4247] device veth1_vlan entered promiscuous mode [ 75.398882][ T4251] device veth0_vlan entered promiscuous mode [ 75.409923][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.423160][ T4259] device veth1_vlan entered promiscuous mode [ 75.433340][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.444104][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.455898][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.468604][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.477060][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.486163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.495030][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.504873][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.513729][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.522871][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.535831][ T4248] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.545754][ T4248] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.554664][ T4248] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.563611][ T4248] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.572733][ T4264] Bluetooth: hci3: command tx timeout [ 75.572776][ T4264] Bluetooth: hci0: command tx timeout [ 75.572814][ T4264] Bluetooth: hci4: command tx timeout [ 75.594684][ T4251] device veth1_vlan entered promiscuous mode [ 75.610986][ T4256] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.619723][ T4256] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.637717][ T4256] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.646738][ T4256] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.660811][ T4264] Bluetooth: hci1: command tx timeout [ 75.666286][ T4264] Bluetooth: hci2: command tx timeout [ 75.711225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.719448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.728568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.738483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.747460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.756712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.766602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.786965][ T4251] device veth0_macvtap entered promiscuous mode [ 75.796839][ T4259] device veth0_macvtap entered promiscuous mode [ 75.825370][ T4251] device veth1_macvtap entered promiscuous mode [ 75.849621][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.867032][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.875426][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.884425][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.893947][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.903852][ T4259] device veth1_macvtap entered promiscuous mode [ 75.965962][ T4247] device veth0_macvtap entered promiscuous mode [ 76.003043][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.013789][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.024426][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.035128][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.047717][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.057202][ T4247] device veth1_macvtap entered promiscuous mode [ 76.065325][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.076294][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.086778][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.097594][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.108109][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.118724][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.130131][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.140961][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.149003][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.151924][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.169762][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.179961][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.190662][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.202294][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.214097][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.224858][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.233546][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.242807][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.251995][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.261443][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.270054][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.279262][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.287427][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.298968][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.312464][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.323135][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.333648][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.344969][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.354858][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.365555][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.377356][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.392404][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.407303][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.410522][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.421330][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.432378][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.445206][ T4259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.454632][ T4259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.464385][ T4259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.473233][ T4259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.492076][ T4251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.505558][ T4251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.514847][ T4251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.525296][ T4251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.540625][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.551192][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.564012][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.574681][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.584774][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.595782][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.606110][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.617539][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.631819][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.652746][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.663558][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.675448][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.688116][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.700713][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.711814][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.723477][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.735711][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.745762][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.756279][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.766160][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.777319][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.788725][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.810546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.818676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.828727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.853075][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.863138][ T4247] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.870794][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.878695][ T4247] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.888135][ T4247] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.897402][ T4247] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.927338][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.111625][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.129122][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.153225][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 77.196005][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.207769][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.211804][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.219453][ T4334] loop1: detected capacity change from 0 to 1024 [ 77.227620][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.275562][ T4334] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 77.294067][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.307112][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.314689][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.323603][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.332641][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.347224][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.356251][ T26] audit: type=1804 audit(1730047048.664:2): pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2" name="/newroot/0/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 77.383656][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.389685][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.399099][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.419652][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.431154][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.444592][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.457876][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.472622][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.481703][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.489912][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.494069][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.503723][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.511248][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.516813][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.528221][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.537163][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.537462][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.549312][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.565273][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.573331][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 77.581357][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.589657][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.597583][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.605106][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.612670][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.620077][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.627553][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.635133][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.642644][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.651488][ T4264] Bluetooth: hci4: command tx timeout [ 77.651725][ T4249] Bluetooth: hci0: command tx timeout [ 77.656897][ T4264] Bluetooth: hci3: command tx timeout [ 77.668252][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.675768][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.683349][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.690922][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.699283][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.706846][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.714346][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.721823][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.729232][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.737036][ T4264] Bluetooth: hci2: command tx timeout [ 77.742010][ T4249] Bluetooth: hci1: command tx timeout [ 77.742827][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.755670][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.763640][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.771189][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.778684][ T125] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 77.793178][ T125] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 77.892711][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 77.907018][ T4342] device hsr_slave_0 left promiscuous mode [ 77.924552][ T4342] device hsr_slave_1 left promiscuous mode [ 78.006797][ T4344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 78.299205][ T4350] loop4: detected capacity change from 0 to 512 [ 78.320857][ T4350] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.343375][ T4346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 78.361002][ T4350] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.395595][ T4346] device gre0 entered promiscuous mode [ 78.429499][ T4350] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 78.468759][ T4350] EXT4-fs (loop4): 1 truncate cleaned up [ 78.482134][ T4350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 78.689166][ T4350] ================================================================== [ 78.697289][ T4350] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8ca/0x1f30 [ 78.705058][ T4350] Read of size 18446744073709551572 at addr ffff888028896850 by task syz.4.5/4350 [ 78.714756][ T4350] [ 78.717111][ T4350] CPU: 0 PID: 4350 Comm: syz.4.5 Not tainted 6.1.114-syzkaller #0 [ 78.724940][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.735033][ T4350] Call Trace: [ 78.738337][ T4350] [ 78.741300][ T4350] dump_stack_lvl+0x1e3/0x2cb [ 78.746005][ T4350] ? nf_tcp_handle_invalid+0x642/0x642 [ 78.751487][ T4350] ? panic+0x764/0x764 [ 78.755574][ T4350] ? _printk+0xd1/0x111 [ 78.759735][ T4350] ? __virt_addr_valid+0x17f/0x530 [ 78.764857][ T4350] ? __virt_addr_valid+0x17f/0x530 [ 78.769993][ T4350] print_report+0x15f/0x4f0 [ 78.774506][ T4350] ? __virt_addr_valid+0x17f/0x530 [ 78.779637][ T4350] ? __virt_addr_valid+0x17f/0x530 [ 78.784753][ T4350] ? __virt_addr_valid+0x45b/0x530 [ 78.789870][ T4350] ? __phys_addr+0xb6/0x170 [ 78.794379][ T4350] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 78.799836][ T4350] kasan_report+0x136/0x160 [ 78.804338][ T4350] ? __x64_sys_unlink+0x45/0x50 [ 78.809203][ T4350] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 78.814659][ T4350] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 78.820112][ T4350] kasan_check_range+0x27f/0x290 [ 78.825043][ T4350] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 78.830506][ T4350] memmove+0x25/0x60 [ 78.834403][ T4350] ext4_xattr_set_entry+0x8ca/0x1f30 [ 78.839706][ T4350] ? ext4_xattr_inode_lookup_create+0x1ef0/0x1ef0 [ 78.846113][ T4350] ? ext4_xattr_block_set+0x884/0x3920 [ 78.851572][ T4350] ? kmemdup+0x41/0x60 [ 78.855639][ T4350] ? memcpy+0x3c/0x60 [ 78.859618][ T4350] ext4_xattr_block_set+0xa58/0x3920 [ 78.864904][ T4350] ? __getblk_gfp+0x50/0xa20 [ 78.869494][ T4350] ? _raw_spin_unlock+0x24/0x40 [ 78.874351][ T4350] ? ext4_xattr_block_find+0x510/0x510 [ 78.879812][ T4350] ? ext4_xattr_block_find+0x468/0x510 [ 78.885280][ T4350] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 78.891188][ T4350] ? ext4_xattr_set+0x3d0/0x3d0 [ 78.896035][ T4350] ? rwsem_write_trylock+0x166/0x210 [ 78.901319][ T4350] ? clear_nonspinnable+0x60/0x60 [ 78.906341][ T4350] ? ext4_reserve_inode_write+0x2b3/0x360 [ 78.912060][ T4350] ? dquot_initialize_needed+0x128/0x320 [ 78.917735][ T4350] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 78.923377][ T4350] __ext4_mark_inode_dirty+0x54f/0x920 [ 78.928842][ T4350] ? ext4_blocks_for_truncate+0x270/0x270 [ 78.934563][ T4350] ? current_time+0x1ba/0x300 [ 78.939243][ T4350] ? atime_needs_update+0x7b0/0x7b0 [ 78.944454][ T4350] __ext4_unlink+0x6ed/0xba0 [ 78.949046][ T4350] ? __ext4_read_dirblock+0x890/0x890 [ 78.954418][ T4350] ? rwsem_write_trylock+0x166/0x210 [ 78.959717][ T4350] ? inode_permission+0xf7/0x450 [ 78.964657][ T4350] ? clear_nonspinnable+0x60/0x60 [ 78.969688][ T4350] ext4_unlink+0x1d5/0x670 [ 78.974106][ T4350] vfs_unlink+0x359/0x5f0 [ 78.978442][ T4350] do_unlinkat+0x4a5/0x820 [ 78.982862][ T4350] ? fsnotify_link_count+0xf0/0xf0 [ 78.987980][ T4350] __x64_sys_unlink+0x45/0x50 [ 78.992656][ T4350] do_syscall_64+0x3b/0xb0 [ 78.997072][ T4350] ? clear_bhb_loop+0x45/0xa0 [ 79.001739][ T4350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.007631][ T4350] RIP: 0033:0x7fbfd177e719 [ 79.012053][ T4350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.031658][ T4350] RSP: 002b:00007fbfd24e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 79.040075][ T4350] RAX: ffffffffffffffda RBX: 00007fbfd1935f80 RCX: 00007fbfd177e719 [ 79.048039][ T4350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 79.056002][ T4350] RBP: 00007fbfd17f132e R08: 0000000000000000 R09: 0000000000000000 [ 79.063968][ T4350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.071938][ T4350] R13: 0000000000000000 R14: 00007fbfd1935f80 R15: 00007ffcbe08a9f8 [ 79.079912][ T4350] [ 79.082928][ T4350] [ 79.085254][ T4350] Allocated by task 4350: [ 79.089571][ T4350] kasan_set_track+0x4b/0x70 [ 79.094166][ T4350] __kasan_kmalloc+0x97/0xb0 [ 79.098753][ T4350] __kmalloc_node_track_caller+0xb1/0x220 [ 79.104488][ T4350] kmemdup+0x26/0x60 [ 79.108381][ T4350] ext4_xattr_block_set+0x884/0x3920 [ 79.113663][ T4350] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 79.119554][ T4350] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 79.125189][ T4350] __ext4_mark_inode_dirty+0x54f/0x920 [ 79.130647][ T4350] __ext4_unlink+0x6ed/0xba0 [ 79.135232][ T4350] ext4_unlink+0x1d5/0x670 [ 79.139651][ T4350] vfs_unlink+0x359/0x5f0 [ 79.143985][ T4350] do_unlinkat+0x4a5/0x820 [ 79.148422][ T4350] __x64_sys_unlink+0x45/0x50 [ 79.153270][ T4350] do_syscall_64+0x3b/0xb0 [ 79.157694][ T4350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.163599][ T4350] [ 79.165923][ T4350] The buggy address belongs to the object at ffff888028896800 [ 79.165923][ T4350] which belongs to the cache kmalloc-1k of size 1024 [ 79.179973][ T4350] The buggy address is located 80 bytes inside of [ 79.179973][ T4350] 1024-byte region [ffff888028896800, ffff888028896c00) [ 79.193246][ T4350] [ 79.195571][ T4350] The buggy address belongs to the physical page: [ 79.201982][ T4350] page:ffffea0000a22400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28890 [ 79.212128][ T4350] head:ffffea0000a22400 order:3 compound_mapcount:0 compound_pincount:0 [ 79.220451][ T4350] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 79.228436][ T4350] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017c41dc0 [ 79.237033][ T4350] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 79.245617][ T4350] page dumped because: kasan: bad access detected [ 79.252033][ T4350] page_owner tracks the page as allocated [ 79.257740][ T4350] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 75, tgid 75 (kworker/u4:4), ts 78618015377, free_ts 77062857536 [ 79.278078][ T4350] post_alloc_hook+0x18d/0x1b0 [ 79.282852][ T4350] get_page_from_freelist+0x322e/0x33b0 [ 79.288399][ T4350] __alloc_pages+0x28d/0x770 [ 79.292993][ T4350] alloc_slab_page+0x6a/0x150 [ 79.297673][ T4350] new_slab+0x84/0x2d0 [ 79.301747][ T4350] ___slab_alloc+0xc20/0x1270 [ 79.306424][ T4350] __kmem_cache_alloc_node+0x19f/0x260 [ 79.311880][ T4350] __kmalloc+0xa1/0x230 [ 79.316031][ T4350] ieee802_11_parse_elems_full+0xc4/0x1380 [ 79.321846][ T4350] ieee80211_bss_info_update+0x99f/0xf00 [ 79.327499][ T4350] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2dd0 [ 79.333669][ T4350] ieee80211_iface_work+0x7aa/0xce0 [ 79.338892][ T4350] process_one_work+0x8a9/0x11d0 [ 79.343833][ T4350] worker_thread+0xa47/0x1200 [ 79.348514][ T4350] kthread+0x28d/0x320 [ 79.352580][ T4350] ret_from_fork+0x1f/0x30 [ 79.357001][ T4350] page last free stack trace: [ 79.361675][ T4350] free_unref_page_prepare+0xf63/0x1120 [ 79.367220][ T4350] free_unref_page+0x33/0x3e0 [ 79.371893][ T4350] qlist_free_all+0x76/0xe0 [ 79.376419][ T4350] kasan_quarantine_reduce+0x156/0x170 [ 79.381881][ T4350] __kasan_slab_alloc+0x1f/0x70 [ 79.386739][ T4350] slab_post_alloc_hook+0x52/0x3a0 [ 79.391877][ T4350] kmem_cache_alloc_lru+0x10c/0x2d0 [ 79.397092][ T4350] __d_alloc+0x31/0x710 [ 79.401256][ T4350] d_alloc_pseudo+0x19/0x70 [ 79.405762][ T4350] alloc_file_pseudo+0x131/0x2f0 [ 79.410708][ T4350] sock_alloc_file+0xb4/0x240 [ 79.415402][ T4350] __sys_socket+0x1ca/0x3a0 [ 79.419910][ T4350] __x64_sys_socket+0x76/0x80 [ 79.424598][ T4350] do_syscall_64+0x3b/0xb0 [ 79.429014][ T4350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.434929][ T4350] [ 79.437247][ T4350] Memory state around the buggy address: [ 79.442867][ T4350] ffff888028896700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.450925][ T4350] ffff888028896780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 79.458999][ T4350] >ffff888028896800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 79.467046][ T4350] ^ [ 79.473710][ T4350] ffff888028896880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 79.481764][ T4350] ffff888028896900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 79.489809][ T4350] ================================================================== [ 79.540473][ T4350] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 79.547709][ T4350] CPU: 1 PID: 4350 Comm: syz.4.5 Not tainted 6.1.114-syzkaller #0 [ 79.555533][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.565606][ T4350] Call Trace: [ 79.568899][ T4350] [ 79.571845][ T4350] dump_stack_lvl+0x1e3/0x2cb [ 79.576558][ T4350] ? nf_tcp_handle_invalid+0x642/0x642 [ 79.582044][ T4350] ? panic+0x764/0x764 [ 79.586141][ T4350] ? preempt_schedule_common+0xa6/0xd0 [ 79.591635][ T4350] ? vscnprintf+0x59/0x80 [ 79.596003][ T4350] panic+0x318/0x764 [ 79.599941][ T4350] ? check_panic_on_warn+0x1d/0xa0 [ 79.605084][ T4350] ? memcpy_page_flushcache+0xfc/0xfc [ 79.610481][ T4350] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 79.616485][ T4350] ? _raw_spin_unlock+0x40/0x40 [ 79.621343][ T4350] check_panic_on_warn+0x7e/0xa0 [ 79.626283][ T4350] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 79.631738][ T4350] end_report+0x66/0x110 [ 79.635974][ T4350] kasan_report+0x143/0x160 [ 79.640481][ T4350] ? __x64_sys_unlink+0x45/0x50 [ 79.645362][ T4350] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 79.650825][ T4350] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 79.656286][ T4350] kasan_check_range+0x27f/0x290 [ 79.661226][ T4350] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 79.666682][ T4350] memmove+0x25/0x60 [ 79.670583][ T4350] ext4_xattr_set_entry+0x8ca/0x1f30 [ 79.675874][ T4350] ? ext4_xattr_inode_lookup_create+0x1ef0/0x1ef0 [ 79.682288][ T4350] ? ext4_xattr_block_set+0x884/0x3920 [ 79.687743][ T4350] ? kmemdup+0x41/0x60 [ 79.691826][ T4350] ? memcpy+0x3c/0x60 [ 79.695824][ T4350] ext4_xattr_block_set+0xa58/0x3920 [ 79.701126][ T4350] ? __getblk_gfp+0x50/0xa20 [ 79.705725][ T4350] ? _raw_spin_unlock+0x24/0x40 [ 79.710583][ T4350] ? ext4_xattr_block_find+0x510/0x510 [ 79.716045][ T4350] ? ext4_xattr_block_find+0x468/0x510 [ 79.721510][ T4350] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 79.727418][ T4350] ? ext4_xattr_set+0x3d0/0x3d0 [ 79.732266][ T4350] ? rwsem_write_trylock+0x166/0x210 [ 79.737557][ T4350] ? clear_nonspinnable+0x60/0x60 [ 79.742592][ T4350] ? ext4_reserve_inode_write+0x2b3/0x360 [ 79.748324][ T4350] ? dquot_initialize_needed+0x128/0x320 [ 79.753964][ T4350] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 79.759608][ T4350] __ext4_mark_inode_dirty+0x54f/0x920 [ 79.765075][ T4350] ? ext4_blocks_for_truncate+0x270/0x270 [ 79.770796][ T4350] ? current_time+0x1ba/0x300 [ 79.775480][ T4350] ? atime_needs_update+0x7b0/0x7b0 [ 79.780685][ T4350] __ext4_unlink+0x6ed/0xba0 [ 79.785276][ T4350] ? __ext4_read_dirblock+0x890/0x890 [ 79.790665][ T4350] ? rwsem_write_trylock+0x166/0x210 [ 79.795949][ T4350] ? inode_permission+0xf7/0x450 [ 79.800884][ T4350] ? clear_nonspinnable+0x60/0x60 [ 79.805910][ T4350] ext4_unlink+0x1d5/0x670 [ 79.810328][ T4350] vfs_unlink+0x359/0x5f0 [ 79.814661][ T4350] do_unlinkat+0x4a5/0x820 [ 79.819080][ T4350] ? fsnotify_link_count+0xf0/0xf0 [ 79.824209][ T4350] __x64_sys_unlink+0x45/0x50 [ 79.828890][ T4350] do_syscall_64+0x3b/0xb0 [ 79.833304][ T4350] ? clear_bhb_loop+0x45/0xa0 [ 79.837980][ T4350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.843880][ T4350] RIP: 0033:0x7fbfd177e719 [ 79.848295][ T4350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.867894][ T4350] RSP: 002b:00007fbfd24e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 79.876343][ T4350] RAX: ffffffffffffffda RBX: 00007fbfd1935f80 RCX: 00007fbfd177e719 [ 79.884328][ T4350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 79.892298][ T4350] RBP: 00007fbfd17f132e R08: 0000000000000000 R09: 0000000000000000 [ 79.900265][ T4350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.908247][ T4350] R13: 0000000000000000 R14: 00007fbfd1935f80 R15: 00007ffcbe08a9f8 [ 79.916238][ T4350] [ 79.919576][ T4350] Kernel Offset: disabled [ 79.923899][ T4350] Rebooting in 86400 seconds..