last executing test programs: 3.506125711s ago: executing program 1 (id=100): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000001e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xefE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xd1\xa7@\xa1_B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7<\x7f\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xb0\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcd\x90\x95\xdd\x8a\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1d0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xa68d7c519e801be0, 0x0, 0x0, 0x1d45}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x53d, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000680)="96", 0x1}], 0x1) 1.676133267s ago: executing program 4 (id=127): r0 = syz_open_dev$video(&(0x7f0000000480), 0x8000000, 0x40000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r0, &(0x7f0000000000)=""/166, 0xa6, 0x7fffffffffffffff) 1.640458273s ago: executing program 4 (id=129): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fanotify_mark(0xffffffffffffffff, 0x409, 0x40001003, 0xffffffffffffffff, 0x0) 1.605563239s ago: executing program 4 (id=130): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000071, 0x0, 0x0, 0x0, 0x0, 0x2, 0x451, 0xffffffff}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) openat$autofs(0xffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 1.078443637s ago: executing program 3 (id=137): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x400448c9, &(0x7f0000000180)={0x2, 0x3132564e, 0x2, @stepwise={0x8, 0x4, 0x1, 0x9, 0x2, 0xfffffffe}}) 948.236789ms ago: executing program 3 (id=139): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r2, 0x0, 0x9, 0x0, 0x1, [0x0], [0x2], [0x0, 0x0, 0x100, 0xd], [0x0, 0x7, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r4, 0x0) vmsplice(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x8) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) 935.586674ms ago: executing program 3 (id=141): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/239, 0xef) write$char_usb(r0, 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 895.061797ms ago: executing program 2 (id=142): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001d00)={0x14, 0x41, 0x1, 0x70bd2b, 0x25dfdbfd, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x40810) 775.994529ms ago: executing program 2 (id=144): r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0xbbb9, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) add_key$user(&(0x7f0000002f00), 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 701.092624ms ago: executing program 2 (id=146): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 656.092313ms ago: executing program 4 (id=148): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002a80)=""/4088, 0xfdef}], 0x1}, 0x10020) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 625.490432ms ago: executing program 0 (id=149): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, r2, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xd04b, 0x9, 0x800, 0x8, 0x8, 0x4ccd, 0x6]}}]}]}]}, 0x38}}, 0x0) 620.388802ms ago: executing program 2 (id=150): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000030200ffffffff", 0x58}], 0x1) 563.012363ms ago: executing program 2 (id=151): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x7, {0x7, 0x0, "12279dfe7e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, 0x0, 0x0, 0x0}, 0x0) 562.808852ms ago: executing program 4 (id=152): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x44, 0x0, r3, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0, 0x40000022, 0x1}) io_uring_enter(r0, 0x69d8, 0x0, 0x0, 0x0, 0x0) 484.251278ms ago: executing program 4 (id=153): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x1, 0x100, 0x0, 0x6, 0x2, 0x5}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffff", 0x48}], 0x1) 484.063662ms ago: executing program 0 (id=154): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xfffff000, 0x1, 0x1, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 351.924195ms ago: executing program 0 (id=155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000180)={@link_local={0x3}, @broadcast, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x6, 0x1c, 0x65, 0x0, 0x2, 0x11, 0x0, @multicast2, @loopback}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0) 300.40815ms ago: executing program 0 (id=156): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x200418cc) close(r1) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 200.279532ms ago: executing program 0 (id=157): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="eaaaaab6aaaaaaaaaaaaaaaa08004d"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 200.145271ms ago: executing program 3 (id=158): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x309, 0x0, 0x0, {0xa, 0x0, 0x20}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6}}]}, 0x38}}, 0x0) 180.447782ms ago: executing program 3 (id=159): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x7a, &(0x7f0000000440)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, '|T|', 0x44, 0x2f, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x2, {{0xe, 0x1, 0xc, 0x2, 0x0, 0x2, 0x3, 0x6}, 0x1, {0x7ff}}}, {0x8, 0x22eb, 0x2, {{0xf, 0x2, 0xb, 0x0, 0x0, 0x3, 0x7, 0x3}, 0x2, {0x5, 0x304, 0x1, 0x2, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 178.278348ms ago: executing program 1 (id=160): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}, r1}}}], 0x28}}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) 117.37082ms ago: executing program 0 (id=161): socket(0x18, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x5, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) execve(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x30f0, 0xe38, 0x4, 0x101}, 0x8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x1ff, '\x00', @value64=0xfffffffffffffffe}}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e23, 0x3, 'ovf\x00', 0x1, 0x7, 0x49}, 0x2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000010d802, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x402, 0x0) writev(r5, &(0x7f0000005740)=[{&(0x7f0000000340)='\n', 0x1}], 0x1) r6 = dup(r4) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 117.240919ms ago: executing program 1 (id=162): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) 62.08401ms ago: executing program 1 (id=163): ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0xd) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 301.641µs ago: executing program 1 (id=164): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r0, &(0x7f0000005880)={0x1d, r2}, 0x18) writev(r0, &(0x7f0000001940)=[{&(0x7f0000000680)="b7623dac5b", 0x5}], 0x1) 154.326µs ago: executing program 2 (id=165): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-generic)\x00'}, 0x58) 0s ago: executing program 3 (id=166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000180)={@link_local={0x3}, @broadcast, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x6, 0x1c, 0x65, 0x0, 0x2, 0x11, 0x0, @multicast2, @loopback}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 34.605074][ T6413] cgroup: Unknown subsys name 'net' [ 34.839583][ T6413] cgroup: Unknown subsys name 'cpuset' [ 34.843107][ T6413] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.175788][ T6413] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 36.586456][ T6436] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.595234][ T6437] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.597486][ T6437] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.599204][ T6437] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.601948][ T6437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.604086][ T6437] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.606152][ T6437] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.608089][ T6437] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.609839][ T6437] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.611603][ T6438] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.612501][ T6437] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.614261][ T6438] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.614584][ T6442] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.616608][ T6438] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.618949][ T6442] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.620364][ T6438] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.620719][ T6438] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.622429][ T6437] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.623734][ T6438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.624890][ T6437] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.626685][ T6438] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.628307][ T6437] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.630093][ T6438] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.630940][ T6437] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.633675][ T6438] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 36.634582][ T6437] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.635485][ T6438] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.636817][ T6437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.642286][ T6434] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.645873][ T5993] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.864876][ T6425] chnl_net:caif_netlink_parms(): no params data found [ 36.888253][ T6426] chnl_net:caif_netlink_parms(): no params data found [ 36.929386][ T6423] chnl_net:caif_netlink_parms(): no params data found [ 36.946885][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.951011][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.952736][ T6426] bridge_slave_0: entered allmulticast mode [ 36.955391][ T6426] bridge_slave_0: entered promiscuous mode [ 36.962536][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.963975][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.965592][ T6426] bridge_slave_1: entered allmulticast mode [ 36.967445][ T6426] bridge_slave_1: entered promiscuous mode [ 37.007597][ T6426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.009669][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.011219][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.012841][ T6425] bridge_slave_0: entered allmulticast mode [ 37.014640][ T6425] bridge_slave_0: entered promiscuous mode [ 37.016936][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.019541][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.021162][ T6425] bridge_slave_1: entered allmulticast mode [ 37.022927][ T6425] bridge_slave_1: entered promiscuous mode [ 37.046196][ T6432] chnl_net:caif_netlink_parms(): no params data found [ 37.050809][ T6426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.080979][ T6426] team0: Port device team_slave_0 added [ 37.085263][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.092511][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.104760][ T6426] team0: Port device team_slave_1 added [ 37.149227][ T6425] team0: Port device team_slave_0 added [ 37.150969][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.152423][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.158124][ T6426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.161088][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.162614][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.164056][ T6423] bridge_slave_0: entered allmulticast mode [ 37.165775][ T6423] bridge_slave_0: entered promiscuous mode [ 37.168849][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.170326][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.171848][ T6423] bridge_slave_1: entered allmulticast mode [ 37.173634][ T6423] bridge_slave_1: entered promiscuous mode [ 37.175302][ T6424] chnl_net:caif_netlink_parms(): no params data found [ 37.183297][ T6425] team0: Port device team_slave_1 added [ 37.184977][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.186432][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.195421][ T6426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.225699][ T6423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.228298][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.229960][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.231612][ T6432] bridge_slave_0: entered allmulticast mode [ 37.233254][ T6432] bridge_slave_0: entered promiscuous mode [ 37.235560][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.237100][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.239559][ T6432] bridge_slave_1: entered allmulticast mode [ 37.241279][ T6432] bridge_slave_1: entered promiscuous mode [ 37.258354][ T6423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.265302][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.266641][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.272457][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.293207][ T6432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.295542][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.297003][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.302567][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.338854][ T6426] hsr_slave_0: entered promiscuous mode [ 37.387717][ T6426] hsr_slave_1: entered promiscuous mode [ 37.462830][ T6432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.465843][ T6423] team0: Port device team_slave_0 added [ 37.483364][ T6423] team0: Port device team_slave_1 added [ 37.490849][ T6432] team0: Port device team_slave_0 added [ 37.494766][ T6432] team0: Port device team_slave_1 added [ 37.529343][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.530913][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.532530][ T6424] bridge_slave_0: entered allmulticast mode [ 37.534267][ T6424] bridge_slave_0: entered promiscuous mode [ 37.536755][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.539605][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.541228][ T6424] bridge_slave_1: entered allmulticast mode [ 37.542932][ T6424] bridge_slave_1: entered promiscuous mode [ 37.569648][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.571103][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.576602][ T6423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.580177][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.581557][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.586854][ T6432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.590438][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.591875][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.597392][ T6432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.648793][ T6425] hsr_slave_0: entered promiscuous mode [ 37.707793][ T6425] hsr_slave_1: entered promiscuous mode [ 37.747478][ T6425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.749382][ T6425] Cannot create hsr debugfs directory [ 37.753674][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.755886][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.757458][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.762986][ T6423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.778613][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.849188][ T6432] hsr_slave_0: entered promiscuous mode [ 37.887737][ T6432] hsr_slave_1: entered promiscuous mode [ 37.931569][ T6432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.933064][ T6432] Cannot create hsr debugfs directory [ 37.954976][ T6424] team0: Port device team_slave_0 added [ 37.958289][ T6424] team0: Port device team_slave_1 added [ 37.995177][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.996729][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.002136][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.026031][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.027656][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.032823][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.068691][ T6423] hsr_slave_0: entered promiscuous mode [ 38.107539][ T6423] hsr_slave_1: entered promiscuous mode [ 38.147307][ T6423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.149044][ T6423] Cannot create hsr debugfs directory [ 38.219754][ T6424] hsr_slave_0: entered promiscuous mode [ 38.257673][ T6424] hsr_slave_1: entered promiscuous mode [ 38.297413][ T6424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.298976][ T6424] Cannot create hsr debugfs directory [ 38.339248][ T6426] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.360397][ T6426] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.384574][ T6426] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.388045][ T6426] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.454952][ T6432] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.458841][ T6432] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.464957][ T6432] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.468590][ T6432] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.499825][ T6423] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.508423][ T6423] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.519325][ T6423] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.532838][ T6423] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.550655][ T6425] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.554001][ T6425] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.565289][ T6425] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.568359][ T6425] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.612928][ T6426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.657698][ T6437] Bluetooth: hci2: command tx timeout [ 38.660791][ T6426] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.670324][ T6423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.673397][ T6432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.680463][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.681951][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.703873][ T6432] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.707044][ T2010] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.708641][ T2010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.722411][ T6424] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.725585][ T6424] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.737360][ T6437] Bluetooth: hci3: command tx timeout [ 38.738615][ T6437] Bluetooth: hci0: command tx timeout [ 38.739753][ T6437] Bluetooth: hci1: command tx timeout [ 38.740907][ T6437] Bluetooth: hci4: command tx timeout [ 38.742082][ T6424] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.746771][ T619] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.748285][ T619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.753630][ T6423] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.762195][ T6424] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.770075][ T1935] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.771571][ T1935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.776176][ T2010] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.777775][ T2010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.793372][ T6425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.803768][ T2010] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.805250][ T2010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.845701][ T6432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.865330][ T6425] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.874714][ T6426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.888970][ T619] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.890528][ T619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.893518][ T619] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.894964][ T619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.984722][ T6425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.986921][ T6425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.016492][ T6423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.023722][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.040940][ T6432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.051765][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.055863][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.057452][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.090741][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.092308][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.103521][ T6426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.138764][ T6425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.163352][ T6423] veth0_vlan: entered promiscuous mode [ 39.171027][ T6423] veth1_vlan: entered promiscuous mode [ 39.188573][ T6426] veth0_vlan: entered promiscuous mode [ 39.193238][ T6426] veth1_vlan: entered promiscuous mode [ 39.210210][ T6423] veth0_macvtap: entered promiscuous mode [ 39.230841][ T6423] veth1_macvtap: entered promiscuous mode [ 39.233664][ T6425] veth0_vlan: entered promiscuous mode [ 39.261176][ T6426] veth0_macvtap: entered promiscuous mode [ 39.264685][ T6426] veth1_macvtap: entered promiscuous mode [ 39.268487][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.273473][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.280515][ T6423] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.282392][ T6423] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.284299][ T6423] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.286059][ T6423] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.292711][ T6425] veth1_vlan: entered promiscuous mode [ 39.315379][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.318488][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.321321][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.327771][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.329905][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.332570][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.344405][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.364836][ T6425] veth0_macvtap: entered promiscuous mode [ 39.371219][ T6425] veth1_macvtap: entered promiscuous mode [ 39.378555][ T6426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.380434][ T6426] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.382304][ T6426] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.384195][ T6426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.424251][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.425986][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.434710][ T6432] veth0_vlan: entered promiscuous mode [ 39.441806][ T6432] veth1_vlan: entered promiscuous mode [ 39.445292][ T2010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.447057][ T2010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.456823][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.460734][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.462807][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.464959][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.467991][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.472438][ T6424] veth0_vlan: entered promiscuous mode [ 39.475441][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.482576][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.484788][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.486882][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.491256][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.509293][ T6424] veth1_vlan: entered promiscuous mode [ 39.520105][ T6425] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.522025][ T6425] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.523792][ T6425] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.525552][ T6425] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.533864][ T6423] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.556818][ T2010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.564375][ T6424] veth0_macvtap: entered promiscuous mode [ 39.567526][ T2010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.570491][ T6424] veth1_macvtap: entered promiscuous mode [ 39.603431][ T6432] veth0_macvtap: entered promiscuous mode [ 39.606569][ T6432] veth1_macvtap: entered promiscuous mode [ 39.615124][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.617719][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.619842][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.622148][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.624208][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.626255][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.629155][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.644553][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.647558][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.649506][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.651698][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.653523][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.655732][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.662465][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.664757][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.667781][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.675190][ T1935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.684207][ T1935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.687432][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.689594][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.691684][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.693798][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.695813][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.706979][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.710373][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.725400][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.727785][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.729735][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.731795][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.733780][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.735850][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.738466][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.740648][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.743796][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.747969][ T6432] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.750258][ T6432] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.751966][ T6432] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.753900][ T6432] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.771414][ T6424] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.773230][ T6424] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.775057][ T6424] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.776743][ T6424] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.852904][ T231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.854532][ T231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.972084][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.973880][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.990291][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.992008][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.003904][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.005574][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.048756][ T231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.050471][ T231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.131844][ T1935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.133534][ T1935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.838626][ T5993] Bluetooth: hci2: command tx timeout [ 40.839815][ T5993] Bluetooth: hci4: command tx timeout [ 40.840952][ T5993] Bluetooth: hci1: command tx timeout [ 40.842157][ T5993] Bluetooth: hci0: command tx timeout [ 40.843309][ T5993] Bluetooth: hci3: command tx timeout [ 40.906333][ T6517] loop0: detected capacity change from 0 to 32768 [ 40.908195][ T6517] btrfs: Unknown parameter 'measure' [ 40.984431][ T6516] loop0: detected capacity change from 0 to 512 [ 40.986281][ T6516] ======================================================= [ 40.986281][ T6516] WARNING: The mand mount option has been deprecated and [ 40.986281][ T6516] and is ignored by this kernel. Remove the mand [ 40.986281][ T6516] option from the mount to silence this warning. [ 40.986281][ T6516] ======================================================= [ 40.994648][ T6516] EXT4-fs: Ignoring removed i_version option [ 40.995875][ T6516] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.006683][ T6516] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 41.163517][ T6520] loop2: detected capacity change from 0 to 32768 [ 41.169788][ T6520] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3 (6520) [ 41.196769][ T6520] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 41.199298][ T6520] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 41.201391][ T6520] BTRFS info (device loop2): using free-space-tree [ 41.440657][ T6513] loop3: detected capacity change from 0 to 32768 [ 41.456306][ T6513] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6 (6513) [ 41.481160][ T6541] Zero length message leads to an empty skb [ 41.555617][ T6521] loop4: detected capacity change from 0 to 32768 [ 41.588798][ T6513] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 41.591195][ T6513] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 41.596490][ T6513] BTRFS info (device loop3): using free-space-tree [ 41.730558][ T6521] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,fix_errors=yes,norecovery,nojournal_transaction_names [ 41.735122][ T6521] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 41.737938][ T6521] bcachefs (loop4): Version upgrade required: [ 41.737938][ T6521] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 41.737938][ T6521] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 41.737938][ T6521] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 41.828379][ T6521] bcachefs (loop4): error validating btree node at btree alloc level 0/0 [ 41.828403][ T6521] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 41.828415][ T6521] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 41.858757][ T6521] bcachefs (loop4): btree_node_read_work: rewriting btree node at btree=alloc level=0 SPOS_MAX due to error [ 41.871127][ T6521] bcachefs (loop4): check_topology... done [ 41.872449][ T6521] bcachefs (loop4): accounting_read... [ 41.877006][ T6426] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 41.919189][ T6509] loop1: detected capacity change from 0 to 131072 [ 41.928206][ T6521] done [ 41.928970][ T6521] bcachefs (loop4): alloc_read... done [ 41.930273][ T6521] bcachefs (loop4): stripes_read... done [ 41.931482][ T6521] bcachefs (loop4): snapshots_read... done [ 41.933773][ T6521] bcachefs (loop4): check_allocations... [ 41.944347][ T6521] bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 41.944366][ T6521] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 41.966566][ T6509] F2FS-fs (loop1): invalid crc value [ 41.971728][ T6509] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.975953][ T6521] bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 41.975968][ T6521] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 42.003066][ T6521] bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 42.003082][ T6521] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 42.015313][ T6509] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 42.017552][ T6521] bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 42.017566][ T6521] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 42.037854][ T6521] bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 42.037871][ T6521] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 42.050626][ T6521] bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 42.057290][ T6521] bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 42.069334][ T6521] bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 42.071633][ T6521] bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 42.074280][ T6521] bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 42.076140][ T6521] bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 42.078293][ T6521] bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 42.084915][ T6521] bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 42.087095][ T6521] bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 42.089900][ T6521] bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 42.093894][ T6521] bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 42.095648][ T6521] bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 42.101560][ T6521] bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 42.107161][ T6521] bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 42.115306][ T6521] bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 42.117147][ T6521] bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 42.122930][ T6521] bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 42.124935][ T6521] bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 42.127254][ T6521] bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 42.131584][ T6521] bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 42.133932][ T6521] bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 42.135925][ T6521] bcachefs (loop4): Ratelimiting new instances of previous error [ 42.137977][ T6521] bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 42.140416][ T6521] bcachefs (loop4): Ratelimiting new instances of previous error [ 42.198678][ T6521] done [ 42.201016][ T6521] bcachefs (loop4): going read-write [ 42.218560][ T6521] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 42.356163][ T6521] bcachefs (loop4): done starting filesystem [ 42.899706][ T6437] Bluetooth: hci0: command tx timeout [ 42.901110][ T6437] Bluetooth: hci1: command tx timeout [ 42.902392][ T6437] Bluetooth: hci4: command tx timeout [ 42.903453][ T6437] Bluetooth: hci2: command tx timeout [ 42.905496][ T5993] Bluetooth: hci3: command tx timeout [ 42.907926][ T6424] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 43.470744][ T6589] loop2: detected capacity change from 0 to 4096 [ 43.504622][ T6590] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 43.560158][ T6575] loop3: detected capacity change from 0 to 32768 [ 43.593830][ T6575] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8 (6575) [ 43.594667][ T6587] loop0: detected capacity change from 0 to 32768 [ 43.604069][ T6432] bcachefs (loop4): shutting down [ 43.605460][ T6432] bcachefs (loop4): going read-only [ 43.606742][ T6432] bcachefs (loop4): finished waiting for writes to stop [ 43.621233][ T6575] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 43.621660][ T6587] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.11 (6587) [ 43.623548][ T6575] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 43.634996][ T6575] BTRFS info (device loop3): using free-space-tree [ 43.636488][ T6587] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 43.639181][ T6587] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 43.641573][ T6587] BTRFS info (device loop0): using free-space-tree [ 43.665955][ T6432] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [ 43.724731][ T6432] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 16 [ 43.736603][ T6432] bcachefs (loop4): unshutdown complete, journal seq 17 [ 43.738809][ T6432] bcachefs (loop4): done going read-only, filesystem not clean [ 43.793031][ T6432] bcachefs (loop4): shutdown complete [ 43.803074][ T6621] dccp_v4_rcv: dropped packet with invalid checksum [ 43.996675][ T6628] vlan2: entered promiscuous mode [ 43.998034][ T6628] vlan2: entered allmulticast mode [ 43.999301][ T6628] syz_tun: entered allmulticast mode [ 44.000466][ T6628] syz_tun: entered promiscuous mode [ 44.006906][ T6628] team0: Port device vlan2 added [ 44.080391][ T6426] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 44.265129][ T6628] loop1: detected capacity change from 0 to 32768 [ 44.331751][ T6632] loop3: detected capacity change from 0 to 64 [ 44.335860][ T6633] trusted_key: encrypted_key: master key parameter 'iC>' is invalid [ 44.550600][ T6587] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.599387][ T6643] trusted_key: syz.3.17 sent an empty control message without MSG_MORE. [ 44.601697][ T6425] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 44.977682][ T5993] Bluetooth: hci2: command tx timeout [ 44.979007][ T5993] Bluetooth: hci4: command tx timeout [ 44.980282][ T5993] Bluetooth: hci1: command tx timeout [ 44.981443][ T5993] Bluetooth: hci0: command tx timeout [ 44.982702][ T6428] Bluetooth: hci3: command tx timeout [ 45.074917][ T6628] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 45.095123][ T6628] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 45.096863][ T6628] bcachefs (loop1): Version upgrade required: [ 45.096863][ T6628] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 45.096863][ T6628] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 45.096863][ T6628] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 45.170101][ T6628] bcachefs (loop1): dropping and reconstructing all alloc info [ 45.179048][ T6663] loop4: detected capacity change from 0 to 256 [ 45.195344][ T6628] bcachefs (loop1): check_topology... done [ 45.196923][ T6628] bcachefs (loop1): accounting_read... [ 45.215578][ T6663] FAT-fs (loop4): Directory bread(block 64) failed [ 45.227561][ T6628] done [ 45.227607][ T6663] FAT-fs (loop4): Directory bread(block 65) failed [ 45.228211][ T6628] bcachefs (loop1): alloc_read... done [ 45.230398][ T6663] FAT-fs (loop4): Directory bread(block 66) failed [ 45.231008][ T6628] bcachefs (loop1): stripes_read... done [ 45.234898][ T6663] FAT-fs (loop4): Directory bread(block 67) failed [ 45.236358][ T6663] FAT-fs (loop4): Directory bread(block 68) failed [ 45.236797][ T6628] bcachefs (loop1): snapshots_read... done [ 45.239012][ T6663] FAT-fs (loop4): Directory bread(block 69) failed [ 45.239294][ T6628] bcachefs (loop1): check_allocations... [ 45.241354][ T6663] FAT-fs (loop4): Directory bread(block 70) failed [ 45.244082][ T6663] FAT-fs (loop4): Directory bread(block 71) failed [ 45.245540][ T6663] FAT-fs (loop4): Directory bread(block 72) failed [ 45.246990][ T6663] FAT-fs (loop4): Directory bread(block 73) failed [ 45.248886][ T6481] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 45.254087][ T6628] done [ 45.256782][ T6628] bcachefs (loop1): going read-write [ 45.272008][ T6628] bcachefs (loop1): done starting filesystem [ 45.325396][ T6423] bcachefs (loop1): shutting down [ 45.326715][ T6423] bcachefs (loop1): going read-only [ 45.335475][ T6423] bcachefs (loop1): finished waiting for writes to stop [ 45.398458][ T6423] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 45.400584][ T6423] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 45.405792][ T6423] bcachefs (loop1): unshutdown complete, journal seq 11 [ 45.408623][ T6423] bcachefs (loop1): done going read-only, filesystem not clean [ 45.411021][ T6481] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 45.412765][ T6481] usb 1-1: config 0 has no interface number 0 [ 45.419510][ T6423] bcachefs (loop1): shutdown complete [ 45.420812][ T6481] usb 1-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=b8.e9 [ 45.422681][ T6481] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.424597][ T6481] usb 1-1: Product: syz [ 45.425514][ T6481] usb 1-1: Manufacturer: syz [ 45.426470][ T6481] usb 1-1: SerialNumber: syz [ 45.462743][ T6481] usb 1-1: config 0 descriptor?? [ 45.473113][ T6481] keyspan 1-1:0.64: Keyspan 1 port adapter converter detected [ 45.475345][ T6481] keyspan 1-1:0.64: found no endpoint descriptor for endpoint 84 [ 45.503440][ T6481] keyspan 1-1:0.64: found no endpoint descriptor for endpoint 81 [ 45.505138][ T6481] keyspan 1-1:0.64: found no endpoint descriptor for endpoint 82 [ 45.506652][ T6481] keyspan 1-1:0.64: found no endpoint descriptor for endpoint 1 [ 45.524387][ T6481] keyspan 1-1:0.64: found no endpoint descriptor for endpoint 2 [ 45.526011][ T6481] keyspan 1-1:0.64: found no endpoint descriptor for endpoint 83 [ 45.528334][ T6481] keyspan 1-1:0.64: found no endpoint descriptor for endpoint 3 [ 45.534557][ T6481] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 45.708007][ T6693] capability: warning: `syz.2.37' uses deprecated v2 capabilities in a way that may be insecure [ 45.764038][ T6430] usb 1-1: USB disconnect, device number 2 [ 45.772657][ T6430] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 45.775438][ T6430] keyspan 1-1:0.64: device disconnected [ 45.967916][ T6705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.970049][ T6705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.443878][ T6729] mmap: syz.0.53 (6729) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.792801][ T6741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.794597][ T6741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.825054][ T6430] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.977551][ T6430] usb 1-1: Using ep0 maxpacket: 16 [ 46.981478][ T6430] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 46.983656][ T6430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.985457][ T6430] usb 1-1: Product: syz [ 46.986362][ T6430] usb 1-1: Manufacturer: syz [ 46.987979][ T6430] usb 1-1: SerialNumber: syz [ 46.993738][ T6430] r8152-cfgselector 1-1: Unknown version 0x0000 [ 46.995185][ T6430] r8152-cfgselector 1-1: config 0 descriptor?? [ 47.092310][ T6748] netlink: 'syz.2.61': attribute type 29 has an invalid length. [ 47.095159][ T6748] netlink: 'syz.2.61': attribute type 29 has an invalid length. [ 47.190965][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.192931][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.200816][ T6430] r8152-cfgselector 1-1: Unknown version 0x2810 [ 47.202281][ T6430] r8152-cfgselector 1-1: bad CDC descriptors [ 47.409426][ T6481] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 47.419286][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.421201][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.439981][ T6759] IPVS: You probably need to specify IP address on multicast interface. [ 47.441843][ T6759] IPVS: Error connecting to the multicast addr [ 47.876403][ T6782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.879106][ T6782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.985241][ T6788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.990209][ T6788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.575999][ T6818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.588478][ T6812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.845107][ T6838] loop7: detected capacity change from 0 to 16384 [ 48.869268][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.871184][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.917384][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 49.067315][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 49.073192][ T8] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 49.075004][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.077361][ T8] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 49.079266][ T8] usb 1-1: config 1 has no interface number 1 [ 49.080609][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 49.083430][ T8] usb 1-1: config 1 interface 2 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 49.090226][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.092129][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.093811][ T8] usb 1-1: Product: syz [ 49.094700][ T8] usb 1-1: Manufacturer: syz [ 49.095695][ T8] usb 1-1: SerialNumber: syz [ 49.336151][ T8] usb 1-1: USB disconnect, device number 4 [ 49.529180][ T6416] udevd[6416]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 49.742257][ T6860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.748104][ T6860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.807873][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.817455][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.965760][ T6912] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 51.072114][ T6916] syz.3.135 uses obsolete (PF_INET,SOCK_PACKET) [ 51.484815][ T6931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.486739][ T6931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.752392][ T6952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.755306][ T6952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.815882][ T6957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.819380][ T6957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.092714][ T6964] netlink: 'syz.3.158': attribute type 6 has an invalid length. [ 52.202378][ T6974] syz.1.162: attempt to access beyond end of device [ 52.202378][ T6974] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 52.313351][ T6980] ------------[ cut here ]------------ [ 52.314679][ T6980] refcount_t: underflow; use-after-free. [ 52.316336][ T6980] WARNING: CPU: 1 PID: 6980 at lib/refcount.c:28 refcount_warn_saturate+0x1c8/0x20c [ 52.318316][ T6980] Modules linked in: [ 52.319157][ T6980] CPU: 1 UID: 0 PID: 6980 Comm: syz.1.164 Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0 [ 52.321112][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.323181][ T6980] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 52.324874][ T6980] pc : refcount_warn_saturate+0x1c8/0x20c [ 52.326060][ T6980] lr : refcount_warn_saturate+0x1c8/0x20c [ 52.327332][ T6980] sp : ffff8000a1657540 [ 52.328183][ T6980] x29: ffff8000a1657540 x28: 0000000000000001 x27: 00000000ffffffff [ 52.329980][ T6980] x26: 1fffe0001ab5fc18 x25: dfff800000000000 x24: 0000000000000000 [ 52.331667][ T6980] x23: ffff0000c64db4a4 x22: ffff80008a63b670 x21: 0000000000000003 [ 52.333344][ T6980] x20: ffff0000c64db4a4 x19: ffff800092b74000 x18: 1fffe000366c8076 [ 52.335009][ T6980] x17: ffff80008f8cd000 x16: ffff800080355c58 x15: 0000000000000001 [ 52.336685][ T6980] x14: 1fffe000366cab20 x13: ffff8000a1658000 x12: 0000000000000003 [ 52.338397][ T6980] x11: 0000000000000001 x10: 0000000000000003 x9 : 7ea2aa182c4fa400 [ 52.340158][ T6980] x8 : 7ea2aa182c4fa400 x7 : ffff8000802c419c x6 : 0000000000000000 [ 52.341982][ T6980] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 [ 52.343608][ T6980] x2 : 0000000000000006 x1 : ffff80008b6c4000 x0 : ffff800123e21000 [ 52.345325][ T6980] Call trace: [ 52.346033][ T6980] refcount_warn_saturate+0x1c8/0x20c (P) [ 52.347236][ T6980] refcount_warn_saturate+0x1c8/0x20c (L) [ 52.348427][ T6980] sk_skb_reason_drop+0x210/0x43c [ 52.349612][ T6980] j1939_session_put+0x1c8/0x460 [ 52.350694][ T6980] j1939_sk_sendmsg+0xe88/0x10d0 [ 52.351804][ T6980] sock_write_iter+0x2d8/0x448 [ 52.352788][ T6980] do_iter_readv_writev+0x490/0x6d4 [ 52.353961][ T6980] vfs_writev+0x410/0xbc8 [ 52.354902][ T6980] do_writev+0x178/0x304 [ 52.355802][ T6980] __arm64_sys_writev+0x80/0x94 [ 52.356888][ T6980] invoke_syscall+0x98/0x2b8 [ 52.357947][ T6980] el0_svc_common+0x130/0x23c [ 52.359017][ T6980] do_el0_svc+0x48/0x58 [ 52.359963][ T6980] el0_svc+0x54/0x168 [ 52.360831][ T6980] el0t_64_sync_handler+0x84/0x108 [ 52.362117][ T6980] el0t_64_sync+0x198/0x19c [ 52.363070][ T6980] irq event stamp: 390 [ 52.363883][ T6980] hardirqs last enabled at (389): [] finish_lock_switch+0xbc/0x1e4 [ 52.366013][ T6980] hardirqs last disabled at (390): [] el1_dbg+0x24/0x80 [ 52.367848][ T6980] softirqs last enabled at (360): [] handle_softirqs+0xa38/0xbf8 [ 52.369718][ T6980] softirqs last disabled at (329): [] __do_softirq+0x14/0x20 [ 52.371575][ T6980] ---[ end trace 0000000000000000 ]--- [ 52.617344][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 52.768774][ T27] usb 1-1: config 0 has no interfaces? [ 52.771786][ T27] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 52.773761][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.775554][ T27] usb 1-1: Product: syz [ 52.776372][ T27] usb 1-1: Manufacturer: syz [ 52.777424][ T27] usb 1-1: SerialNumber: syz [ 52.779765][ T27] usb 1-1: config 0 descriptor?? [ 53.004954][ T27] IPVS: starting estimator thread 0... [ 53.039729][ T6989] nvme_fabrics: missing parameter 'transport=%s' [ 53.041568][ T6989] nvme_fabrics: missing parameter 'nqn=%s' [ 53.097390][ T6996] IPVS: using max 26 ests per chain, 62400 per kthread [ 55.281935][ T10] usb 1-1: USB disconnect, device number 5