last executing test programs: 5.139771253s ago: executing program 2 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) writev(0xffffffffffffffff, &(0x7f0000000780)=[{0x0}, {&(0x7f00000006c0)="8ffbb902504987126eaec3e13e219e1927fe2b503d9c900e1786fca87663b04ae5d85505ac70b137c2945ca357de029c", 0x30}, {&(0x7f0000002100)}], 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0x7fffffff}, {0x6, 0x3, 0xa1, 0x401}]}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/keycreate\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.660401867s ago: executing program 2 (id=156): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200"], 0x50) socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file2\x00'}, 0x6e) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000380), &(0x7f00000003c0)=0xc) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x85, 0x0, &(0x7f0000000500)=0x8f00) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x2d05, &(0x7f00000000c0)={0x0, 0x8e3f, 0x800, 0x2, 0x101}, &(0x7f0000000140), &(0x7f0000000180)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0xc2000, 0x0) preadv(r4, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/60, 0x3c}], 0x1, 0x8000, 0x2) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 2.928427774s ago: executing program 2 (id=174): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2.831033518s ago: executing program 2 (id=177): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) setns(r1, 0x24020000) umount2(&(0x7f00000000c0)='.\x00', 0x0) 2.786069341s ago: executing program 2 (id=178): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000071c0)={0x18, {"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", 0x1000}}, 0x1006) 2.625893529s ago: executing program 0 (id=181): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001"], 0x1c}}, 0x0) 2.617952409s ago: executing program 0 (id=183): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0) 1.983327001s ago: executing program 2 (id=197): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1.40645723s ago: executing program 1 (id=209): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 1.406080469s ago: executing program 4 (id=210): sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x68, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x0, 0x6, 0x900066}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="12043600d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020}, 0x2020) 1.329090714s ago: executing program 1 (id=211): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_ep_write(r2, 0x81, 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x40045506, 0x0) 1.305954725s ago: executing program 4 (id=212): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x40000) 1.270280236s ago: executing program 0 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x98, 0x0) 1.186566231s ago: executing program 0 (id=214): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001, 0x1800400}}, 0x44) 1.170833812s ago: executing program 0 (id=215): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000003000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000feffffff0b00000008000300", @ANYRES32=r2, @ANYBLOB="20005080090001001d9d000600000000050002000300000008000300b252cd"], 0x3c}}, 0x0) 1.069980996s ago: executing program 0 (id=216): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000140)="ac26e81bc03c591423fe3226476a8432d4e771d5adba1aefa248e6a0f252b9ef98bdff3e1b46c0645d9e5b6f33b5a083a79bcc535d0014d6ed617f0b746703c9f8752e26af29dac95d26574b934aa677f8c14266074568b68935ba800272e6ed75892d1d14feeedc8cfd5375478e5ba424295024ef86856efce1a3914aabdbc83aa8717d41b32acceac892b8", 0x8c}, 0x68) 458.555657ms ago: executing program 3 (id=218): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000180600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='`z'], 0x0) 458.317237ms ago: executing program 3 (id=219): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) lseek(r0, 0x7, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) 388.49975ms ago: executing program 3 (id=220): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 356.211972ms ago: executing program 3 (id=221): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x38, r1, 0x60b, 0x70bd2d, 0x4000, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x38}, 0x1, 0x8000000, 0x0, 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) 261.572687ms ago: executing program 4 (id=222): sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x68, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x0, 0x6, 0x900066}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="12043600d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020}, 0x2020) 261.253517ms ago: executing program 1 (id=223): unshare(0x42000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 260.975207ms ago: executing program 4 (id=224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf270c00000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x20004000) 131.660494ms ago: executing program 4 (id=225): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x1, 0x10000, 0x67, r2}) 114.547684ms ago: executing program 3 (id=226): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f0000000140)}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xb7a3, 0xc000, 0xc, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 61.631396ms ago: executing program 1 (id=227): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) lseek(r0, 0x851, 0x0) 61.287646ms ago: executing program 4 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TSC(0x1a, 0x1) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228", 0x1e, 0x8000, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$eJzsmD9P+kAYx7/X8if88ktw1UUTScDB0hY1MjgwO2ii0bhJpBK0iIEOwGZ8Ec6+AmfiwvvQQZ0cxM3Joebawx4oYuI/jM9neO57dw/Hc0+Tb5OCIIg/y831w9VZMhHj+j8SiIr1WzXIUaT8Vvxx5qK0cn6i31+22svZ/vMYANd9//+HALRzKhwxd93eXyfEuA6lq8Py/iYYNKG3oWBDaAsMW0LvSbrC8zVtt2Rb2k7FLnCh82DwYPKQ6a+vc8RQkOpj0n6t0dzP27ZV/UIxrH+dnIIlqT75eXV7owf9gwEFhtAZMKwJvYhotzd+S6T7T4SC89Vvvv/vFuPxITlhjEqpJD5BMHBxFwNGo56fEoE/uacMScmfQpJ/pJ3yYbrWaM6WyvmiVbQOTDOzoM/p+ryZ9ozIj2/4X8zzp3/S+eEBuREWQT3vOFXDj89zsx6FUzVfc9yI538KUtN+1UysyXjvgzE2xYeUChwPrJYgCIIgCIIgCIIgCIIgCOIjTIJ5X0F7yL5YMle97KcAAAD//5Z1cak=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) 60.850857ms ago: executing program 3 (id=229): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x49) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 43.115328ms ago: executing program 1 (id=230): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x6, 0x4, 0x0, 0x1000}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 1 (id=231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c0001800600010002000000080003"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. [ 29.553124][ T4309] cgroup: Unknown subsys name 'net' [ 29.846046][ T4309] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.117162][ T4309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.986274][ T4323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.994043][ T4327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.995445][ T4327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.997062][ T4327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.998781][ T4327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.000324][ T4327] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.000684][ T4333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.001705][ T4327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.003393][ T4333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.005456][ T4333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.005520][ T4327] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.006857][ T4333] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 31.007904][ T4327] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.008986][ T4333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.010488][ T4327] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.016439][ T4331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.018050][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.020923][ T4327] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 31.022314][ T4327] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.024493][ T4335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.029144][ T4335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.031784][ T4335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.033647][ T4335] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 31.035230][ T4335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.035396][ T4327] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.038410][ T4327] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.054320][ T4333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.056204][ T4333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.063724][ T4333] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 31.065071][ T4333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.160460][ T4322] chnl_net:caif_netlink_parms(): no params data found [ 31.193470][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 31.198548][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 31.205880][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 31.238360][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.239562][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.241155][ T4330] device bridge_slave_0 entered promiscuous mode [ 31.248967][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.250188][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.251716][ T4322] device bridge_slave_0 entered promiscuous mode [ 31.258906][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.260064][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.261678][ T4330] device bridge_slave_1 entered promiscuous mode [ 31.266034][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.267125][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.268642][ T4322] device bridge_slave_1 entered promiscuous mode [ 31.289273][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.291761][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.297248][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.298802][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.300011][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.301512][ T4321] device bridge_slave_0 entered promiscuous mode [ 31.309457][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.310720][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.312309][ T4326] device bridge_slave_0 entered promiscuous mode [ 31.316177][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.317740][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.318986][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.320485][ T4321] device bridge_slave_1 entered promiscuous mode [ 31.326465][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 31.334837][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.336008][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.337497][ T4326] device bridge_slave_1 entered promiscuous mode [ 31.345455][ T4330] team0: Port device team_slave_0 added [ 31.355229][ T4330] team0: Port device team_slave_1 added [ 31.357223][ T4322] team0: Port device team_slave_0 added [ 31.362473][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.365373][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.371840][ T4322] team0: Port device team_slave_1 added [ 31.378284][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.388656][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.392393][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.394046][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.395508][ T4334] device bridge_slave_0 entered promiscuous mode [ 31.398260][ T4321] team0: Port device team_slave_0 added [ 31.399647][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.400684][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.404965][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.407404][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.408463][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.412775][ T4322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.417687][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.418781][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.423381][ T4322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.426071][ T4321] team0: Port device team_slave_1 added [ 31.426949][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.427899][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.429224][ T4334] device bridge_slave_1 entered promiscuous mode [ 31.430550][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.431773][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.437050][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.442397][ T4326] team0: Port device team_slave_0 added [ 31.452873][ T4326] team0: Port device team_slave_1 added [ 31.459403][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.460569][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.464943][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.469642][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.514446][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.553464][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.606564][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.607829][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.611931][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.616997][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.664478][ T4322] device hsr_slave_0 entered promiscuous mode [ 31.703380][ T4322] device hsr_slave_1 entered promiscuous mode [ 31.743330][ T4322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.744742][ T4322] Cannot create hsr debugfs directory [ 31.747503][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.748599][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.752577][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.759651][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.760756][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.764832][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.775034][ T4334] team0: Port device team_slave_0 added [ 31.782436][ T4334] team0: Port device team_slave_1 added [ 31.814315][ T4321] device hsr_slave_0 entered promiscuous mode [ 31.853440][ T4321] device hsr_slave_1 entered promiscuous mode [ 31.893304][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.894546][ T4321] Cannot create hsr debugfs directory [ 31.964439][ T4326] device hsr_slave_0 entered promiscuous mode [ 32.003364][ T4326] device hsr_slave_1 entered promiscuous mode [ 32.053307][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.054534][ T4326] Cannot create hsr debugfs directory [ 32.055777][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.056901][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.061088][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.069419][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.070591][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.074616][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.164333][ T4334] device hsr_slave_0 entered promiscuous mode [ 32.213950][ T4334] device hsr_slave_1 entered promiscuous mode [ 32.253408][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.254618][ T4334] Cannot create hsr debugfs directory [ 32.310067][ T4330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.373023][ T4321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.416049][ T4330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.454389][ T4330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.494568][ T4330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.535017][ T4321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.575983][ T4321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.615024][ T4322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.671549][ T4321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.704688][ T4322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.757118][ T4322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.804960][ T4322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.861466][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.896369][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.935509][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.986067][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.047368][ T4334] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.063840][ T4333] Bluetooth: hci1: command 0x0409 tx timeout [ 33.064010][ T4331] Bluetooth: hci0: command 0x0409 tx timeout [ 33.064879][ T4333] Bluetooth: hci3: command 0x0409 tx timeout [ 33.065911][ T4331] Bluetooth: hci2: command 0x0409 tx timeout [ 33.076445][ T4334] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.117640][ T4334] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.143385][ T4331] Bluetooth: hci4: command 0x0409 tx timeout [ 33.160307][ T4334] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.221536][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.226264][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.239868][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.242173][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.251229][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.255012][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.256638][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.266240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.268030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.269645][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.270876][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.276576][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.278774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.290207][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.291810][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.295058][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.296217][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.297692][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.299784][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.301304][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.302423][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.309590][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.311181][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.312707][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.313944][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.316185][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.319077][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.326151][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.335707][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.337217][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.338757][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.340168][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.341730][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.345339][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.347186][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.348714][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.350452][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.352059][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.354650][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.356176][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.361566][ T4321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.364640][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.370542][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.372455][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.374221][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.375739][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.377439][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.388189][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.389743][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.391341][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.393071][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.394355][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.396379][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.398007][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.402111][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.409409][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.411214][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.412744][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.415488][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.416663][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.418080][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.419623][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.427507][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.435389][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.436889][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.438225][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.441375][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.442945][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.448245][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.450562][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.452732][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.454595][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.464121][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.477143][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.479299][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.480858][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.482442][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.492349][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.495711][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.497264][ T1598] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.498459][ T1598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.499862][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.501599][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.506368][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.507807][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.509288][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.511163][ T1598] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.512516][ T1598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.524368][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.529972][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.531307][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.540333][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.542330][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.544182][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.549478][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.551287][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.552826][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.560886][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.567900][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.569471][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.571165][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.572657][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.582336][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.585124][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.586544][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.588310][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.595322][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.596908][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.610041][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.618260][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.619938][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.621744][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.623159][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.631912][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.633972][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.635513][ T1699] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.636641][ T1699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.648220][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.649731][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.651614][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.654635][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.656279][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.657950][ T1699] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.659090][ T1699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.667643][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.669173][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.670668][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.672331][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.677523][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.678895][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.682156][ T4321] device veth0_vlan entered promiscuous mode [ 33.700328][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.702702][ T4321] device veth1_vlan entered promiscuous mode [ 33.712179][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.713850][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.715490][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.717082][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.718681][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.727995][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.729573][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.731250][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.732806][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.734679][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.736575][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.738292][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.739765][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.746603][ T4330] device veth0_vlan entered promiscuous mode [ 33.756843][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.758494][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.760103][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.761586][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.765536][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.766997][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.773879][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.776462][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.777734][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.781680][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.786625][ T4330] device veth1_vlan entered promiscuous mode [ 33.789129][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.790943][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.792457][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.795361][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.796926][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.803945][ T4322] device veth0_vlan entered promiscuous mode [ 33.824523][ T4322] device veth1_vlan entered promiscuous mode [ 33.830020][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.831698][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.834478][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.836183][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.839082][ T4321] device veth0_macvtap entered promiscuous mode [ 33.847761][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.849419][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.850918][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.852513][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.857659][ T4321] device veth1_macvtap entered promiscuous mode [ 33.863119][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.865307][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.866903][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.874065][ T4330] device veth0_macvtap entered promiscuous mode [ 33.885379][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.886881][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.888437][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.895405][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.898420][ T4330] device veth1_macvtap entered promiscuous mode [ 33.900716][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.902242][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.904390][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.907447][ T4322] device veth0_macvtap entered promiscuous mode [ 33.912218][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.919965][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.921601][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.924401][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.926119][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.927598][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.929201][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.930635][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.934286][ T4322] device veth1_macvtap entered promiscuous mode [ 33.937289][ T4326] device veth0_vlan entered promiscuous mode [ 33.941773][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.946993][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.948702][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.950993][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.952264][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.954014][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.955690][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.957681][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.959778][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.965613][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.967006][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.968363][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.969695][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.972879][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.975771][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.978364][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.980231][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.981909][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.988444][ T4326] device veth1_vlan entered promiscuous mode [ 33.996870][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.998351][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.999790][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.001113][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.021475][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.023190][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.028578][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.030296][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.032591][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.036307][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.037900][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.039410][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.041228][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.045711][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.047049][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.048551][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.049933][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.051349][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.052849][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.055505][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.057202][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.058743][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.075884][ T4326] device veth0_macvtap entered promiscuous mode [ 34.077811][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.079022][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.088409][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.090070][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.092733][ T4322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.094716][ T4322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.096042][ T4322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.097305][ T4322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.101054][ T4326] device veth1_macvtap entered promiscuous mode [ 34.115975][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.117624][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.119230][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.123109][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.128487][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.130118][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.131429][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.142007][ T4334] device veth0_vlan entered promiscuous mode [ 34.146593][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.148144][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.149731][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.151327][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.152753][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.155863][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.158803][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.159996][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.161786][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.172887][ T4334] device veth1_vlan entered promiscuous mode [ 34.187301][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.188751][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.194583][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.195896][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.196569][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.199075][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.200527][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.202118][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.206864][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.208477][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.210739][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.212302][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.214018][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.215634][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.217100][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.218843][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.220458][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.239806][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.241587][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.246785][ T4334] device veth0_macvtap entered promiscuous mode [ 34.255513][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.256800][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.257167][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.259410][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.260814][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.262255][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.268554][ T4334] device veth1_macvtap entered promiscuous mode [ 34.271318][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.272951][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.275850][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.298728][ T1598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.298803][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.299967][ T1598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.301212][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.302435][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.308996][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.339478][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.341302][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.342991][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.349177][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.350805][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.352592][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.356818][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.358424][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.360670][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.367261][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.369011][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.394420][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.396131][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.397725][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.399511][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.401010][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.402646][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.410242][ T4405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.411732][ T4405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.420194][ T4406] binder: 4403:4406 tried to acquire reference to desc 0, got 1 instead [ 34.421274][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.424435][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.426894][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.436031][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.437865][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.447496][ T113] binder: release 4403:4406 transaction 5 out, still active [ 34.448892][ T113] binder: undelivered TRANSACTION_COMPLETE [ 34.449980][ T113] binder: send failed reply for transaction 5, target dead [ 34.469955][ T4410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.471462][ T4410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.479249][ T4334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.480679][ T4334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.485499][ T4334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.487022][ T4334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.497954][ T1598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.499282][ T1598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.500807][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.530255][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.531571][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.533666][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.569910][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.571160][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.572558][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.592620][ T1598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.594412][ T1598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.596111][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.129780][ T4424] loop1: detected capacity change from 0 to 16 [ 35.145665][ T4424] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.147385][ T4327] Bluetooth: hci3: command 0x041b tx timeout [ 35.148477][ T4327] Bluetooth: hci0: command 0x041b tx timeout [ 35.149531][ T4327] Bluetooth: hci1: command 0x041b tx timeout [ 35.150909][ T4426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.151264][ T4331] Bluetooth: hci2: command 0x041b tx timeout [ 35.153050][ T4426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.153934][ T4424] syz.1.11: attempt to access beyond end of device [ 35.153934][ T4424] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 35.165585][ T4424] syz.1.11: attempt to access beyond end of device [ 35.165585][ T4424] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 35.168759][ T4424] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 35.170687][ T4424] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 35.283944][ T4331] Bluetooth: hci4: command 0x041b tx timeout [ 35.673651][ T4440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.676312][ T4440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.950547][ C1] Illegal XDP return value 16128 on prog (id 1) dev bond_slave_1, expect packet loss! [ 36.271291][ T4444] syz.3.15 uses obsolete (PF_INET,SOCK_PACKET) [ 36.516982][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 36.524816][ T4452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.526295][ T4452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.552700][ T4456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.554707][ T4456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.607738][ T4331] Bluetooth: hci0: hardware error 0x00 [ 36.635403][ T4462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.637173][ T4462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.933304][ T113] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.096171][ T4468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'. [ 37.111609][ T4470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.113543][ T113] usb 1-1: Using ep0 maxpacket: 32 [ 37.116555][ T113] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 37.117958][ T113] usb 1-1: config 0 has no interface number 0 [ 37.118898][ T4470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.118929][ T113] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 37.125488][ T113] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 37.132017][ T113] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 37.134122][ T113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.135429][ T113] usb 1-1: Product: syz [ 37.136119][ T113] usb 1-1: Manufacturer: syz [ 37.136919][ T113] usb 1-1: SerialNumber: syz [ 37.161801][ T113] usb 1-1: config 0 descriptor?? [ 37.166603][ T4472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.167453][ T113] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 37.169629][ T113] em28xx 1-1:0.132: Video interface 132 found: isoc [ 37.171118][ T4472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.195602][ T4476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.197208][ T4476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.224280][ T4327] Bluetooth: hci1: command 0x040f tx timeout [ 37.225353][ T4327] Bluetooth: hci2: command 0x040f tx timeout [ 37.226361][ T4327] Bluetooth: hci3: command 0x040f tx timeout [ 37.303465][ T4335] Bluetooth: hci4: command 0x040f tx timeout [ 37.433473][ T113] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 37.506484][ T113] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 37.508056][ T113] em28xx 1-1:0.132: board has no eeprom [ 37.573424][ T113] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 37.574781][ T113] em28xx 1-1:0.132: analog set to isoc mode. [ 37.579032][ T113] usb 1-1: USB disconnect, device number 2 [ 37.580528][ T113] em28xx 1-1:0.132: Disconnecting em28xx [ 37.582066][ T4380] em28xx 1-1:0.132: Registering V4L2 extension [ 37.617537][ T4380] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 37.618714][ T4380] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 37.619731][ T4380] em28xx 1-1:0.132: No AC97 audio processor [ 37.622135][ T4380] usb 1-1: Decoder not found [ 37.622878][ T4380] em28xx 1-1:0.132: failed to create media graph [ 37.624288][ T4380] em28xx 1-1:0.132: V4L2 device video11 deregistered [ 37.626664][ T4380] em28xx 1-1:0.132: Remote control support is not available for this card. [ 37.628196][ T113] em28xx 1-1:0.132: Closing input extension [ 37.640006][ T113] em28xx 1-1:0.132: Freeing device [ 37.651704][ T4481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.654604][ T4481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.788266][ T4492] netlink: 104 bytes leftover after parsing attributes in process `syz.2.37'. [ 37.807516][ T4494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.811533][ T4494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.107627][ T4501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.109121][ T4501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.163342][ T113] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.188393][ T4503] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 38.189483][ T4503] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 38.191712][ T4503] vhci_hcd vhci_hcd.0: Device attached [ 38.194709][ T4504] usbip_core: unknown command [ 38.195462][ T4504] vhci_hcd: unknown pdu 0 [ 38.196220][ T4504] usbip_core: unknown command [ 38.198178][ T4378] vhci_hcd: stop threads [ 38.199122][ T4378] vhci_hcd: release socket [ 38.199887][ T4378] vhci_hcd: disconnect device [ 38.336221][ T4508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.337768][ T4508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.344260][ T113] usb 1-1: Using ep0 maxpacket: 8 [ 38.346571][ T113] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 38.348023][ T113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.352835][ T113] pvrusb2: Hardware description: Terratec Grabster AV400 [ 38.354560][ T113] pvrusb2: ********** [ 38.355129][ T113] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 38.356651][ T113] pvrusb2: Important functionality might not be entirely working. [ 38.357848][ T113] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 38.359389][ T113] pvrusb2: ********** [ 38.556018][ T2835] pvrusb2: Invalid write control endpoint [ 38.574256][ T2835] pvrusb2: Invalid write control endpoint [ 38.575518][ T2835] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 38.576981][ T2835] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 38.578057][ T2835] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 38.579648][ T2835] pvrusb2: Device being rendered inoperable [ 38.581126][ T2835] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 38.582357][ T2835] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 38.585419][ T2835] pvrusb2: Attached sub-driver cx25840 [ 38.586470][ T2835] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 38.588101][ T2835] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 38.630835][ T4512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.632324][ T4512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.716399][ T4514] tipc: Enabling of bearer rejected, failed to enable media [ 38.743354][ T4331] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 38.758005][ T4368] usb 1-1: USB disconnect, device number 3 [ 38.771691][ T4518] binder: 4517:4518 tried to acquire reference to desc 0, got 1 instead [ 38.773895][ T4518] binder: 4517:4518 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.775759][ T4518] binder: 4518 RLIMIT_NICE not set [ 38.776586][ T4518] binder: 4518 RLIMIT_NICE not set [ 38.777854][ T4518] binder: 4518 RLIMIT_NICE not set [ 38.778773][ T4518] binder_alloc: 4517: binder_alloc_buf, no vma [ 38.780328][ T4518] binder: cannot allocate buffer: vma cleared, target dead or dying [ 38.780365][ T4518] binder: 4517:4518 transaction reply to 4517:4518 failed 17/29189/-3, size -729-0 line 3230 [ 38.784180][ T4518] binder: send failed reply for transaction 16 to 4517:4518 [ 38.786353][ T4518] binder: 4517:4518 got transaction to invalid handle, 2 [ 38.787553][ T4518] binder: 4518:4517 cannot find target node [ 38.788605][ T4518] binder: 4517:4518 transaction async to 0:0 failed 18/29201/-22, size 0-0 line 3045 [ 38.790838][ T24] binder: undelivered TRANSACTION_COMPLETE [ 38.791670][ T24] binder: undelivered TRANSACTION_ERROR: 29189 [ 38.804382][ T4508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.806076][ T4508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.873169][ T4522] binder: 4521:4522 tried to acquire reference to desc 0, got 1 instead [ 38.876503][ T4522] binder: 4521:4522 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.878570][ T4522] binder: 4522 RLIMIT_NICE not set [ 39.179519][ T4535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.181266][ T4535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.304087][ T4331] Bluetooth: hci3: command 0x0419 tx timeout [ 39.305124][ T4331] Bluetooth: hci2: command 0x0419 tx timeout [ 39.306103][ T4331] Bluetooth: hci1: command 0x0419 tx timeout [ 39.365175][ T4327] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 39.394507][ T4327] Bluetooth: hci4: command 0x0419 tx timeout [ 39.445873][ T4557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.447730][ T4557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.475664][ T4560] netlink: 'syz.2.65': attribute type 33 has an invalid length. [ 39.477107][ T4560] netlink: 152 bytes leftover after parsing attributes in process `syz.2.65'. [ 39.563380][ T4369] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.584881][ T4535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.586389][ T4535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.744799][ T4369] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 39.746237][ T4369] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 39.747764][ T4369] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 39.749228][ T4369] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 39.750803][ T4369] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 39.755726][ T4369] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 39.757172][ T4369] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 39.758460][ T4369] usb 1-1: Product: syz [ 39.759119][ T4369] usb 1-1: Manufacturer: syz [ 39.763854][ T4369] cdc_wdm 1-1:1.0: skipping garbage [ 39.764722][ T4369] cdc_wdm 1-1:1.0: skipping garbage [ 39.768151][ T4369] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 39.769014][ T4369] cdc_wdm 1-1:1.0: Unknown control protocol [ 39.966954][ T4367] usb 1-1: USB disconnect, device number 4 [ 39.983923][ T4568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.985452][ T4568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.111858][ T4570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.117192][ T4570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.311929][ T4572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.313616][ T4572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.386587][ T4574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.388030][ T4574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.521632][ T4576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.524650][ T4576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.733284][ T4371] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 40.801173][ T4582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.803688][ T4582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.914127][ T4584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.915737][ T4584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.926900][ T4371] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 40.928343][ T4371] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 40.930108][ T4371] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 40.931631][ T4371] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 40.933849][ T4371] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 40.936533][ T4371] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 40.938013][ T4371] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 40.939253][ T4371] usb 1-1: Product: syz [ 40.939901][ T4371] usb 1-1: Manufacturer: syz [ 40.942540][ T4371] cdc_wdm 1-1:1.0: skipping garbage [ 40.943816][ T4371] cdc_wdm 1-1:1.0: skipping garbage [ 40.946182][ T4371] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 40.947290][ T4371] cdc_wdm 1-1:1.0: Unknown control protocol [ 41.007767][ T4582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.009268][ T4582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.158125][ T4371] usb 1-1: USB disconnect, device number 5 [ 41.207976][ T4591] netlink: 'syz.3.79': attribute type 10 has an invalid length. [ 41.308173][ T4591] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 41.523030][ T4600] process 'syz.3.81' launched './file0' with NULL argv: empty string added [ 41.528769][ T4599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.530275][ T4599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.666059][ T4606] 9pnet_virtio: no channels available for device syz [ 41.856624][ T4331] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 41.858222][ T4331] CPU: 1 PID: 4331 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 41.859641][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 41.861404][ T4331] Workqueue: hci1 hci_rx_work [ 41.862149][ T4331] Call trace: [ 41.862645][ T4331] dump_backtrace+0x1c0/0x1ec [ 41.863462][ T4331] show_stack+0x2c/0x3c [ 41.864178][ T4331] __dump_stack+0x30/0x40 [ 41.864863][ T4331] dump_stack_lvl+0xf4/0x15c [ 41.865603][ T4331] dump_stack+0x1c/0x5c [ 41.866321][ T4331] sysfs_create_dir_ns+0x244/0x264 [ 41.867152][ T4331] kobject_add_internal+0x598/0xb08 [ 41.868011][ T4331] kobject_add+0x140/0x20c [ 41.868676][ T4331] device_add+0x3f0/0xf90 [ 41.869410][ T4331] hci_conn_add_sysfs+0xbc/0x1c8 [ 41.870234][ T4331] le_conn_complete_evt+0xcc8/0x1244 [ 41.871111][ T4331] hci_le_conn_complete_evt+0x114/0x3f4 [ 41.871977][ T4331] hci_le_meta_evt+0x2c0/0x4a0 [ 41.872713][ T4331] hci_event_packet+0x6b8/0xf18 [ 41.873490][ T4331] hci_rx_work+0x324/0xa80 [ 41.874200][ T4331] process_one_work+0x7f8/0x13a4 [ 41.874980][ T4331] worker_thread+0x8c4/0xfec [ 41.875773][ T4331] kthread+0x250/0x2d8 [ 41.876453][ T4331] ret_from_fork+0x10/0x20 [ 41.879910][ T4331] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 41.882024][ T4331] Bluetooth: hci1: failed to register connection device [ 41.908181][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 42.012739][ T4623] netlink: 'syz.4.92': attribute type 25 has an invalid length. [ 42.014906][ T4623] netlink: 'syz.4.92': attribute type 1 has an invalid length. [ 42.016696][ T4623] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.482058][ T4647] sp0: Synchronizing with TNC [ 42.542314][ T4655] netlink: 52 bytes leftover after parsing attributes in process `syz.2.105'. [ 42.568490][ T4655] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.570306][ T4655] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.599016][ T4658] netlink: 'syz.4.107': attribute type 1 has an invalid length. [ 42.606557][ T4660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.615983][ T4660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.664417][ T4662] 9pnet_virtio: no channels available for device syz [ 42.965234][ T4672] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 43.039536][ T4666] random: crng reseeded on system resumption [ 43.212847][ T4685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 43.221010][ T4685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.119'. [ 43.223033][ T4685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 43.228139][ T4685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.119'. [ 43.229707][ T4685] Zero length message leads to an empty skb [ 43.380722][ T4702] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 43.418950][ T4707] dccp_invalid_packet: P.Data Offset(4) too small [ 43.436160][ T4710] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 43.483336][ T4717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.484959][ T4717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.629252][ T4726] loop3: detected capacity change from 0 to 16 [ 43.647985][ T4726] erofs: (device loop3): mounted with root inode @ nid 36. [ 43.685166][ T4726] syz.3.134: attempt to access beyond end of device [ 43.685166][ T4726] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 43.707240][ T4726] syz.3.134: attempt to access beyond end of device [ 43.707240][ T4726] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 43.713149][ T4726] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 43.715611][ T4726] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 43.981623][ T4733] netlink: 68 bytes leftover after parsing attributes in process `syz.2.138'. [ 44.008514][ T27] audit: type=1326 audit(43.980:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4734 comm="syz.0.139" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2177128 code=0x0 [ 44.039528][ T4738] binder_user_error: 1 callbacks suppressed [ 44.039537][ T4738] binder: 4737:4738 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 44.273902][ T4750] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.399283][ T4755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.400777][ T4755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.772514][ T4770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.782323][ T4770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.290651][ T27] audit: type=1326 audit(45.260:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f77128 code=0x7ffc0000 [ 45.307595][ T27] audit: type=1326 audit(45.280:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=33 compat=0 ip=0xffff86f77128 code=0x7ffc0000 [ 45.311449][ T27] audit: type=1326 audit(45.280:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f77128 code=0x7ffc0000 [ 45.326706][ T27] audit: type=1326 audit(45.290:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff86f77128 code=0x7ffc0000 [ 45.340591][ T27] audit: type=1326 audit(45.290:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f77128 code=0x7ffc0000 [ 45.363739][ T27] audit: type=1326 audit(45.290:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff86f77128 code=0x7ffc0000 [ 45.366976][ T27] audit: type=1326 audit(45.290:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f77128 code=0x7ffc0000 [ 45.382394][ T27] audit: type=1326 audit(45.290:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=281 compat=0 ip=0xffff86f77128 code=0x7ffc0000 [ 45.401470][ T27] audit: type=1326 audit(45.290:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4776 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff86f77128 code=0x7ffc0000 [ 45.421608][ T4788] tipc: Started in network mode [ 45.422424][ T4788] tipc: Node identity 7f000001, cluster identity 4711 [ 45.434185][ T4788] tipc: Enabling of bearer rejected, failed to enable media [ 45.465194][ T4788] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 45.479730][ T4788] tipc: Enabled bearer , priority 10 [ 45.690126][ T4803] netlink: 'syz.3.165': attribute type 1 has an invalid length. [ 45.847318][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.848772][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.874699][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 46.505017][ T4820] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.172'. [ 46.545244][ T4820] loop3: detected capacity change from 0 to 128 [ 46.551460][ T4820] ======================================================= [ 46.551460][ T4820] WARNING: The mand mount option has been deprecated and [ 46.551460][ T4820] and is ignored by this kernel. Remove the mand [ 46.551460][ T4820] option from the mount to silence this warning. [ 46.551460][ T4820] ======================================================= [ 46.573349][ T4819] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.172'. [ 46.614585][ T4368] tipc: Node number set to 2130706433 [ 46.625552][ T4820] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 46.627934][ T4820] hpfs: filesystem error: improperly stopped [ 46.628930][ T4820] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 46.630296][ T4820] hpfs: You really don't want any checks? You are crazy... [ 46.631586][ T4820] hpfs: hpfs_map_sector(): read error [ 46.632421][ T4820] hpfs: code page support is disabled [ 46.633661][ T4820] hpfs: hpfs_map_4sectors(): unaligned read [ 46.634686][ T4820] hpfs: hpfs_map_4sectors(): unaligned read [ 46.635599][ T4820] hpfs: filesystem error: unable to find root dir [ 47.242989][ T4853] usb usb8: usbfs: process 4853 (syz.1.187) did not claim interface 0 before use [ 47.453281][ T4371] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 47.585002][ T4875] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.190'. [ 47.587212][ T4874] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.190'. [ 47.604407][ T4874] loop3: detected capacity change from 0 to 128 [ 47.640266][ T4874] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 47.642351][ T4874] hpfs: filesystem error: improperly stopped [ 47.643602][ T4874] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 47.644801][ T4874] hpfs: You really don't want any checks? You are crazy... [ 47.646535][ T4874] hpfs: hpfs_map_sector(): read error [ 47.647405][ T4874] hpfs: code page support is disabled [ 47.649065][ T4874] hpfs: hpfs_map_4sectors(): unaligned read [ 47.650205][ T4874] hpfs: hpfs_map_4sectors(): unaligned read [ 47.651201][ T4874] hpfs: filesystem error: unable to find root dir [ 47.733569][ T4371] usb 1-1: Using ep0 maxpacket: 32 [ 47.737004][ T4371] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 47.738303][ T4371] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.740044][ T4371] usb 1-1: config 0 has no interface number 0 [ 47.741008][ T4371] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 47.747301][ T4371] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 47.749960][ T4371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.754388][ T4371] usb 1-1: Product: syz [ 47.755138][ T4371] usb 1-1: Manufacturer: syz [ 47.758141][ T4371] usb 1-1: SerialNumber: syz [ 47.764160][ T4371] usb 1-1: config 0 descriptor?? [ 47.767882][ T4371] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 47.769080][ T4371] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 47.894947][ T4327] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.897103][ T4327] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.898999][ T4327] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.901105][ T4327] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.902538][ T4327] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 47.906507][ T4327] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.968429][ T4371] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 47.970061][ T4371] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 47.979835][ T4371] usb 1-1: USB disconnect, device number 6 [ 48.075288][ T4727] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.079338][ T4882] device syzkaller0 entered promiscuous mode [ 48.116711][ T4896] tmpfs: Unknown parameter '¾¡“5hP׳_inode_h7' [ 48.146655][ T4727] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.294742][ T4727] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.333311][ T4885] chnl_net:caif_netlink_parms(): no params data found [ 48.385957][ T4727] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.415530][ T4885] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.416770][ T4885] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.418318][ T4885] device bridge_slave_0 entered promiscuous mode [ 48.420576][ T4885] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.421700][ T4885] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.423356][ T4885] device bridge_slave_1 entered promiscuous mode [ 48.430374][ T4885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.433357][ T4885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.440960][ T4885] team0: Port device team_slave_0 added [ 48.444818][ T4885] team0: Port device team_slave_1 added [ 48.451970][ T4885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.453146][ T4885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.457289][ T4885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.460092][ T4885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.461608][ T4885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.466258][ T4885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.491613][ T4923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.493139][ T4923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.511084][ T4926] 9pnet_virtio: no channels available for device syz [ 48.527702][ T4885] device hsr_slave_0 entered promiscuous mode [ 48.583540][ T4885] device hsr_slave_1 entered promiscuous mode [ 48.623387][ T4885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.624553][ T4885] Cannot create hsr debugfs directory [ 48.782212][ T4727] tipc: Disabling bearer [ 48.783902][ T4727] tipc: Left network mode [ 48.975691][ T4923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.977201][ T4923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.983598][ T4371] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 49.163291][ T4371] usb 1-1: Using ep0 maxpacket: 32 [ 49.165713][ T4371] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 49.167328][ T4371] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 49.168879][ T4371] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 49.178008][ T4371] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 49.181051][ T4371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.182332][ T4371] usb 1-1: Product: syz [ 49.183046][ T4371] usb 1-1: Manufacturer: syz [ 49.183854][ T4371] usb 1-1: SerialNumber: syz [ 49.196607][ T4371] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 49.198060][ T4371] imon 1-1:155.0: unable to initialize intf0, err -19 [ 49.199173][ T4371] imon:imon_probe: failed to initialize context! [ 49.200281][ T4371] imon 1-1:155.0: unable to register, err -19 [ 49.243636][ T4331] Bluetooth: Frame is too long (len 32, expected len 4) [ 49.401829][ T4969] binder: 4968:4969 unknown command 1074553619 [ 49.403046][ T4969] binder: 4968:4969 ioctl c0306201 20000000 returned -22 [ 49.678258][ T4885] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.688949][ T4986] binder: 4983:4986 tried to acquire reference to desc 0, got 1 instead [ 49.721141][ T4369] binder_debug: 6 callbacks suppressed [ 49.721150][ T4369] binder: send failed reply for transaction 30 to 4983:4986 [ 49.726882][ T4369] binder: undelivered TRANSACTION_COMPLETE [ 49.727837][ T4369] binder: undelivered TRANSACTION_ERROR: 29189 [ 49.746113][ T4885] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.747967][ T4993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.749469][ T4993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.788044][ T4885] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.797974][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 49.865430][ T4997] loop4: detected capacity change from 0 to 16 [ 49.895496][ T4997] erofs: (device loop4): mounted with root inode @ nid 36. [ 49.906769][ T4997] syz.4.228: attempt to access beyond end of device [ 49.906769][ T4997] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 49.909371][ T4997] syz.4.228: attempt to access beyond end of device [ 49.909371][ T4997] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 49.916026][ T4997] ================================================================== [ 49.917363][ T4997] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x3a4/0x490 [ 49.918587][ T4997] Read of size 4096 at addr ffff0000ed93c000 by task syz.4.228/4997 [ 49.919777][ T4997] [ 49.920155][ T4997] CPU: 1 PID: 4997 Comm: syz.4.228 Not tainted syzkaller #0 [ 49.921189][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 49.922668][ T4997] Call trace: [ 49.923114][ T4997] dump_backtrace+0x1c0/0x1ec [ 49.923830][ T4997] show_stack+0x2c/0x3c [ 49.924463][ T4997] __dump_stack+0x30/0x40 [ 49.925091][ T4997] dump_stack_lvl+0xf4/0x15c [ 49.925728][ T4997] print_address_description+0x88/0x218 [ 49.926566][ T4997] print_report+0x50/0x68 [ 49.927281][ T4997] kasan_report+0xa8/0xfc [ 49.927984][ T4997] kasan_check_range+0x258/0x290 [ 49.928787][ T4997] memcpy+0x48/0x90 [ 49.929428][ T4997] z_erofs_transform_plain+0x3a4/0x490 [ 49.930368][ T4997] z_erofs_decompress+0x9c/0xd4 [ 49.931230][ T4997] z_erofs_decompress_queue+0x100c/0x1b40 [ 49.932096][ T4997] z_erofs_runqueue+0x14d4/0x1694 [ 49.932878][ T4997] z_erofs_read_folio+0x2d8/0x5c8 [ 49.933672][ T4997] filemap_read_folio+0x134/0x384 [ 49.934479][ T4997] filemap_read+0x12cc/0x2104 [ 49.935245][ T4997] generic_file_read_iter+0xf8/0x5c4 [ 49.936107][ T4997] vfs_read+0x3d4/0x7f0 [ 49.936830][ T4997] ksys_read+0x12c/0x224 [ 49.937513][ T4997] __arm64_sys_read+0x7c/0x90 [ 49.938272][ T4997] invoke_syscall+0x98/0x2b4 [ 49.939055][ T4997] el0_svc_common+0x138/0x258 [ 49.939760][ T4997] do_el0_svc+0x58/0x130 [ 49.940459][ T4997] el0_svc+0x58/0x128 [ 49.941121][ T4997] el0t_64_sync_handler+0x84/0xf0 [ 49.941931][ T4997] el0t_64_sync+0x18c/0x190 [ 49.942720][ T4997] [ 49.943127][ T4997] The buggy address belongs to the physical page: [ 49.944162][ T4997] page:000000003131566b refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12d93c [ 49.945921][ T4997] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 49.947085][ T4997] raw: 05ffc00000000000 fffffc0003b64f48 fffffc0003b64e88 0000000000000000 [ 49.948556][ T4997] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 49.949982][ T4997] page dumped because: kasan: bad access detected [ 49.951080][ T4997] [ 49.951526][ T4997] Memory state around the buggy address: [ 49.952438][ T4997] ffff0000ed93bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.953690][ T4997] ffff0000ed93bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.954929][ T4997] >ffff0000ed93c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 49.956265][ T4997] ^ [ 49.956940][ T4997] ffff0000ed93c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 49.958259][ T4997] ffff0000ed93c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 49.959573][ T4997] ================================================================== [ 49.960946][ T4997] Disabling lock debugging due to kernel taint [ 49.962340][ T4997] syz.4.228: attempt to access beyond end of device [ 49.962340][ T4997] loop4: rw=0, sector=1056, nr_sectors = 8 limit=16 [ 50.034420][ T4331] Bluetooth: hci3: command 0x0409 tx timeout [ 50.075734][ T4885] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.242350][ T4885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.245898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.247472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.249717][ T4885] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.252066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.255187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.256592][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.257601][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.258991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.261970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.264220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.265914][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.267083][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.295755][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.298630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.301312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.303148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.305373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.308135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.309775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.312277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.314059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.316813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.318422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.320648][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.657795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.659152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.662793][ T4885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.667637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.669318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.674462][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.676021][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.677532][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.678867][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.681142][ T4885] device veth0_vlan entered promiscuous mode [ 50.684014][ T4885] device veth1_vlan entered promiscuous mode [ 50.689652][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.691179][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.692725][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.694805][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.727842][ T4885] device veth0_macvtap entered promiscuous mode [ 50.730006][ T4885] device veth1_macvtap entered promiscuous mode [ 50.734547][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.736222][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.737707][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.739275][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.740702][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.742207][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.744288][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.745953][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.747547][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.749221][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.751130][ T4885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.752356][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.754750][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.756212][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.757718][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.759906][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.761397][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.763119][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.765289][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.766815][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.768354][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.769899][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.771564][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.773276][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.774887][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.776902][ T4885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.817731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.819659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.822060][ T4885] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.824046][ T4885] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.825372][ T4885] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.826723][ T4885] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.830192][ T4727] device hsr_slave_0 left promiscuous mode [ 50.863548][ T4727] device hsr_slave_1 left promiscuous mode [ 50.963291][ T4727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.964528][ T4727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.966664][ T4727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.967855][ T4727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.969185][ T4727] device bridge_slave_1 left promiscuous mode [ 50.970183][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.003630][ T4727] device bridge_slave_0 left promiscuous mode [ 51.004657][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.123365][ T4727] device veth1_macvtap left promiscuous mode [ 51.124406][ T4727] device veth0_macvtap left promiscuous mode [ 51.125406][ T4727] device veth1_vlan left promiscuous mode [ 51.126359][ T4727] device veth0_vlan left promiscuous mode [ 52.103284][ T4327] Bluetooth: hci3: command 0x041b tx timeout [ 52.160178][ T4371] usb 1-1: USB disconnect, device number 7 [ 53.183803][ T4727] team0 (unregistering): Port device team_slave_1 removed [ 53.384618][ T4727] team0 (unregistering): Port device team_slave_0 removed [ 53.563902][ T4727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.773598][ T4727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.183307][ T4331] Bluetooth: hci3: command 0x040f tx timeout [ 55.354440][ T4727] bond0 (unregistering): Released all slaves [ 55.672417][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.675123][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.676846][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.682144][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.683827][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.685233][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.263238][ T4331] Bluetooth: hci3: command 0x0419 tx timeout