last executing test programs: 6.483095496s ago: executing program 2 (id=12): sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 6.10154307s ago: executing program 3 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) 5.58471629s ago: executing program 2 (id=14): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xe}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x11, 0x2, 0x6, 0xa, 0x13, 0xc, 0x9, 0xd, 0x3, 0x9, 0xd, 0x1, 0xc, 0x6, 0x10, 0x10], 0x1, [0x10, 0x3, 0xff, 0x4, 0xacc9, 0xfffd, 0x200, 0x6, 0x3, 0x2, 0x1, 0x5, 0x0, 0x7, 0x4, 0x9], [0x4, 0x6, 0x2, 0x8001, 0x1, 0x8, 0x5, 0x0, 0x1, 0x6d5, 0xfff, 0x7, 0xffff, 0xa, 0x5, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5.439069847s ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.41385627s ago: executing program 3 (id=15): socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0x60, 0x0, 0x0, 0x1}, {0x16, 0x2, 0x6, 0x1}]}, 0x10) 5.224257662s ago: executing program 3 (id=16): io_setup(0x4, &(0x7f00000014c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, 0x0}]) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) 5.224187202s ago: executing program 4 (id=5): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 5.221074943s ago: executing program 2 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080"], 0x22c}}, 0x0) 5.212349034s ago: executing program 1 (id=18): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) lseek(0xffffffffffffffff, 0x40000000400016, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 4.844991286s ago: executing program 3 (id=19): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYRESOCT], 0x40c}}, 0x40000) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000080)='./file0\x00', 0x100000, &(0x7f0000000ec0)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695e786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6b77e052de91b544f2f4541f87a0c0b36e8d444550b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700000000000000efc91cb7c159e08b38cc10f2df8089266243e5ca2ba8594b56f7c0415bead52813582f5bc104f9c8f85700d12128eb0656926abb814c6b02d9e060a1e948d9942ef67807de8e85a05cd5cf3658034ac4588d3778163b86c2747084ebb7eb44db9ef8d4441dd22a8c9c2bd04868aea31a408e3c1e8f", @ANYRES64], 0x6, 0x2c5, &(0x7f00000008c0)="$eJzs3U9rI2UYAPBn8mcS9ZAcPInggB48Lbt79ZIiuyD25JKDetDidkGaILRQWAVHT169ePAzCIIfxIvfQPAqeLNCYWT+pEnamDalqWh/v0Pz9J33mfeZN0M7LfTpx69OD55m8awbv0a/n0RrFKM4SWIYrZj5KpaMvg0A4L/spCjij6K2SV4SEf3tlQUAbNHVvv935uFP9Utr+6UBAFvy5P0P3t3Z3X30Xpb14/H0m+Nx+ZN9+Vof33kWn8Yk9uN+DOI0onpQ6Eb1tFCGj4uiyDtZaRhvTPPjcZk5/ejn5vw7vze/LCgNq49nTxtV/ju7jx5ktYX8vKzjxWb9Ubn+wxjEy2fJS/kPV+THOI03X1+o/14M4pdP4rOYxNOqiHn+lw+y7O3iuz+/+LAsr8xP8uNxr5o3V7Rv8W0BAAAAAAAAAAAAAAAAAAAAAOB/7l7TO6cXVf+ecqjpv9M+LT/pRjYzXO7PU+fPWvss9QcqiiKv2uXU/XXuZ1lWNBPn+Z14pbPYWBAAAAAAAAAAAAAAAAAAAADurqPnnx/sTSb7hzcSzLoBdCLirycR1z3PqAp6EbF/+Fqsn9xr1tybTFpNuDynszgS7dmcJGJtGeVF3NC2XBa8cKHmJvjhx01P2L98Tnf1WkfP29d9v/LzI7O762AvWb2HvZiN9JtFv08j5nPSuOLq6T8dKmKT2y9deWiw8W6kL1VBvmZOJOsKe+u3eueakeT8VaTVrq5M7zbBQvq5e+NK93P06/SLXysS3ToAAAAAAAAAAAAAAAAAAGCr5n/9u+Lg12tTW0Vva2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK2a////DYI8IrrNCS6ZnMbh0b98iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANwBfwcAAP//Dn5Tyg==") recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)=""/96, 0x60}, {&(0x7f0000000540)=""/153, 0x99}, {&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x5, &(0x7f0000000800)=""/25, 0x19}}], 0x1, 0x10000, &(0x7f00000036c0)={0x77359400}) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(0xffffffffffffffff, &(0x7f0000000d40)=""/27, 0x1b) 4.756197986s ago: executing program 2 (id=20): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0x0, 0x8, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x40000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r6}, 0x38) 4.690941344s ago: executing program 4 (id=21): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 4.328174467s ago: executing program 4 (id=22): sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 4.328047707s ago: executing program 3 (id=23): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) 3.213302536s ago: executing program 4 (id=24): socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0x60, 0x0, 0x0, 0x1}, {0x16, 0x2, 0x6, 0x1}]}, 0x10) 3.152722733s ago: executing program 0 (id=25): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 2.992092992s ago: executing program 2 (id=26): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xe}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x11, 0x2, 0x6, 0xa, 0x13, 0xc, 0x9, 0xd, 0x3, 0x9, 0xd, 0x1, 0xc, 0x6, 0x10, 0x10], 0x1, [0x10, 0x3, 0xff, 0x4, 0xacc9, 0xfffd, 0x200, 0x6, 0x3, 0x2, 0x1, 0x5, 0x0, 0x7, 0x4, 0x9], [0x4, 0x6, 0x2, 0x8001, 0x1, 0x8, 0x5, 0x0, 0x1, 0x6d5, 0xfff, 0x7, 0xffff, 0xa, 0x5, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.938527638s ago: executing program 3 (id=27): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write(r1, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r0, &(0x7f0000000780)=""/221, 0xfdef) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000080), 0x10) listen(r4, 0x0) r5 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)="b7", 0x1}], 0x1}}], 0x2, 0x24001844) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb3280df65", 0x800, r6}, 0x38) 2.816131723s ago: executing program 0 (id=28): io_setup(0x4, &(0x7f00000014c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, 0x0}]) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) 2.788962746s ago: executing program 1 (id=29): r0 = socket(0x2, 0x80805, 0x0) unshare(0x22020400) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000100)={0x4, 0xfffffffa, 0x1ff}, 0xc) 2.641873143s ago: executing program 1 (id=30): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xe}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x11, 0x2, 0x6, 0xa, 0x13, 0xc, 0x9, 0xd, 0x3, 0x9, 0xd, 0x1, 0xc, 0x6, 0x10, 0x10], 0x1, [0x10, 0x3, 0xff, 0x4, 0xacc9, 0xfffd, 0x200, 0x6, 0x3, 0x2, 0x1, 0x5, 0x0, 0x7, 0x4, 0x9], [0x4, 0x6, 0x2, 0x8001, 0x1, 0x8, 0x5, 0x0, 0x1, 0x6d5, 0xfff, 0x7, 0xffff, 0xa, 0x5, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 2.582179329s ago: executing program 0 (id=31): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000040000000000200000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000020000000084010500ac14143b000000000000000000000000000004d32b"], 0x23c}}, 0x0) 2.40851709s ago: executing program 2 (id=32): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 2.268177336s ago: executing program 0 (id=33): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0xff51) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1, 0x0, "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"}, &(0x7f0000000180)=0xfebd) 2.215324692s ago: executing program 1 (id=34): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2cc, &(0x7f0000000040), 0xfd, 0x4ab, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xc2800, 0x18) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x41009432, &(0x7f00000001c0)=0x800) 2.042910983s ago: executing program 0 (id=35): sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1.884114751s ago: executing program 4 (id=36): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0x0, 0x8, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r7}, 0x38) 0s ago: executing program 0 (id=37): listen(0xffffffffffffffff, 0x20) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xd4c2}, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 51.647401][ T4255] cgroup: Unknown subsys name 'net' [ 51.777823][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.065476][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.371927][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.393838][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.402446][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.411530][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.418980][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.426934][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.429955][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.434253][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.448812][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.449937][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.459296][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.464065][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.475399][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.485059][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.492519][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.492752][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.500511][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.507576][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.514612][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.522071][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.534761][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.545019][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.552893][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.560156][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.565032][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.574938][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.582417][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.604850][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.622777][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.623195][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.029361][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 55.046430][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 55.098434][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 55.115734][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 55.181477][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 55.245051][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.252280][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.260773][ T4283] device bridge_slave_0 entered promiscuous mode [ 55.298219][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.305885][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.314058][ T4283] device bridge_slave_1 entered promiscuous mode [ 55.321532][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.331227][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.339668][ T4272] device bridge_slave_0 entered promiscuous mode [ 55.352856][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.359961][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.368767][ T4276] device bridge_slave_0 entered promiscuous mode [ 55.377602][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.384750][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.392372][ T4276] device bridge_slave_1 entered promiscuous mode [ 55.409322][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.416574][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.427554][ T4269] device bridge_slave_0 entered promiscuous mode [ 55.434972][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.442073][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.449835][ T4272] device bridge_slave_1 entered promiscuous mode [ 55.484919][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.492068][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.502738][ T4269] device bridge_slave_1 entered promiscuous mode [ 55.511724][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.535436][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.547890][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.563665][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.581598][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.624316][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.639679][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.646957][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.654985][ T4279] device bridge_slave_0 entered promiscuous mode [ 55.664506][ T4283] team0: Port device team_slave_0 added [ 55.670562][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.677839][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.685703][ T4279] device bridge_slave_1 entered promiscuous mode [ 55.697010][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.708297][ T4272] team0: Port device team_slave_0 added [ 55.723217][ T4283] team0: Port device team_slave_1 added [ 55.743533][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.754288][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.766095][ T4272] team0: Port device team_slave_1 added [ 55.774116][ T4276] team0: Port device team_slave_0 added [ 55.793292][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.810417][ T4276] team0: Port device team_slave_1 added [ 55.845884][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.853047][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.880095][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.894534][ T4269] team0: Port device team_slave_0 added [ 55.907480][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.914620][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.941396][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.954106][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.961092][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.987513][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.005314][ T4269] team0: Port device team_slave_1 added [ 56.011556][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.018740][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.044752][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.068860][ T4279] team0: Port device team_slave_0 added [ 56.080064][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.087895][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.114385][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.137060][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.144094][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.170660][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.190081][ T4279] team0: Port device team_slave_1 added [ 56.222069][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.229128][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.255161][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.277819][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.286642][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.316537][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.335509][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.342482][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.368522][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.388621][ T4283] device hsr_slave_0 entered promiscuous mode [ 56.396713][ T4283] device hsr_slave_1 entered promiscuous mode [ 56.403962][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.410917][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.437399][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.451344][ T4272] device hsr_slave_0 entered promiscuous mode [ 56.458604][ T4272] device hsr_slave_1 entered promiscuous mode [ 56.465312][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.473451][ T4272] Cannot create hsr debugfs directory [ 56.499627][ T4276] device hsr_slave_0 entered promiscuous mode [ 56.506284][ T4276] device hsr_slave_1 entered promiscuous mode [ 56.512811][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.520397][ T4276] Cannot create hsr debugfs directory [ 56.581344][ T4269] device hsr_slave_0 entered promiscuous mode [ 56.588238][ T4269] device hsr_slave_1 entered promiscuous mode [ 56.594951][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.602836][ T4269] Cannot create hsr debugfs directory [ 56.633387][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 56.640075][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 56.640088][ T4273] Bluetooth: hci3: command 0x0409 tx timeout [ 56.643835][ T4279] device hsr_slave_0 entered promiscuous mode [ 56.659480][ T4279] device hsr_slave_1 entered promiscuous mode [ 56.666170][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.673777][ T4279] Cannot create hsr debugfs directory [ 56.712892][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 56.712906][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 56.983455][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.999731][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.011578][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.024283][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.048952][ T4283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.060494][ T4283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.070662][ T4283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.080665][ T4283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.160944][ T4276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.174311][ T4276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.195286][ T4276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.205180][ T4276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.264917][ T4269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.284014][ T4269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.309594][ T4269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.331122][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.354708][ T4269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.378480][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.407348][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.417735][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.438936][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.449642][ T4279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.495927][ T4279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.505736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.517943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.528681][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.535924][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.545344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.555566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.564596][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.571739][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.579487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.592513][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.613662][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.626316][ T4279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.635530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.647350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.655414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.663337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.677897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.686720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.697221][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.704438][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.712216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.721504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.730942][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.738117][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.753790][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.763856][ T4279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.778450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.787523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.798854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.814069][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.830083][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.841845][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.869532][ T4283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.880419][ T4283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.897639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.905314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.913393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.921989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.932447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.941419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.950911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.959380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.969598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.978436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.987362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.996456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.006312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.015555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.024442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.033185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.043427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.051822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.060439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.068271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.078146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.086683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.095049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.102967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.130709][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.156866][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.168782][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.179280][ T1300] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.186427][ T1300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.198253][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.218873][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.244439][ T1300] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.251665][ T1300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.268840][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.311025][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.327131][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.355503][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.381276][ T1300] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.388568][ T1300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.403360][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.412196][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.427438][ T1300] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.434574][ T1300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.443366][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.452387][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.461264][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.470207][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.479442][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.488155][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.496598][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.507202][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.516029][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.524867][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.541281][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.554679][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.580890][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.593856][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.602330][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.618700][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.628495][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.643342][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.650835][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.663792][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.677491][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.709701][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.717472][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 58.717622][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 58.723672][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 58.747845][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.765088][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.775604][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.793244][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 58.799285][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 58.804807][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.818547][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.841038][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.850735][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.859830][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.868680][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.877751][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.888393][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.896132][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.944070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.969732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.998082][ T4272] device veth0_vlan entered promiscuous mode [ 59.012094][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.037170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.053783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.080222][ T4272] device veth1_vlan entered promiscuous mode [ 59.111322][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.130056][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.154072][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.191947][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.225980][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.244518][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.263136][ T1300] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.270262][ T1300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.303800][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.340832][ T4272] device veth0_macvtap entered promiscuous mode [ 59.367569][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.378915][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.394757][ T1300] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.401953][ T1300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.410288][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.431337][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.440064][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.448196][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.457189][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.466146][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.478059][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.489820][ T4272] device veth1_macvtap entered promiscuous mode [ 59.507680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.526505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.544865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.560983][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.578895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.591568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.601543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.637701][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.658116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.668105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.677304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.687067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.696351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.705528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.714858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.731770][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.742457][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.751884][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.761437][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.771445][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.793473][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.801947][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.810585][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.823381][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.831703][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.841872][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.850935][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.859633][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.871468][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.966877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.977863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.003714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.012149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.025308][ T4269] device veth0_vlan entered promiscuous mode [ 60.034557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.042536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.050801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.060796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.090461][ T4283] device veth0_vlan entered promiscuous mode [ 60.108514][ T4269] device veth1_vlan entered promiscuous mode [ 60.117610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.126271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.134296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.172032][ T4283] device veth1_vlan entered promiscuous mode [ 60.179407][ T1300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.188625][ T1300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.204258][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.217162][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.226634][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.244549][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.257276][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.268202][ T4276] device veth0_vlan entered promiscuous mode [ 60.305899][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.317234][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.341122][ T1300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.354620][ T1300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.358086][ T4269] device veth0_macvtap entered promiscuous mode [ 60.375552][ T4276] device veth1_vlan entered promiscuous mode [ 60.387061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.397326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.408966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.426943][ T4283] device veth0_macvtap entered promiscuous mode [ 60.446729][ T4269] device veth1_macvtap entered promiscuous mode [ 60.468510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.484308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.492392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.506996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.517214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.525282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.532971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.543986][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.551617][ T4283] device veth1_macvtap entered promiscuous mode [ 60.574578][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.585852][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.598313][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.618360][ T4276] device veth0_macvtap entered promiscuous mode [ 60.637456][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.665620][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.681064][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.681245][ T4379] Zero length message leads to an empty skb [ 60.690678][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.714125][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.724303][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.767578][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.779169][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.793385][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 60.797203][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.799401][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 60.813052][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 60.829476][ T4276] device veth1_macvtap entered promiscuous mode [ 60.838953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.852268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.870009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.878314][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 60.878354][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 60.897991][ T4269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.907519][ T4269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.916660][ T4269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.926561][ T4269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.942530][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.955983][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.966456][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.976992][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.988202][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.029745][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.045706][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.074018][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.083864][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.098908][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.114819][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.136236][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.147447][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.160647][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.171713][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.183948][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.199380][ T4279] device veth0_vlan entered promiscuous mode [ 61.206701][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.216774][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.233454][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.250357][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.279880][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.291911][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.302268][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.313648][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.324322][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.335321][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.346984][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.365873][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.375699][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.402619][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.412846][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.440543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.450871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.463360][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.475123][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.485564][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.500937][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.511264][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.530191][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.541815][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.560067][ T4279] device veth1_vlan entered promiscuous mode [ 61.674578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.685308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.719964][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.756846][ T4395] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.767880][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.781747][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.792632][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.831828][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.843765][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.863983][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.941594][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.952096][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.974337][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.002229][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.016377][ T4279] device veth0_macvtap entered promiscuous mode [ 62.031661][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.033089][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.049464][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.071031][ T4279] device veth1_macvtap entered promiscuous mode [ 62.085690][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.105532][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.123191][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.150034][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.159446][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.175702][ T4400] loop2: detected capacity change from 0 to 256 [ 62.194044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.195297][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.239325][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.251054][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.263577][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.274466][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.285542][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.296670][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.307874][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.319570][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.331920][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.350549][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.377205][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.388475][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.410523][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.435547][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.436263][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.454904][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.466100][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.468731][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.477520][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.495109][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.506605][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.517099][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.536746][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.577611][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.585236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.640684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 62.649142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 62.663955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #308!!! [ 62.692787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.701413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.710194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 62.718533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 62.726858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 62.735373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 63.125827][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 63.131878][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 63.132474][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 63.193719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.204706][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 63.210747][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 63.233620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.280301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.334744][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.354485][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.389682][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.423351][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.665010][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.696849][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.745764][ T4425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'. [ 63.748659][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.985817][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.023323][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.059792][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.102057][ T4433] loop3: detected capacity change from 0 to 256 [ 64.296417][ T4263] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 64.351313][ T4433] loop3: detected capacity change from 0 to 256 [ 64.351696][ T4263] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 64.365467][ T4441] netlink: 'syz.4.21': attribute type 83 has an invalid length. [ 66.336384][ T4471] netlink: 84 bytes leftover after parsing attributes in process `syz.1.30'. [ 66.527464][ T4476] loop2: detected capacity change from 0 to 1024 [ 66.557224][ T4476] ======================================================= [ 66.557224][ T4476] WARNING: The mand mount option has been deprecated and [ 66.557224][ T4476] and is ignored by this kernel. Remove the mand [ 66.557224][ T4476] option from the mount to silence this warning. [ 66.557224][ T4476] ======================================================= [ 66.730100][ T4481] loop1: detected capacity change from 0 to 512 [ 66.858316][ T4476] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 66.882282][ T4481] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2750: inode #11: comm syz.1.34: corrupted xattr block 95 [ 67.016843][ T4481] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 68.813891][ T4481] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.34: bg 0: block 7: invalid block bitmap [ 68.839392][ T4476] ================================================================== [ 68.847585][ T4476] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x965/0x1e90 [ 68.855316][ T4476] Read of size 18446744073709551588 at addr ffff888055d62040 by task syz.2.32/4476 [ 68.864846][ T4476] [ 68.867260][ T4476] CPU: 0 PID: 4476 Comm: syz.2.32 Not tainted syzkaller #0 [ 68.874457][ T4476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.884639][ T4476] Call Trace: [ 68.887920][ T4476] [ 68.890859][ T4476] dump_stack_lvl+0x188/0x24e [ 68.895678][ T4476] ? __lock_acquire+0x7d10/0x7d10 [ 68.900710][ T4476] ? show_regs_print_info+0x12/0x12 [ 68.905956][ T4476] ? load_image+0x400/0x400 [ 68.910574][ T4476] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 68.916062][ T4476] ? __virt_addr_valid+0x188/0x540 [ 68.921175][ T4476] ? __virt_addr_valid+0x465/0x540 [ 68.926288][ T4476] ? ext4_xattr_set_entry+0x965/0x1e90 [ 68.931759][ T4476] print_report+0xa8/0x210 [ 68.936199][ T4476] kasan_report+0x10b/0x140 [ 68.940725][ T4476] ? ext4_xattr_set_entry+0x965/0x1e90 [ 68.946187][ T4476] ? ext4_xattr_set_entry+0x965/0x1e90 [ 68.951677][ T4476] kasan_check_range+0x235/0x290 [ 68.956616][ T4476] ? ext4_xattr_set_entry+0x965/0x1e90 [ 68.962145][ T4476] memmove+0x25/0x60 [ 68.966035][ T4476] ext4_xattr_set_entry+0x965/0x1e90 [ 68.971328][ T4476] ext4_xattr_block_set+0xae4/0x32b0 [ 68.976612][ T4476] ? ext4_destroy_inode+0x200/0x200 [ 68.981816][ T4476] ? proc_nr_inodes+0x2f0/0x2f0 [ 68.986693][ T4476] ? _raw_spin_unlock+0x24/0x40 [ 68.991643][ T4476] ? iput+0x768/0x980 [ 68.995654][ T4476] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 69.001148][ T4476] ? ext4_xattr_ibody_set+0x509/0x690 [ 69.007062][ T4476] ext4_xattr_set_handle+0xe3b/0x1570 [ 69.012478][ T4476] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 69.018488][ T4476] ext4_xattr_set+0x242/0x320 [ 69.023188][ T4476] ? end_current_label_crit_section+0x170/0x170 [ 69.029424][ T4476] ? ext4_xattr_set_credits+0x290/0x290 [ 69.034978][ T4476] ? evm_protect_xattr+0x7e9/0x9d0 [ 69.040139][ T4476] ? ext4_xattr_security_get+0x40/0x40 [ 69.045603][ T4476] __vfs_setxattr+0x3e0/0x420 [ 69.050283][ T4476] __vfs_setxattr_noperm+0x129/0x5e0 [ 69.055568][ T4476] vfs_setxattr+0x167/0x2e0 [ 69.060098][ T4476] ? xattr_permission+0x500/0x500 [ 69.065138][ T4476] ? _copy_from_user+0x10b/0x170 [ 69.070085][ T4476] ? setxattr+0x2ce/0x360 [ 69.074423][ T4476] setxattr+0x346/0x360 [ 69.078660][ T4476] ? path_setxattr+0x290/0x290 [ 69.083434][ T4476] ? __mnt_want_write+0x21f/0x2a0 [ 69.088467][ T4476] path_setxattr+0x147/0x290 [ 69.093064][ T4476] ? simple_xattr_list_add+0xf0/0xf0 [ 69.098346][ T4476] ? lock_chain_count+0x20/0x20 [ 69.103190][ T4476] __x64_sys_setxattr+0xb7/0xd0 [ 69.108061][ T4476] do_syscall_64+0x4c/0xa0 [ 69.112581][ T4476] ? clear_bhb_loop+0x60/0xb0 [ 69.117344][ T4476] ? clear_bhb_loop+0x60/0xb0 [ 69.122286][ T4476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.128185][ T4476] RIP: 0033:0x7f09ee59c629 [ 69.132700][ T4476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.152354][ T4476] RSP: 002b:00007f09ef437028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 69.160763][ T4476] RAX: ffffffffffffffda RBX: 00007f09ee815fa0 RCX: 00007f09ee59c629 [ 69.168732][ T4476] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 69.176706][ T4476] RBP: 00007f09ee632b39 R08: 0000000000000000 R09: 0000000000000000 [ 69.184670][ T4476] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 69.192760][ T4476] R13: 00007f09ee816038 R14: 00007f09ee815fa0 R15: 00007fffad79a9c8 [ 69.200776][ T4476] [ 69.203785][ T4476] [ 69.206100][ T4476] Allocated by task 4476: [ 69.210530][ T4476] kasan_set_track+0x4b/0x70 [ 69.215135][ T4476] __kasan_kmalloc+0x8e/0xa0 [ 69.219736][ T4476] __kmalloc_node_track_caller+0xae/0x230 [ 69.225539][ T4476] kmemdup+0x27/0x60 [ 69.229426][ T4476] ext4_xattr_block_set+0x9e6/0x32b0 [ 69.234869][ T4476] ext4_xattr_set_handle+0xe3b/0x1570 [ 69.240241][ T4476] ext4_xattr_set+0x242/0x320 [ 69.244908][ T4476] __vfs_setxattr+0x3e0/0x420 [ 69.249573][ T4476] __vfs_setxattr_noperm+0x129/0x5e0 [ 69.254854][ T4476] vfs_setxattr+0x167/0x2e0 [ 69.259378][ T4476] setxattr+0x346/0x360 [ 69.263784][ T4476] path_setxattr+0x147/0x290 [ 69.268453][ T4476] __x64_sys_setxattr+0xb7/0xd0 [ 69.273393][ T4476] do_syscall_64+0x4c/0xa0 [ 69.277824][ T4476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.283724][ T4476] [ 69.286044][ T4476] The buggy address belongs to the object at ffff888055d62000 [ 69.286044][ T4476] which belongs to the cache kmalloc-1k of size 1024 [ 69.300132][ T4476] The buggy address is located 64 bytes inside of [ 69.300132][ T4476] 1024-byte region [ffff888055d62000, ffff888055d62400) [ 69.313401][ T4476] [ 69.315708][ T4476] The buggy address belongs to the physical page: [ 69.322127][ T4476] page:ffffea0001575800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55d60 [ 69.332364][ T4476] head:ffffea0001575800 order:3 compound_mapcount:0 compound_pincount:0 [ 69.340702][ T4476] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 69.348687][ T4476] raw: 00fff00000010200 ffffea0001575c00 dead000000000002 ffff888017441dc0 [ 69.357264][ T4476] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 69.365841][ T4476] page dumped because: kasan: bad access detected [ 69.372254][ T4476] page_owner tracks the page as allocated [ 69.377957][ T4476] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4327, tgid 4327 (kworker/1:3), ts 57239566708, free_ts 12352999438 [ 69.398721][ T4476] post_alloc_hook+0x173/0x1a0 [ 69.403481][ T4476] get_page_from_freelist+0x1a1e/0x1ab0 [ 69.409022][ T4476] __alloc_pages+0x1ec/0x4f0 [ 69.413613][ T4476] alloc_slab_page+0x5d/0x160 [ 69.418392][ T4476] new_slab+0x87/0x2c0 [ 69.422751][ T4476] ___slab_alloc+0xbc6/0x1240 [ 69.427451][ T4476] __kmem_cache_alloc_node+0x1a0/0x260 [ 69.433024][ T4476] __kmalloc_node_track_caller+0x9e/0x230 [ 69.438762][ T4476] __alloc_skb+0x22a/0x7e0 [ 69.443168][ T4476] ndisc_alloc_skb+0xa6/0x450 [ 69.447834][ T4476] ndisc_send_rs+0x2a2/0x610 [ 69.452443][ T4476] addrconf_dad_completed+0x82e/0xd90 [ 69.457803][ T4476] addrconf_dad_work+0xc5a/0x14f0 [ 69.462824][ T4476] process_one_work+0x8a2/0x1160 [ 69.467758][ T4476] worker_thread+0xaa2/0x1270 [ 69.472432][ T4476] kthread+0x29d/0x330 [ 69.476483][ T4476] page last free stack trace: [ 69.481136][ T4476] free_unref_page_prepare+0x8b4/0x9a0 [ 69.486591][ T4476] free_unref_page+0x2e/0x3f0 [ 69.491375][ T4476] free_contig_range+0x9d/0x150 [ 69.496240][ T4476] destroy_args+0xf0/0xa0a [ 69.500745][ T4476] debug_vm_pgtable+0x33c/0x38e [ 69.505675][ T4476] do_one_initcall+0x26a/0x840 [ 69.510480][ T4476] do_initcall_level+0x137/0x1e4 [ 69.515437][ T4476] do_initcalls+0x4b/0x8a [ 69.519777][ T4476] kernel_init_freeable+0x415/0x5be [ 69.524988][ T4476] kernel_init+0x19/0x1b0 [ 69.529424][ T4476] ret_from_fork+0x1f/0x30 [ 69.533848][ T4476] [ 69.536156][ T4476] Memory state around the buggy address: [ 69.541789][ T4476] ffff888055d61f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.549860][ T4476] ffff888055d61f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.557925][ T4476] >ffff888055d62000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.565979][ T4476] ^ [ 69.572127][ T4476] ffff888055d62080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.580180][ T4476] ffff888055d62100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.588226][ T4476] ================================================================== [ 69.684668][ T4481] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 69.761456][ T4476] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.768716][ T4476] CPU: 1 PID: 4476 Comm: syz.2.32 Not tainted syzkaller #0 [ 69.775900][ T4476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.786098][ T4476] Call Trace: [ 69.789390][ T4476] [ 69.792341][ T4476] dump_stack_lvl+0x188/0x24e [ 69.797049][ T4476] ? memcpy+0x3c/0x60 [ 69.801045][ T4476] ? show_regs_print_info+0x12/0x12 [ 69.806341][ T4476] ? load_image+0x400/0x400 [ 69.810981][ T4476] panic+0x2e5/0x730 [ 69.814886][ T4476] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 69.821145][ T4476] ? bpf_jit_dump+0xd0/0xd0 [ 69.825646][ T4476] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 69.831619][ T4476] ? _raw_spin_unlock+0x40/0x40 [ 69.836473][ T4476] check_panic_on_warn+0x80/0xa0 [ 69.841408][ T4476] ? ext4_xattr_set_entry+0x965/0x1e90 [ 69.846861][ T4476] end_report+0x66/0x110 [ 69.851211][ T4476] kasan_report+0x118/0x140 [ 69.855737][ T4476] ? ext4_xattr_set_entry+0x965/0x1e90 [ 69.861214][ T4476] ? ext4_xattr_set_entry+0x965/0x1e90 [ 69.866773][ T4476] kasan_check_range+0x235/0x290 [ 69.871711][ T4476] ? ext4_xattr_set_entry+0x965/0x1e90 [ 69.877167][ T4476] memmove+0x25/0x60 [ 69.881138][ T4476] ext4_xattr_set_entry+0x965/0x1e90 [ 69.886451][ T4476] ext4_xattr_block_set+0xae4/0x32b0 [ 69.891733][ T4476] ? ext4_destroy_inode+0x200/0x200 [ 69.896931][ T4476] ? proc_nr_inodes+0x2f0/0x2f0 [ 69.901782][ T4476] ? _raw_spin_unlock+0x24/0x40 [ 69.906625][ T4476] ? iput+0x768/0x980 [ 69.910611][ T4476] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 69.916082][ T4476] ? ext4_xattr_ibody_set+0x509/0x690 [ 69.921492][ T4476] ext4_xattr_set_handle+0xe3b/0x1570 [ 69.926868][ T4476] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 69.932848][ T4476] ext4_xattr_set+0x242/0x320 [ 69.937556][ T4476] ? end_current_label_crit_section+0x170/0x170 [ 69.943806][ T4476] ? ext4_xattr_set_credits+0x290/0x290 [ 69.949829][ T4476] ? evm_protect_xattr+0x7e9/0x9d0 [ 69.955055][ T4476] ? ext4_xattr_security_get+0x40/0x40 [ 69.960953][ T4476] __vfs_setxattr+0x3e0/0x420 [ 69.965939][ T4476] __vfs_setxattr_noperm+0x129/0x5e0 [ 69.971235][ T4476] vfs_setxattr+0x167/0x2e0 [ 69.975734][ T4476] ? xattr_permission+0x500/0x500 [ 69.980807][ T4476] ? _copy_from_user+0x10b/0x170 [ 69.985745][ T4476] ? setxattr+0x2ce/0x360 [ 69.990189][ T4476] setxattr+0x346/0x360 [ 69.994346][ T4476] ? path_setxattr+0x290/0x290 [ 69.999110][ T4476] ? __mnt_want_write+0x21f/0x2a0 [ 70.004139][ T4476] path_setxattr+0x147/0x290 [ 70.008723][ T4476] ? simple_xattr_list_add+0xf0/0xf0 [ 70.014014][ T4476] ? lock_chain_count+0x20/0x20 [ 70.018976][ T4476] __x64_sys_setxattr+0xb7/0xd0 [ 70.023828][ T4476] do_syscall_64+0x4c/0xa0 [ 70.028259][ T4476] ? clear_bhb_loop+0x60/0xb0 [ 70.033055][ T4476] ? clear_bhb_loop+0x60/0xb0 [ 70.037729][ T4476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.043806][ T4476] RIP: 0033:0x7f09ee59c629 [ 70.048228][ T4476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.068007][ T4476] RSP: 002b:00007f09ef437028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 70.076407][ T4476] RAX: ffffffffffffffda RBX: 00007f09ee815fa0 RCX: 00007f09ee59c629 [ 70.084372][ T4476] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 70.092614][ T4476] RBP: 00007f09ee632b39 R08: 0000000000000000 R09: 0000000000000000 [ 70.100693][ T4476] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 70.108832][ T4476] R13: 00007f09ee816038 R14: 00007f09ee815fa0 R15: 00007fffad79a9c8 [ 70.116803][ T4476] [ 70.120210][ T4476] Kernel Offset: disabled [ 70.124528][ T4476] Rebooting in 86400 seconds..