last executing test programs: 3.403603517s ago: executing program 1 (id=782): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff06, 0x0) 3.305030306s ago: executing program 1 (id=784): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x5, [{0x5, 0x2, 0x3ff}]}]}, {0x0, [0x61, 0x2e, 0x2e, 0x30, 0x5f, 0x61]}}, 0x0, 0x38, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) 3.214454915s ago: executing program 1 (id=786): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000000000000711107000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 2.965968788s ago: executing program 4 (id=791): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000700008877fbac0c1416e000030a89079f03b18000440c0511e0845013f2325f000708050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 2.853985668s ago: executing program 1 (id=793): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 2.733447379s ago: executing program 4 (id=795): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000380)={0x0, 0x200, 0x5}, 0x8) 1.841762251s ago: executing program 4 (id=809): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="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", 0x7fe5}], 0x1}}], 0x1, 0x0) 1.805073234s ago: executing program 1 (id=811): r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000b00)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0) 1.757951968s ago: executing program 4 (id=812): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000640)={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@mcast2, @ipv4, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087}) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, 0x0) 1.722165822s ago: executing program 4 (id=813): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000140)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/194, 0xc2, 0x6, 0x70, 0x467, 0xfffff1e1, 0x5}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000280), 0x4) 1.132484246s ago: executing program 1 (id=819): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) close(0xffffffffffffffff) 1.047340864s ago: executing program 4 (id=821): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 1.007083547s ago: executing program 2 (id=822): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000004) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xb0, 0xb1, 0xf1, 0x8, 0x54c, 0x69, 0xa8d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0xfb, 0x0, 0x10, 0x29, [{{0x9, 0x4, 0x1d, 0x47, 0x2, 0x4b, 0xdd, 0x13, 0x4, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x8, 0xc8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xfffe}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x3, 0x34, 0x1}}]}}]}}]}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000300)=ANY=[@ANYBLOB="0d6afadfc150aaaaaaaaaa1386dd600000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="9002"], 0x0) 814.073285ms ago: executing program 0 (id=826): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000fe8000000000bb159a820f000000000000000000bbe002000100"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010"], 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x0) 750.122021ms ago: executing program 0 (id=827): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000180)={0x7b, "9bcf83ffac011ea950f51b1b23d0c5d272836af5b75c8e80a405e71ad312e73333880a6053a0eb7f976e209fb604edcfcea8d43a426b09f0f744228009d12e3e505b5b4e528a06e0bccdebc54efab01d3dde62eeda3750721fd51df50a8f908ff057f651da2470a77f22acd21adc227254f4225d87e8624ac4c72641ecf1339d"}) 749.046891ms ago: executing program 0 (id=828): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno\x00', 0xb) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) 663.057039ms ago: executing program 0 (id=829): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000040)=0x700) 595.828045ms ago: executing program 0 (id=830): r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000b00)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0) 546.676009ms ago: executing program 0 (id=831): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)={'vxcan1\x00'}) 501.542424ms ago: executing program 3 (id=832): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='attr/prev\x00') write(r0, &(0x7f0000000e40)="52e95cfbe61f", 0x6) 407.832702ms ago: executing program 3 (id=833): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000300)='./file0\x00', 0x800400, &(0x7f0000000340)=ANY=[], 0x0, 0x19d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 390.827534ms ago: executing program 2 (id=834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="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", 0x7fe5}], 0x1}}], 0x1, 0x0) 316.236591ms ago: executing program 3 (id=835): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) 231.794129ms ago: executing program 3 (id=836): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000040)) 230.793458ms ago: executing program 3 (id=837): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x167042, 0x40) sendfile(r0, r0, 0x0, 0x7a680000) 196.135811ms ago: executing program 3 (id=838): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0x95000000}}}}}, 0x0) 130.715868ms ago: executing program 2 (id=839): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001d80)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1, 0x80000000, 0xfffff7ec) 35.789706ms ago: executing program 2 (id=840): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000140)) 35.677786ms ago: executing program 2 (id=841): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) 0s ago: executing program 2 (id=842): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) kernel console output (not intermixed with test programs): 6398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.878932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.887253][ T4303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.895752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.898137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.900688][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.902753][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.917372][ T4303] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.930863][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.939395][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.941454][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.945692][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.948837][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.951537][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.955482][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.958195][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.960768][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.964033][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.965784][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.967728][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.977290][ T4294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.980038][ T4294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.996577][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.999090][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.001594][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.012594][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.015216][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.018464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.032719][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.035332][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.039143][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.043759][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.046145][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.057789][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.060329][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.062343][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.065517][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.068536][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.071192][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.080111][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.083767][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.086315][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.090085][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.094393][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.101054][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.117859][ T4304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.120669][ T4304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.138482][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.141302][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.144617][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.147170][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.149599][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.151480][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.158665][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.161153][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.164807][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.167457][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.170175][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.173658][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.176220][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.178821][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.181383][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.184594][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.187464][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.189795][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.202570][ T4299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.211438][ T4303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.215928][ T4303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.229400][ T4294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.240147][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.243968][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.246726][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.249286][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.251565][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.264680][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.285486][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.292725][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.304539][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.321098][ T4294] device veth0_vlan entered promiscuous mode [ 41.333773][ T4299] device veth0_vlan entered promiscuous mode [ 41.338773][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.341487][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.346152][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.349151][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.353387][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.355858][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.364409][ T4294] device veth1_vlan entered promiscuous mode [ 41.372688][ T4299] device veth1_vlan entered promiscuous mode [ 41.376253][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.378959][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.381412][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.387197][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.390040][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.393260][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.395744][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.410583][ T4294] device veth0_macvtap entered promiscuous mode [ 41.424844][ T4294] device veth1_macvtap entered promiscuous mode [ 41.439067][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.442972][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.446030][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.449088][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.466865][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.485380][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.488280][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.493502][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.510233][ T4299] device veth0_macvtap entered promiscuous mode [ 41.517316][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.519935][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.523683][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.526445][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.528333][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.530177][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.533349][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.536586][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.538550][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.541059][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.547069][ T4293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.558728][ T4299] device veth1_macvtap entered promiscuous mode [ 41.565126][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.574667][ T4294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.577154][ T4294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.579452][ T4294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.582959][ T4294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.589651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.593995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.596685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.599424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.601491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.613610][ T4303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.625086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.627794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.641502][ T4293] device veth0_vlan entered promiscuous mode [ 41.654882][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.657807][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.661429][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.669842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.672602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.675621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.679792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.683297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.685726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.696454][ T4293] device veth1_vlan entered promiscuous mode [ 41.698866][ T4299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.706864][ T4299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.710506][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.726165][ T4304] device veth0_vlan entered promiscuous mode [ 41.734234][ T4304] device veth1_vlan entered promiscuous mode [ 41.736434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.739050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.741581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.750003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.754280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.756924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.759649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.767100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.769505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.777555][ T4299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.779860][ T4299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.782830][ T4299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.785248][ T4299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.792061][ T4302] Bluetooth: hci1: command tx timeout [ 41.793568][ T4302] Bluetooth: hci2: command tx timeout [ 41.795044][ T4302] Bluetooth: hci3: command tx timeout [ 41.796310][ T4302] Bluetooth: hci4: command tx timeout [ 41.797734][ T4302] Bluetooth: hci0: command tx timeout [ 41.843467][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.846181][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.848808][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.859486][ T4293] device veth0_macvtap entered promiscuous mode [ 41.875325][ T1620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.877701][ T1620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.886893][ T4304] device veth0_macvtap entered promiscuous mode [ 41.891023][ T4304] device veth1_macvtap entered promiscuous mode [ 41.908024][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.910691][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.914053][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.917047][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.920590][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.924284][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.931244][ T455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.935563][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.938379][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.941097][ T455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.941360][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.947135][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.950788][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.960543][ T4293] device veth1_macvtap entered promiscuous mode [ 41.972799][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.975658][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.978149][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.980796][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.986916][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.989414][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.991559][ T4304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.996767][ T4304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.000205][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.007341][ T4304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.009701][ T4304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.013183][ T4304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.015574][ T4304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.034917][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.037681][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.071580][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.074807][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.091220][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.096833][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.096978][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.099693][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.104856][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.107369][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.107785][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.109818][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.118155][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.147442][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.152573][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.160089][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.169040][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.187314][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.197874][ T4303] device veth0_vlan entered promiscuous mode [ 42.206301][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.209084][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.213767][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.216600][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.218834][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.229187][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.233610][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.244102][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.246596][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.249143][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.258931][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.267202][ T4303] device veth1_vlan entered promiscuous mode [ 42.295822][ T455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.298059][ T455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.302575][ T4293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.304910][ T4293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.307021][ T4293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.314429][ T4293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.335340][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.340111][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.349591][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.368372][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.372326][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.373357][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.376653][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.379542][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.391854][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.400761][ T4303] device veth0_macvtap entered promiscuous mode [ 42.420357][ T4303] device veth1_macvtap entered promiscuous mode [ 42.472869][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.478256][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.484904][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.487995][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.490665][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.496161][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.498763][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.501360][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.510310][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.516881][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.519719][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.523862][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.526853][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.529582][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.533239][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.536123][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.538918][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.543973][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.562141][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.564339][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.579218][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.585099][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.588776][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.597004][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.599874][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.614705][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.617437][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.626314][ T4303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.628486][ T4303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.631222][ T4303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.634240][ T4303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.639323][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.641415][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.649726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.721161][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.724379][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.727506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.758615][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.760876][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.766279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.787373][ T4383] syz.3.8 (4383): drop_caches: 2 [ 43.042761][ T4401] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 43.069559][ T4402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'. [ 43.270018][ T4412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.282945][ T4414] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 43.296798][ T27] audit: type=1326 audit(43.260:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.2.16" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff843499e8 code=0x0 [ 43.333291][ T4412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.623615][ T4432] bridge0: port 3(syz_tun) entered blocking state [ 43.625901][ T4432] bridge0: port 3(syz_tun) entered disabled state [ 43.629724][ T4432] device syz_tun entered promiscuous mode [ 43.633809][ T4432] bridge0: port 3(syz_tun) entered blocking state [ 43.635794][ T4432] bridge0: port 3(syz_tun) entered forwarding state [ 43.672009][ T4347] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 43.881702][ T4312] Bluetooth: hci0: command tx timeout [ 43.883186][ T4312] Bluetooth: hci4: command tx timeout [ 43.883745][ T4302] Bluetooth: hci3: command tx timeout [ 43.884630][ T4295] Bluetooth: hci2: command tx timeout [ 43.885969][ T4302] Bluetooth: hci1: command tx timeout [ 43.909583][ T4410] syz.4.17 (4410): drop_caches: 2 [ 43.953023][ T4440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'. [ 43.985444][ T4440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'. [ 43.997892][ T4440] Zero length message leads to an empty skb [ 44.034612][ T4347] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 44.037380][ T4347] usb 1-1: config 0 has no interface number 0 [ 44.039651][ T4347] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8 [ 44.051054][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.059699][ T4347] usb 1-1: config 0 descriptor?? [ 44.293159][ T4463] syz.1.40 (4463): drop_caches: 2 [ 44.308233][ T4344] usb 1-1: USB disconnect, device number 2 [ 44.419221][ T4471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.44'. [ 44.428172][ T4471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.44'. [ 44.620235][ T4483] bridge0: port 3(syz_tun) entered blocking state [ 44.622417][ T4483] bridge0: port 3(syz_tun) entered disabled state [ 44.624747][ T4483] device syz_tun entered promiscuous mode [ 44.644255][ T27] audit: type=1326 audit(44.610:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4480 comm="syz.4.50" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff959499e8 code=0x0 [ 44.650479][ T4483] bridge0: port 3(syz_tun) entered blocking state [ 44.652344][ T4483] bridge0: port 3(syz_tun) entered forwarding state [ 44.671391][ T4487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.722578][ T4487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.747372][ T4489] syz.1.53 (4489): drop_caches: 2 [ 44.762854][ T4459] loop3: detected capacity change from 0 to 32768 [ 44.779052][ T4459] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 scanned by syz.3.38 (4459) [ 44.801760][ T4459] BTRFS info (device loop3): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 44.808939][ T4459] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 44.814853][ T4459] BTRFS info (device loop3): using free space tree [ 44.844672][ T4459] BTRFS info (device loop3): enabling ssd optimizations [ 44.876425][ T4294] BTRFS info (device loop3): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 44.967700][ T4514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 44.981040][ T4514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 45.078318][ T4523] loop3: detected capacity change from 0 to 16 [ 45.113858][ T4523] erofs: (device loop3): mounted with root inode @ nid 36. [ 45.141498][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 205 @ nid 36 [ 45.162690][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 204 @ nid 36 [ 45.175953][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 197 @ nid 36 [ 45.178470][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 196 @ nid 36 [ 45.197839][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 192 @ nid 36 [ 45.208588][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 180 @ nid 36 [ 45.221433][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 172 @ nid 36 [ 45.248178][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 168 @ nid 36 [ 45.266661][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 160 @ nid 36 [ 45.269408][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 149 @ nid 36 [ 45.278995][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 148 @ nid 36 [ 45.292358][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 144 @ nid 36 [ 45.300531][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 45.307850][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 92 @ nid 36 [ 45.313136][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 45.320939][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 45.324351][ T4535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.331105][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 45.347263][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 45.349825][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 45.353821][ T4535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.360769][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 45.371968][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 45.374524][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 45.377219][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 45.384297][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 45.387832][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 45.390243][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 45.393951][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 45.397492][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 45.399690][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 45.404516][ T4523] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 45.409917][ T4523] syz.3.55: attempt to access beyond end of device [ 45.409917][ T4523] loop3: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 45.414832][ T4523] syz.3.55: attempt to access beyond end of device [ 45.414832][ T4523] loop3: rw=524288, sector=384, nr_sectors = 16 limit=16 [ 45.418578][ T4523] syz.3.55: attempt to access beyond end of device [ 45.418578][ T4523] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 45.427035][ T4541] sp0: Synchronizing with TNC [ 45.433691][ T4523] syz.3.55: attempt to access beyond end of device [ 45.433691][ T4523] loop3: rw=524288, sector=728, nr_sectors = 16 limit=16 [ 45.437486][ T4523] syz.3.55: attempt to access beyond end of device [ 45.437486][ T4523] loop3: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 45.441392][ T4523] syz.3.55: attempt to access beyond end of device [ 45.441392][ T4523] loop3: rw=524288, sector=525152, nr_sectors = 16 limit=16 [ 45.469218][ T4540] [U] è [ 45.473590][ T4523] syz.3.55: attempt to access beyond end of device [ 45.473590][ T4523] loop3: rw=524288, sector=13478624032, nr_sectors = 16 limit=16 [ 45.477486][ T4523] syz.3.55: attempt to access beyond end of device [ 45.477486][ T4523] loop3: rw=524288, sector=13478624040, nr_sectors = 16 limit=16 [ 45.491954][ T4523] syz.3.55: attempt to access beyond end of device [ 45.491954][ T4523] loop3: rw=524288, sector=14550774152, nr_sectors = 16 limit=16 [ 45.502301][ T4523] syz.3.55: attempt to access beyond end of device [ 45.502301][ T4523] loop3: rw=524288, sector=14550774160, nr_sectors = 16 limit=16 [ 45.507958][ T4543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.68'. [ 45.559002][ T4545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.69'. [ 45.573193][ T4545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.69'. [ 45.618845][ T4295] Bluetooth: Wrong link type (-22) [ 45.641222][ T4551] loop3: detected capacity change from 0 to 128 [ 45.687664][ T4551] FAT-fs (loop3): Unrecognized mount option "audit" or missing value [ 45.875829][ T27] audit: type=1326 audit(45.840:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4566 comm="syz.3.79" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f9499e8 code=0x0 [ 45.953577][ T4307] Bluetooth: hci1: command tx timeout [ 45.954975][ T4307] Bluetooth: hci4: command tx timeout [ 45.956449][ T4307] Bluetooth: hci2: command tx timeout [ 45.957844][ T4307] Bluetooth: hci3: command tx timeout [ 45.959399][ T4307] Bluetooth: hci0: command tx timeout [ 45.979523][ T4579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.992207][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 45.995069][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 45.997786][ T455] Bluetooth: hci5: Frame reassembly failed (-84) [ 46.071930][ T4579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.322780][ T4344] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.581866][ T4344] usb 1-1: Using ep0 maxpacket: 32 [ 46.712277][ T4344] usb 1-1: config 16 has an invalid interface number: 62 but max is 0 [ 46.714652][ T4344] usb 1-1: config 16 has no interface number 0 [ 46.716328][ T4344] usb 1-1: config 16 interface 62 has no altsetting 0 [ 46.901936][ T4344] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=da.4b [ 46.905240][ T4344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.907571][ T4344] usb 1-1: Product: syz [ 46.908750][ T4344] usb 1-1: Manufacturer: syz [ 46.909936][ T4344] usb 1-1: SerialNumber: syz [ 47.181241][ T4622] loop3: detected capacity change from 0 to 32768 [ 47.184483][ T4622] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.106 (4622) [ 47.200461][ T4622] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 47.211541][ T4622] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 47.229976][ T4622] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 47.247975][ T4344] usb_ehset_test: probe of 1-1:16.62 failed with error -32 [ 47.251356][ T4622] BTRFS info (device loop3): use zstd compression, level 3 [ 47.253207][ T4344] usb 1-1: USB disconnect, device number 3 [ 47.258829][ T4622] BTRFS info (device loop3): using free space tree [ 47.342664][ T4630] loop2: detected capacity change from 0 to 40427 [ 47.358273][ T4630] F2FS-fs (loop2): invalid crc value [ 47.368026][ T4630] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 47.404910][ T4630] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=fff0000, run fsck to fix. [ 47.410688][ T4655] loop1: detected capacity change from 0 to 256 [ 47.415648][ T4655] ======================================================= [ 47.415648][ T4655] WARNING: The mand mount option has been deprecated and [ 47.415648][ T4655] and is ignored by this kernel. Remove the mand [ 47.415648][ T4655] option from the mount to silence this warning. [ 47.415648][ T4655] ======================================================= [ 47.429349][ T4630] F2FS-fs (loop2): sanity_check_inode: inode (ino=3) has corrupted i_xattr_nid: 268369920, run fsck to fix. [ 47.433576][ T4630] F2FS-fs (loop2): Failed to read root inode [ 47.436839][ T4622] BTRFS info (device loop3): enabling ssd optimizations [ 47.530465][ T4294] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 47.539224][ T4659] netlink: 'syz.1.114': attribute type 4 has an invalid length. [ 47.598987][ T4660] netlink: 'syz.1.114': attribute type 4 has an invalid length. [ 47.898238][ T4676] syz.1.121 (4676): drop_caches: 2 [ 48.031926][ T4307] Bluetooth: hci5: command 0x1003 tx timeout [ 48.034491][ T4295] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 48.290815][ T4705] syz.2.134 (4705): drop_caches: 2 [ 48.291324][ T4707] __nla_validate_parse: 10 callbacks suppressed [ 48.291337][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 48.426348][ T4302] Bluetooth: hci5: sending frame failed (-49) [ 48.428815][ T4295] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 48.637150][ T4731] syz.2.148 (4731): drop_caches: 2 [ 48.662679][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 48.754432][ T4746] 8021q: VLANs not supported on ipvlan1 [ 48.761266][ T4745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.153'. [ 48.820061][ T4750] loop0: detected capacity change from 0 to 512 [ 48.843903][ T4750] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.864008][ T4750] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.888245][ T4758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.907111][ T4750] EXT4-fs (loop0): 1 orphan inode deleted [ 48.908651][ T4750] EXT4-fs (loop0): 1 truncate cleaned up [ 48.910353][ T4750] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 48.953120][ T4758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.989312][ T4304] EXT4-fs error (device loop0): __ext4_iget:5055: inode #11: block 524051: comm syz-executor: invalid block [ 49.023726][ T4766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 49.027666][ T4304] EXT4-fs (loop0): Remounting filesystem read-only [ 49.040728][ T4304] EXT4-fs error (device loop0): __ext4_iget:5055: inode #11: block 524051: comm syz-executor: invalid block [ 49.509448][ T4304] EXT4-fs (loop0): unmounting filesystem. [ 49.713207][ T4785] netlink: 'syz.4.173': attribute type 4 has an invalid length. [ 49.751122][ T4302] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 49.754759][ T4302] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 49.757456][ T4302] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 49.760125][ T4302] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 49.763045][ T4307] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 49.765363][ T4307] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 49.950789][ T4787] loop1: detected capacity change from 0 to 32768 [ 49.992098][ T4769] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.070913][ T4788] chnl_net:caif_netlink_parms(): no params data found [ 50.095536][ T4797] loop3: detected capacity change from 0 to 256 [ 50.150009][ T4788] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.152385][ T4788] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.155120][ T4788] device bridge_slave_0 entered promiscuous mode [ 50.166796][ T4788] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.171235][ T4788] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.180654][ T4788] device bridge_slave_1 entered promiscuous mode [ 50.276787][ T4788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.299836][ T4788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.301544][ T4810] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 50.389100][ T4788] team0: Port device team_slave_0 added [ 50.399194][ T4788] team0: Port device team_slave_1 added [ 50.432187][ T4819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.448657][ T4788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.455170][ T4788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.461961][ T4819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.475050][ T4788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.491014][ T4788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.507696][ T4788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.517766][ T4788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.591459][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 50.626707][ T4829] input: syz1 as /devices/virtual/input/input2 [ 50.629418][ T4829] input: failed to attach handler leds to device input2, error: -6 [ 50.634107][ T4788] device hsr_slave_0 entered promiscuous mode [ 50.682199][ T4788] device hsr_slave_1 entered promiscuous mode [ 50.693505][ T4788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.695678][ T4788] Cannot create hsr debugfs directory [ 50.767033][ T4835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.965709][ T4788] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.992393][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 51.062493][ T4858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.085149][ T4858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.114326][ T4788] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.124372][ T4862] loop4: detected capacity change from 0 to 1024 [ 51.234602][ T4788] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.385859][ T4788] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.558576][ T4887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.593483][ T4887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.650701][ T4788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.684327][ T4788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.716164][ T4788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.756813][ T4788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.791900][ T4302] Bluetooth: hci4: command tx timeout [ 51.810121][ T4876] loop4: detected capacity change from 0 to 40427 [ 51.818188][ T4876] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 51.820164][ T4876] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 51.829334][ T4876] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3ffff [ 51.834383][ T4876] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 51.844084][ T4876] F2FS-fs (loop4): invalid crc value [ 51.865780][ T4788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.874095][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.876463][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.877462][ T4876] F2FS-fs (loop4): Found nat_bits in checkpoint [ 51.891001][ T4788] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.899297][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.901877][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.904725][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.906754][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.909755][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.923756][ T4876] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 51.925705][ T4876] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 51.940377][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.956477][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.976345][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.978331][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.979000][ T4904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.219'. [ 51.980638][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.008437][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.018163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.018527][ T4303] bio_check_eod: 47 callbacks suppressed [ 52.018541][ T4303] syz-executor: attempt to access beyond end of device [ 52.018541][ T4303] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 52.026960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.050412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.054935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.066159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.085993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.090754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.096732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.099605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.104420][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.128651][ T4908] device bond_slave_0 entered promiscuous mode [ 52.130513][ T4908] device bond_slave_1 entered promiscuous mode [ 52.155981][ T4908] device bond0 entered promiscuous mode [ 52.162989][ T4907] device bond0 left promiscuous mode [ 52.173084][ T4907] device bond_slave_0 left promiscuous mode [ 52.174849][ T4907] device bond_slave_1 left promiscuous mode [ 52.497291][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.499453][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.522337][ T4788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.557766][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.560737][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.578740][ T4932] netlink: 60 bytes leftover after parsing attributes in process `syz.1.230'. [ 52.590331][ T4932] netlink: 172 bytes leftover after parsing attributes in process `syz.1.230'. [ 52.642169][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.645128][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.649017][ T4788] device veth0_vlan entered promiscuous mode [ 52.662940][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.666228][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.687709][ T4934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.231'. [ 52.703773][ T4788] device veth1_vlan entered promiscuous mode [ 52.739329][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.739878][ T4936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.742385][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.746301][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.749211][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.762089][ T4788] device veth0_macvtap entered promiscuous mode [ 52.767439][ T4788] device veth1_macvtap entered promiscuous mode [ 52.786319][ T4936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.821472][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.830540][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.836426][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.839236][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.848153][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.850784][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.855014][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.860268][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.868363][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.873750][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.877708][ T4788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.881160][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.892420][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.901290][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.904807][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.914375][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.917284][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.919966][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.933265][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.936166][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.938958][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.941382][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.953876][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.968356][ T4788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.971362][ T4788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.973542][ T4922] loop2: detected capacity change from 0 to 32768 [ 52.978230][ T4922] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.228 (4922) [ 53.000116][ T4922] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 53.001288][ T4788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.003734][ T4922] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 53.003785][ T4922] BTRFS info (device loop2): enabling ssd optimizations [ 53.003800][ T4922] BTRFS info (device loop2): using spread ssd allocation scheme [ 53.003815][ T4922] BTRFS info (device loop2): use no compression [ 53.003832][ T4922] BTRFS info (device loop2): enabling disk space caching [ 53.003993][ T4922] BTRFS error (device loop2): cannot disable free space tree [ 53.019690][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.027219][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.033655][ T4922] BTRFS error (device loop2): open_ctree failed [ 53.040272][ T4788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.044408][ T4788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.050086][ T4788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.060218][ T4788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.082676][ T4769] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by udevd (4769) [ 53.204690][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.205265][ T4953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.207224][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.223559][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.242230][ T4953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.268922][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.271144][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.275910][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.605451][ T4944] loop3: detected capacity change from 0 to 32768 [ 53.609191][ T4944] JFS: continuål·ÙUÝN÷¤”¯ÃDÍ–b is an invalid error handler [ 53.652756][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 53.736754][ T4978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.802849][ T4978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.872416][ T4302] Bluetooth: hci4: command tx timeout [ 54.098863][ T4997] loop3: detected capacity change from 0 to 2048 [ 54.109898][ T4992] Cannot find add_set index 0 as target [ 54.128715][ T5000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 54.168508][ T5001] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.428012][ T5013] loop1: detected capacity change from 0 to 256 [ 54.459299][ T5013] FAT-fs (loop1): Directory bread(block 64) failed [ 54.461520][ T5013] FAT-fs (loop1): Directory bread(block 65) failed [ 54.471790][ T5013] FAT-fs (loop1): Directory bread(block 66) failed [ 54.473744][ T5013] FAT-fs (loop1): Directory bread(block 67) failed [ 54.475623][ T5013] FAT-fs (loop1): Directory bread(block 68) failed [ 54.477326][ T5013] FAT-fs (loop1): Directory bread(block 69) failed [ 54.484538][ T5013] FAT-fs (loop1): Directory bread(block 70) failed [ 54.488812][ T5013] FAT-fs (loop1): Directory bread(block 71) failed [ 54.490680][ T5013] FAT-fs (loop1): Directory bread(block 72) failed [ 54.507797][ T5013] FAT-fs (loop1): Directory bread(block 73) failed [ 54.741869][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 54.790156][ T5032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.836047][ T5032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.867159][ T5038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.885917][ T5010] loop3: detected capacity change from 0 to 32768 [ 54.892149][ T5038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.906814][ T5010] XFS (loop3): Mounting V5 Filesystem [ 54.947662][ T5010] XFS (loop3): Ending clean mount [ 54.986829][ T4294] XFS (loop3): Unmounting Filesystem [ 55.209990][ T4295] Bluetooth: hci3: Malformed LE Event: 0x1d [ 55.283441][ T5060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.302073][ T5060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.349910][ T4295] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 55.425178][ T5068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.463805][ T5068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.939883][ T5076] loop2: detected capacity change from 0 to 32768 [ 55.952193][ T4295] Bluetooth: hci4: command tx timeout [ 56.463622][ T5107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 56.859219][ T5136] loop1: detected capacity change from 0 to 256 [ 56.937849][ T5136] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 57.505065][ T5175] ax25_connect(): syz.4.335 uses autobind, please contact jreuter@yaina.de [ 57.890347][ T5202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.933056][ T5202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.032779][ T4302] Bluetooth: hci4: command tx timeout [ 58.105182][ T5186] loop4: detected capacity change from 0 to 32768 [ 58.182846][ T5186] XFS (loop4): Mounting V5 Filesystem [ 58.189826][ T5219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.191159][ T5214] loop3: detected capacity change from 0 to 1024 [ 58.215385][ T5214] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.243513][ T5219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.263899][ T5186] XFS (loop4): Ending clean mount [ 58.268905][ T5219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.270694][ T5186] XFS (loop4): Quotacheck needed: Please wait. [ 58.288335][ T5214] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.313565][ T5219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.319112][ T5186] XFS (loop4): Quotacheck: Done. [ 58.357568][ T4303] XFS (loop4): Unmounting Filesystem [ 58.360230][ T4294] EXT4-fs (loop3): unmounting filesystem. [ 58.513346][ T4295] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 58.516195][ T4295] Bluetooth: hci2: Injecting HCI hardware error event [ 58.519857][ T4302] Bluetooth: hci2: hardware error 0x00 [ 58.541747][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 58.623516][ T5238] loop2: detected capacity change from 0 to 128 [ 58.630561][ T5238] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 58.666269][ T5238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 58.764103][ T5243] loop3: detected capacity change from 0 to 128 [ 58.781779][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 58.793698][ T5243] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 58.833426][ T5243] fscrypt (loop3, inode 12): Unsupported encryption flags (0x99) [ 58.875906][ T4294] EXT4-fs (loop3): unmounting filesystem. [ 58.942742][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 59.022516][ T14] usb 1-1: config 0 has an invalid interface number: 103 but max is 0 [ 59.024669][ T14] usb 1-1: config 0 has no interface number 0 [ 59.026119][ T14] usb 1-1: config 0 interface 103 has no altsetting 0 [ 59.069509][ T5264] netlink: 'syz.3.372': attribute type 20 has an invalid length. [ 59.181937][ T14] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice= d.f1 [ 59.184826][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.191593][ T14] usb 1-1: Product: syz [ 59.193786][ T14] usb 1-1: Manufacturer: syz [ 59.194934][ T14] usb 1-1: SerialNumber: syz [ 59.204295][ T14] usb 1-1: config 0 descriptor?? [ 59.429731][ T5293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.472490][ T5293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.522935][ T14] ums-freecom 1-1:0.103: USB Mass Storage device detected [ 59.579341][ T14] usb 1-1: USB disconnect, device number 4 [ 59.680752][ T5307] loop2: detected capacity change from 0 to 2048 [ 59.685764][ T5307] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 59.719190][ T5307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 59.882848][ T5321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.932008][ T5321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.984890][ T5329] bridge0: port 3(syz_tun) entered blocking state [ 59.986799][ T5329] bridge0: port 3(syz_tun) entered disabled state [ 59.993137][ T5329] device syz_tun entered promiscuous mode [ 59.995260][ T5329] bridge0: port 3(syz_tun) entered blocking state [ 59.997194][ T5329] bridge0: port 3(syz_tun) entered forwarding state [ 60.005234][ T5329] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 60.170759][ T5341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 60.261358][ T5351] loop0: detected capacity change from 0 to 128 [ 60.273580][ T5351] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 60.286740][ T5351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.296206][ T5349] loop1: detected capacity change from 0 to 2048 [ 60.306253][ T5349] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 60.314319][ T5349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.458104][ T5358] loop0: detected capacity change from 0 to 128 [ 60.516271][ T5358] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 60.671935][ T4302] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 60.712483][ T4788] EXT4-fs (loop0): unmounting filesystem. [ 60.730090][ T5366] loop4: detected capacity change from 0 to 32768 [ 60.742147][ T5366] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.421 (5366) [ 60.753329][ T5366] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 60.767171][ T5366] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 60.774934][ T5366] BTRFS info (device loop4): turning on sync discard [ 60.776838][ T5366] BTRFS info (device loop4): unrecognized rescue option 'isuperflags' [ 60.779255][ T5366] BTRFS error (device loop4): unrecognized rescue value isuperflags [ 60.816522][ T5366] BTRFS error (device loop4): open_ctree failed [ 60.971523][ T5389] loop0: detected capacity change from 0 to 2048 [ 60.983778][ T5392] loop3: detected capacity change from 0 to 64 [ 60.990162][ T5389] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 60.995399][ T5389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.215105][ T5401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.228616][ T5400] tipc: Started in network mode [ 61.230069][ T5400] tipc: Node identity 7f000001, cluster identity 4711 [ 61.238186][ T5400] tipc: Enabled bearer , priority 10 [ 61.262015][ T5401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.502473][ T5414] netlink: 'syz.1.437': attribute type 11 has an invalid length. [ 61.583779][ T5418] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 61.586370][ T5418] overlayfs: missing 'lowerdir' [ 61.668220][ T5422] loop2: detected capacity change from 0 to 2048 [ 61.688517][ T5422] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 61.707432][ T5422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.836152][ T5435] tipc: Started in network mode [ 61.837539][ T5435] tipc: Node identity 7f000001, cluster identity 4711 [ 61.839814][ T5435] tipc: Enabled bearer , priority 10 [ 62.138512][ T5458] process 'syz.2.457' launched '/dev/fd/3' with NULL argv: empty string added [ 62.143711][ T5456] loop0: detected capacity change from 0 to 2048 [ 62.163511][ T5456] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 62.167901][ T5456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.353465][ T110] tipc: Node number set to 2130706433 [ 62.841767][ T5490] loop4: detected capacity change from 0 to 2048 [ 62.863190][ T5490] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 62.867458][ T5490] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.951297][ T5462] loop1: detected capacity change from 0 to 40427 [ 62.953506][ T4343] tipc: Node number set to 2130706433 [ 62.991543][ T5470] loop0: detected capacity change from 0 to 1024 [ 62.993577][ T5462] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 62.995681][ T5462] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 63.012365][ T5462] F2FS-fs (loop1): invalid crc value [ 63.032864][ T5462] F2FS-fs (loop1): Found nat_bits in checkpoint [ 63.090632][ T5462] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 63.092899][ T5462] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 63.439367][ T5514] tipc: Enabling of bearer rejected, already enabled [ 63.723792][ T5528] loop3: detected capacity change from 0 to 2048 [ 63.749945][ T5528] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 63.784381][ T5528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 63.868807][ T5542] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 64.038316][ T5553] tipc: Started in network mode [ 64.047092][ T5553] tipc: Node identity ac141441, cluster identity 4711 [ 64.109775][ T5553] tipc: Enabled bearer , priority 10 [ 64.295319][ T5570] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 64.377122][ T5572] loop3: detected capacity change from 0 to 2048 [ 64.405427][ T5572] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 64.438804][ T5572] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.516262][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.518783][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.555741][ T5578] bridge0: port 3(syz_tun) entered disabled state [ 64.695381][ T5578] device syz_tun left promiscuous mode [ 64.697891][ T5578] bridge0: port 3(syz_tun) entered disabled state [ 64.712257][ T5586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.512'. [ 64.755884][ T5588] loop3: detected capacity change from 0 to 512 [ 64.780396][ T5588] EXT4-fs (loop3): inodes count not valid: 19 vs 32 [ 64.818038][ T5574] loop1: detected capacity change from 0 to 32768 [ 64.822678][ T5574] XFS: ikeep mount option is deprecated. [ 64.867906][ T5574] XFS (loop1): Mounting V5 Filesystem [ 64.968168][ T4295] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.971739][ T4295] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.974435][ T4295] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.983174][ T4295] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.985528][ T4295] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.987784][ T4295] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.003949][ T5574] XFS (loop1): Ending clean mount [ 65.017933][ T5574] XFS (loop1): Quotacheck needed: Please wait. [ 65.061945][ T24] tipc: Node number set to 2886997057 [ 65.104297][ T5574] XFS (loop1): Quotacheck: Done. [ 65.380513][ T4293] XFS (loop1): Unmounting Filesystem [ 65.445466][ T5602] chnl_net:caif_netlink_parms(): no params data found [ 65.497786][ T5601] loop4: detected capacity change from 0 to 32768 [ 65.513791][ T5601] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.517 (5601) [ 65.581500][ T5601] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 65.612221][ T5601] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 65.614563][ T5601] BTRFS info (device loop4): using free space tree [ 65.743169][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.745266][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.747886][ T5602] device bridge_slave_0 entered promiscuous mode [ 65.770208][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.777297][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.780588][ T5602] device bridge_slave_1 entered promiscuous mode [ 65.850404][ T5601] BTRFS info (device loop4): enabling ssd optimizations [ 65.893516][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.918077][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.064265][ T4303] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 66.289537][ T5602] team0: Port device team_slave_0 added [ 66.302668][ T5602] team0: Port device team_slave_1 added [ 66.322582][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 66.359901][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.370396][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.388344][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.392877][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.394799][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.443002][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.553635][ T5602] device hsr_slave_0 entered promiscuous mode [ 66.594071][ T5602] device hsr_slave_1 entered promiscuous mode [ 66.642156][ T5602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.649976][ T5602] Cannot create hsr debugfs directory [ 66.786016][ T5706] loop0: detected capacity change from 0 to 732 [ 66.818364][ T4293] bridge0: port 3(syz_tun) entered disabled state [ 66.903666][ T4293] device syz_tun left promiscuous mode [ 66.905138][ T4293] bridge0: port 3(syz_tun) entered disabled state [ 67.069271][ T27] audit: type=1326 audit(67.030:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz.0.557" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaab499e8 code=0x0 [ 67.079115][ T4295] Bluetooth: hci2: command tx timeout [ 67.083662][ T5602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.230212][ T4295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.245107][ T4295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.250024][ T4295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.256507][ T4295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.260018][ T4295] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.263189][ T4295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.457904][ T5602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.483860][ T5738] loop3: detected capacity change from 0 to 512 [ 67.530176][ T5738] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 67.541300][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.563599][ T5738] Quota error (device loop3): do_check_range: Getting block 9 out of range 1-5 [ 67.566809][ T5738] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 67.573826][ T5738] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.563: Failed to acquire dquot type 0 [ 67.617574][ T4294] EXT4-fs (loop3): unmounting filesystem. [ 67.643864][ T5602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.677588][ T5747] loop3: detected capacity change from 0 to 128 [ 67.689460][ T5747] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 67.711592][ T4294] EXT4-fs (loop3): unmounting filesystem. [ 67.733922][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.815028][ T5602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.876219][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.036953][ T5767] loop3: detected capacity change from 0 to 8 [ 68.045375][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.057274][ T5767] SQUASHFS error: xz decompression failed, data probably corrupt [ 68.059719][ T5767] SQUASHFS error: Failed to read block 0x108: -5 [ 68.065029][ T5763] sp0: Synchronizing with TNC [ 68.072085][ T5767] SQUASHFS error: Unable to read metadata cache entry [106] [ 68.074160][ T5767] SQUASHFS error: Unable to read inode 0x11f [ 68.088438][ T5762] [U] è [ 68.094299][ T5729] chnl_net:caif_netlink_parms(): no params data found [ 68.128977][ T4769] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.163982][ T5772] loop0: detected capacity change from 0 to 128 [ 68.189854][ T5772] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.212568][ T5602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.239319][ T5779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.246318][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.248274][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.252104][ T5729] device bridge_slave_0 entered promiscuous mode [ 68.252557][ T5779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.258725][ T5602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.303417][ T5602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.312617][ T4788] EXT4-fs (loop0): unmounting filesystem. [ 68.381401][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.383617][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.386242][ T5729] device bridge_slave_1 entered promiscuous mode [ 68.388982][ T5602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.447824][ T5787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.480333][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.506539][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.521891][ T5787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.577480][ T27] audit: type=1326 audit(68.540:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.0.582" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaab499e8 code=0x0 [ 68.598253][ T5729] team0: Port device team_slave_0 added [ 68.608836][ T5729] team0: Port device team_slave_1 added [ 68.625416][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.758315][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.760158][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.769442][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.773880][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.775785][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.806681][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.884336][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.910101][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.916058][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.921577][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.952291][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.955037][ T455] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.957001][ T455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.074164][ T5729] device hsr_slave_0 entered promiscuous mode [ 69.078410][ T5813] [U] ^G [ 69.112258][ T5729] device hsr_slave_1 entered promiscuous mode [ 69.114724][ T5817] loop3: detected capacity change from 0 to 128 [ 69.119434][ T5817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 69.152713][ T4295] Bluetooth: hci2: command tx timeout [ 69.155315][ T5729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.157824][ T5729] Cannot create hsr debugfs directory [ 69.159617][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.162712][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.166108][ T4294] EXT4-fs (loop3): unmounting filesystem. [ 69.166427][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.170048][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.172117][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.179795][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.255454][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.291076][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.296482][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.321842][ T4295] Bluetooth: hci0: command tx timeout [ 69.358737][ T5602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.361570][ T5602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.377806][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.380661][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.388292][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.398667][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.400861][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.412504][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.417721][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.515368][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.584793][ T5836] input: syz1 as /devices/virtual/input/input3 [ 69.586621][ T5836] input: failed to attach handler leds to device input3, error: -6 [ 69.637630][ T7] cfg80211: failed to load regulatory.db [ 69.768436][ T5850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.822607][ T5850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.084836][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.087085][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.189292][ T5865] [U] ^G [ 70.192375][ T4295] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 70.194887][ T4295] Bluetooth: hci1: Injecting HCI hardware error event [ 70.199099][ T4302] Bluetooth: hci1: hardware error 0x00 [ 70.226852][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.256965][ T5840] loop0: detected capacity change from 0 to 32768 [ 70.306721][ T27] audit: type=1326 audit(70.270:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5870 comm="syz.4.603" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff959499e8 code=0x0 [ 70.350927][ T5840] XFS (loop0): Mounting V5 Filesystem [ 70.443538][ T5840] XFS (loop0): Ending clean mount [ 70.524473][ T4788] XFS (loop0): Unmounting Filesystem [ 70.922448][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.926255][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.034987][ T5889] loop0: detected capacity change from 0 to 128 [ 71.053969][ T5889] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.099600][ T4788] EXT4-fs (loop0): unmounting filesystem. [ 71.212902][ T5897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.232060][ T4295] Bluetooth: hci2: command tx timeout [ 71.244028][ T5897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.334034][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.337737][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.340653][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.344065][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.350501][ T5602] device veth0_vlan entered promiscuous mode [ 71.371024][ T5602] device veth1_vlan entered promiscuous mode [ 71.391963][ T4307] Bluetooth: hci0: command tx timeout [ 71.468402][ T11] device hsr_slave_0 left promiscuous mode [ 71.523075][ T11] device hsr_slave_1 left promiscuous mode [ 71.572269][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.574430][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.578521][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.581600][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.584350][ T11] device bridge_slave_1 left promiscuous mode [ 71.587443][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.635312][ T11] device bridge_slave_0 left promiscuous mode [ 71.637422][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.724661][ T5897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.772435][ T11] device veth1_macvtap left promiscuous mode [ 71.773268][ T5897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.774454][ T11] device veth0_macvtap left promiscuous mode [ 71.778082][ T11] device veth1_vlan left promiscuous mode [ 71.779791][ T11] device veth0_vlan left promiscuous mode [ 72.319014][ T5910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.342225][ T5910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.432853][ T4302] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 73.311842][ T4302] Bluetooth: hci2: command tx timeout [ 73.473612][ T4295] Bluetooth: hci0: command tx timeout [ 73.696565][ T11] team0 (unregistering): Port device team_slave_1 removed [ 73.895606][ T11] team0 (unregistering): Port device team_slave_0 removed [ 74.093257][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.313333][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.561823][ T4302] Bluetooth: hci0: command tx timeout [ 76.695239][ T11] bond0 (unregistering): Released all slaves [ 76.929467][ T5729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.961183][ T27] audit: type=1326 audit(76.920:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.4.620" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff959499e8 code=0x0 [ 77.069241][ T5729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.113510][ T5729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.143164][ T5929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.147747][ T5729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.191907][ T5929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.208924][ T5602] device veth0_macvtap entered promiscuous mode [ 77.215426][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.218097][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.220591][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.231438][ T5602] device veth1_macvtap entered promiscuous mode [ 77.279374][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.287848][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.290694][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.294258][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.296917][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.299526][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.302733][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.305341][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.307801][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.310323][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.314990][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.331163][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.336445][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.339415][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.355572][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.358355][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.360958][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.370494][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.375662][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.378429][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.381014][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.391296][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.395329][ T5602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.398050][ T5602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.402806][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.408263][ T5602] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.410598][ T5602] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.413231][ T5602] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.415529][ T5602] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.419320][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.422530][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.431017][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.486266][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.489092][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.491777][ T4344] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 77.498513][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.531440][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.534687][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.537073][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.538941][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.541293][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.565381][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.567940][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.569804][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.580201][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.583583][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.586642][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.608322][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.612897][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.616839][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.619313][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.638663][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.641547][ T455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.644910][ T455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.649686][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.653185][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.656658][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.675060][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.678126][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.709521][ T5729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.738705][ T5867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.741148][ T5867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.743652][ T4344] usb 1-1: Using ep0 maxpacket: 8 [ 77.749606][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.873694][ T4344] usb 1-1: config 251 has an invalid interface number: 29 but max is 0 [ 77.876047][ T4344] usb 1-1: config 251 has no interface number 0 [ 77.877683][ T4344] usb 1-1: config 251 interface 29 altsetting 71 has an invalid endpoint with address 0x0, skipping [ 77.880506][ T4344] usb 1-1: config 251 interface 29 altsetting 71 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 77.895307][ T4344] usb 1-1: config 251 interface 29 has no altsetting 0 [ 77.897206][ T4344] usb 1-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice= a.8d [ 77.918508][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.943869][ T5956] tipc: Started in network mode [ 77.945212][ T5956] tipc: Node identity ac141441, cluster identity 4711 [ 77.947786][ T5956] tipc: Enabled bearer , priority 10 [ 78.091008][ T5969] netlink: 'syz.3.629': attribute type 1 has an invalid length. [ 78.098793][ T5971] loop2: detected capacity change from 0 to 8 [ 78.123184][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.124177][ T5971] squashfs image failed sanity check [ 78.125396][ T455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.143336][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.211931][ T4344] usb 1-1: string descriptor 0 read error: -71 [ 78.214448][ T4344] usb-storage 1-1:251.29: USB Mass Storage device detected [ 78.230185][ T4344] usb-storage 1-1:251.29: Quirks match for vid 054c pid 0069: 1 [ 78.268730][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.271143][ T4344] usb 1-1: USB disconnect, device number 5 [ 78.273635][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.328001][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.330779][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.343465][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.356978][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.367437][ T5729] device veth0_vlan entered promiscuous mode [ 78.378866][ T5729] device veth1_vlan entered promiscuous mode [ 78.397153][ T5729] device veth0_macvtap entered promiscuous mode [ 78.407515][ T5986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.410162][ T5729] device veth1_macvtap entered promiscuous mode [ 78.415457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.418348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.424475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.435987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.441527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.459608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.463920][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.468088][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.478983][ T5986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.488024][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.491613][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.497758][ T5989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.506097][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.508908][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.511517][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.519515][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.525364][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.528427][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.531108][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.538459][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.546293][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.553706][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.556331][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.560394][ T5989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.567947][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.570848][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.574360][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.577099][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.579606][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.582991][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.585625][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.588338][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.590914][ T5729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.606944][ T5729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.610898][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.618032][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.620993][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.624395][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.627322][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.633705][ T5729] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.635986][ T5729] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.646473][ T5729] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.648990][ T5729] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.729669][ T1620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.735499][ T1620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.757777][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.777077][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.780750][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.798069][ T5867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.995537][ T27] audit: type=1326 audit(78.960:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.0.636" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaab499e8 code=0x0 [ 79.061870][ T7] tipc: Node number set to 2886997057 [ 79.150734][ T6028] loop1: detected capacity change from 0 to 8 [ 79.168088][ T6026] loop3: detected capacity change from 0 to 16 [ 79.168778][ T6028] squashfs image failed sanity check [ 79.173865][ T6026] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 79.218930][ T6026] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 79.243885][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.282046][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.351660][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 79.453917][ T6043] [U] ^G [ 79.526883][ T6049] loop1: detected capacity change from 0 to 128 [ 79.568089][ T6049] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 79.799492][ T5729] EXT4-fs (loop1): unmounting filesystem. [ 79.847444][ T6073] loop3: detected capacity change from 0 to 8 [ 79.881716][ T6073] squashfs image failed sanity check [ 79.967438][ T6077] [U] ^G [ 80.164746][ T6096] loop0: detected capacity change from 0 to 128 [ 80.169444][ T6096] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.321523][ T6096] fscrypt: Adiantum using implementation "adiantum(xchacha12-neon,aes-ce,nhpoly1305-generic)" [ 80.350216][ T6109] tipc: Enabling of bearer rejected, already enabled [ 80.363943][ T27] audit: type=1326 audit(80.330:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.4.673" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff959499e8 code=0x0 [ 80.417951][ T4788] EXT4-fs (loop0): unmounting filesystem. [ 80.510248][ T6120] [U] ^G [ 80.741953][ T4346] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 80.980542][ T6147] loop3: detected capacity change from 0 to 128 [ 80.982799][ T4346] usb 1-1: Using ep0 maxpacket: 16 [ 80.991166][ T6147] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.048452][ T6150] sp0: Synchronizing with TNC [ 81.056763][ T6149] [U] è [ 81.077786][ T4294] EXT4-fs (loop3): unmounting filesystem. [ 81.101999][ T4346] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 81.246346][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 81.264613][ T4346] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 81.267151][ T4346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.269345][ T4346] usb 1-1: Product: syz [ 81.270436][ T4346] usb 1-1: Manufacturer: syz [ 81.284445][ T4346] usb 1-1: SerialNumber: syz [ 81.298676][ T4346] usb 1-1: config 0 descriptor?? [ 81.495505][ T6174] sp0: Synchronizing with TNC [ 81.498867][ T6172] [U] è [ 81.668992][ T27] audit: type=1326 audit(81.630:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6184 comm="syz.2.706" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab499e8 code=0x0 [ 81.772787][ T6189] binder: 6188:6189 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 81.776311][ T6189] binder: 6189 RLIMIT_NICE not set [ 81.838242][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.871306][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.006364][ T6206] sp0: Synchronizing with TNC [ 82.010826][ T6204] [U] è [ 82.345406][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 82.350297][ T6229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.402052][ T6229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.908366][ T6260] loop4: detected capacity change from 0 to 8 [ 82.978044][ T6260] SQUASHFS error: Failed to read block 0x730: -5 [ 82.979838][ T6260] SQUASHFS error: Unable to read metadata cache entry [72e] [ 82.984653][ T27] audit: type=1326 audit(82.950:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.2.742" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab499e8 code=0x0 [ 83.396802][ T6264] loop1: detected capacity change from 0 to 40427 [ 83.427783][ T6264] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 83.429813][ T6264] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 83.439718][ T6264] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x3ffff [ 83.449946][ T6264] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 83.454226][ T6264] F2FS-fs (loop1): invalid crc value [ 83.454628][ T6269] loop4: detected capacity change from 0 to 32768 [ 83.459385][ T6264] F2FS-fs (loop1): Found nat_bits in checkpoint [ 83.494012][ T4518] usb 1-1: USB disconnect, device number 6 [ 83.513139][ T6264] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 83.515055][ T6264] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 83.520615][ T6269] XFS (loop4): Mounting V5 Filesystem [ 83.565764][ T6269] XFS (loop4): Ending clean mount [ 83.603849][ T4303] XFS (loop4): Unmounting Filesystem [ 83.740051][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 84.348066][ T27] audit: type=1326 audit(84.310:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.4.763" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff959499e8 code=0x0 [ 84.484050][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 84.603746][ T6331] tmpfs: Bad value for 'mpol' [ 84.635929][ T6307] loop3: detected capacity change from 0 to 40427 [ 84.669094][ T6307] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 84.671025][ T6307] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 84.681258][ T6307] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff [ 84.685923][ T6307] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 84.689885][ T6307] F2FS-fs (loop3): invalid crc value [ 84.702342][ T6307] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.723347][ T6307] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 84.725273][ T6307] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.881820][ T4283] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 84.897221][ T6340] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.943674][ T6344] tipc: Started in network mode [ 84.945323][ T6344] tipc: Node identity 3a20300a74797065, cluster identity 4711 [ 84.947471][ T6344] tipc: Enabling of bearer rejected, failed to enable media [ 85.262056][ T4283] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.265134][ T4283] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 85.437471][ T4283] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.439896][ T4283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.444763][ T4283] usb 1-1: Product: syz [ 85.445955][ T4283] usb 1-1: Manufacturer: syz [ 85.447122][ T4283] usb 1-1: SerialNumber: syz [ 85.716903][ T6332] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.769310][ T6361] loop3: detected capacity change from 0 to 40427 [ 85.787516][ T6389] loop2: detected capacity change from 0 to 8 [ 85.789131][ T6361] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 85.790934][ T6389] squashfs image failed sanity check [ 85.791222][ T6361] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 85.801203][ T6361] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff [ 85.811138][ T6361] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 85.819161][ T6361] F2FS-fs (loop3): invalid crc value [ 85.840800][ T27] audit: type=1326 audit(85.800:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.1.793" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff883499e8 code=0x0 [ 85.851867][ T6100] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 85.869992][ T6361] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.908623][ T6361] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 85.910674][ T6361] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.255806][ T6414] netlink: 256 bytes leftover after parsing attributes in process `syz.3.802'. [ 86.260364][ T6414] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 86.390051][ T6332] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.397070][ T6423] loop2: detected capacity change from 0 to 8 [ 86.409673][ T6423] squashfs image failed sanity check [ 86.444123][ T6100] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.631853][ T4283] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 86.633621][ T4283] cdc_ncm 1-1:1.0: dwNtbInMaxSize=128 is too small. Using 2048 [ 86.635774][ T4283] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 86.663953][ T6424] loop3: detected capacity change from 0 to 40427 [ 86.676824][ T6424] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 86.678913][ T6424] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 86.682280][ T6424] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff [ 86.685155][ T6424] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 86.690448][ T6424] F2FS-fs (loop3): invalid crc value [ 86.706631][ T6424] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.726203][ T6424] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 86.728260][ T6424] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.795140][ T4294] syz-executor: attempt to access beyond end of device [ 86.795140][ T4294] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.861918][ T4283] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 86.888889][ T4283] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 86.919633][ T4283] usb 1-1: USB disconnect, device number 7 [ 86.921962][ T4283] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 86.930571][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 86.937678][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 86.942614][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 86.947389][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 86.951235][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 86.956797][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 86.958673][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 86.960665][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 86.967144][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 86.968884][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 86.971488][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 86.976849][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 86.978953][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 86.988172][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 86.990253][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 86.997995][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.001268][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.008519][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.010630][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.015775][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.018355][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.020483][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.026728][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.028928][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.030614][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.036995][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.039715][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.046352][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.048507][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.050726][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.055983][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.057959][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.060031][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.066255][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.068518][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.070494][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.080134][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.086362][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.088483][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.090584][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.095928][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.098110][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.100075][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.102411][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.104496][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.106399][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.108860][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.110895][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.113195][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.115186][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.117208][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.119166][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.121147][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.127787][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.129877][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.131999][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.134144][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.136372][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.138681][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.140829][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.142858][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.144830][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.147024][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.149452][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.152417][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.154993][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.157027][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.159302][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.161946][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.164071][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.166517][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.168877][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.171312][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.173949][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.176708][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.182813][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.185151][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.187341][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.189446][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.191968][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.193991][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.196235][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.198188][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.200198][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.202484][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.204523][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.206630][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.208652][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.211216][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.214071][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.216763][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.218798][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.220879][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.223441][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.225589][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.232048][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.234161][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.236293][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.238405][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.240528][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.243141][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.245246][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.247296][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.249318][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.251374][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.253977][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.256087][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.258030][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.260016][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.262478][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.264509][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.266373][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.268239][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.269944][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.272190][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.273998][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.276103][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.278476][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.280519][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.282668][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.284685][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.286638][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.288625][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.290482][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.292798][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.294776][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.296973][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.299023][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.300908][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.303350][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.305334][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.307413][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.309273][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.311235][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.314246][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.316327][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.318355][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.320171][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.322421][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.324308][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.326215][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.328512][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.330493][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.333729][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.335688][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.337846][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.339906][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.342115][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.344113][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.346436][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.348122][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.350141][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.352479][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.354216][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.356018][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.357849][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.359806][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.362255][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.364160][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.365991][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.367768][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.369642][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.371462][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.373914][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.375808][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.377685][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.379884][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.382063][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.384150][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.386157][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.388036][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.389942][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.392278][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.394085][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.396157][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.398452][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.400158][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.402372][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.404188][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.406266][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.412974][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.414828][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.416876][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.418875][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.420890][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.423351][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.425172][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.427055][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.428894][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.435952][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.437994][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.440038][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.444943][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.446735][ T14] hid-generic 0006:0070:0467.0001: unknown main item tag 0x0 [ 87.473482][ T14] hid-generic 0006:0070:0467.0001: hidraw0: VIRTUAL HID vfffff1.e1 Device [syz0] on syz1 [ 87.550374][ T6454] loop0: detected capacity change from 0 to 8 [ 87.574441][ T6452] device syzkaller0 entered promiscuous mode [ 87.583138][ T6454] squashfs image failed sanity check [ 87.626848][ T27] audit: type=1326 audit(87.590:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6457 comm="syz.4.821" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff959499e8 code=0x0 [ 87.667833][ T6461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.702012][ T6461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.190949][ T6488] loop3: detected capacity change from 0 to 8 [ 88.204642][ T6488] squashfs image failed sanity check [ 97.596534][ T4302] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.600133][ T4302] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.608817][ T4302] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.611567][ T4302] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.614396][ T4302] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.617376][ T4302] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.068087][ T4302] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.077521][ T4302] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.080887][ T4302] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.084841][ T4302] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.087188][ T4302] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 98.089236][ T4302] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 98.922352][ T6509] ------------[ cut here ]------------ [ 98.923851][ T6509] WARNING: CPU: 0 PID: 6509 at net/wireless/core.h:231 __cfg80211_wext_siwencodeext+0x790/0x9d8 [ 98.926658][ T6509] Modules linked in: [ 98.927726][ T6509] CPU: 0 PID: 6509 Comm: syz.2.842 Not tainted 6.1.111-syzkaller #0 [ 98.930060][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 98.932710][ T6509] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 98.934762][ T6509] pc : __cfg80211_wext_siwencodeext+0x790/0x9d8 [ 98.936474][ T6509] lr : __cfg80211_wext_siwencodeext+0x790/0x9d8 [ 98.938187][ T6509] sp : ffff800021397720 [ 98.939357][ T6509] x29: ffff800021397800 x28: ffff700004272eec x27: ffff800021397b20 [ 98.941387][ T6509] x26: 1ffff00002b3a0af x25: ffff8000159d0000 x24: ffff8000159d0000 [ 98.943489][ T6509] x23: 1fffe0001b376192 x22: ffff0000df020000 x21: dfff800000000000 [ 98.945670][ T6509] x20: ffff0000d9bb0c90 x19: ffff0000d9bb0000 x18: 0000000000000140 [ 98.947791][ T6509] x17: ffff800011aeceb4 x16: ffff8000084fb1ec x15: 000000002000005c [ 98.949852][ T6509] x14: 1ffff00002b3a0b0 x13: dfff800000000000 x12: 0000000000040000 [ 98.951934][ T6509] x11: 0000000000000ada x10: ffff8000262b9000 x9 : ffff800011ae59c8 [ 98.954044][ T6509] x8 : 0000000000000adb x7 : 0000000000000001 x6 : ffff0000e93fd240 [ 98.956160][ T6509] x5 : ffff0000e93fd240 x4 : 0000000000000004 x3 : ffff0000e93fd200 [ 98.958460][ T6509] x2 : ffff800021397b20 x1 : 0000000000000000 x0 : 0000000000000000 [ 98.960606][ T6509] Call trace: [ 98.961568][ T6509] __cfg80211_wext_siwencodeext+0x790/0x9d8 [ 98.963185][ T6509] ioctl_standard_iw_point+0x7f0/0xdc4 [ 98.964697][ T6509] ioctl_standard_call+0xcc/0x264 [ 98.966192][ T6509] wext_ioctl_dispatch+0x16c/0x3ec [ 98.967675][ T6509] wext_handle_ioctl+0x1f8/0x3f4 [ 98.969113][ T6509] sock_ioctl+0x140/0x858 [ 98.970425][ T6509] __arm64_sys_ioctl+0x14c/0x1c8 [ 98.971755][ T6509] invoke_syscall+0x98/0x2c0 [ 98.973021][ T6509] el0_svc_common+0x138/0x258 [ 98.974295][ T6509] do_el0_svc+0x64/0x218 [ 98.975461][ T6509] el0_svc+0x58/0x168 [ 98.976614][ T6509] el0t_64_sync_handler+0x84/0xf0 [ 98.977943][ T6509] el0t_64_sync+0x18c/0x190 [ 98.979183][ T6509] irq event stamp: 328 [ 98.980311][ T6509] hardirqs last enabled at (327): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 98.983170][ T6509] hardirqs last disabled at (328): [] el1_dbg+0x24/0x80 [ 98.985449][ T6509] softirqs last enabled at (310): [] local_bh_enable+0x10/0x34 [ 98.988080][ T6509] softirqs last disabled at (308): [] local_bh_disable+0x10/0x34 [ 98.990643][ T6509] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to send rpc fd=3 want=320 sent=0 n=-1 (errno 32: Broken pipe) [ 99.068790][ T6509] ------------[ cut here ]------------ [ 99.070563][ T6509] WARNING: CPU: 1 PID: 6509 at net/wireless/core.h:239 __cfg80211_wext_siwencodeext+0x7a8/0x9d8 [ 99.073511][ T6509] Modules linked in: [ 99.074619][ T6509] CPU: 1 PID: 6509 Comm: syz.2.842 Tainted: G W 6.1.111-syzkaller #0 [ 99.077233][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 99.079713][ T6509] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 99.081688][ T6509] pc : __cfg80211_wext_siwencodeext+0x7a8/0x9d8 [ 99.083253][ T6509] lr : __cfg80211_wext_siwencodeext+0x7a8/0x9d8 [ 99.084910][ T6509] sp : ffff800021397720 [ 99.085997][ T6509] x29: ffff800021397800 x28: ffff700004272eec x27: ffff800021397b20 [ 99.087958][ T6509] x26: ffff0000e93fd200 x25: 0000000000000000 x24: ffff8000159d0000 [ 99.089930][ T6509] x23: 1fffe0001b376192 x22: ffff0000df020000 x21: dfff800000000000 [ 99.091893][ T6509] x20: ffff0000d9bb0c90 x19: ffff0000d9bb0000 x18: ffff800021397240 [ 99.094040][ T6509] x17: ffff800018aa4000 x16: ffff8000084fb1ec x15: ffff800018589f80 [ 99.096027][ T6509] x14: ffff0000d4172638 x13: dfff800000000000 x12: 0000000000040000 [ 99.098184][ T6509] x11: 0000000000023c05 x10: ffff8000262b9000 x9 : ffff800011ae59e0 [ 99.100146][ T6509] x8 : 0000000000023c06 x7 : 0000000000000000 x6 : 0000000000000000 [ 99.102208][ T6509] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff8000082fbc8c [ 99.104273][ T6509] x2 : ffff0000d4171bc0 x1 : 0000000000000000 x0 : 0000000000000000 [ 99.106363][ T6509] Call trace: [ 99.107241][ T6509] __cfg80211_wext_siwencodeext+0x7a8/0x9d8 [ 99.108788][ T6509] ioctl_standard_iw_point+0x7f0/0xdc4 [ 99.110134][ T6509] ioctl_standard_call+0xcc/0x264 [ 99.111442][ T6509] wext_ioctl_dispatch+0x16c/0x3ec [ 99.112686][ T6509] wext_handle_ioctl+0x1f8/0x3f4 [ 99.113902][ T6509] sock_ioctl+0x140/0x858 [ 99.115025][ T6509] __arm64_sys_ioctl+0x14c/0x1c8 [ 99.116391][ T6509] invoke_syscall+0x98/0x2c0 [ 99.117678][ T6509] el0_svc_common+0x138/0x258 [ 99.118748][ T6509] do_el0_svc+0x64/0x218 [ 99.119816][ T6509] el0_svc+0x58/0x168 [ 99.120818][ T6509] el0t_64_sync_handler+0x84/0xf0 [ 99.122192][ T6509] el0t_64_sync+0x18c/0x190 [ 99.123457][ T6509] irq event stamp: 456 [ 99.124475][ T6509] hardirqs last enabled at (455): [] exit_to_kernel_mode+0xe8/0x118 [ 99.127073][ T6509] hardirqs last disabled at (456): [] el1_dbg+0x24/0x80 [ 99.129165][ T6509] softirqs last enabled at (434): [] handle_softirqs+0xb84/0xd58 [ 99.131747][ T6509] softirqs last disabled at (331): [] __do_softirq+0x14/0x20 [ 99.134191][ T6509] ---[ end trace 0000000000000000 ]--- [ 99.239593][ T4294] bridge0: port 3(syz_tun) entered disabled state [ 99.334138][ T4294] device syz_tun left promiscuous mode [ 99.335725][ T4294] bridge0: port 3(syz_tun) entered disabled state [ 99.631912][ T4295] Bluetooth: hci5: command tx timeout [ 99.930233][ T39] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.036140][ T39] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.164296][ T39] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.276317][ T39] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.502744][ T39] tipc: Disabling bearer [ 100.506907][ T39] tipc: Left network mode [ 102.383892][ T39] device hsr_slave_0 left promiscuous mode [ 102.423377][ T39] device hsr_slave_1 left promiscuous mode [ 102.501781][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.504003][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.508096][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.510189][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.518479][ T39] device bridge_slave_1 left promiscuous mode [ 102.520109][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.572643][ T39] device bridge_slave_0 left promiscuous mode [ 102.574235][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.712019][ T39] device veth1_macvtap left promiscuous mode [ 102.713732][ T39] device veth0_macvtap left promiscuous mode [ 102.715389][ T39] device veth1_vlan left promiscuous mode [ 102.716963][ T39] device veth0_vlan left promiscuous mode [ 103.497423][ T39] bond1 (unregistering): Released all slaves [ 105.255769][ T39] team0 (unregistering): Port device team_slave_1 removed [ 105.479667][ T39] team0 (unregistering): Port device team_slave_0 removed [ 105.684177][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.923234][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.582008][ T39] bond0 (unregistering): Released all slaves