last executing test programs: 5.035548066s ago: executing program 4 (id=133): r0 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.642823243s ago: executing program 0 (id=138): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xc, 0x0, 0xb49, 0x2, 0xc, 0x53, 0x80000003}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x24040084) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x18}, 0x10) 4.477052525s ago: executing program 4 (id=140): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x402, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100}, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 4.384873787s ago: executing program 4 (id=141): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_init(0x200, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 4.294843718s ago: executing program 2 (id=143): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00fe150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x4000810) 4.286638809s ago: executing program 4 (id=144): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB='@7\r'], 0x0, 0x0, 0x0, 0x0}) 4.19638826s ago: executing program 2 (id=145): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x5}}, './file0\x00'}) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={r2, 0x9}, 0xc) 4.103006122s ago: executing program 2 (id=146): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) lseek(r0, 0x8000000, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) unshare(0x14060680) 4.073308832s ago: executing program 2 (id=147): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r0, &(0x7f0000000080), 0x0, 0x2702, 0x0, 0x0) 4.026904173s ago: executing program 2 (id=148): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0xfffffffb, @mcast1, 0x4}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) 3.751083467s ago: executing program 1 (id=149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001000000bf35ff4c6d0f446cac678e0ace15d6d59ab0dc"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 3.727065968s ago: executing program 1 (id=150): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRES32], 0x48) 3.62278803s ago: executing program 4 (id=152): socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x7) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 3.62259492s ago: executing program 1 (id=153): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) readv(r1, &(0x7f00000000c0), 0x9) 3.475049092s ago: executing program 2 (id=154): r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x840000000002, 0x3, 0x6) connect$unix(r4, &(0x7f0000002e80)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000680)={0x60000001}) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r6, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000004100)=""/4088, 0xff8}], 0x1}, 0x3}], 0x1, 0x3fffede1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x238, 0x1c8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30}, {[0x5, 0x3ff]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x9, 0x56, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x7, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb0}}, 0xd5) wait4(0x0, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b0, 0x98, 0x0, 0x248, 0x358, 0x358, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @loopback, 0xff, 0xffffff00, 'ip6gre0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x33, 0x1, 0xa}, 0x0, 0xd8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x7, 0x1, 0x1, 0x4, 0x1d], 0x0, 0x6}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x0, 'macvlan1\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x1d}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 2.610895607s ago: executing program 0 (id=159): syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x200720, &(0x7f0000000580)={[{@grpid}, {@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0xa81}}, {@nogrpid}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x9}}, {@barrier}]}, 0x0, 0x465, &(0x7f0000000f00)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r0 = openat(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fadvise64(r0, 0x12fff, 0x4101, 0x3) clock_gettime(0x0, &(0x7f0000000180)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x143042, 0x13) sendfile(r5, r5, 0x0, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000008800), 0x0, 0x40012000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newnexthop={0x2c, 0x68, 0x3, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x4}, [@NHA_GROUP={0x14, 0x2, [{0x2, 0x2}, {0x6, 0xb}]}]}, 0x2c}, 0x1, 0x2000000000000000}, 0x40000c0) chdir(&(0x7f0000000400)='./file0\x00') syz_io_uring_setup(0x7676, &(0x7f0000000380)={0x0, 0x22e6, 0x1000, 0x2, 0x16}, 0x0, 0x0) 1.642500143s ago: executing program 0 (id=160): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) munlock(&(0x7f00006cc000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) setgroups(0x0, 0x0) getgroups(0x0, &(0x7f0000000100)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100", 0xba) 712.030648ms ago: executing program 0 (id=161): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$int_in(r0, 0x5452, 0x0) 612.10113ms ago: executing program 0 (id=163): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xade) 547.205201ms ago: executing program 1 (id=164): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x3c, 0x27, 0xb, 0x12, 0xa, 0xee67, 0x2, 0xe2, 0xffffffffffffffff}) 427.015803ms ago: executing program 0 (id=165): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{r1, 0x9300}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 426.639333ms ago: executing program 1 (id=166): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x9, 0xd9fd0b6af39c5966) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 383.773744ms ago: executing program 3 (id=167): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950036000000000018400000feffffff480000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xc6, &(0x7f0000000100)=""/198, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 270.103736ms ago: executing program 3 (id=168): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/222, 0xde, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x40}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 219.079797ms ago: executing program 1 (id=169): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) 218.746997ms ago: executing program 4 (id=170): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) 122.743988ms ago: executing program 3 (id=171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r0, &(0x7f0000000c80), &(0x7f0000000d80)=""/209}, 0x20) 89.561619ms ago: executing program 3 (id=172): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x14, 0x800b}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x5, 0x7, 0x8, 0x8000, 0x7, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) 15.08009ms ago: executing program 3 (id=173): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@random={'btrfs.', 'nogrpid'}) 0s ago: executing program 3 (id=174): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x28, r0, 0x801, 0x70bd2c, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 36.247918][ T4285] cgroup: Unknown subsys name 'net' [ 36.535611][ T4285] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 36.919123][ T4285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.977319][ T4297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.980564][ T4297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.983385][ T4297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.986290][ T4297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.988889][ T4297] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.991359][ T4297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.035518][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.038297][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.040938][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.043642][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.045999][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 38.048137][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.060974][ T4299] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.063850][ T4299] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.070085][ T4297] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.073448][ T4297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.082351][ T4304] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 38.086878][ T4299] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.121035][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 38.123449][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.126561][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 38.128918][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.130800][ T4310] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 38.133888][ T4310] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 38.136329][ T4304] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 38.138461][ T4304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 38.141693][ T4304] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.148743][ T4304] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.151667][ T4304] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 38.154034][ T4304] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.283577][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 38.331224][ T4302] chnl_net:caif_netlink_parms(): no params data found [ 38.392526][ T4300] chnl_net:caif_netlink_parms(): no params data found [ 38.399037][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.401612][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.404258][ T4295] device bridge_slave_0 entered promiscuous mode [ 38.409429][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.412027][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.414452][ T4295] device bridge_slave_1 entered promiscuous mode [ 38.428341][ T4305] chnl_net:caif_netlink_parms(): no params data found [ 38.461874][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.466252][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.471085][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.473089][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.475470][ T4302] device bridge_slave_0 entered promiscuous mode [ 38.496368][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.498512][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.501256][ T4302] device bridge_slave_1 entered promiscuous mode [ 38.522210][ T4295] team0: Port device team_slave_0 added [ 38.539286][ T4302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.543086][ T4295] team0: Port device team_slave_1 added [ 38.545119][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.547234][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.549865][ T4300] device bridge_slave_0 entered promiscuous mode [ 38.562010][ T4302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.577416][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.579532][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.582403][ T4300] device bridge_slave_1 entered promiscuous mode [ 38.602925][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.604939][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.612488][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.630957][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.632860][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.640047][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.648405][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.656171][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.658650][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.661451][ T4305] device bridge_slave_0 entered promiscuous mode [ 38.666574][ T4302] team0: Port device team_slave_0 added [ 38.676340][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.682646][ T4302] team0: Port device team_slave_1 added [ 38.692845][ T4306] chnl_net:caif_netlink_parms(): no params data found [ 38.700860][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.702844][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.705303][ T4305] device bridge_slave_1 entered promiscuous mode [ 38.763001][ T4295] device hsr_slave_0 entered promiscuous mode [ 38.810930][ T4295] device hsr_slave_1 entered promiscuous mode [ 38.865363][ T4300] team0: Port device team_slave_0 added [ 38.870996][ T4300] team0: Port device team_slave_1 added [ 38.902129][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.904172][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.911720][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.926711][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.929681][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.932424][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.940131][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.953479][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.955549][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.963012][ T4300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.967874][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.987341][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.989272][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.000695][ T4300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.035464][ T4305] team0: Port device team_slave_0 added [ 39.072061][ T4302] device hsr_slave_0 entered promiscuous mode [ 39.115757][ T4302] device hsr_slave_1 entered promiscuous mode [ 39.150712][ T4302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.153021][ T4302] Cannot create hsr debugfs directory [ 39.162480][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.164695][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.167526][ T4306] device bridge_slave_0 entered promiscuous mode [ 39.177401][ T4305] team0: Port device team_slave_1 added [ 39.192960][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.195001][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.197578][ T4306] device bridge_slave_1 entered promiscuous mode [ 39.272381][ T4300] device hsr_slave_0 entered promiscuous mode [ 39.310836][ T4300] device hsr_slave_1 entered promiscuous mode [ 39.350783][ T4300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.352899][ T4300] Cannot create hsr debugfs directory [ 39.387664][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.389615][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.397179][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.405025][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.407013][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.414255][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.419258][ T4306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.431175][ T4306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.476195][ T4306] team0: Port device team_slave_0 added [ 39.481173][ T4306] team0: Port device team_slave_1 added [ 39.532994][ T4305] device hsr_slave_0 entered promiscuous mode [ 39.570784][ T4305] device hsr_slave_1 entered promiscuous mode [ 39.610667][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.612758][ T4305] Cannot create hsr debugfs directory [ 39.645294][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.647367][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.654771][ T4306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.684702][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.686691][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.694322][ T4306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.710131][ T4295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.766695][ T4295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.802717][ T4295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.844109][ T4295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.962532][ T4306] device hsr_slave_0 entered promiscuous mode [ 40.000941][ T4306] device hsr_slave_1 entered promiscuous mode [ 40.050807][ T4306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.053144][ T4306] Cannot create hsr debugfs directory [ 40.061263][ T4304] Bluetooth: hci0: command 0x0409 tx timeout [ 40.132386][ T4302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.140723][ T4304] Bluetooth: hci1: command 0x0409 tx timeout [ 40.140918][ T4299] Bluetooth: hci2: command 0x0409 tx timeout [ 40.175058][ T4302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.220678][ T4302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.220877][ T4297] Bluetooth: hci3: command 0x0409 tx timeout [ 40.223168][ T4299] Bluetooth: hci4: command 0x0409 tx timeout [ 40.262888][ T4302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.322602][ T4300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.352985][ T4300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.407654][ T4300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.463209][ T4300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.519882][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.542824][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.546204][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.556401][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.574340][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.577157][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.580176][ T1704] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.582282][ T1704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.592618][ T4305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.646286][ T4305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.682204][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.688164][ T4305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.738064][ T4305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.792288][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.795521][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.798563][ T1704] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.800685][ T1704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.824454][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.832253][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.840372][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.852548][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.855502][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.859294][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.865255][ T4306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.906846][ T4306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.942508][ T4306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.983473][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.985687][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.988564][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.996820][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.999386][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.003982][ T4306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.045407][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.059800][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.062903][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.065752][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.068356][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.072063][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.074751][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.077265][ T1704] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.079270][ T1704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.082048][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.086497][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.094373][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.098481][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.119755][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.123300][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.125962][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.127944][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.141307][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.144388][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.156190][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.159218][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.164011][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.167071][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.186929][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.189824][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.193139][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.196006][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.198786][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.202269][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.204914][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.206897][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.209243][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.223866][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.227041][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.229670][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.231761][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.235864][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.238682][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.254650][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.258178][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.267679][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.273308][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.276433][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.279123][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.289565][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.299814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.303469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.306549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.309356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.326892][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.329662][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.339802][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.351391][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.353690][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.355848][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.358330][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.365834][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.392426][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.412787][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.415594][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.418519][ T1704] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.420538][ T1704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.426495][ T4306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.433471][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.435999][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.438644][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.457517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.460296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.464142][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.466168][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.483217][ T4306] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.486937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.489769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.497375][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.516635][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.519349][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.525359][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.528265][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.530335][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.540193][ T4295] device veth0_vlan entered promiscuous mode [ 41.544991][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.547407][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.549791][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.552888][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.556072][ T1704] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.558083][ T1704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.561775][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.564550][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.567073][ T1704] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.569047][ T1704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.572255][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.575210][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.577913][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.581863][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.595136][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.599110][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.602559][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.605219][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.608033][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.623292][ T4295] device veth1_vlan entered promiscuous mode [ 41.629007][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.633884][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.636140][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.638327][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.643611][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.646317][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.658344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.661283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.663968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.666730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.674339][ T4305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.677934][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.684584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.687236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.689918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.708925][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.717795][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.721339][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.725611][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.728345][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.736716][ T4306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.740022][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.756618][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.759366][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.763995][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.766941][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.776662][ T4295] device veth0_macvtap entered promiscuous mode [ 41.792107][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.794760][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.797508][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.814096][ T4295] device veth1_macvtap entered promiscuous mode [ 41.830251][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.833542][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.836024][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.867718][ T4302] device veth0_vlan entered promiscuous mode [ 41.870360][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.873299][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.879035][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.887178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.890052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.896763][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.913736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.916622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.933260][ T4295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.935730][ T4295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.938094][ T4295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.940925][ T4295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.946037][ T4302] device veth1_vlan entered promiscuous mode [ 41.963565][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.966355][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.969028][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.972774][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.975570][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.978277][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.986132][ T4300] device veth0_vlan entered promiscuous mode [ 41.992741][ T4300] device veth1_vlan entered promiscuous mode [ 42.009586][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.017848][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.021073][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.023284][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.025458][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.027556][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.034664][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.044889][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.087391][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.090323][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.107772][ T4302] device veth0_macvtap entered promiscuous mode [ 42.116095][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.118902][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.122631][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.131668][ T4302] device veth1_macvtap entered promiscuous mode [ 42.137104][ T4300] device veth0_macvtap entered promiscuous mode [ 42.141042][ T4304] Bluetooth: hci0: command 0x041b tx timeout [ 42.147421][ T4300] device veth1_macvtap entered promiscuous mode [ 42.156398][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.158696][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.163694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.167378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.170010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.178325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.196423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.199404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.219784][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.223473][ T4299] Bluetooth: hci1: command 0x041b tx timeout [ 42.226894][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.233937][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.236212][ T4299] Bluetooth: hci2: command 0x041b tx timeout [ 42.240999][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.243815][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.244269][ T321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.249058][ T321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.250345][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.257933][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.262381][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.269719][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.273829][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.276630][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.280929][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.283635][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.288036][ T4302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.290950][ T4302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.293308][ T4302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.295741][ T4302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.300944][ T4299] Bluetooth: hci3: command 0x041b tx timeout [ 42.301066][ T4304] Bluetooth: hci4: command 0x041b tx timeout [ 42.306661][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.309497][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.313735][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.316565][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.320374][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.324485][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.327137][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.329671][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.337960][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.348818][ T4305] device veth0_vlan entered promiscuous mode [ 42.361967][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.364955][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.367745][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.372030][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.375864][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.378047][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.382742][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.406534][ T4305] device veth1_vlan entered promiscuous mode [ 42.410230][ T4300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.413796][ T4300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.416267][ T4300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.418631][ T4300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.431625][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.472869][ T27] audit: type=1326 audit(42.410:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba35a7a8 code=0x7ffc0000 [ 42.478910][ T27] audit: type=1326 audit(42.410:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=51 compat=0 ip=0xffffba35a7a8 code=0x7ffc0000 [ 42.499138][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.502143][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.524552][ T27] audit: type=1326 audit(42.410:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba35a7a8 code=0x7ffc0000 [ 42.580851][ T1704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.583141][ T1704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.589258][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.594453][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.597363][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.601625][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.604456][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.607847][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.610362][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.630964][ T4306] device veth0_vlan entered promiscuous mode [ 42.638394][ T4305] device veth0_macvtap entered promiscuous mode [ 42.648479][ T4305] device veth1_macvtap entered promiscuous mode [ 42.655196][ T1704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.657553][ T1704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.661694][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.664359][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.666841][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.689462][ T4306] device veth1_vlan entered promiscuous mode [ 42.707498][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.715126][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.718102][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.722001][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.724806][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.727816][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.733466][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.743244][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.745927][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.749234][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.768439][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.777433][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.780337][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.785372][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.788324][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.792087][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.796271][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.820143][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.824259][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.827139][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.851093][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.853528][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.866617][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.872278][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.882198][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.910200][ T4305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.916245][ T4305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.927295][ T4305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.933258][ T4305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.954299][ T4306] device veth0_macvtap entered promiscuous mode [ 42.973595][ T1704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.976039][ T1704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.979926][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.982880][ T179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.991859][ T4306] device veth1_macvtap entered promiscuous mode [ 43.063812][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.074216][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.080374][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.087002][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.094027][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.100435][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.109171][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.115540][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.124719][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.140348][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.151187][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.153946][ T1704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.204553][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.215981][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.226810][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.235764][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.245182][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.255871][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.264880][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.275339][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.292159][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.294361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.297344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.317762][ T4306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.320348][ T4306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.342104][ T4306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.344639][ T4306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.377293][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.387176][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.409464][ T4380] loop3: detected capacity change from 0 to 32768 [ 43.419362][ T4380] ======================================================= [ 43.419362][ T4380] WARNING: The mand mount option has been deprecated and [ 43.419362][ T4380] and is ignored by this kernel. Remove the mand [ 43.419362][ T4380] option from the mount to silence this warning. [ 43.419362][ T4380] ======================================================= [ 43.423550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.508981][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.520877][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.524432][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.560696][ T4380] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 43.663304][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.665641][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.679224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.725214][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.727536][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.730970][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.925010][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 43.949234][ T4382] loop0: detected capacity change from 0 to 32768 [ 43.991831][ T4382] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4382) [ 44.051523][ T4382] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 44.054774][ T4382] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 44.057037][ T4382] BTRFS info (device loop0): using free space tree [ 44.230620][ T4297] Bluetooth: hci0: command 0x040f tx timeout [ 44.300620][ T4297] Bluetooth: hci2: command 0x040f tx timeout [ 44.302433][ T4297] Bluetooth: hci1: command 0x040f tx timeout [ 44.362520][ T4382] BTRFS info (device loop0): enabling ssd optimizations [ 44.384241][ T4304] Bluetooth: hci4: command 0x040f tx timeout [ 44.386048][ T4304] Bluetooth: hci3: command 0x040f tx timeout [ 44.625647][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 44.663178][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 44.696826][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 44.742882][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 44.747629][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 44.801935][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 44.806362][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 45.048054][ T4300] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 45.074865][ T4422] Zero length message leads to an empty skb [ 45.434112][ T4302] ocfs2: Unmounting device (7,3) on (node local) [ 45.840837][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 46.025866][ T4386] loop2: detected capacity change from 0 to 131072 [ 46.035172][ T14] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 46.038689][ T14] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 46.044039][ T14] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 46.046689][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.090255][ T4386] F2FS-fs (loop2): invalid crc value [ 46.129128][ T4386] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.176537][ T4386] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 46.209602][ T4386] F2FS-fs (loop2): access invalid blkaddr:2147563524 [ 46.215612][ T4386] CPU: 0 PID: 4386 Comm: syz.2.3 Not tainted 6.1.141-syzkaller #0 [ 46.217897][ T4386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 46.220694][ T4386] Call trace: [ 46.221620][ T4386] dump_backtrace+0x1c8/0x1f4 [ 46.222923][ T4386] show_stack+0x2c/0x3c [ 46.224130][ T4386] __dump_stack+0x30/0x40 [ 46.225361][ T4386] dump_stack_lvl+0xf8/0x160 [ 46.226713][ T4386] dump_stack+0x1c/0x5c [ 46.227859][ T4386] f2fs_is_valid_blkaddr+0x9fc/0xf5c [ 46.229276][ T4386] sanity_check_extent_cache+0xfc/0x2e8 [ 46.230843][ T4386] f2fs_iget+0x2cfc/0x472c [ 46.232093][ T4386] f2fs_lookup+0x3d4/0x8e4 [ 46.233299][ T4386] __lookup_slow+0x24c/0x370 [ 46.234575][ T4386] lookup_slow+0x5c/0x80 [ 46.235770][ T4386] walk_component+0x270/0x364 [ 46.237052][ T4386] path_lookupat+0x13c/0x3d0 [ 46.238289][ T4386] filename_lookup+0x190/0x42c [ 46.239661][ T4386] kern_path+0x48/0x6c [ 46.240811][ T4386] unix_find_other+0xe0/0x760 [ 46.242137][ T4386] unix_dgram_sendmsg+0x710/0x1268 [ 46.243514][ T4386] ____sys_sendmsg+0x5b8/0x918 [ 46.244845][ T4386] __sys_sendmmsg+0x2f8/0x754 [ 46.246115][ T4386] __arm64_sys_sendmmsg+0xa0/0xbc [ 46.247506][ T4386] invoke_syscall+0x98/0x2bc [ 46.248752][ T4386] el0_svc_common+0x138/0x258 [ 46.249978][ T4386] do_el0_svc+0x58/0x13c [ 46.251211][ T4386] el0_svc+0x58/0x138 [ 46.252330][ T4386] el0t_64_sync_handler+0x84/0xf0 [ 46.253724][ T4386] el0t_64_sync+0x18c/0x190 [ 46.305625][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 46.320636][ T4386] F2FS-fs (loop2): sanity_check_extent_cache: inode (ino=8) extent info [14338, 0, 2147549187] is incorrect, run fsck to fix [ 46.381009][ T4304] Bluetooth: hci1: command 0x0419 tx timeout [ 46.382724][ T4304] Bluetooth: hci2: command 0x0419 tx timeout [ 46.460629][ T4297] Bluetooth: hci3: command 0x0419 tx timeout [ 46.462437][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 47.561257][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.566094][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.152817][ T4475] mmap: syz.3.22 (4475) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.238222][ T4480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.248421][ T4480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.569576][ T22] usb 1-1: USB disconnect, device number 2 [ 48.955087][ T4499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.967941][ T4499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.980835][ T4502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.993214][ T4502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.308171][ T4500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.322336][ T4500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.385977][ T4510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.388544][ T4510] device batadv_slave_0 entered promiscuous mode [ 49.786075][ T4520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.41'. [ 49.934188][ T4527] netlink: 'syz.4.42': attribute type 6 has an invalid length. [ 49.939864][ T4525] nvme_fabrics: missing parameter 'transport=%s' [ 49.947157][ T4525] nvme_fabrics: missing parameter 'nqn=%s' [ 50.420612][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 50.455822][ T4541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.477341][ T4541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.600534][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 50.604261][ T22] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 50.607375][ T22] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 50.616133][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.631974][ T22] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 50.639123][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.646096][ T22] usb 1-1: Product: syz [ 50.650117][ T22] usb 1-1: Manufacturer: syz [ 50.654674][ T22] usb 1-1: SerialNumber: syz [ 50.670315][ T22] usb 1-1: config 0 descriptor?? [ 50.685272][ T22] appledisplay 1-1:0.0: Could not find int-in endpoint [ 50.694010][ T22] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 50.767301][ T4547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.778170][ T4547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.170368][ T4307] usb 1-1: USB disconnect, device number 3 [ 53.647901][ T4588] syz.3.60 uses obsolete (PF_INET,SOCK_PACKET) [ 55.337638][ T4616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.340382][ T4616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.725324][ T4629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.738975][ T4629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.839388][ T4635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.846481][ T4635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.983851][ T4637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.986423][ T4637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.402307][ T4647] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 56.515147][ T4649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.519691][ T4649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.712600][ T4658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.81'. [ 56.734835][ T4658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.81'. [ 56.980660][ T1515] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 57.160674][ T1515] usb 1-1: Using ep0 maxpacket: 8 [ 57.165001][ T1515] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.167932][ T1515] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 57.171122][ T1515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.176154][ T1515] usb 1-1: config 0 descriptor?? [ 57.195154][ T1515] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 57.659102][ T4671] libceph: resolve '4..' (ret=-3): failed [ 58.421349][ T4690] netlink: 'syz.4.97': attribute type 3 has an invalid length. [ 58.800370][ T1515] gspca_vc032x: reg_w err -71 [ 58.801883][ T1515] vc032x: probe of 1-1:0.0 failed with error -71 [ 58.809679][ T1515] usb 1-1: USB disconnect, device number 4 [ 59.381428][ T4706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.102'. [ 59.407217][ T4709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.409770][ T4709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.425743][ T4709] loop6: detected capacity change from 0 to 7 [ 59.440347][ T4709] Dev loop6: unable to read RDB block 7 [ 59.449813][ T4709] loop6: AHDI p2 [ 59.451573][ T4709] loop6: partition table partially beyond EOD, truncated [ 59.543087][ T4715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.552220][ T4715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.567043][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 60.188814][ T27] audit: type=1326 audit(60.120:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55a7a8 code=0x7ffc0000 [ 60.200272][ T27] audit: type=1326 audit(60.130:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffae55a7a8 code=0x7ffc0000 [ 60.217198][ T27] audit: type=1326 audit(60.150:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55a7a8 code=0x7ffc0000 [ 60.240730][ T27] audit: type=1326 audit(60.150:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=201 compat=0 ip=0xffffae55a7a8 code=0x7ffc0000 [ 60.249577][ T27] audit: type=1326 audit(60.150:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4726 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae55a7a8 code=0x7ffc0000 [ 60.409230][ T4737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.418611][ T4737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.551262][ T4743] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 60.790543][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 60.990868][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 60.993735][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 60.996962][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 60.999539][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.027064][ T24] usb 1-1: config 0 descriptor?? [ 61.239804][ T24] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 61.493251][ T22] usb 1-1: USB disconnect, device number 5 [ 61.495160][ C1] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 61.567570][ T4767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.570065][ T4767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.595286][ T4769] device netdevsim0 entered promiscuous mode [ 61.839235][ T4779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.843500][ T4779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.866487][ T4781] netlink: 44 bytes leftover after parsing attributes in process `syz.2.132'. [ 61.908202][ T4783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.915935][ T4783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.961974][ T4785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.965908][ T4785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.099587][ T4788] process 'syz.0.136' launched './file0' with NULL argv: empty string added [ 62.469212][ T4800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.501012][ T4800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.572112][ T4804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.578269][ T4804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.616356][ T4808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.619387][ T4806] netlink: 'syz.2.143': attribute type 6 has an invalid length. [ 62.625081][ T4808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.490008][ T4837] loop3: detected capacity change from 0 to 256 [ 63.607768][ T4839] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 63.617869][ T4839] Cannot find set identified by id 0 to match [ 64.291689][ T4848] loop0: detected capacity change from 0 to 512 [ 64.621750][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.623775][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.262475][ T4865] loop3: detected capacity change from 0 to 256 [ 66.302924][ T4865] FAT-fs (loop3): Directory bread(block 64) failed [ 66.304961][ T4865] FAT-fs (loop3): Directory bread(block 65) failed [ 66.306737][ T4865] FAT-fs (loop3): Directory bread(block 66) failed [ 66.308514][ T4865] FAT-fs (loop3): Directory bread(block 67) failed [ 66.310236][ T4865] FAT-fs (loop3): Directory bread(block 68) failed [ 66.346893][ T4865] FAT-fs (loop3): Directory bread(block 69) failed [ 66.348865][ T4865] FAT-fs (loop3): Directory bread(block 70) failed [ 66.370565][ T4865] FAT-fs (loop3): Directory bread(block 71) failed [ 66.372580][ T4865] FAT-fs (loop3): Directory bread(block 72) failed [ 66.374327][ T4865] FAT-fs (loop3): Directory bread(block 73) failed [ 66.666110][ T4882] loop4: detected capacity change from 0 to 1024 [ 66.673871][ T4882] EXT4-fs: Ignoring removed oldalloc option [ 66.676215][ T4882] EXT4-fs: Ignoring removed orlov option [ 66.685836][ T4883] binder: 4880:4883 tried to acquire reference to desc 0, got 1 instead [ 66.688401][ T4883] binder: 4880:4883 ioctl c0306201 200003c0 returned -14 [ 66.698351][ T14] binder: release 4880:4883 transaction 5 out, still active [ 66.703252][ T14] binder: undelivered TRANSACTION_COMPLETE [ 66.723807][ T4882] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.725107][ T14] binder: send failed reply for transaction 5, target dead [ 66.878224][ T4882] ================================================================== [ 66.880621][ T4882] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x275c/0x39c4 [ 66.882963][ T4882] Read of size 4 at addr ffff0000fad31c18 by task syz.4.170/4882 [ 66.885139][ T4882] [ 66.885799][ T4882] CPU: 1 PID: 4882 Comm: syz.4.170 Not tainted 6.1.141-syzkaller #0 [ 66.888004][ T4882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.890989][ T4882] Call trace: [ 66.891868][ T4882] dump_backtrace+0x1c8/0x1f4 [ 66.893309][ T4882] show_stack+0x2c/0x3c [ 66.894445][ T4882] __dump_stack+0x30/0x40 [ 66.895668][ T4882] dump_stack_lvl+0xf8/0x160 [ 66.896856][ T4882] print_address_description+0x88/0x220 [ 66.898593][ T4882] print_report+0x50/0x68 [ 66.899881][ T4882] kasan_report+0xa8/0x100 [ 66.901128][ T4882] __asan_report_load4_noabort+0x2c/0x38 [ 66.902733][ T4882] ext4_ext_remove_space+0x275c/0x39c4 [ 66.904132][ T4882] ext4_ext_truncate+0x164/0x20c [ 66.905485][ T4882] ext4_truncate+0x9dc/0x1078 [ 66.906815][ T4882] ext4_setattr+0xda8/0x150c [ 66.908111][ T4882] notify_change+0xb0c/0xdcc [ 66.909438][ T4882] do_truncate+0x178/0x1f0 [ 66.910696][ T4882] vfs_truncate+0x23c/0x2b0 [ 66.911997][ T4882] do_sys_truncate+0xe8/0x1b0 [ 66.913351][ T4882] __arm64_sys_truncate+0x5c/0x70 [ 66.914789][ T4882] invoke_syscall+0x98/0x2bc [ 66.916095][ T4882] el0_svc_common+0x138/0x258 [ 66.917519][ T4882] do_el0_svc+0x58/0x13c [ 66.918702][ T4882] el0_svc+0x58/0x138 [ 66.919843][ T4882] el0t_64_sync_handler+0x84/0xf0 [ 66.921290][ T4882] el0t_64_sync+0x18c/0x190 [ 66.922551][ T4882] [ 66.923227][ T4882] The buggy address belongs to the physical page: [ 66.924939][ T4882] page:0000000067d5d6c7 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x13ad31 [ 66.927922][ T4882] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 66.929914][ T4882] raw: 05ffc00000000000 dead000000000100 dead000000000122 0000000000000000 [ 66.932309][ T4882] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 66.934712][ T4882] page dumped because: kasan: bad access detected [ 66.936586][ T4882] [ 66.937215][ T4882] Memory state around the buggy address: [ 66.938818][ T4882] ffff0000fad31b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.941050][ T4882] ffff0000fad31b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.943301][ T4882] >ffff0000fad31c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.945660][ T4882] ^ [ 66.946954][ T4882] ffff0000fad31c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.949168][ T4882] ffff0000fad31d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.951447][ T4882] ================================================================== [ 66.970102][ T4882] Disabling lock debugging due to kernel taint [ 66.987795][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 69.679407][ T111] cfg80211: failed to load regulatory.db