last executing test programs: 12.139341146s ago: executing program 2 (id=76): ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 11.275005301s ago: executing program 2 (id=79): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x36, 0x8, 0x2, 0x12, 0x3, 0x23, 0x4, 0xbe, 0x1}) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 11.243337691s ago: executing program 2 (id=80): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000004580)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000004ac0)={0x0, 0x0, &(0x7f0000004a80)={&(0x7f0000004a40)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 1.851425179s ago: executing program 2 (id=84): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)={0x30, r1, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x30}}, 0x4) 1.8251806s ago: executing program 1 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@generic={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x10}, 0x18) 1.740913132s ago: executing program 2 (id=90): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) 1.740318922s ago: executing program 2 (id=93): setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xe, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) 1.690279743s ago: executing program 1 (id=94): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x7, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 1.549925088s ago: executing program 1 (id=97): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfe, {0x3}}, 0x14}}, 0x40000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 1.350794723s ago: executing program 1 (id=103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) 1.110253859s ago: executing program 3 (id=105): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x850) close(0x3) 1.110029789s ago: executing program 1 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x69) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001480)={&(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x441410, 0x1, 0x0, 0x9, 0x4, 0x0, 0x0, 0x20, 0xfffffffb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.106022949s ago: executing program 3 (id=107): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0xfa0, &(0x7f0000000280)={@fda={0x66646185, 0x8, 0x0, 0x15}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x2, 0x1f}}, &(0x7f0000000380)={0x0, 0x28, 0xffffffffffffff26}}, 0x1000}], 0x0, 0x0, 0x0}) 1.006499842s ago: executing program 3 (id=108): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x7, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 935.774844ms ago: executing program 3 (id=109): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc95a, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x4, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x123, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x42c2, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 546.100595ms ago: executing program 4 (id=112): syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc8, 0x4}]}}}, 0x8) 486.342857ms ago: executing program 0 (id=114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfe, {0x3}}, 0x14}}, 0x40000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 472.072107ms ago: executing program 4 (id=115): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000080)={0xa8, 0xfffffff5, 0x3, [{{0x6, 0x3, 0x1, 0x3ff, 0xa, 0xfe, {0x1, 0x8, 0x8000000000000000, 0xffff, 0x8, 0x5, 0xffffffff, 0x8000, 0xc, 0x6000, 0x8, r1, r2, 0x1, 0xdc}}, {0x4, 0x4, 0x0, 0x9}}]}, 0xa8) 394.289729ms ago: executing program 4 (id=116): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) write(r2, &(0x7f0000000480)="f480685150832b628f09b38735cbdad05616a5cfad756d098732b9fcdb6850d560a1c451642fc6574f0877f75ca297256a87102d61ed18cc570d037a2122d20aa5f5230cf50f905d38b5084601c0a2f30f4ca9ed353266a99cea3a3047218675e992046cc1dddc002befa1e0313ddeffc2d2bd138c1013f21891f240a2a83b7caba69d15aae450aef63376c2544e866e3f8a9bf1e4bcf7b2b1aabb428fab8899a7f01a9d3ade6d6b1485ecbc91c683", 0xaf) 342.94815ms ago: executing program 4 (id=117): r0 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000140)) 303.953782ms ago: executing program 0 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mount$9p_unix(0x0, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x802040, 0x0) 280.030582ms ago: executing program 1 (id=119): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0xfa0, &(0x7f0000000280)={@fda={0x66646185, 0x8, 0x0, 0x15}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x2, 0x1f}}, &(0x7f0000000380)={0x0, 0x28, 0xffffffffffffff26}}, 0x1000}], 0x0, 0x0, 0x0}) 186.306005ms ago: executing program 0 (id=120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x18, &(0x7f00000005c0)={@flat=@weak_handle={0x77682a85, 0x1101, 0x1}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x37}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 176.088465ms ago: executing program 0 (id=121): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="042c1107c8bb083300aaaaaaaaaa1102077f07007bff09"], 0x14) syz_emit_vhci(0x0, 0x23) 132.689676ms ago: executing program 0 (id=122): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 65.457198ms ago: executing program 4 (id=123): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x0, 0x0, 0x9, 0xff, 0x16c0, 0x5505, 0x8b, 0x3, 0x9, 'syz0\x00'}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) 65.078028ms ago: executing program 3 (id=124): r0 = io_uring_setup(0x3a90, &(0x7f0000000380)={0x0, 0x20007ae8, 0x1, 0x0, 0x2db}) close_range(r0, 0xffffffffffffffff, 0x0) 45.117829ms ago: executing program 0 (id=125): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 29.017749ms ago: executing program 4 (id=126): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xa00000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, &(0x7f0000000bc0)=[{&(0x7f0000000540)='\x00!', 0x2}], 0x1, 0x739, 0x1) 0s ago: executing program 3 (id=127): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x7a, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @loopback={0x57}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x6}}}}}}}}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8804) setsockopt$inet_mreqn(r2, 0x0, 0x24, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 28.618397][ T4311] cgroup: Unknown subsys name 'net' [ 28.902235][ T4311] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.168575][ T4311] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.845208][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.847152][ T4328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.848820][ T4328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.850358][ T4328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.852055][ T4328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.853309][ T4328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.854987][ T4328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.856218][ T4328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.857993][ T4328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.864001][ T4333] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.865218][ T4333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.866399][ T4333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.867603][ T4333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.869104][ T4333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.870980][ T4333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.872138][ T4333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.873402][ T4333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.875115][ T4333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.876819][ T4333] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.878136][ T4333] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.879350][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.883238][ T4339] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.884665][ T4339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.892688][ T4326] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.895625][ T4340] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.897046][ T4339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.898219][ T4339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.900812][ T4339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.902775][ T4340] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.904184][ T4340] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.036570][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 30.048969][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 30.067656][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 30.072779][ T4324] chnl_net:caif_netlink_parms(): no params data found [ 30.104361][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.105706][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.107817][ T4334] device bridge_slave_0 entered promiscuous mode [ 30.115230][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 30.128334][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.131492][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.133134][ T4334] device bridge_slave_1 entered promiscuous mode [ 30.136226][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.137483][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.139044][ T4331] device bridge_slave_0 entered promiscuous mode [ 30.142553][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.143890][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.145476][ T4324] device bridge_slave_0 entered promiscuous mode [ 30.155689][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.156892][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.158333][ T4335] device bridge_slave_0 entered promiscuous mode [ 30.160394][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.161610][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.163215][ T4335] device bridge_slave_1 entered promiscuous mode [ 30.164456][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.165718][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.167204][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.168615][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.172536][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.174093][ T4324] device bridge_slave_1 entered promiscuous mode [ 30.184535][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.187036][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.198285][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.212869][ T4334] team0: Port device team_slave_0 added [ 30.218648][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.225155][ T4324] team0: Port device team_slave_0 added [ 30.226375][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.227607][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.229184][ T4325] device bridge_slave_0 entered promiscuous mode [ 30.234868][ T4334] team0: Port device team_slave_1 added [ 30.241458][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.243445][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.244854][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.252276][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.255573][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.257933][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.260589][ T4324] team0: Port device team_slave_1 added [ 30.261751][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.263030][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.264579][ T4325] device bridge_slave_1 entered promiscuous mode [ 30.271167][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.273540][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.275408][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.276574][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.281213][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.290215][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.296906][ T4331] team0: Port device team_slave_0 added [ 30.304610][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.305769][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.310142][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.317263][ T4325] team0: Port device team_slave_0 added [ 30.319030][ T4325] team0: Port device team_slave_1 added [ 30.321026][ T4331] team0: Port device team_slave_1 added [ 30.323631][ T4335] team0: Port device team_slave_0 added [ 30.324969][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.326128][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.333104][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.340915][ T4335] team0: Port device team_slave_1 added [ 30.353799][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.355057][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.362130][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.366641][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.367833][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.372870][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.375097][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.376244][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.381001][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.383633][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.384733][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.389216][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.392012][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.393101][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.397530][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.440545][ T4334] device hsr_slave_0 entered promiscuous mode [ 30.479502][ T4334] device hsr_slave_1 entered promiscuous mode [ 30.532207][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.533408][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.537968][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.600437][ T4324] device hsr_slave_0 entered promiscuous mode [ 30.639531][ T4324] device hsr_slave_1 entered promiscuous mode [ 30.679371][ T4324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.680754][ T4324] Cannot create hsr debugfs directory [ 30.722731][ T4331] device hsr_slave_0 entered promiscuous mode [ 30.769556][ T4331] device hsr_slave_1 entered promiscuous mode [ 30.809358][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.810614][ T4331] Cannot create hsr debugfs directory [ 30.870436][ T4335] device hsr_slave_0 entered promiscuous mode [ 30.919520][ T4335] device hsr_slave_1 entered promiscuous mode [ 30.959360][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.960677][ T4335] Cannot create hsr debugfs directory [ 31.010407][ T4325] device hsr_slave_0 entered promiscuous mode [ 31.059593][ T4325] device hsr_slave_1 entered promiscuous mode [ 31.099380][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.100765][ T4325] Cannot create hsr debugfs directory [ 31.222398][ T4334] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.260389][ T4334] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.300414][ T4334] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.341919][ T4334] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.382108][ T4331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.433471][ T4331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.473483][ T4331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.515457][ T4331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.563136][ T4324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.602196][ T4324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.650480][ T4324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.707676][ T4324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.767566][ T4325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.815593][ T4325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.855245][ T4325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.890632][ T4325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.919703][ T4328] Bluetooth: hci4: command 0x0409 tx timeout [ 31.919706][ T4339] Bluetooth: hci3: command 0x0409 tx timeout [ 31.919806][ T4328] Bluetooth: hci1: command 0x0409 tx timeout [ 31.920843][ T4339] Bluetooth: hci2: command 0x0409 tx timeout [ 31.921866][ T4328] Bluetooth: hci0: command 0x0409 tx timeout [ 31.947400][ T4335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.990998][ T4335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.030396][ T4335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.076322][ T4335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.121297][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.130947][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.141591][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.143393][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.145152][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.146625][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.153673][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.157548][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.163629][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.165516][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.167688][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.168906][ T4352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.171394][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.173211][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.174799][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.176012][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.177439][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.180572][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.185465][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.192391][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.195289][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.197082][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.198703][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.199912][ T4352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.201557][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.203047][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.204558][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.208445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.210380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.213218][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.216211][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.218532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.220295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.221862][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.223100][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.224843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.241289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.242973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.244483][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.245652][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.247210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.248826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.252109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.253862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.255525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.257181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.258819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.270574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.272452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.273990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.275580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.277159][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.278303][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.280256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.282305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.284171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.296747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.298619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.302277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.303917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.305556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.307037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.308639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.311399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.316150][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.325403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.327077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.328492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.331083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.332740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.334320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.335827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.337274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.341120][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.343318][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.346249][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.369912][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.372220][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.373878][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.377128][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.391896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.394030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.400549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.402367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.403920][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.405224][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.411454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.421695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.423245][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.424385][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.427004][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.437602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.439626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.441325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.443058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.450205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.454625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.465915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.477751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.481094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.482757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.484204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.485828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.487269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.488880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.491835][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.493121][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.494877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.496726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.497986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.504344][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.508720][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.511156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.512457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.513707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.516010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.517644][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.518906][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.522189][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.534224][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.535704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.540628][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.542532][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.544290][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.545852][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.552668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.557108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.558889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.561604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.573284][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.575022][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.576554][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.578057][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.580864][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.582387][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.583915][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.585545][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.593747][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.603725][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.605405][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.607053][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.608543][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.612136][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.613631][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.625849][ T4331] device veth0_vlan entered promiscuous mode [ 32.628359][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.632001][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.633755][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.635283][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.640313][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.641591][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.653081][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.654758][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.657431][ T4334] device veth0_vlan entered promiscuous mode [ 32.659950][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.661488][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.663156][ T4324] device veth0_vlan entered promiscuous mode [ 32.666837][ T4331] device veth1_vlan entered promiscuous mode [ 32.673826][ T4334] device veth1_vlan entered promiscuous mode [ 32.676539][ T4324] device veth1_vlan entered promiscuous mode [ 32.680547][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.698562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.700353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.701803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.703236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.704753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.706310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.707832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.720143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.725285][ T4324] device veth0_macvtap entered promiscuous mode [ 32.727723][ T4324] device veth1_macvtap entered promiscuous mode [ 32.733153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.735676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.737247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.738918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.741267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.744040][ T4331] device veth0_macvtap entered promiscuous mode [ 32.746543][ T4334] device veth0_macvtap entered promiscuous mode [ 32.748955][ T4334] device veth1_macvtap entered promiscuous mode [ 32.757244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.758879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.760523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.761994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.766508][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.767984][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.772936][ T4331] device veth1_macvtap entered promiscuous mode [ 32.784035][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.788903][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.793301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.794925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.796493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.800361][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.802120][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.805020][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.806474][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.808299][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.811709][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.813471][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.815997][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.817635][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.819386][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.820894][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.822705][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.831089][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.838360][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.842679][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.844836][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.846125][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.847925][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.851054][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.852658][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.854259][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.855803][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.860328][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.861771][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.863172][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.864727][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.867354][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.869011][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.871784][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.873499][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.876206][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.883437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.885152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.887504][ T4324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.888962][ T4324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.890789][ T4324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.892232][ T4324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.897971][ T4334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.901074][ T4334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.902650][ T4334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.904119][ T4334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.907194][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.909024][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.912508][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.913881][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.916116][ T4325] device veth0_vlan entered promiscuous mode [ 32.920048][ T4325] device veth1_vlan entered promiscuous mode [ 32.935096][ T4335] device veth0_vlan entered promiscuous mode [ 32.939878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.942235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.943771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.945456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.947052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.948639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.961026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.963355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.986939][ T4335] device veth1_vlan entered promiscuous mode [ 33.005350][ T4325] device veth0_macvtap entered promiscuous mode [ 33.012550][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.013748][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.017103][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.018830][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.022100][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.023705][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.025166][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.029167][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.038469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.040301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.044976][ T4335] device veth0_macvtap entered promiscuous mode [ 33.052615][ T4325] device veth1_macvtap entered promiscuous mode [ 33.055759][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.057094][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.058545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.060295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.061946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.066051][ T4335] device veth1_macvtap entered promiscuous mode [ 33.082516][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.083753][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.088536][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.091177][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.092754][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.094566][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.096253][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.098074][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.101181][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.102508][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.103864][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.104278][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.107052][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.108674][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.110910][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.112600][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.114443][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.116785][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.120292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.121964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.123509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.125156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.126775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.128368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.130691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.139984][ T4335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.141611][ T4335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.143137][ T4335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.144582][ T4335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.146508][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.146564][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.147842][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.149159][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.159874][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.162307][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.164288][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.166028][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.167666][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.172115][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.173622][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.175251][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.176861][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.178783][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.186243][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.194248][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.196089][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.197739][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.200751][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.202363][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.204351][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.206038][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.207894][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.216422][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.217912][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.219844][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.221500][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.223151][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.244586][ T4325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.246158][ T4325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.247647][ T4325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.249138][ T4325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.262511][ T4391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.263824][ T4391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.265259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.326058][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.327436][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.332977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.367352][ T4411] loop0: detected capacity change from 0 to 8192 [ 33.378336][ T4411] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 33.381175][ T4411] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 33.383596][ T4411] REISERFS (device loop0): using ordered data mode [ 33.384783][ T4411] reiserfs: using flush barriers [ 33.386583][ T4411] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 33.389864][ T4411] REISERFS (device loop0): checking transaction log (loop0) [ 33.408027][ T4415] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 33.431733][ T4391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.433157][ T4391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.434593][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.475247][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.475509][ T4415] device syzkaller1 entered promiscuous mode [ 33.476634][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.489679][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.495638][ T4411] REISERFS (device loop0): Using tea hash to sort names [ 33.497576][ T4411] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 33.545521][ T4328] Bluetooth: hci0: hcon 00000000c3d0986c sent 1 < count 1025 [ 33.546983][ T4328] Bluetooth: hci0: hcon 000000002ab7bb73 sent 1 < count 4 [ 33.564595][ T4420] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input2 [ 33.685097][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9'. [ 34.000115][ T4328] Bluetooth: hci2: command 0x041b tx timeout [ 34.001289][ T4340] Bluetooth: hci1: command 0x041b tx timeout [ 34.001416][ T4328] Bluetooth: hci3: command 0x041b tx timeout [ 34.002253][ T4340] Bluetooth: hci4: command 0x041b tx timeout [ 34.009674][ T4339] Bluetooth: hci0: command 0x041b tx timeout [ 34.073877][ T4425] loop3: detected capacity change from 0 to 32768 [ 34.086971][ T4425] ======================================================= [ 34.086971][ T4425] WARNING: The mand mount option has been deprecated and [ 34.086971][ T4425] and is ignored by this kernel. Remove the mand [ 34.086971][ T4425] option from the mount to silence this warning. [ 34.086971][ T4425] ======================================================= [ 34.134902][ T4425] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 34.135155][ T4430] loop4: detected capacity change from 0 to 32768 [ 34.318323][ T4440] loop1: detected capacity change from 0 to 1024 [ 36.079982][ T4340] Bluetooth: hci3: command 0x040f tx timeout [ 36.081391][ T4340] Bluetooth: hci1: command 0x040f tx timeout [ 36.082789][ T4340] Bluetooth: hci2: command 0x040f tx timeout [ 36.149585][ T4340] Bluetooth: hci0: command 0x040f tx timeout [ 36.150716][ T4340] Bluetooth: hci4: command 0x040f tx timeout [ 36.257216][ T4335] ocfs2: Unmounting device (7,3) on (node local) [ 36.689412][ T4451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10'. [ 37.529256][ C0] sched: RT throttling activated [ 37.565969][ T4455] loop1: detected capacity change from 0 to 32768 [ 37.577574][ T4455] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.13 (4455) [ 37.801795][ T4455] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 37.803843][ T4455] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 37.808501][ T4455] BTRFS info (device loop1): turning on sync discard [ 37.817822][ T4455] BTRFS info (device loop1): turning on async discard [ 37.820941][ T4463] loop3: detected capacity change from 0 to 164 [ 37.823724][ T4455] BTRFS info (device loop1): using free space tree [ 37.854002][ T4463] rock: directory entry would overflow storage [ 37.855181][ T4463] rock: sig=0x4543, size=28, remaining=18 [ 37.856924][ T4461] loop0: detected capacity change from 0 to 32768 [ 37.900330][ T4461] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 37.949499][ T4455] BTRFS info (device loop1): enabling ssd optimizations [ 38.335029][ T4340] Bluetooth: hci0: command 0x0419 tx timeout [ 38.336202][ T4339] Bluetooth: hci4: command 0x0419 tx timeout [ 38.337503][ T4340] Bluetooth: hci2: command 0x0419 tx timeout [ 38.338537][ T4339] Bluetooth: hci1: command 0x0419 tx timeout [ 38.339698][ T4340] Bluetooth: hci3: command 0x0419 tx timeout [ 39.130799][ T4331] ocfs2: Unmounting device (7,0) on (node local) [ 39.283150][ T4324] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 39.294966][ T4496] loop3: detected capacity change from 0 to 1024 [ 40.535017][ T4328] Bluetooth: hci4: command 0x0409 tx timeout [ 40.612671][ T4501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16'. [ 41.064713][ T4518] cgroup: Unknown subsys name 'uid' [ 41.355774][ T4512] loop0: detected capacity change from 0 to 32768 [ 41.412640][ T4512] XFS (loop0): Mounting V5 Filesystem [ 42.398759][ T4512] XFS (loop0): Ending clean mount [ 42.565214][ T4534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21'. [ 44.254415][ T4548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22'. [ 45.442489][ T4331] XFS (loop0): Unmounting Filesystem [ 45.563200][ T4554] loop3: detected capacity change from 0 to 8192 [ 48.061163][ T4554] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 48.063577][ T4554] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 48.065245][ T4554] REISERFS (device loop3): using ordered data mode [ 48.066311][ T4554] reiserfs: using flush barriers [ 48.131390][ T4554] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.134602][ T4554] REISERFS (device loop3): checking transaction log (loop3) [ 48.142537][ T4554] REISERFS (device loop3): Using rupasov hash to sort names [ 48.143013][ T4567] loop4: detected capacity change from 0 to 32768 [ 48.143817][ T4554] REISERFS (device loop3): using 3.5.x disk format [ 48.152690][ T4554] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 48.157750][ T4554] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 48.166002][ T4554] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 48.168011][ T4554] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 48.183327][ T4567] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 48.266544][ T4572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29'. [ 49.466949][ T4578] bond0: (slave bond_slave_0): Releasing backup interface [ 49.633696][ T4586] cgroup: Unknown subsys name 'uid' [ 49.906492][ T4574] loop2: detected capacity change from 0 to 32768 [ 49.924147][ T4574] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 50.012222][ T4574] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 50.015653][ T4588] device syzkaller0 entered promiscuous mode [ 50.084653][ T4590] loop1: detected capacity change from 0 to 512 [ 50.087136][ T4590] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 50.231571][ T4599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36'. [ 50.248364][ T4599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36'. [ 50.250155][ T4599] Zero length message leads to an empty skb [ 50.311495][ T4334] ocfs2: Unmounting device (7,2) on (node local) [ 50.415502][ T4606] binder: 4605:4606 tried to acquire reference to desc 0, got 1 instead [ 50.423173][ T4606] binder: 4605:4606 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 50.425346][ T4606] binder: 4606 RLIMIT_NICE not set [ 50.426300][ T4606] binder: 4606 RLIMIT_NICE not set [ 50.428695][ T4606] binder: 4606 RLIMIT_NICE not set [ 50.430977][ T4606] binder: 4605:4606 got transaction with invalid parent offset or type [ 50.432503][ T4606] binder: 4605:4606 transaction reply to 4605:4606 failed 6/29201/-22, size 96-4000 line 3439 [ 50.434328][ T4606] binder: send failed reply for transaction 5 to 4605:4606 [ 50.449826][ T14] binder: undelivered TRANSACTION_COMPLETE [ 50.451090][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 50.452321][ T14] binder: undelivered TRANSACTION_ERROR: 29190 [ 50.666779][ T4325] ocfs2: Unmounting device (7,4) on (node local) [ 51.055869][ T4637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.49'. [ 51.071945][ T4637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.49'. [ 51.123068][ T4641] rtc-efi rtc-efi.0: write status is 3 [ 52.086187][ T4339] Bluetooth: Wrong link type (-22) [ 52.108140][ T4665] 9pnet_virtio: no channels available for device syz [ 52.915687][ T4668] binder: 4667:4668 tried to acquire reference to desc 0, got 1 instead [ 52.918882][ T4668] binder: 4667:4668 got reply transaction with no transaction stack [ 52.920739][ T4668] binder: 4667:4668 transaction reply to 0:0 failed 12/29201/-71, size 96-4000 line 2946 [ 52.929111][ T4313] binder: release 4667:4668 transaction 11 out, still active [ 52.930479][ T4313] binder: undelivered TRANSACTION_COMPLETE [ 52.931840][ T4313] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.932927][ T4313] binder: send failed reply for transaction 11, target dead [ 52.952278][ T4670] rtc-efi rtc-efi.0: write status is 3 [ 53.019108][ T4680] device syzkaller0 entered promiscuous mode [ 53.021399][ T4313] syzkaller0: tun_net_xmit 48 [ 53.025892][ T4680] syzkaller0: create flow: hash 819113538 index 1 [ 53.037272][ T4677] syzkaller0: delete flow: hash 819113538 index 1 [ 53.426503][ T4619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.505636][ T4689] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input3 [ 53.577552][ T4691] ipt_CLUSTERIP: Please specify destination IP [ 53.582769][ T4699] Bluetooth: MGMT ver 1.22 [ 53.636763][ T4704] binder: 4703:4704 tried to acquire reference to desc 0, got 1 instead [ 53.642419][ T4704] binder: 4703:4704 got reply transaction with no transaction stack [ 54.413693][ T4708] rtc-efi rtc-efi.0: write status is 3 [ 55.359964][ T4328] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 55.361644][ T4328] Bluetooth: hci0: Injecting HCI hardware error event [ 55.363122][ T4339] Bluetooth: hci0: hardware error 0x00 [ 57.519535][ T4339] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 63.888294][ T4743] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input4 [ 63.965523][ T4752] ipt_CLUSTERIP: Please specify destination IP [ 63.972570][ T4339] Bluetooth: hci3: hcon 000000003d144bf6 sent 2 < count 4 [ 64.012607][ T4755] device syzkaller0 entered promiscuous mode [ 64.162887][ T4768] device syzkaller1 entered promiscuous mode [ 64.179378][ T4371] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.364712][ T4780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 64.365117][ T4371] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 64.368301][ T4371] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 64.370132][ T4371] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 64.385334][ T4371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.395118][ T4747] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 64.481080][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.482372][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.585274][ T4792] binder: tried to use weak ref as strong ref [ 64.586510][ T4792] binder: 4791:4792 Acquire 1 refcount change on invalid ref 0 ret -22 [ 64.588124][ T4792] binder: 4791:4792 got transaction to invalid handle, 1 [ 64.589983][ T4792] binder_debug: 5 callbacks suppressed [ 64.590036][ T4792] binder: 4792:4791 cannot find target node [ 64.592096][ T4792] binder: 4791:4792 transaction call to 0:0 failed 21/29201/-22, size 0-0 line 3045 [ 64.594546][ T4792] binder: 4791:4792 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 64.596771][ T4792] binder: 4792 RLIMIT_NICE not set [ 64.597903][ T4792] binder: 4791:4792 got reply transaction with no transaction stack [ 64.612719][ T4371] usb 1-1: USB disconnect, device number 2 [ 64.629134][ T4792] binder: 4791:4792 transaction reply to 0:0 failed 22/29201/-71, size 96-4000 line 2946 [ 64.648593][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.650192][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 65.175826][ T4328] Bluetooth: hci1: hcon 00000000db72885c sent 1 < count 4 [ 65.226989][ T4811] device syzkaller1 entered promiscuous mode [ 65.409186][ T4817] 9pnet_virtio: no channels available for device syz [ 65.442263][ T4819] binder: 4818:4819 tried to acquire reference to desc 0, got 1 instead [ 65.451052][ T4819] binder_alloc: 4818: binder_alloc_buf, no vma [ 65.452211][ T4819] binder: cannot allocate buffer: vma cleared, target dead or dying [ 65.452253][ T4819] binder: 4818:4819 transaction call to 4818:0 failed 27/29189/-3, size 0-0 line 3230 [ 65.464051][ T4821] binder: 4820:4821 tried to acquire reference to desc 0, got 1 instead [ 65.466184][ T4819] binder: 4818:4819 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 65.469553][ T4821] binder: 4820:4821 got transaction with invalid offset (24, min 24 max 24) or object. [ 65.473680][ T4821] binder: 4820:4821 transaction call to 4820:0 failed 32/29201/-22, size 24-24 line 3346 [ 65.478978][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 65.516958][ T4825] binder: 4818:4825 transaction reply to 0:0 failed 33/29201/-71, size 96-4000 line 2946 [ 65.519633][ T4339] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 65.587460][ T4827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 65.592461][ T4827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.122'. [ 65.601650][ T4827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 65.603266][ T4827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.122'. [ 65.734258][ T4837] netlink: 'syz.3.127': attribute type 13 has an invalid length. [ 65.743803][ T4837] ------------[ cut here ]------------ [ 65.744886][ T4837] WARNING: CPU: 1 PID: 4837 at kernel/softirq.c:401 __local_bh_enable_ip+0x25c/0x37c [ 65.746513][ T4837] Modules linked in: [ 65.747166][ T4837] CPU: 1 PID: 4837 Comm: syz.3.127 Not tainted syzkaller #0 [ 65.748485][ T4837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 65.750290][ T4837] pstate: 224000c5 (nzCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.751670][ T4837] pc : __local_bh_enable_ip+0x25c/0x37c [ 65.752551][ T4837] lr : _raw_spin_unlock_bh+0x48/0x58 [ 65.753455][ T4837] sp : ffff8000207d6820 [ 65.754137][ T4837] x29: ffff8000207d6830 x28: dfff800000000000 x27: dfff800000000000 [ 65.755490][ T4837] x26: fffffc0003d59e80 x25: 1fffe00019b71379 x24: 0000000000000000 [ 65.756798][ T4837] x23: dfff800000000000 x22: 1fffe00019b71379 x21: ffff80000febb310 [ 65.758156][ T4837] x20: 0000000000000201 x19: ffff0000cdb89bc8 x18: ffff800011b9bf60 [ 65.759415][ T4837] x17: ffff80001835b000 x16: ffff8000082eef80 x15: ffff800017e3c000 [ 65.760752][ T4837] x14: 0000000000000001 x13: 1fffe000196522b9 x12: 0000000000000000 [ 65.762167][ T4837] x11: 0000000000000000 x10: ffff6000196522ba x9 : 0000000000000000 [ 65.763530][ T4837] x8 : 0000000100000203 x7 : 0000000000000000 x6 : 0000000000000000 [ 65.764998][ T4837] x5 : ffff8000185d34a8 x4 : 0000000000000008 x3 : ffff8000082ef094 [ 65.766406][ T4837] x2 : 0000000000000001 x1 : 0000000000000201 x0 : ffff80000febb310 [ 65.767738][ T4837] Call trace: [ 65.768319][ T4837] __local_bh_enable_ip+0x25c/0x37c [ 65.769222][ T4837] _raw_spin_unlock_bh+0x48/0x58 [ 65.770049][ T4837] page_pool_put_defragged_page+0x5d4/0x9f8 [ 65.771051][ T4837] __xdp_return+0x3ac/0x518 [ 65.771818][ T4837] xdp_return_frame+0x90/0x264 [ 65.772703][ T4837] tun_device_event+0x8e4/0xe80 [ 65.773452][ T4837] raw_notifier_call_chain+0xd4/0x164 [ 65.774359][ T4837] dev_change_tx_queue_len+0x174/0x2d4 [ 65.775305][ T4837] do_setlink+0xd18/0x3434 [ 65.776046][ T4837] rtnl_newlink+0xd04/0x1a54 [ 65.776805][ T4837] rtnetlink_rcv_msg+0x698/0xcdc [ 65.777617][ T4837] netlink_rcv_skb+0x218/0x3e8 [ 65.778400][ T4837] rtnetlink_rcv+0x28/0x38 [ 65.779120][ T4837] netlink_unicast+0x60c/0x814 [ 65.779909][ T4837] netlink_sendmsg+0x6f4/0x9c0 [ 65.780681][ T4837] ____sys_sendmsg+0x5c8/0x938 [ 65.781481][ T4837] __sys_sendmsg+0x288/0x374 [ 65.782236][ T4837] __arm64_sys_sendmsg+0x80/0x94 [ 65.783063][ T4837] invoke_syscall+0x98/0x2b4 [ 65.783812][ T4837] el0_svc_common+0x138/0x258 [ 65.784569][ T4837] do_el0_svc+0x58/0x130 [ 65.785252][ T4837] el0_svc+0x58/0x128 [ 65.785903][ T4837] el0t_64_sync_handler+0x84/0xf0 [ 65.786725][ T4837] el0t_64_sync+0x18c/0x190 [ 65.787492][ T4837] irq event stamp: 3823 [ 65.788165][ T4837] hardirqs last enabled at (3821): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 65.789922][ T4837] hardirqs last disabled at (3822): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 65.791650][ T4837] softirqs last enabled at (3788): [] inet6_fill_ifla6_attrs+0xc8c/0x1ba8 [ 65.793363][ T4837] softirqs last disabled at (3823): [] page_pool_put_defragged_page+0x2dc/0x9f8 [ 65.795101][ T4837] ---[ end trace 0000000000000000 ]--- [ 65.795987][ T4837] [ 65.796385][ T4837] ================================ [ 65.797235][ T4837] WARNING: inconsistent lock state [ 65.798072][ T4837] syzkaller #0 Tainted: G W [ 65.799025][ T4837] -------------------------------- [ 65.799854][ T4837] inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage. [ 65.801086][ T4837] syz.3.127/4837 [HC0[0]:SC0[0]:HE0:SE1] takes: [ 65.802185][ T4837] ffff0000d3fec8a0 (&r->producer_lock#2){+.?.}-{2:2}, at: tun_device_event+0x6c0/0xe80 [ 65.803860][ T4837] {IN-SOFTIRQ-W} state was registered at: [ 65.804810][ T4837] lock_acquire+0x20c/0x63c [ 65.805602][ T4837] _raw_spin_lock+0x54/0x6c [ 65.806446][ T4837] tun_net_xmit+0x9d0/0x1320 [ 65.807256][ T4837] dev_hard_start_xmit+0x234/0x8cc [ 65.808116][ T4837] sch_direct_xmit+0x210/0x474 [ 65.808990][ T4837] __dev_queue_xmit+0x13bc/0x3118 [ 65.809823][ T4837] ip6_finish_output2+0xd28/0x1840 [ 65.810698][ T4837] ip6_finish_output+0x594/0x92c [ 65.811549][ T4837] ip6_output+0x274/0x500 [ 65.812255][ T4837] ndisc_send_skb+0xc30/0x164c [ 65.813031][ T4837] ndisc_solicit+0x29c/0x52c [ 65.813791][ T4837] neigh_probe+0xc4/0x124 [ 65.814577][ T4837] neigh_timer_handler+0x7c0/0xe0c [ 65.815429][ T4837] call_timer_fn+0x1b8/0x95c [ 65.816285][ T4837] __run_timers+0x478/0x6f0 [ 65.817080][ T4837] run_timer_softirq+0x7c/0x114 [ 65.817951][ T4837] handle_softirqs+0x318/0xc60 [ 65.818798][ T4837] __do_softirq+0x14/0x20 [ 65.819569][ T4837] ____do_softirq+0x14/0x20 [ 65.820383][ T4837] call_on_irq_stack+0x30/0x48 [ 65.821213][ T4837] do_softirq_own_stack+0x20/0x2c [ 65.822097][ T4837] __irq_exit_rcu+0x23c/0x438 [ 65.822908][ T4837] irq_exit_rcu+0x14/0x84 [ 65.823672][ T4837] el1_interrupt+0x38/0x54 [ 65.824394][ T4837] el1h_64_irq_handler+0x18/0x24 [ 65.825226][ T4837] el1h_64_irq+0x64/0x68 [ 65.825973][ T4837] arch_local_irq_enable+0xc/0x18 [ 65.826871][ T4837] default_idle_call+0x68/0xd8 [ 65.827691][ T4837] do_idle+0x35c/0x600 [ 65.828409][ T4837] cpu_startup_entry+0x5c/0x74 [ 65.829226][ T4837] secondary_start_kernel+0x198/0x1bc [ 65.830198][ T4837] __secondary_switched+0xb0/0xb4 [ 65.831106][ T4837] irq event stamp: 3824 [ 65.831833][ T4837] hardirqs last enabled at (3821): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 65.833530][ T4837] hardirqs last disabled at (3822): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 65.835237][ T4837] softirqs last enabled at (3824): [] page_pool_put_defragged_page+0x5d4/0x9f8 [ 65.837061][ T4837] softirqs last disabled at (3823): [] page_pool_put_defragged_page+0x2dc/0x9f8 [ 65.838850][ T4837] [ 65.838850][ T4837] other info that might help us debug this: [ 65.840186][ T4837] Possible unsafe locking scenario: [ 65.840186][ T4837] [ 65.841438][ T4837] CPU0 [ 65.841950][ T4837] ---- [ 65.842442][ T4837] lock(&r->producer_lock#2); [ 65.843287][ T4837] [ 65.843914][ T4837] lock(&r->producer_lock#2); [ 65.844811][ T4837] [ 65.844811][ T4837] *** DEADLOCK *** [ 65.844811][ T4837] [ 65.846249][ T4837] 3 locks held by syz.3.127/4837: [ 65.847143][ T4837] #0: ffff800017890988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x650/0xcdc [ 65.848815][ T4837] #1: ffff0000d3fec920 (&r->consumer_lock){+.+.}-{2:2}, at: tun_device_event+0x69c/0xe80 [ 65.850489][ T4837] #2: ffff0000d3fec8a0 (&r->producer_lock#2){+.?.}-{2:2}, at: tun_device_event+0x6c0/0xe80 [ 65.852274][ T4837] [ 65.852274][ T4837] stack backtrace: [ 65.853274][ T4837] CPU: 1 PID: 4837 Comm: syz.3.127 Tainted: G W syzkaller #0 [ 65.854754][ T4837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 65.856422][ T4837] Call trace: [ 65.856952][ T4837] dump_backtrace+0x1c0/0x1ec [ 65.857778][ T4837] show_stack+0x2c/0x3c [ 65.858426][ T4837] __dump_stack+0x30/0x40 [ 65.859181][ T4837] dump_stack_lvl+0xf4/0x15c [ 65.859969][ T4837] dump_stack+0x1c/0x5c [ 65.860660][ T4837] print_usage_bug+0x4c0/0x6d8 [ 65.861411][ T4837] mark_lock_irq+0x850/0xab0 [ 65.862213][ T4837] mark_lock+0x224/0x320 [ 65.862943][ T4837] lockdep_hardirqs_on_prepare+0x38c/0x7a8 [ 65.863994][ T4837] trace_hardirqs_on+0x164/0x23c [ 65.864801][ T4837] __local_bh_enable_ip+0x1f8/0x37c [ 65.865640][ T4837] _raw_spin_unlock_bh+0x48/0x58 [ 65.866422][ T4837] page_pool_put_defragged_page+0x5d4/0x9f8 [ 65.867442][ T4837] __xdp_return+0x3ac/0x518 [ 65.868242][ T4837] xdp_return_frame+0x90/0x264 [ 65.869063][ T4837] tun_device_event+0x8e4/0xe80 [ 65.869866][ T4837] raw_notifier_call_chain+0xd4/0x164 [ 65.870781][ T4837] dev_change_tx_queue_len+0x174/0x2d4 [ 65.871695][ T4837] do_setlink+0xd18/0x3434 [ 65.872455][ T4837] rtnl_newlink+0xd04/0x1a54 [ 65.873237][ T4837] rtnetlink_rcv_msg+0x698/0xcdc [ 65.874070][ T4837] netlink_rcv_skb+0x218/0x3e8 [ 65.874950][ T4837] rtnetlink_rcv+0x28/0x38 [ 65.875722][ T4837] netlink_unicast+0x60c/0x814 [ 65.876623][ T4837] netlink_sendmsg+0x6f4/0x9c0 [ 65.877402][ T4837] ____sys_sendmsg+0x5c8/0x938 [ 65.878214][ T4837] __sys_sendmsg+0x288/0x374 [ 65.879017][ T4837] __arm64_sys_sendmsg+0x80/0x94 [ 65.879852][ T4837] invoke_syscall+0x98/0x2b4 [ 65.880624][ T4837] el0_svc_common+0x138/0x258 [ 65.881436][ T4837] do_el0_svc+0x58/0x130 [ 65.882208][ T4837] el0_svc+0x58/0x128 [ 65.882906][ T4837] el0t_64_sync_handler+0x84/0xf0 [ 65.883766][ T4837] el0t_64_sync+0x18c/0x190 [ 65.888606][ T4837] ------------[ cut here ]------------ [ 65.889580][ T4837] raw_local_irq_restore() called with IRQs enabled [ 65.890719][ T4837] WARNING: CPU: 1 PID: 4837 at kernel/locking/irqflag-debug.c:10 warn_bogus_irq_restore+0x34/0x44 [ 65.892514][ T4837] Modules linked in: [ 65.893138][ T4837] CPU: 1 PID: 4837 Comm: syz.3.127 Tainted: G W syzkaller #0 [ 65.894605][ T4837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 65.896402][ T4837] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.897775][ T4837] pc : warn_bogus_irq_restore+0x34/0x44 [ 65.898707][ T4837] lr : warn_bogus_irq_restore+0x34/0x44 [ 65.899644][ T4837] sp : ffff8000207d6980 [ 65.900395][ T4837] x29: ffff8000207d6980 x28: 0000000000000000 x27: 1fffe0001a7fd930 [ 65.901754][ T4837] x26: 0000000000000000 x25: dfff800000000000 x24: 1fffe0001a7fd931 [ 65.903156][ T4837] x23: 0000000000000000 x22: ffff0000ce146600 x21: ffff0000d3fec988 [ 65.904571][ T4837] x20: ffff0000d3fec908 x19: 0000000000000000 x18: ffff800011b9bf60 [ 65.905975][ T4837] x17: 0000000000000000 x16: ffff80000804309c x15: 0000000000000002 [ 65.907336][ T4837] x14: 0000000000000001 x13: 1ffff000040fac80 x12: 0000000000080000 [ 65.908668][ T4837] x11: 000000000007ffff x10: ffff80002acf3000 x9 : 356b20b5bc056900 [ 65.909962][ T4837] x8 : 356b20b5bc056900 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.911309][ T4837] x5 : ffff8000207d6418 x4 : ffff800015304cc0 x3 : ffff800008319678 [ 65.912605][ T4837] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 [ 65.914004][ T4837] Call trace: [ 65.914568][ T4837] warn_bogus_irq_restore+0x34/0x44 [ 65.915466][ T4837] _raw_spin_unlock_irqrestore+0xa0/0xac [ 65.916403][ T4837] tun_device_event+0xbf8/0xe80 [ 65.917249][ T4837] raw_notifier_call_chain+0xd4/0x164 [ 65.918176][ T4837] dev_change_tx_queue_len+0x174/0x2d4 [ 65.919146][ T4837] do_setlink+0xd18/0x3434 [ 65.919927][ T4837] rtnl_newlink+0xd04/0x1a54 [ 65.920692][ T4837] rtnetlink_rcv_msg+0x698/0xcdc [ 65.921522][ T4837] netlink_rcv_skb+0x218/0x3e8 [ 65.922330][ T4837] rtnetlink_rcv+0x28/0x38 [ 65.923044][ T4837] netlink_unicast+0x60c/0x814 [ 65.923877][ T4837] netlink_sendmsg+0x6f4/0x9c0 [ 65.924705][ T4837] ____sys_sendmsg+0x5c8/0x938 [ 65.925505][ T4837] __sys_sendmsg+0x288/0x374 [ 65.926293][ T4837] __arm64_sys_sendmsg+0x80/0x94 [ 65.927161][ T4837] invoke_syscall+0x98/0x2b4 [ 65.927972][ T4837] el0_svc_common+0x138/0x258 [ 65.928774][ T4837] do_el0_svc+0x58/0x130 [ 65.929526][ T4837] el0_svc+0x58/0x128 [ 65.930276][ T4837] el0t_64_sync_handler+0x84/0xf0 [ 65.931136][ T4837] el0t_64_sync+0x18c/0x190 [ 65.931941][ T4837] irq event stamp: 3824 [ 65.932704][ T4837] hardirqs last enabled at (3821): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 65.934578][ T4837] hardirqs last disabled at (3822): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 65.936288][ T4837] softirqs last enabled at (3824): [] page_pool_put_defragged_page+0x5d4/0x9f8 [ 65.938115][ T4837] softirqs last disabled at (3823): [] page_pool_put_defragged_page+0x2dc/0x9f8 [ 65.939979][ T4837] ---[ end trace 0000000000000000 ]--- [ 65.953919][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.956908][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.958357][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.609520][ T3429] cfg80211: failed to load regulatory.db