last executing test programs: 44.074954971s ago: executing program 1 (id=32): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x39) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) keyctl$clear(0x7, r2) 42.99273833s ago: executing program 1 (id=35): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000780)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@shortname_mixed}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@uni_xlate}, {@utf8no}, {@rodir}, {@uni_xlate}, {@shortname_lower}]}, 0x1, 0x26c, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f00000001c0)=0x4, 0x4) 42.026395628s ago: executing program 1 (id=41): chdir(0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 40.233423292s ago: executing program 1 (id=47): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f00000002c0)={[{@volume={'volume', 0x3d, 0x3e}}, {@adinicb}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@gid={'gid', 0x3d, 0xee01}}, {@uid_ignore}, {@rootdir={'rootdir', 0x3d, 0x8e3}}, {@mode={'mode', 0x3d, 0x4}}]}, 0x1, 0xc32, &(0x7f0000001a40)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2140, 0x22) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xe5a6d000) 38.375539849s ago: executing program 1 (id=52): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="a62f0d813703", @ANYRES64], 0x1, 0x187, &(0x7f0000000200)="$eJzskrFOwlAUhv/bloIGiSZOLjCQqINSiho3GXF3c6GBisSiQkkUwlBjDIODcfQJeA0TX0AH4wMwMxBnU9N7z63VV/B+Q/+cv+eec89pT/2unwbwNR81UAVHRw5vjMEAkGfCm2lCH0nfSR+E4JXyDsm/JV3zB0OTcgpYEcaZ43lurwDgk3ux5R/caJjxUh90qA4gDMMQ0NAEonRkZc581NABdEVOjjc0gFU+RBjnRINEwTqAUr9zWfIHw612x2m5Lffc1it71o5l7dqlk7bnWuLJfloYdBNEI20CSGfIcLK8fArAHVmLlCdh8fXj92wBx5BXM+UOc7RAZJDsJ89KZXiOx0pDfi/gqCpOXgUs4RZ5FQN8pBoYdArK1cT9RK8Mf7HduPCaYzAweWwCI65RniIlA9iJwK3sB1gSpcZUskhaI52QTkOda/7PL2ME0fOeoo0AMFGPd3nt9Pu9coqinm1Kz14OkguLuj5pv4d7SX4RhUKhUCgUCoVCofiffAcAAP//fYBwhQ==") listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = epoll_create1(0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)={0x8000200d}) 37.500877334s ago: executing program 1 (id=55): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) 35.218522882s ago: executing program 32 (id=55): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) 12.677459401s ago: executing program 0 (id=115): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002abd7010fbdbdf252b00000008000200", @ANYRES16=r0, @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) 9.122379028s ago: executing program 0 (id=122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x20000880) 7.801398484s ago: executing program 3 (id=124): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="070000000400"/15, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB='\x00 '], 0x48}}, 0x0) 7.349390607s ago: executing program 0 (id=126): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x4]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x5cdb, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 6.898920844s ago: executing program 2 (id=127): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x3, 0x5, 0x4, 0x5, {0x2, 0x5, 0x5, 0x10a, 0xa, 0x9, 0x2, 0x5, 0xb, 0x4d25, 0x7, 0x60b, 0x2, 0x10001, "6f4f1b1330d057b30bd1aa0900005443c528a97436419c2cd5ae7297dceeb0be"}}) 6.751451744s ago: executing program 3 (id=128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0x8000000) unshare(0x2c040000) 6.13618857s ago: executing program 2 (id=130): r0 = socket$inet(0x2, 0x6, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2, 0x3a1}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.76238849s ago: executing program 0 (id=131): prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2240, 0x0) fcntl$setlease(r0, 0x400, 0x0) creat(&(0x7f0000000840)='./file1\x00', 0x0) 5.718767813s ago: executing program 3 (id=132): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) 5.61726304s ago: executing program 4 (id=133): mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r0, 0x0, 0x0, 0x22000, 0x0) write(r0, &(0x7f0000000080)="29000300010003", 0x7) 4.875144852s ago: executing program 4 (id=134): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0xfcf6}], 0x11}}], 0x1, 0x0) 4.52308558s ago: executing program 2 (id=135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='vegas\x00', 0x6) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000300)={[{@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@mode={'mode', 0x3d, 0x8}}, {@dmode={'dmode', 0x3d, 0x4}}, {@adinicb}, {@gid}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@gid_forget}, {@uid}]}, 0x1, 0xc67, &(0x7f0000001dc0)="$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") write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 4.410287104s ago: executing program 3 (id=136): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") process_mrelease(r1, 0x0) 3.483555973s ago: executing program 4 (id=137): r0 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x32, 0x10000, 0x0) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) setregid(0x0, 0x0) 2.959780556s ago: executing program 0 (id=138): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r0, &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 2.864952056s ago: executing program 2 (id=139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x909, 0x20000000, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x271c, &(0x7f0000000440)=""/102396, &(0x7f00000000c0)=0x18ffc) 2.470059237s ago: executing program 4 (id=140): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x1141}], 0x1, 0x0, 0x0, 0x0) signalfd4(r1, &(0x7f0000000340)={[0x1]}, 0x8, 0x800) 2.296680683s ago: executing program 3 (id=141): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') socket$packet(0x11, 0x3, 0x300) 1.931423482s ago: executing program 5 (id=56): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x3}, {0x40000000000005, 0xffffffffffffffff, 0x0, 0x6}, 0x4, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) 1.609356183s ago: executing program 2 (id=142): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x12000021) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) copy_file_range(r1, &(0x7f0000000000)=0x3ff, r1, 0x0, 0x6, 0x0) 1.163040578s ago: executing program 0 (id=143): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r2, 0x0, {0x2, 0x1ee}, 0xff}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) 1.043728053s ago: executing program 5 (id=144): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x84, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x100b) 993.61039ms ago: executing program 3 (id=145): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000180)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0xc2a01) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000000)={0x1, 0xf, 0x2, &(0x7f0000000240)={0x27, "df7e4c872b4d693152971e7c3fe500"}}) 874.827768ms ago: executing program 4 (id=146): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000100)=0x8) 857.625335ms ago: executing program 2 (id=147): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2025}) getsockopt$bt_hci(r1, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 0s ago: executing program 4 (id=148): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x2042, 0x0, 0x2}, 0x10) bind$tipc(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 184.831421][ T5772] cgroup: Unknown subsys name 'net' [ 184.997314][ T5772] cgroup: Unknown subsys name 'cpuset' [ 185.013724][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 224.335585][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.342586][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.923240][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 241.319839][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.328283][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.336515][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.346430][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.354432][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.363237][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.372238][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.383843][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.385786][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.394305][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.400209][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.407474][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.413692][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.425707][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.428284][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.436686][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.447853][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.450390][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.466839][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.467367][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.488360][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.497455][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.518204][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.520514][ T5795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.588184][ T5795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.496148][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 243.365642][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.375146][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.383229][ T5790] bridge_slave_0: entered allmulticast mode [ 243.393007][ T5790] bridge_slave_0: entered promiscuous mode [ 243.405827][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 243.427170][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.434753][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.444454][ T5790] bridge_slave_1: entered allmulticast mode [ 243.454116][ T5790] bridge_slave_1: entered promiscuous mode [ 243.599574][ T5795] Bluetooth: hci0: command tx timeout [ 243.607112][ T5795] Bluetooth: hci3: command tx timeout [ 243.608317][ T5805] Bluetooth: hci2: command tx timeout [ 243.612673][ T5795] Bluetooth: hci1: command tx timeout [ 243.676562][ T5795] Bluetooth: hci4: command tx timeout [ 243.788195][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.866587][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 243.946535][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.062849][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 244.290432][ T5790] team0: Port device team_slave_0 added [ 244.300878][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 244.332624][ T5790] team0: Port device team_slave_1 added [ 244.512179][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.519978][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.527818][ T5793] bridge_slave_0: entered allmulticast mode [ 244.537537][ T5793] bridge_slave_0: entered promiscuous mode [ 244.627021][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.634620][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.644708][ T5793] bridge_slave_1: entered allmulticast mode [ 244.656077][ T5793] bridge_slave_1: entered promiscuous mode [ 244.677960][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.685156][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.711728][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.732256][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.739965][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.766503][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.084092][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.366494][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.377044][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.384634][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.392492][ T5801] bridge_slave_0: entered allmulticast mode [ 245.402157][ T5801] bridge_slave_0: entered promiscuous mode [ 245.583660][ T5790] hsr_slave_0: entered promiscuous mode [ 245.594413][ T5790] hsr_slave_1: entered promiscuous mode [ 245.658676][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.666444][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.674093][ T5801] bridge_slave_1: entered allmulticast mode [ 245.676844][ T5795] Bluetooth: hci1: command tx timeout [ 245.685729][ T5795] Bluetooth: hci2: command tx timeout [ 245.686209][ T5801] bridge_slave_1: entered promiscuous mode [ 245.691527][ T5795] Bluetooth: hci3: command tx timeout [ 245.701034][ T5805] Bluetooth: hci0: command tx timeout [ 245.717014][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.724716][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.732518][ T5788] bridge_slave_0: entered allmulticast mode [ 245.742138][ T5788] bridge_slave_0: entered promiscuous mode [ 245.767003][ T5802] Bluetooth: hci4: command tx timeout [ 245.815713][ T5793] team0: Port device team_slave_0 added [ 245.904000][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.911557][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.919295][ T5788] bridge_slave_1: entered allmulticast mode [ 245.928179][ T5788] bridge_slave_1: entered promiscuous mode [ 245.980320][ T5793] team0: Port device team_slave_1 added [ 246.075585][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.084224][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.092148][ T5789] bridge_slave_0: entered allmulticast mode [ 246.100793][ T5789] bridge_slave_0: entered promiscuous mode [ 246.196612][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.247486][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.255076][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.262998][ T5789] bridge_slave_1: entered allmulticast mode [ 246.272417][ T5789] bridge_slave_1: entered promiscuous mode [ 246.293139][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.411663][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.470258][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.515838][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.523204][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.549649][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.665158][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.677854][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.685040][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.712658][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.752525][ T5801] team0: Port device team_slave_0 added [ 246.808240][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.905737][ T5801] team0: Port device team_slave_1 added [ 246.920989][ T5788] team0: Port device team_slave_0 added [ 246.970993][ T5789] team0: Port device team_slave_0 added [ 247.036394][ T5788] team0: Port device team_slave_1 added [ 247.092360][ T5789] team0: Port device team_slave_1 added [ 247.296121][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.303309][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.329882][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.399810][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.407325][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.433763][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.492395][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.499926][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.526428][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.573767][ T5793] hsr_slave_0: entered promiscuous mode [ 247.584335][ T5793] hsr_slave_1: entered promiscuous mode [ 247.592344][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.600283][ T5793] Cannot create hsr debugfs directory [ 247.610134][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.617528][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.644131][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.659071][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.666433][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.692798][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.761488][ T5802] Bluetooth: hci0: command tx timeout [ 247.767371][ T5805] Bluetooth: hci3: command tx timeout [ 247.773007][ T5805] Bluetooth: hci2: command tx timeout [ 247.778815][ T5805] Bluetooth: hci1: command tx timeout [ 247.795695][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.803213][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.829689][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.861840][ T5795] Bluetooth: hci4: command tx timeout [ 248.052571][ T5788] hsr_slave_0: entered promiscuous mode [ 248.062865][ T5788] hsr_slave_1: entered promiscuous mode [ 248.071842][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.079745][ T5788] Cannot create hsr debugfs directory [ 248.259906][ T5801] hsr_slave_0: entered promiscuous mode [ 248.269352][ T5801] hsr_slave_1: entered promiscuous mode [ 248.277977][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.285749][ T5801] Cannot create hsr debugfs directory [ 248.408000][ T5789] hsr_slave_0: entered promiscuous mode [ 248.418270][ T5789] hsr_slave_1: entered promiscuous mode [ 248.426507][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.434267][ T5789] Cannot create hsr debugfs directory [ 248.685309][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 248.828566][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 248.978371][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.072609][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 249.846757][ T5802] Bluetooth: hci0: command tx timeout [ 249.852543][ T5795] Bluetooth: hci1: command tx timeout [ 249.858545][ T5805] Bluetooth: hci2: command tx timeout [ 249.864170][ T5805] Bluetooth: hci3: command tx timeout [ 249.893084][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 249.920238][ T5802] Bluetooth: hci4: command tx timeout [ 249.947462][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 249.968994][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 249.991983][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 250.062503][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 250.132467][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 250.223876][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.267484][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.448760][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.473171][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.511820][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.542714][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.721190][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 250.783798][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 250.817757][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 250.898529][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 251.087300][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.361680][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.555660][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.563387][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.669061][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.694523][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.702171][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.733993][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.004918][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.065563][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.087960][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.165708][ T3875] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.173503][ T3875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.232543][ T3875] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.240248][ T3875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.328039][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.357749][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.425065][ T3875] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.432749][ T3875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.453321][ T3875] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.461047][ T3875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.569522][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.577167][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.761710][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.769365][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.851897][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.143160][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.303514][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.311416][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.473412][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.481160][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.442521][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.713323][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.027692][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.040735][ T5790] veth0_vlan: entered promiscuous mode [ 255.092065][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.235371][ T5790] veth1_vlan: entered promiscuous mode [ 255.462104][ T5793] veth0_vlan: entered promiscuous mode [ 255.621148][ T5788] veth0_vlan: entered promiscuous mode [ 255.635819][ T5793] veth1_vlan: entered promiscuous mode [ 255.664220][ T5790] veth0_macvtap: entered promiscuous mode [ 255.711337][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.755816][ T5790] veth1_macvtap: entered promiscuous mode [ 255.811097][ T5788] veth1_vlan: entered promiscuous mode [ 256.012410][ T5793] veth0_macvtap: entered promiscuous mode [ 256.042725][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.207264][ T5793] veth1_macvtap: entered promiscuous mode [ 256.247553][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.290427][ T5788] veth0_macvtap: entered promiscuous mode [ 256.355266][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.364677][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.373970][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.383193][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.408001][ T5789] veth0_vlan: entered promiscuous mode [ 256.464718][ T5788] veth1_macvtap: entered promiscuous mode [ 256.544412][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.556763][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.573281][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.619544][ T5789] veth1_vlan: entered promiscuous mode [ 256.668822][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.680794][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.691309][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.702151][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.717843][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.753141][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.764432][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.779628][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.812910][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.823246][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.832482][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.841616][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.888021][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.900236][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.912328][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.923556][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.938914][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.061596][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.070748][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.080021][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.089244][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.232770][ T5789] veth0_macvtap: entered promiscuous mode [ 257.321588][ T5789] veth1_macvtap: entered promiscuous mode [ 257.555623][ T5801] veth0_vlan: entered promiscuous mode [ 257.595409][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.607468][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.617752][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.628572][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.638826][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.649639][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.665076][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.801415][ T5801] veth1_vlan: entered promiscuous mode [ 257.924314][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.935367][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.945689][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.956517][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.966689][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.977623][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.993124][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.184960][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.197236][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.206639][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.215668][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.273576][ T5801] veth0_macvtap: entered promiscuous mode [ 258.358052][ T5801] veth1_macvtap: entered promiscuous mode [ 258.653225][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.666883][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.677176][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.688047][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.698280][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.709060][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.719219][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.731215][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.751847][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.929422][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.940400][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.950677][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.962615][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.972900][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.983771][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.994052][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.004883][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.020592][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.221009][ T5801] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.231415][ T5801] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.241628][ T5801] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.250888][ T5801] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.061812][ T4013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.070943][ T4013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.175412][ T4013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.183669][ T4013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.492325][ T3922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.501643][ T3922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.586369][ T4069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.594480][ T4069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.645245][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.653553][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.783548][ T4013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.792529][ T4013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.309806][ T5790] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 264.361166][ T3922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.369446][ T3922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.599582][ T3875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.608961][ T3875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.726532][ T5844] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 265.900030][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.908650][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.919447][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 265.946487][ T5844] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 265.956509][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.012613][ T5844] usb 3-1: config 0 descriptor?? [ 266.115846][ T5844] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 266.287465][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.298976][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.405622][ T5990] mmap: syz.3.7 (5990) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 267.151395][ T5844] gspca_vc032x: reg_w err -71 [ 267.156560][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.162069][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.168080][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.173597][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.179270][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.184744][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.190679][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.204539][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.217873][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.223458][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.230989][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.236620][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.242129][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.247779][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.253409][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.259037][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.264526][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.270186][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.274711][ T5993] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 267.275617][ T5844] gspca_vc032x: Unknown sensor... [ 267.276153][ T5844] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 267.493289][ T5844] usb 3-1: USB disconnect, device number 2 [ 268.447107][ T6009] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 268.618483][ T6000] loop4: detected capacity change from 0 to 4096 [ 268.752174][ T6000] NILFS (loop4): invalid segment: Checksum error in segment payload [ 268.761105][ T6000] NILFS (loop4): trying rollback from an earlier position [ 268.904408][ T6000] NILFS (loop4): recovery complete [ 268.986272][ T6015] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.147424][ T6014] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET) [ 269.175659][ T6014] syzkaller1: entered promiscuous mode [ 269.184109][ T6014] syzkaller1: entered allmulticast mode [ 269.324326][ T6019] loop1: detected capacity change from 0 to 128 [ 269.476940][ T6019] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.616785][ T6019] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 270.652625][ T6026] loop0: detected capacity change from 0 to 512 [ 270.726966][ T5793] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 270.983792][ T6026] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.20: bg 0: block 248: padding at end of block bitmap is not set [ 271.018434][ T6026] Quota error (device loop0): write_blk: dquota write failed [ 271.027054][ T6026] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 271.043198][ T6026] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.20: Failed to acquire dquot type 1 [ 271.114868][ T6032] tc_dump_action: action bad kind [ 271.165452][ T6026] EXT4-fs (loop0): 1 truncate cleaned up [ 271.174122][ T6026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.187683][ T6026] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.652846][ T6026] syz.0.20 (6026) used greatest stack depth: 4000 bytes left [ 271.755508][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.354999][ T5879] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 272.556934][ T5844] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 272.746659][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 272.806890][ T5844] usb 4-1: config 0 interface 0 has no altsetting 0 [ 272.871629][ T5844] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 272.881964][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.890493][ T5844] usb 4-1: Product: syz [ 272.894936][ T5844] usb 4-1: Manufacturer: syz [ 272.899953][ T5844] usb 4-1: SerialNumber: syz [ 272.995403][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.006310][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.088109][ T5844] usb 4-1: config 0 descriptor?? [ 273.097286][ T5879] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 273.106898][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 273.115184][ T5879] usb 3-1: SerialNumber: syz [ 273.528989][ T5879] usb 3-1: 0:2 : does not exist [ 273.626491][ T5844] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 273.793688][ T5879] usb 3-1: USB disconnect, device number 3 [ 274.331586][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.372404][ T5844] usb 4-1: USB disconnect, device number 2 [ 274.499935][ T6059] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 274.900715][ T6064] loop1: detected capacity change from 0 to 256 [ 275.697698][ T6073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39'. [ 275.755320][ T6072] loop3: detected capacity change from 0 to 512 [ 275.994649][ T6072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.008159][ T6072] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.693870][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.010984][ T6085] sctp: failed to load transform for md5: -2 [ 277.190045][ T5844] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 277.411403][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.419857][ T6097] loop3: detected capacity change from 0 to 128 [ 277.422946][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.441688][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.460362][ T5844] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.471355][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.486128][ T5844] usb 5-1: config 0 descriptor?? [ 277.888787][ T6099] loop1: detected capacity change from 0 to 2048 [ 278.040862][ T6099] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.114246][ T5844] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 278.249187][ T5844] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 278.959453][ T6109] ipvlan2: entered promiscuous mode [ 278.972886][ T6109] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 278.985691][ T6109] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 279.135628][ T5793] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 279.177887][ T5793] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 279.531746][ T6111] loop2: detected capacity change from 0 to 2048 [ 279.685186][ T6111] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 279.693595][ T6111] UDF-fs: Scanning with blocksize 512 failed [ 279.829102][ T4013] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.877002][ T6111] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 279.916069][ T6111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.072202][ T4013] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.151428][ T5841] usb 5-1: USB disconnect, device number 2 [ 280.312817][ T4013] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.533640][ T4013] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.182064][ T4013] bridge_slave_1: left allmulticast mode [ 281.188533][ T4013] bridge_slave_1: left promiscuous mode [ 281.195204][ T4013] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.317708][ T4013] bridge_slave_0: left allmulticast mode [ 281.323655][ T4013] bridge_slave_0: left promiscuous mode [ 281.333843][ T4013] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.866149][ T4013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.922367][ T4013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.946892][ T4013] bond0 (unregistering): Released all slaves [ 282.585793][ T4013] hsr_slave_0: left promiscuous mode [ 282.613825][ T4013] hsr_slave_1: left promiscuous mode [ 282.622639][ T4013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.630765][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.712713][ T4013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.721086][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.897625][ T4013] veth1_macvtap: left promiscuous mode [ 282.903553][ T4013] veth0_macvtap: left promiscuous mode [ 282.909869][ T4013] veth1_vlan: left promiscuous mode [ 282.915481][ T4013] veth0_vlan: left promiscuous mode [ 283.832678][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.863332][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.878531][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.904739][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.918800][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 284.559542][ T4013] team0 (unregistering): Port device team_slave_1 removed [ 284.778514][ T4013] team0 (unregistering): Port device team_slave_0 removed [ 285.299832][ T6166] unknown channel width for channel at 909000KHz? [ 285.852508][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.861572][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.076477][ T5795] Bluetooth: hci3: command tx timeout [ 286.313787][ T6170] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 286.386974][ T6170] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 286.534027][ T6146] chnl_net:caif_netlink_parms(): no params data found [ 286.592385][ T6178] loop0: detected capacity change from 0 to 128 [ 286.684809][ T6178] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 286.710670][ T6178] System zones: 1-3, 19-19, 35-36 [ 286.822120][ T6178] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.946656][ T6178] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 287.284866][ T6184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 287.442014][ T6187] netlink: 'syz.3.73': attribute type 10 has an invalid length. [ 287.471344][ T6187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.494472][ T6187] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 287.543763][ T6192] bond0: entered promiscuous mode [ 287.549230][ T6192] bond_slave_0: entered promiscuous mode [ 287.556281][ T6192] bond_slave_1: entered promiscuous mode [ 287.563361][ T6192] batadv0: entered promiscuous mode [ 287.660422][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.156948][ T5795] Bluetooth: hci3: command tx timeout [ 289.544143][ T6146] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.551887][ T6146] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.559950][ T6146] bridge_slave_0: entered allmulticast mode [ 289.569556][ T6146] bridge_slave_0: entered promiscuous mode [ 289.719655][ T6146] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.727580][ T6146] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.735288][ T6146] bridge_slave_1: entered allmulticast mode [ 289.751165][ T6146] bridge_slave_1: entered promiscuous mode [ 290.277914][ T5795] Bluetooth: hci3: command tx timeout [ 291.042499][ T6258] loop3: detected capacity change from 0 to 40427 [ 291.055644][ T6258] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 291.063966][ T6258] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 291.179337][ T6258] F2FS-fs (loop3): invalid crc value [ 291.300476][ T6146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.487149][ T6146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.603214][ T6258] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 291.610892][ T6258] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 292.002947][ T6146] team0: Port device team_slave_0 added [ 292.049992][ T6146] team0: Port device team_slave_1 added [ 292.319163][ T5795] Bluetooth: hci3: command tx timeout [ 292.441860][ T6146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.449706][ T6146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.476384][ T6146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.595389][ T6146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.602970][ T6146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.632241][ T6146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.018792][ T6281] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 293.094443][ T6281] netlink: 'syz.2.83': attribute type 1 has an invalid length. [ 293.325827][ T6146] hsr_slave_0: entered promiscuous mode [ 293.337855][ T6146] hsr_slave_1: entered promiscuous mode [ 293.346987][ T6146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.354786][ T6146] Cannot create hsr debugfs directory [ 293.699892][ T6283] loop4: detected capacity change from 0 to 4096 [ 293.797893][ T6283] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 294.301967][ T6283] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 294.467026][ T30] audit: type=1800 audit(1747321858.758:2): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.84" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 295.076557][ T6296] warning: `syz.2.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 295.563200][ T6146] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 295.709988][ T6146] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 295.794451][ T6146] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 295.880242][ T6303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.948685][ T6146] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 296.358559][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 296.596464][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 296.684370][ T45] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 296.693337][ T45] usb 1-1: config 0 has no interface number 0 [ 296.700360][ T45] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.714936][ T45] usb 1-1: config 0 interface 85 has no altsetting 0 [ 296.876450][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 296.887703][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.896816][ T45] usb 1-1: Product: syz [ 296.901243][ T45] usb 1-1: Manufacturer: syz [ 296.909696][ T45] usb 1-1: SerialNumber: syz [ 297.048206][ T45] usb 1-1: config 0 descriptor?? [ 297.673170][ T6146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.801207][ T45] appletouch 1-1:0.85: Geyser mode initialized. [ 297.812407][ T45] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input5 [ 297.997394][ T6146] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.128689][ T45] usb 1-1: USB disconnect, device number 2 [ 298.200796][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.208669][ T6249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.281684][ T45] appletouch 1-1:0.85: input: appletouch disconnected [ 298.402489][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.410215][ T6249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.474837][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 300.866443][ T6146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.443588][ T6353] loop2: detected capacity change from 0 to 32768 [ 301.584411][ T6353] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 301.988222][ T6353] XFS (loop2): Ending clean mount [ 302.004019][ T6353] XFS (loop2): Quotacheck needed: Please wait. [ 302.056886][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 302.186574][ T6353] XFS (loop2): Quotacheck: Done. [ 302.239613][ T6369] netlink: 452 bytes leftover after parsing attributes in process `syz.3.106'. [ 302.249492][ T6369] netlink: 452 bytes leftover after parsing attributes in process `syz.3.106'. [ 302.412435][ T5788] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 304.190580][ T6146] veth0_vlan: entered promiscuous mode [ 304.369189][ T6146] veth1_vlan: entered promiscuous mode [ 304.626018][ T6146] veth0_macvtap: entered promiscuous mode [ 304.706823][ T6146] veth1_macvtap: entered promiscuous mode [ 304.966018][ T6146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.977292][ T6146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.987662][ T6146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.002479][ T6146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.014196][ T6146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.025105][ T6146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.035392][ T6146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.046674][ T6146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.062567][ T6146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.453864][ T6146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.464775][ T6146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.475427][ T6146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.486276][ T6146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.496580][ T6146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.511822][ T6146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.523641][ T6146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.535286][ T6146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.551022][ T6146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.876765][ T5844] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 305.914549][ T6146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.928331][ T6146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.939240][ T6146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.948789][ T6146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.146628][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 306.262100][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.273201][ T5844] usb 1-1: config 0 has no interfaces? [ 306.279285][ T5844] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 306.288744][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.436943][ T5844] usb 1-1: config 0 descriptor?? [ 306.598510][ T6412] loop3: detected capacity change from 0 to 1024 [ 307.000774][ T6412] syz.3.117: attempt to access beyond end of device [ 307.000774][ T6412] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 307.014695][ T6412] Buffer I/O error on dev loop3, logical block 2889, async page read [ 307.023404][ T6412] syz.3.117: attempt to access beyond end of device [ 307.023404][ T6412] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 307.037323][ T6412] Buffer I/O error on dev loop3, logical block 2889, async page read [ 307.097374][ T45] usb 1-1: USB disconnect, device number 3 [ 307.109018][ T30] audit: type=1800 audit(1747321871.358:3): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.117" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 307.336492][ T30] audit: type=1800 audit(1747321871.618:4): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.117" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 307.361569][ T5844] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 307.389511][ T6412] syz.3.117: attempt to access beyond end of device [ 307.389511][ T6412] loop3: rw=34817, sector=5778, nr_sectors = 2 limit=1024 [ 307.572629][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 307.585372][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 307.597373][ T5844] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 307.607021][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.739324][ T5844] usb 3-1: config 0 descriptor?? [ 307.769742][ T6418] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 308.437527][ T5844] elan 0003:04F3:0755.0002: unknown main item tag 0x2 [ 308.518887][ T5844] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 308.669428][ T6435] loop3: detected capacity change from 0 to 512 [ 308.856327][ T6435] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.121: corrupted in-inode xattr: overlapping e_value [ 308.883440][ T6435] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.121: couldn't read orphan inode 15 (err -117) [ 308.909830][ T6435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.629791][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.381404][ T45] usb 3-1: USB disconnect, device number 4 [ 312.321595][ T6474] Bluetooth: MGMT ver 1.23 [ 313.682799][ T6488] loop2: detected capacity change from 0 to 2048 [ 313.856120][ T6488] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.050667][ T6491] loop3: detected capacity change from 0 to 512 [ 314.144020][ T3875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.152410][ T3875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.198676][ T6491] EXT4-fs: Ignoring removed nobh option [ 314.380838][ T3598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.389194][ T3598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.447938][ T6491] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.136: invalid indirect mapped block 256 (level 2) [ 314.502058][ T6491] EXT4-fs (loop3): 2 truncates cleaned up [ 314.510478][ T6491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.187781][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.258587][ T5879] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 317.449933][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 317.464164][ T5879] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 317.474448][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.556982][ T5879] usb 4-1: config 0 descriptor?? [ 317.837649][ T5879] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 317.868616][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 317.924914][ T5879] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 317.932889][ T5879] usb 4-1: media controller created [ 318.045214][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.099785][ T6523] ===================================================== [ 318.111767][ T6523] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 318.121138][ T6523] _copy_to_user+0xcc/0x120 [ 318.126153][ T6523] i2cdev_ioctl_smbus+0x586/0x660 [ 318.131429][ T6523] compat_i2cdev_ioctl+0x48f/0xb40 [ 318.136985][ T6523] __ia32_compat_sys_ioctl+0x7f6/0x1260 [ 318.142733][ T6523] ia32_sys_call+0x2d07/0x42c0 [ 318.147837][ T6523] __do_fast_syscall_32+0xb0/0x110 [ 318.153202][ T6523] do_fast_syscall_32+0x38/0x80 [ 318.158562][ T6523] do_SYSENTER_32+0x1f/0x30 [ 318.163300][ T6523] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.170018][ T6523] [ 318.172465][ T6523] Uninit was stored to memory at: [ 318.178419][ T6523] __i2c_smbus_xfer+0x2561/0x2f60 [ 318.183657][ T6523] i2c_smbus_xfer+0x31d/0x4d0 [ 318.188721][ T6523] i2cdev_ioctl_smbus+0x4a1/0x660 [ 318.193991][ T6523] compat_i2cdev_ioctl+0x48f/0xb40 [ 318.199537][ T6523] __ia32_compat_sys_ioctl+0x7f6/0x1260 [ 318.209860][ T6523] ia32_sys_call+0x2d07/0x42c0 [ 318.214826][ T6523] __do_fast_syscall_32+0xb0/0x110 [ 318.222174][ T6523] do_fast_syscall_32+0x38/0x80 [ 318.227415][ T6523] do_SYSENTER_32+0x1f/0x30 [ 318.232151][ T6523] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.238940][ T6523] [ 318.241383][ T6523] Local variable msgbuf1.i created at: [ 318.247121][ T6523] __i2c_smbus_xfer+0x86a/0x2f60 [ 318.252266][ T6523] i2c_smbus_xfer+0x31d/0x4d0 [ 318.257340][ T6523] [ 318.259788][ T6523] Byte 0 of 1 is uninitialized [ 318.264670][ T6523] Memory access of size 1 starts at ffff88804e5c3c86 [ 318.271651][ T6523] Data copied to user address 0000000080000240 [ 318.278249][ T6523] [ 318.280746][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz.3.145 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 318.293134][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.303547][ T6523] ===================================================== [ 318.315004][ T6523] Disabling lock debugging due to kernel taint [ 318.323236][ T6523] Kernel panic - not syncing: kmsan.panic set ... [ 318.329854][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz.3.145 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 318.343659][ T6523] Tainted: [B]=BAD_PAGE [ 318.347942][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.358164][ T6523] Call Trace: [ 318.361569][ T6523] [ 318.364623][ T6523] __dump_stack+0x26/0x30 [ 318.369171][ T6523] dump_stack_lvl+0x53/0x270 [ 318.373982][ T6523] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 318.380009][ T6523] dump_stack+0x1e/0x25 [ 318.384340][ T6523] panic+0x4bd/0xd50 [ 318.388465][ T6523] kmsan_report+0x29d/0x2a0 [ 318.393162][ T6523] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 318.399688][ T6523] ? kmsan_internal_check_memory+0x496/0x570 [ 318.405850][ T6523] ? kmsan_copy_to_user+0xca/0xe0 [ 318.411070][ T6523] ? _copy_to_user+0xcc/0x120 [ 318.415967][ T6523] ? i2cdev_ioctl_smbus+0x586/0x660 [ 318.421395][ T6523] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 318.426892][ T6523] ? __ia32_compat_sys_ioctl+0x7f6/0x1260 [ 318.432823][ T6523] ? ia32_sys_call+0x2d07/0x42c0 [ 318.437959][ T6523] ? __do_fast_syscall_32+0xb0/0x110 [ 318.443471][ T6523] ? do_fast_syscall_32+0x38/0x80 [ 318.448681][ T6523] ? do_SYSENTER_32+0x1f/0x30 [ 318.453555][ T6523] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.460287][ T6523] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 318.465796][ T6523] ? __i2c_transfer+0x11ca/0x30e0 [ 318.471027][ T6523] ? kmsan_get_metadata+0x105/0x1b0 [ 318.476435][ T6523] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 318.482969][ T6523] ? kmsan_get_metadata+0x105/0x1b0 [ 318.488384][ T6523] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 318.494396][ T6523] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 318.499763][ T6523] ? kmsan_get_metadata+0x105/0x1b0 [ 318.505172][ T6523] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 318.511205][ T6523] kmsan_internal_check_memory+0x496/0x570 [ 318.517229][ T6523] kmsan_copy_to_user+0xca/0xe0 [ 318.522283][ T6523] ? should_fail_usercopy+0x2e/0x40 [ 318.527727][ T6523] _copy_to_user+0xcc/0x120 [ 318.532453][ T6523] i2cdev_ioctl_smbus+0x586/0x660 [ 318.537713][ T6523] compat_i2cdev_ioctl+0x48f/0xb40 [ 318.543068][ T6523] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 318.548926][ T6523] __ia32_compat_sys_ioctl+0x7f6/0x1260 [ 318.554672][ T6523] ? kmsan_get_metadata+0x105/0x1b0 [ 318.560084][ T6523] ? kmsan_get_metadata+0x105/0x1b0 [ 318.565508][ T6523] ia32_sys_call+0x2d07/0x42c0 [ 318.570445][ T6523] __do_fast_syscall_32+0xb0/0x110 [ 318.575780][ T6523] do_fast_syscall_32+0x38/0x80 [ 318.580852][ T6523] do_SYSENTER_32+0x1f/0x30 [ 318.585560][ T6523] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.592112][ T6523] RIP: 0023:0xf704e539 [ 318.596328][ T6523] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 318.616149][ T6523] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 318.624812][ T6523] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000720 [ 318.632933][ T6523] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.641050][ T6523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 318.649169][ T6523] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 318.657288][ T6523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 318.665447][ T6523] [ 318.668955][ T6523] Kernel Offset: disabled [ 318.673373][ T6523] Rebooting in 86400 seconds..