last executing test programs: 10.641485868s ago: executing program 3 (id=112): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) getpid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, 0x0, 0x48000) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6c, &(0x7f0000000380)={0x1, 0x0, 0x7}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r6, 0x26, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r7, &(0x7f00000001c0)={'syz0\x00', {0x6, 0xffff, 0x1, 0x2}, 0x38, [0x2, 0x7, 0x3, 0x6, 0xffffb8f5, 0x9, 0xd2e, 0x3, 0x1f8, 0x400, 0x4, 0x4, 0x3, 0x388, 0x4, 0x4, 0x6, 0x5, 0x80000001, 0xf, 0x800, 0x10000, 0x2, 0x3260, 0x3, 0x5, 0xaecc, 0x6, 0x9, 0x48c37a26, 0x3, 0x6, 0x2616, 0x4, 0x0, 0x6, 0x6b2, 0x3, 0x800, 0x6, 0x2, 0xfe, 0x400, 0x4, 0x7, 0x0, 0xa19, 0x1, 0x4, 0xff, 0x6, 0x81, 0x58842711, 0x2, 0x3, 0x5, 0x9, 0x7fffffff, 0x616e, 0x1d13, 0x9a, 0x1911, 0x9, 0x2], [0x7, 0x4, 0x1, 0x7, 0xff6, 0xfffff000, 0x8, 0x1, 0x1, 0x4, 0x4, 0x5, 0x3, 0x8, 0x2, 0x60, 0x0, 0x10001, 0xeae8, 0x1000, 0xffffffff, 0x0, 0x10000, 0x6aa, 0x5, 0x4b, 0x0, 0x9, 0x7ff, 0x0, 0x10, 0x685, 0x75, 0x8, 0x6, 0x6, 0xd0, 0x8, 0x9, 0x3ff, 0x80, 0x10001, 0x3d5, 0x7, 0x8, 0x81, 0x4, 0x4dd, 0x7, 0x4, 0x5, 0x4, 0x8, 0xfffeffff, 0x81, 0x10e, 0xe, 0x5, 0xfff, 0x8, 0xb8, 0x7, 0xfffffff8, 0x4], [0x8, 0xffffffff, 0x6, 0xff, 0x4, 0x100, 0x8, 0x1cad, 0xffffffff, 0xcdc3, 0x9, 0x0, 0x3, 0x1c000000, 0xff3, 0x6, 0xd8f, 0x8, 0x4, 0x8, 0x3, 0x5806, 0xa5, 0x6, 0x5, 0x4, 0x1, 0x9, 0x2, 0x7f, 0x3ef3, 0x339f, 0x2a, 0x101, 0x6, 0x296, 0xd, 0x40, 0x6, 0xea4, 0x5b, 0x7, 0x2, 0x5, 0x3, 0x1, 0xffffffff, 0xee6d, 0x0, 0x2, 0x8, 0x7, 0x100, 0x3, 0x253, 0x100, 0x1000, 0x3, 0xb21b, 0x2800000, 0x3, 0x7, 0x5, 0x4], [0x6d39, 0x5, 0xfffffffb, 0x1, 0x3, 0x0, 0x1, 0x7, 0x7cda67e6, 0x6, 0x5, 0xd, 0xe, 0x7, 0x5, 0xfffffff1, 0x0, 0x5, 0x400, 0x10001, 0x0, 0x7, 0x2, 0x2, 0xa459, 0xfff, 0x9, 0x4, 0x5, 0x1, 0x5, 0x6, 0x79, 0x10, 0x1, 0x0, 0x8, 0x3, 0x6, 0x8, 0x0, 0xfffffff9, 0x100, 0x6, 0x776, 0x2e7, 0xfffffff7, 0x8f, 0x9, 0x2, 0x10001, 0x55e, 0x7, 0x5, 0x9, 0x1, 0x0, 0xffff, 0x96, 0x5fb, 0x1, 0x6, 0x0, 0x5]}, 0x45c) 7.149890654s ago: executing program 0 (id=155): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup3(r0, r1, 0x80000) getsockname$packet(r2, 0x0, 0x0) 7.149655184s ago: executing program 0 (id=156): ftruncate(0xffffffffffffffff, 0xc17a) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) timer_create(0x0, &(0x7f0000000300)={0x0, 0x18, 0x3, @thr={0x0, 0x0}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) readv(r0, &(0x7f0000000300), 0x1) sendmmsg$inet6(r1, &(0x7f0000002bc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="c6262b239bd39c39126712a9369f300be85a458af7c9404bc0fc74c22caa9fee818b55ff7154bf260bc2368fdfccf0b7bb237769c34f230576ce0a664403ce74ded8", 0x42}], 0x1}}], 0x2, 0x2000c8c0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="93503d", 0x3}], 0x1}}], 0x1, 0x40) 6.302342128s ago: executing program 0 (id=168): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0xe, 0x4, "bf7ad941"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000700)={0x40, 0xd, 0x4, "c414a166"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000480)={0x0, 0x12, 0x4, "e1255b96"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x40, 0x16, 0x10, "1e8078ba6a0d4b1a1bde308422031e70"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xda}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x5}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 6.160784461s ago: executing program 2 (id=171): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) timer_create(0x9, 0x0, &(0x7f00000000c0)) 6.093423991s ago: executing program 2 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x1e0e8f2, 0x0) 5.921869534s ago: executing program 2 (id=174): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x20004}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)=""/4098, 0x1002}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000000880)=""/247, 0xd}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000640)=""/198, 0xcc}, {&(0x7f0000000100)=""/82, 0x52}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000980)=""/157, 0x9d}, {&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000040)=""/64, 0x40}], 0xa}, 0x6}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) 5.846720725s ago: executing program 2 (id=177): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200ffffffff0000000006002b00020300000000000000000000fe880000000000000000000000000001fe"], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 5.772648386s ago: executing program 2 (id=178): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x80400) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) 5.673939108s ago: executing program 2 (id=179): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f00000002c0)) 3.209495958s ago: executing program 0 (id=207): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000420000014000100ff010006000000000000000000000001150002"], 0x44}}, 0x0) 3.148065999s ago: executing program 0 (id=209): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xcc, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 3.016258841s ago: executing program 0 (id=214): pipe2$9p(&(0x7f00000001c0), 0x0) syz_usb_connect(0x0, 0x1c8, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0xa2, 0xfd, 0x69, 0x10, 0xdba, 0x3000, 0x4b4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b6, 0x1, 0x3, 0x7f, 0x40, 0x7, [{{0x9, 0x4, 0x41, 0x4, 0x7, 0x11, 0x62, 0xac, 0x9, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0x3, 0x8}, {0x6, 0x24, 0x1a, 0xfff7, 0x19}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x6372, 0x6b, 0x5, 0x3ff, 0x80}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x5, 0x100}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0xf7, 0x7, 0x10}, @dmm={0x7, 0x24, 0x14, 0x5, 0x9a2}]}], [{{0x9, 0x5, 0xa, 0x2, 0x10, 0x7, 0x6, 0x6, [@generic={0x83, 0x48, "fa436e802c254ea8358897bb21106cc6e8f75366426c1a229740200559b693474d85078e935c29fad7b205fa07ae98c4725a0fd95919ea2a20318531f34bcbde9b1c8961f9e51ad5a9ab7defd59b8a5a06856f420e2f0bbb225addfc7c1723c771c679417c417652953f08bd8985438140d88ef16751595dd55523db181d208d1f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xfff0}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x10, 0x9, 0x9}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x8, 0x7, 0x0, [@generic={0x15, 0xf, "3d84da2b174b67f7440b5c6355ce0d6069a9af"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x5}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x4, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0x8, 0x8, 0xff}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x6, 0x3, 0x0, [@generic={0x7b, 0x2, "5f5af1abd939819f52fdbb2d106cd05c5afb45b27bee9b901d4ddd979abf38b72406f3badf4a007d377a3506c82125a65bbbaf4f7be27c1ed24ba52cfcc87b830cd8aaa578230fed89b4a8e53da0293db80118cce591b7b236d70ce147ad9b1675cdfe446a9caad16f894d81e2e58710645c67e162d6bded2a"}]}}, {{0x9, 0x5, 0x0, 0xa, 0x40, 0x6, 0xcd, 0xa}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xfe, 0xbc, 0x1, 0x10, 0x3}, 0x0, 0x0}) 2.834307484s ago: executing program 1 (id=218): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={r0, r2, 0x0, 0x0, 0x0, 0xc1, 0x4, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2.808001765s ago: executing program 1 (id=219): syslog(0x2, &(0x7f0000000000)=""/4096, 0x1000) 2.521245029s ago: executing program 1 (id=221): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@empty, 0x4d4, 0x33}, @in=@rand_addr=0x64010100, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x20000000}, {}, {0x0, 0x40000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf5}, 0x8, 0xffffffff}}, 0xf8}, 0x1, 0x0, 0x0, 0x840}, 0x4) 2.49259896s ago: executing program 1 (id=222): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f00000005c0)="46b83076ca", 0x5, 0x0, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0}, 0x14) 2.257783363s ago: executing program 1 (id=223): timer_gettime(0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) io_setup(0x3, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r3, 0x3, r2, 0x0, 0x80000}) 1.702916852s ago: executing program 4 (id=224): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x1a) 824.704997ms ago: executing program 4 (id=225): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000003c40)={0x8, "eefda9"}, 0x6) 717.871538ms ago: executing program 4 (id=226): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12}}) 704.046179ms ago: executing program 4 (id=227): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x10, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0xe}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x5}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000007c0)={0x40, 0x4, 0x9b, {0x9b, 0x11, "940ecdcf9fbe4beba792017db3d284206fd57349060c04876b98cfe6fa20ca5b1b26f97b06bd9f8c3d0aae865b0c6bbe5b1429bc05120a287b68404077a3bbfa05c251770fbe13ad1fe488d219a94eb9d6eb8258b518e5402216716a6609b6f9ef71cb65bb64c0ec252b4cbc865e9da6efa522c97737b15ee7b3a3fd285ed280b6d8c309693df47f7bb1fd401dcc3303489fdafbf9ddbae3d7"}}, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x9, 0x1, "b776ede4", "9aeb7e32"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf7, 0x18, 0x3, 0x2, 0xe3, 0x1, 0x4}}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 516.700582ms ago: executing program 1 (id=228): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xfe) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) 173.983117ms ago: executing program 3 (id=229): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) 164.597677ms ago: executing program 3 (id=230): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)="de54"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000100), 0x4) 154.395978ms ago: executing program 4 (id=231): ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xffffffc1) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.cpu_exclusive\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$cgroup_int(r1, &(0x7f0000000040), 0x1) 52.266909ms ago: executing program 3 (id=232): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x1, {{@in6=@local, @in=@rand_addr=0x64010101, 0x0, 0x2400, 0x1000, 0x0, 0x2, 0x0, 0x20, 0x84}, {0x0, 0x0, 0x0, 0xd07}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x20000, 0x0, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 51.954289ms ago: executing program 4 (id=233): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x80000003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x3}, @acquire={0x40046305, 0x2}, @decrefs, @exit_looper], 0x46, 0x0, &(0x7f0000000180)="82fb08845d47d086b86a963e29d06b7fdf324a5b4308cf2e938979a240c5590f827382864dca0256b617a0d40d62db4313f6aeb92bb44d7d2b05629633e93300dd39c53fc55f"}) 25.95788ms ago: executing program 3 (id=234): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x2}) 0s ago: executing program 3 (id=235): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x1, {{@in6=@local, @in=@rand_addr=0x64010101, 0x0, 0x2400, 0x1000, 0x0, 0x2, 0x0, 0x20, 0x84}, {0x0, 0x0, 0x0, 0xd07}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x20000, 0x0, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001d"], 0x188}}, 0x0) 0s ago: executing program 0 (id=236): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x57) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x10000}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.188' (ED25519) to the list of known hosts. [ 39.838246][ T4027] cgroup: Unknown subsys name 'net' [ 40.080992][ T4027] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 40.450408][ T4027] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 42.396185][ T4037] chnl_net:caif_netlink_parms(): no params data found [ 42.446084][ T4040] chnl_net:caif_netlink_parms(): no params data found [ 42.474470][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 42.498528][ T4046] chnl_net:caif_netlink_parms(): no params data found [ 42.545359][ T4047] chnl_net:caif_netlink_parms(): no params data found [ 42.552467][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.554512][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.557973][ T4037] device bridge_slave_0 entered promiscuous mode [ 42.564358][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.571323][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.574140][ T4037] device bridge_slave_1 entered promiscuous mode [ 42.595174][ T4040] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.597131][ T4040] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.599872][ T4040] device bridge_slave_0 entered promiscuous mode [ 42.629448][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.631523][ T4040] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.634302][ T4040] device bridge_slave_1 entered promiscuous mode [ 42.686909][ T4037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.689688][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.691699][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.694440][ T4044] device bridge_slave_0 entered promiscuous mode [ 42.714131][ T4040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.718857][ T4040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.722899][ T4037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.727429][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.729429][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.732054][ T4044] device bridge_slave_1 entered promiscuous mode [ 42.746103][ T4046] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.748174][ T4046] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.750840][ T4046] device bridge_slave_0 entered promiscuous mode [ 42.771183][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.773318][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.776188][ T4047] device bridge_slave_0 entered promiscuous mode [ 42.784798][ T4046] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.787245][ T4046] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.789849][ T4046] device bridge_slave_1 entered promiscuous mode [ 42.805888][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.810773][ T4037] team0: Port device team_slave_0 added [ 42.814537][ T4040] team0: Port device team_slave_0 added [ 42.816845][ T4047] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.818911][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.821515][ T4047] device bridge_slave_1 entered promiscuous mode [ 42.831872][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.835921][ T4037] team0: Port device team_slave_1 added [ 42.845007][ T4040] team0: Port device team_slave_1 added [ 42.899955][ T4044] team0: Port device team_slave_0 added [ 42.903713][ T4046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.907140][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.909122][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.916983][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.928309][ T4047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.931164][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.933124][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.941154][ T4040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.945916][ T4044] team0: Port device team_slave_1 added [ 42.948061][ T4040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.950029][ T4040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.957799][ T4040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.963015][ T4046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.966068][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.967949][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.975245][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.986255][ T4047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.026925][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.028970][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.036858][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.043288][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.051446][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.059291][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.064708][ T4046] team0: Port device team_slave_0 added [ 43.068530][ T4047] team0: Port device team_slave_0 added [ 43.092896][ T4046] team0: Port device team_slave_1 added [ 43.097068][ T4047] team0: Port device team_slave_1 added [ 43.157599][ T4037] device hsr_slave_0 entered promiscuous mode [ 43.195377][ T4037] device hsr_slave_1 entered promiscuous mode [ 43.276914][ T4040] device hsr_slave_0 entered promiscuous mode [ 43.315349][ T4040] device hsr_slave_1 entered promiscuous mode [ 43.355125][ T4040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.357375][ T4040] Cannot create hsr debugfs directory [ 43.391929][ T4046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.393876][ T4046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.401501][ T4046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.411483][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.413366][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.424311][ T4047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.437793][ T4046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.439705][ T4046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.446947][ T4046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.497216][ T4044] device hsr_slave_0 entered promiscuous mode [ 43.535372][ T4044] device hsr_slave_1 entered promiscuous mode [ 43.575110][ T4044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.577276][ T4044] Cannot create hsr debugfs directory [ 43.579274][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.581231][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.588720][ T4047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.756886][ T4046] device hsr_slave_0 entered promiscuous mode [ 43.795352][ T4046] device hsr_slave_1 entered promiscuous mode [ 43.834965][ T4046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.837206][ T4046] Cannot create hsr debugfs directory [ 43.877059][ T4047] device hsr_slave_0 entered promiscuous mode [ 43.915305][ T4047] device hsr_slave_1 entered promiscuous mode [ 43.955247][ T4047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.957419][ T4047] Cannot create hsr debugfs directory [ 44.135713][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 44.137942][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 44.139680][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 44.145317][ T25] Bluetooth: hci1: command 0x0409 tx timeout [ 44.147045][ T25] Bluetooth: hci2: command 0x0409 tx timeout [ 44.167361][ T4037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.232892][ T4037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.286930][ T4037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.331527][ T4037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.409541][ T4040] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.448230][ T4040] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.502705][ T4040] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.570199][ T4040] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.648634][ T4047] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 44.688193][ T4047] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 44.728939][ T4047] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 44.790340][ T4047] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.886798][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.900381][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.903269][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.915140][ T4046] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.969384][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.973422][ T4046] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.027449][ T4046] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.071724][ T4046] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.139942][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.143045][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.149187][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.151462][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.154384][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.178996][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.182026][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.184816][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.186880][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.190406][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.193322][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.197898][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.200764][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.203514][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.208386][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.212424][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.222041][ T4044] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.277386][ T4044] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.320964][ T4040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.332789][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.335916][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.339704][ T4044] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.390999][ T4037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.394546][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.406122][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.408932][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.411679][ T4044] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.446336][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.448962][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.459436][ T4040] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.466381][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.469177][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.471860][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.473814][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.483185][ T4047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.492553][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.503240][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.507572][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.510137][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.512162][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.562469][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.565869][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.568402][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.571311][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.573450][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.599418][ T4046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.606482][ T4047] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.610742][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.623555][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.631375][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.639768][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.642637][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.646800][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.649423][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.651466][ T1836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.669657][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.672537][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.676529][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.678984][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.681473][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.684324][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.687756][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.689860][ T1836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.706036][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.708978][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.711866][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.714787][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.718497][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.721133][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.723729][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.728068][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.730710][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.738960][ T4046] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.747778][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.758948][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.762170][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.773281][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.775204][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.778557][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.781677][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.784429][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.788539][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.790536][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.807107][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.809740][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.812907][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.818194][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.821146][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.823946][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.857645][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.860667][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.868823][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.871688][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.883284][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.887892][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.890812][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.893524][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.896855][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.899668][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.911190][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.917519][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.919657][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.922447][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.933335][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.938013][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.940615][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.944386][ T4037] device veth0_vlan entered promiscuous mode [ 45.957404][ T4046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.960238][ T4046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.970854][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.975912][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.982895][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.989803][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.992605][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.025892][ T4037] device veth1_vlan entered promiscuous mode [ 46.041866][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.044625][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.048901][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.051478][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.075991][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.078951][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.081132][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.089871][ T4040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.096948][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.099754][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.102585][ T555] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.104569][ T555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.110762][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.121093][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.123322][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.150900][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.153694][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.158810][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.160801][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.170873][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.174050][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.182562][ T4047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.194441][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.197550][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.200473][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.203716][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.215117][ T3619] Bluetooth: hci2: command 0x041b tx timeout [ 46.217626][ T3619] Bluetooth: hci1: command 0x041b tx timeout [ 46.221560][ T3619] Bluetooth: hci0: command 0x041b tx timeout [ 46.224630][ T3619] Bluetooth: hci3: command 0x041b tx timeout [ 46.242298][ T4037] device veth0_macvtap entered promiscuous mode [ 46.247086][ T3619] Bluetooth: hci4: command 0x041b tx timeout [ 46.252217][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.255121][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.257259][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.259392][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.262332][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.266278][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.278920][ T4037] device veth1_macvtap entered promiscuous mode [ 46.282848][ T4046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.305808][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.308651][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.311497][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.315577][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.318642][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.321426][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.324490][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.327984][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.330412][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.334741][ T4040] device veth0_vlan entered promiscuous mode [ 46.348129][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.350787][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.367958][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.383234][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.387994][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.390898][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.393629][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.398121][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.413141][ T4040] device veth1_vlan entered promiscuous mode [ 46.427921][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.430129][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.432900][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.440139][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.466243][ T4037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.468746][ T4037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.471062][ T4037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.473422][ T4037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.479161][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.481900][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.484718][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.498173][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.500969][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.526251][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.528849][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.541655][ T4046] device veth0_vlan entered promiscuous mode [ 46.559289][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.562163][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.571203][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.573906][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.578747][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.581307][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.616424][ T4040] device veth0_macvtap entered promiscuous mode [ 46.619256][ T4047] device veth0_vlan entered promiscuous mode [ 46.642759][ T4046] device veth1_vlan entered promiscuous mode [ 46.655209][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.658019][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.660314][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.672946][ T4040] device veth1_macvtap entered promiscuous mode [ 46.689158][ T4047] device veth1_vlan entered promiscuous mode [ 46.718905][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.721674][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.724473][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.734294][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.738800][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.743149][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.751514][ T555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.753732][ T555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.760421][ T4046] device veth0_macvtap entered promiscuous mode [ 46.764068][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.769317][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.774097][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.778917][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.782758][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.806857][ T555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.809276][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.812246][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.814772][ T555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.819795][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.822675][ T4040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.827321][ T4040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.831182][ T4040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.851242][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.854377][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.859928][ T4046] device veth1_macvtap entered promiscuous mode [ 46.884245][ T4040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.887646][ T4040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.890023][ T4040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.892350][ T4040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.899375][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.902076][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.911826][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.914694][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.919431][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.961914][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.973151][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.976905][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.979784][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.984002][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.993296][ T4047] device veth0_macvtap entered promiscuous mode [ 47.001944][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.004765][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.016496][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.018891][ T4144] loop0: detected capacity change from 0 to 2048 [ 47.027450][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.030462][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.033076][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.044066][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.052577][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.075394][ T4145] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 47.083172][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.086601][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.090804][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.098194][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.103223][ T4044] device veth0_vlan entered promiscuous mode [ 47.111096][ T4047] device veth1_macvtap entered promiscuous mode [ 47.121242][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.125734][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.128329][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.146413][ T4144] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 47.153194][ T4046] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.157836][ T4046] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.160151][ T4046] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.162555][ T4046] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.166426][ T4144] Remounting filesystem read-only [ 47.173150][ T4144] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.186141][ T4044] device veth1_vlan entered promiscuous mode [ 47.205081][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.207932][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.210658][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.214075][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.218595][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.221391][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.228215][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.229808][ T4037] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 47.260423][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.263060][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.266254][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.268991][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.282373][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.287013][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.289664][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.292514][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.296875][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.299692][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.303800][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.382833][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.386234][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.399739][ T4147] loop0: detected capacity change from 0 to 4096 [ 47.430078][ T4047] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.432591][ T4047] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.435767][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.438431][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.441660][ T4047] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.444083][ T4047] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.447641][ T4147] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 47.483936][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.487382][ T4147] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 47.489849][ T4147] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 47.494019][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.496335][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.517249][ T4147] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 47.520708][ T4147] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 47.539169][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.541725][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.544465][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.549022][ T4147] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 47.551412][ T4147] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 47.564450][ T4147] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 47.567812][ T4147] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 47.601894][ T4147] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 47.607939][ T4147] ntfs: volume version 3.1. [ 47.619266][ T4044] device veth0_macvtap entered promiscuous mode [ 47.632098][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.634321][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.639328][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.642013][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.654729][ T4044] device veth1_macvtap entered promiscuous mode [ 47.706153][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.708386][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.751838][ T555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.754117][ T555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.759374][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.772047][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.828482][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.831394][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.834004][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.866114][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.868942][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.871871][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.876988][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.879814][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.906959][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.922370][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.926412][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.938195][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.940549][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.956748][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.968782][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.971703][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.974443][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.024965][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.027799][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.030597][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.033175][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.056045][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.067228][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.120162][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.123051][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.205860][ T4158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 48.908940][ T4157] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 48.915519][ T4148] Bluetooth: hci4: command 0x040f tx timeout [ 48.918278][ T4148] Bluetooth: hci3: command 0x040f tx timeout [ 48.920075][ T4148] Bluetooth: hci0: command 0x040f tx timeout [ 48.921817][ T4148] Bluetooth: hci1: command 0x040f tx timeout [ 48.923575][ T4148] Bluetooth: hci2: command 0x040f tx timeout [ 48.992248][ T4044] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.994692][ T4044] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.024539][ T4044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.028107][ T4044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.042772][ T4165] binder: 4164:4165 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 49.073604][ T4165] binder: 4165 RLIMIT_NICE not set [ 49.189093][ T4169] loop0: detected capacity change from 0 to 512 [ 49.248595][ T4165] loop1: detected capacity change from 0 to 2048 [ 49.268826][ T4169] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.281250][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.283542][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.298405][ T4165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 49.305306][ T1836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.307682][ T1836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.310856][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.336488][ T1836] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.363443][ T4167] loop4: detected capacity change from 0 to 32768 [ 49.378722][ T4169] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #17: comm syz.0.8: iget: bad i_size value: -6917529027641081756 [ 49.383201][ T4169] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.8: couldn't read orphan inode 17 (err -117) [ 49.388320][ T4169] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 49.410496][ T4169] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.8: bg 0: block 65: padding at end of block bitmap is not set [ 49.420980][ T4167] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.5 (4167) [ 49.430044][ T4169] EXT4-fs error (device loop0): ext4_acquire_dquot:6207: comm syz.0.8: Failed to acquire dquot type 0 [ 49.508616][ T4167] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 49.511245][ T4167] BTRFS info (device loop4): using free space tree [ 49.513046][ T4167] BTRFS info (device loop4): has skinny extents [ 49.694207][ T4193] fuse: Bad value for 'fd' [ 49.786619][ T4167] BTRFS info (device loop4): enabling ssd optimizations [ 49.873673][ T4207] fuse: Bad value for 'fd' [ 50.093834][ T4218] capability: warning: `syz.2.19' uses deprecated v2 capabilities in a way that may be insecure [ 50.409306][ T4235] udc-core: couldn't find an available UDC or it's busy [ 50.411614][ T4235] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 50.531920][ T4186] loop3: detected capacity change from 0 to 32768 [ 51.550712][ T3619] Bluetooth: hci2: command 0x0419 tx timeout [ 51.553041][ T3619] Bluetooth: hci1: command 0x0419 tx timeout [ 51.555344][ T3619] Bluetooth: hci0: command 0x0419 tx timeout [ 51.557310][ T3619] Bluetooth: hci3: command 0x0419 tx timeout [ 51.559035][ T3619] Bluetooth: hci4: command 0x0419 tx timeout [ 51.781256][ T4270] input: syz1 as /devices/virtual/input/input3 [ 51.989824][ T4276] udc-core: couldn't find an available UDC or it's busy [ 51.991782][ T4276] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 52.066703][ T4282] binder: 4281:4282 transaction failed 29189/-22, size 0-0 line 2917 [ 52.081261][ T4282] udc-core: couldn't find an available UDC or it's busy [ 52.083241][ T4282] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 52.109032][ T1534] binder: undelivered TRANSACTION_ERROR: 29189 [ 52.183727][ T4289] binder: 4288:4289 ioctl 4018620d 0 returned -22 [ 52.246161][ T4290] udc-core: couldn't find an available UDC or it's busy [ 52.249710][ T4290] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 52.768027][ T4302] netlink: 165 bytes leftover after parsing attributes in process `syz.2.42'. [ 53.012461][ T4314] input: syz1 as /devices/virtual/input/input4 [ 53.575253][ T3618] Bluetooth: hci0: command 0x0c20 tx timeout [ 53.934045][ T4376] udc-core: couldn't find an available UDC or it's busy [ 53.956414][ T4376] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.534226][ T4416] udc-core: couldn't find an available UDC or it's busy [ 54.536897][ T4416] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.588521][ T4418] udc-core: couldn't find an available UDC or it's busy [ 54.590579][ T4418] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.416825][ T4258] Bluetooth: hci5: Frame reassembly failed (-84) [ 55.834491][ T4461] binder: 4461 RLIMIT_NICE not set [ 55.847487][ T4463] udc-core: couldn't find an available UDC or it's busy [ 55.849559][ T4463] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.906854][ T4464] binder: 4460:4464 got transaction to context manager from process owning it [ 55.909345][ T4464] binder: 4460:4464 transaction failed 29201/-22, size 104-24 line 2908 [ 56.077698][ T4466] netlink: 'syz.1.119': attribute type 1 has an invalid length. [ 56.080546][ T4466] netlink: 'syz.1.119': attribute type 2 has an invalid length. [ 56.675229][ T4109] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.837172][ T4489] udc-core: couldn't find an available UDC or it's busy [ 56.839148][ T4489] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.422319][ T3618] Bluetooth: hci5: command 0x1003 tx timeout [ 57.432520][ T4161] Bluetooth: hci5: Frame reassembly failed (-84) [ 57.470478][ T4499] input: syz1 as /devices/virtual/input/input7 [ 58.059294][ T4512] tipc: Started in network mode [ 58.060877][ T4512] tipc: Node identity 4, cluster identity 4711 [ 58.063899][ T4512] tipc: Node number set to 4 [ 58.429603][ T4524] udc-core: couldn't find an available UDC or it's busy [ 58.432413][ T4524] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.084365][ T4555] binder: 4554:4555 got transaction to context manager from process owning it [ 59.087347][ T4555] binder: 4554:4555 transaction failed 29201/-22, size 104-24 line 2908 [ 59.102596][ T3618] binder: undelivered TRANSACTION_ERROR: 29201 [ 59.230988][ T4563] netlink: 104 bytes leftover after parsing attributes in process `syz.1.164'. [ 59.244639][ T4565] udc-core: couldn't find an available UDC or it's busy [ 59.250546][ T4565] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.504984][ T3618] Bluetooth: hci5: command 0x1001 tx timeout [ 59.507893][ T4042] Bluetooth: hci5: sending frame failed (-49) [ 59.655605][ T3618] Bluetooth: hci0: command 0x0401 tx timeout [ 60.015677][ T4583] ======================================================= [ 60.015677][ T4583] WARNING: The mand mount option has been deprecated and [ 60.015677][ T4583] and is ignored by this kernel. Remove the mand [ 60.015677][ T4583] option from the mount to silence this warning. [ 60.015677][ T4583] ======================================================= [ 60.390088][ T153] Bluetooth: hci6: Frame reassembly failed (-84) [ 60.668087][ T4603] binder: 4602:4603 BC_ACQUIRE_DONE u0000000000000001 no match [ 60.670303][ T4603] binder: 4602:4603 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 60.673899][ T4603] binder: 4603 RLIMIT_NICE not set [ 60.820971][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 60.820984][ T26] audit: type=1326 audit(61.740:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.1.185" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5b47c28 code=0x0 [ 61.575118][ T3618] Bluetooth: hci5: command 0x1009 tx timeout [ 62.064626][ T4627] fuse: root generation should be zero [ 62.168695][ T4631] binder: 4630:4631 got transaction to context manager from process owning it [ 62.171385][ T4631] binder: 4630:4631 transaction failed 29201/-22, size 0-0 line 2908 [ 62.182045][ T4231] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.249291][ T4635] Zero length message leads to an empty skb [ 62.396640][ T4641] binder: 4640:4641 got transaction to context manager from process owning it [ 62.399288][ T4641] binder: 4640:4641 transaction failed 29201/-22, size 72-24 line 2908 [ 62.454984][ T4049] Bluetooth: hci6: command 0x1003 tx timeout [ 62.456924][ T4041] Bluetooth: hci6: sending frame failed (-49) [ 62.466000][ T3618] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.572008][ T4647] binder: 4646:4647 BC_ACQUIRE_DONE u0000000000000001 no match [ 62.574559][ T4647] binder: 4646:4647 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 62.579942][ T4647] binder: 4646:4647 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 62.583615][ T4647] binder: 4647 RLIMIT_NICE not set [ 62.859661][ T4659] netlink: 'syz.0.207': attribute type 1 has an invalid length. [ 62.862434][ T4659] netlink: 'syz.0.207': attribute type 2 has an invalid length. [ 63.500301][ T4684] binder: 4684 RLIMIT_NICE not set [ 63.552666][ T4687] binder: 4687 RLIMIT_NICE not set [ 63.562940][ T4687] binder: 4683:4687 got transaction to context manager from process owning it [ 63.566036][ T4687] binder: 4683:4687 transaction failed 29201/-22, size 0-0 line 2908 [ 64.341624][ T4231] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.534995][ T4231] Bluetooth: hci6: command 0x1001 tx timeout [ 64.536635][ T4041] Bluetooth: hci6: sending frame failed (-49) [ 65.369162][ T4701] udc-core: couldn't find an available UDC or it's busy [ 65.371226][ T4701] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 65.923318][ T4708] TCP: TCP_TX_DELAY enabled [ 65.986473][ T4714] binder: 4713:4714 got transaction to context manager from process owning it [ 65.989122][ T4714] binder: 4713:4714 transaction failed 29201/-22, size 72-24 line 2908 [ 65.992606][ T4712] netlink: 165 bytes leftover after parsing attributes in process `syz.3.232'. [ 65.992809][ T4714] binder: 4713:4714 BC_INCREFS_DONE u0000000000000003 no match [ 65.999118][ T4714] binder: 4713:4714 Acquire 1 refcount change on invalid ref 2 ret -22 [ 66.001792][ T4714] binder: 4713:4714 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 66.004209][ T4714] binder: 4713:4714 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 14) [ 66.012830][ T4714] binder: 4714 RLIMIT_NICE not set [ 66.078371][ T4718] netlink: 341 bytes leftover after parsing attributes in process `syz.3.235'. [ 66.094377][ T4720] ================================================================== [ 66.096861][ T4720] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x494/0x564 [ 66.099442][ T4720] Read of size 1 at addr ffff0000cf4ea600 by task syz.0.236/4720 [ 66.101563][ T4720] [ 66.102191][ T4720] CPU: 1 PID: 4720 Comm: syz.0.236 Not tainted 5.15.189-syzkaller #0 [ 66.104478][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.107309][ T4720] Call trace: [ 66.108279][ T4720] dump_backtrace+0x0/0x43c [ 66.109469][ T4720] show_stack+0x2c/0x3c [ 66.110619][ T4720] __dump_stack+0x30/0x40 [ 66.111815][ T4720] dump_stack_lvl+0xf8/0x160 [ 66.113170][ T4720] print_address_description+0x78/0x30c [ 66.114779][ T4720] kasan_report+0xec/0x15c [ 66.116056][ T4720] __asan_report_load1_noabort+0x44/0x50 [ 66.117676][ T4720] xfrm_policy_inexact_list_reinsert+0x494/0x564 [ 66.119426][ T4720] xfrm_policy_inexact_insert_node+0x780/0x924 [ 66.121134][ T4720] xfrm_policy_inexact_alloc_chain+0x874/0x1160 [ 66.122889][ T4720] xfrm_policy_inexact_insert+0xe0/0x1088 [ 66.124490][ T4720] xfrm_policy_insert+0xfc/0x894 [ 66.125865][ T4720] xfrm_add_policy+0x400/0x74c [ 66.127179][ T4720] xfrm_user_rcv_msg+0x40c/0x650 [ 66.128569][ T4720] netlink_rcv_skb+0x208/0x3c4 [ 66.129961][ T4720] xfrm_netlink_rcv+0x80/0x9c [ 66.131250][ T4720] netlink_unicast+0x624/0x8b0 [ 66.132599][ T4720] netlink_sendmsg+0x6e8/0x9cc [ 66.133930][ T4720] ____sys_sendmsg+0x61c/0x920 [ 66.135265][ T4720] ___sys_sendmsg+0x1d0/0x240 [ 66.136555][ T4720] __arm64_sys_sendmsg+0x1a8/0x254 [ 66.138059][ T4720] invoke_syscall+0x98/0x2b8 [ 66.139391][ T4720] el0_svc_common+0x138/0x258 [ 66.140642][ T4720] do_el0_svc+0x58/0x14c [ 66.141790][ T4720] el0_svc+0x78/0x1e0 [ 66.142909][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 66.144357][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 66.145587][ T4720] [ 66.146212][ T4720] Allocated by task 4720: [ 66.147390][ T4720] __kasan_kmalloc+0xb0/0xf0 [ 66.148700][ T4720] __kmalloc+0x298/0x44c [ 66.149832][ T4720] sk_prot_alloc+0xc4/0x1f0 [ 66.151022][ T4720] sk_alloc+0x40/0x388 [ 66.152145][ T4720] pfkey_create+0xcc/0x540 [ 66.153343][ T4720] __sock_create+0x4b0/0x8b4 [ 66.154621][ T4720] __sys_socket+0xf0/0x18c [ 66.155868][ T4720] __arm64_sys_socket+0x7c/0x94 [ 66.157198][ T4720] invoke_syscall+0x98/0x2b8 [ 66.158450][ T4720] el0_svc_common+0x138/0x258 [ 66.159770][ T4720] do_el0_svc+0x58/0x14c [ 66.160949][ T4720] el0_svc+0x78/0x1e0 [ 66.162018][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 66.163386][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 66.164611][ T4720] [ 66.165223][ T4720] Last potentially related work creation: [ 66.166766][ T4720] kasan_save_stack+0x38/0x68 [ 66.168006][ T4720] kasan_record_aux_stack+0xcc/0x114 [ 66.169511][ T4720] call_rcu+0x114/0x8fc [ 66.170671][ T4720] qdisc_destroy+0x280/0x478 [ 66.171942][ T4720] shutdown_scheduler_queue+0xe4/0x188 [ 66.173430][ T4720] dev_shutdown+0x9c/0x490 [ 66.174693][ T4720] unregister_netdevice_many+0x944/0x17d0 [ 66.176343][ T4720] unregister_netdevice_queue+0x2ac/0x2f8 [ 66.177996][ T4720] __tun_detach+0xb14/0x126c [ 66.179276][ T4720] tun_chr_close+0x118/0x20c [ 66.180582][ T4720] __fput+0x1c0/0x7f8 [ 66.181703][ T4720] ____fput+0x20/0x30 [ 66.182787][ T4720] task_work_run+0x12c/0x1e0 [ 66.184068][ T4720] do_notify_resume+0x24b4/0x3128 [ 66.185543][ T4720] el0_svc+0xf0/0x1e0 [ 66.186609][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 66.188019][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 66.189271][ T4720] [ 66.189922][ T4720] The buggy address belongs to the object at ffff0000cf4ea000 [ 66.189922][ T4720] which belongs to the cache kmalloc-2k of size 2048 [ 66.193892][ T4720] The buggy address is located 1536 bytes inside of [ 66.193892][ T4720] 2048-byte region [ffff0000cf4ea000, ffff0000cf4ea800) [ 66.197601][ T4720] The buggy address belongs to the page: [ 66.199131][ T4720] page:0000000060e5edbe refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f4e8 [ 66.201960][ T4720] head:0000000060e5edbe order:3 compound_mapcount:0 compound_pincount:0 [ 66.204258][ T4720] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 66.206523][ T4720] raw: 05ffc00000010200 fffffc0003530a00 0000000300000003 ffff0000c0002900 [ 66.208882][ T4720] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 66.211306][ T4720] page dumped because: kasan: bad access detected [ 66.213117][ T4720] [ 66.213756][ T4720] Memory state around the buggy address: [ 66.215278][ T4720] ffff0000cf4ea500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.217550][ T4720] ffff0000cf4ea580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 66.219816][ T4720] >ffff0000cf4ea600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 66.222044][ T4720] ^ [ 66.223148][ T4720] ffff0000cf4ea680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 66.225424][ T4720] ffff0000cf4ea700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 66.227697][ T4720] ================================================================== [ 66.230041][ T4720] Disabling lock debugging due to kernel taint [ 66.614940][ T4231] Bluetooth: hci6: command 0x1009 tx timeout [ 69.655794][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.657672][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.795824][ T1962] cfg80211: failed to load regulatory.db